VPN advertising tends to blur together "privacy," "security," and "anonymity" as if a subscription solves all three completely. It doesn't — a VPN does one specific thing well, a couple of things partially, and several things not at all. Here's an honest breakdown.
What a VPN actually does
A VPN encrypts the connection between your device and the VPN provider's server, and routes your internet traffic through that server, which then makes requests on your behalf. Two concrete effects follow from this: your internet service provider (and anyone else on your local network, like at a coffee shop) can't see the content of your traffic or which specific sites you're visiting, and the websites you visit see the VPN server's IP address rather than your own.
What it genuinely protects against
- Snooping on untrusted networks. On public Wi-Fi — an airport, a café — a VPN prevents someone else on that same network from intercepting your unencrypted traffic. This is the single clearest, most defensible use case.
- Your ISP logging your browsing. Without a VPN, your internet provider can see which domains you visit (though typically not the specific content on HTTPS sites, which is already encrypted). A VPN hides this from them specifically.
- Basic geographic content restrictions. Since sites see the VPN server's location rather than yours, a VPN can bypass simple region-based content blocks — though many streaming services now actively detect and block known VPN server IP ranges.
What it does NOT protect against
- Sites you log into. If you log into your Google or Facebook account through a VPN, that service still knows exactly who you are — a VPN hides your network-level identity, not your account identity.
- Malware and phishing. A VPN encrypts your connection; it does nothing to stop you from downloading a malicious file or entering credentials on a convincing fake login page. Some VPN providers bundle a separate malware/phishing filter as an added feature, but that's a distinct tool from the VPN tunnel itself.
- Browser fingerprinting and cookies. Trackers can often still identify and follow you across sites based on browser characteristics and stored cookies, regardless of your IP address. A VPN and a privacy-focused browser configuration solve different, complementary problems.
- True anonymity. Your VPN provider itself can typically see your real IP address and, depending on their logging policy, your traffic. Using a VPN shifts who you have to trust — from your ISP to the VPN company — rather than eliminating the need for trust entirely.
The most important thing to check before choosing one
Because your VPN provider is in a position to see your traffic, their logging policy matters more than almost any other feature. Look specifically for a policy that states clearly what they do and don't log, ideally backed by an independent third-party security audit — marketing language alone ("we don't track you!") is not a substitute for an actual audited policy.
Do you actually need one?
If you regularly use public Wi-Fi, or specifically want your ISP unable to see your browsing activity, a reputable VPN is a reasonable, genuinely useful tool. If your main concern is account security or malware, that budget is often better spent on a password manager and enabling two-factor authentication — tools that address a different, and for most people more common, category of risk.
This article does not recommend a specific paid VPN provider. See our Disclaimer for our editorial approach.