VPNs are one of the most marketed — and most misunderstood — privacy tools available. Advertisements claim VPNs make you "invisible online" and protect you from hackers. The reality is more nuanced. Here's what VPNs actually do, when you need one, and what to look for.
What a VPN Actually Does
A VPN (Virtual Private Network) encrypts your internet traffic and routes it through a server in a location of your choice before it reaches the destination website. This achieves three things:
- Your Internet Service Provider (ISP) cannot see which websites you visit
- Websites see the VPN server's IP address, not yours
- Your traffic is encrypted between your device and the VPN server
What a VPN Does NOT Do
This is where most marketing gets misleading:
- A VPN does not make you anonymous — the VPN provider can still see your traffic
- A VPN does not protect you from malware or viruses
- A VPN does not prevent websites from tracking you via cookies or fingerprinting
- A VPN does not protect you if you're logged into accounts (Google knows who you are)
💡 Key insight: Using a VPN shifts your trust from your ISP to the VPN provider. Make sure you trust the VPN more than you trust your ISP.
When You Actually Need a VPN
- Public Wi-Fi — Coffee shops, airports, hotels. Encrypt your traffic so local attackers can't intercept it
- Hiding from your ISP — Prevent your ISP from logging and selling your browsing history
- Bypassing geo-restrictions — Access content not available in your region
- Hiding your location — Prevent websites from seeing your real IP address
Best Free and Paid VPNs
- ProtonVPN (Free) — Unlimited data, no logs, open source. Best free option.
- Mullvad (.50/month) — Best for privacy, accepts cash/crypto, no accounts
- Windscribe (Free) — 10GB/month free, good privacy policy
- NordVPN (-4/month) — Fast, large server network, audited no-logs policy
Red Flags to Avoid in VPN Providers
- Free VPNs that don't explain their business model (they often sell your data)
- Providers based in countries with data retention laws
- No independent security audit of their no-logs claims
- Vague or weak privacy policies
VPN Protocols: Which One to Choose
The protocol is the underlying technology that carries your encrypted traffic, and it affects both speed and security. WireGuard is the modern favorite — fast, lean, and audited — and the best default for most people. OpenVPN is older and slower but extremely well-tested and highly configurable, a solid choice where maximum compatibility matters. IKEv2/IPSec shines on mobile because it reconnects smoothly when you switch between Wi-Fi and cellular. Reputable providers let you choose, though their default is usually sensible.
VPN vs. Tor vs. Proxy
These three tools are often confused but solve different problems. A VPN encrypts all your traffic and routes it through one provider you must trust. Tor routes traffic through several volunteer-run relays so no single point sees both who you are and what you are doing — stronger anonymity, but much slower. A proxy simply reroutes one app's traffic with little or no encryption, offering the least protection. For everyday privacy a VPN is the practical choice; for high-stakes anonymity, Tor is the right tool.
Setting Up a VPN Safely
Getting started is simpler than it sounds. Choose a provider with an independently audited no-logs policy, install its official app from an official store, and sign in. Enable the "kill switch," which blocks all internet traffic if the VPN drops so your real address is never briefly exposed. Turn on auto-connect for untrusted networks like coffee-shop or airport Wi-Fi, where a VPN matters most. Finally, run a free DNS-leak test to confirm your traffic is actually being protected.
Does a VPN Slow You Down?
Some slowdown is unavoidable because your traffic takes a longer, encrypted route, but with a fast protocol like WireGuard and a nearby server the difference is usually small — often unnoticeable for browsing and streaming. Connecting to a server on the other side of the world, or using an overloaded free service, is where slowdowns become obvious. Choosing a geographically close server is the easiest way to keep speeds high.
Frequently Asked Questions
Strengthen your overall digital privacy with our free Privacy Check tool.