What a VPN Hides, and What It Doesn't

VPN ads would have you believe that without one, you're basically browsing naked. Hackers on every Wi-Fi network, your identity up for grabs, your data flowing to who knows where. A VPN is a genuinely useful tool, but it's a narrow one, and the marketing does it no favors. So here's what it actually does.

A consumer VPN creates an encrypted tunnel between your device and a server run by the VPN company. All your internet traffic goes through that tunnel first, then out onto the internet from their server. That has two effects.

First, your local network and your internet provider can no longer see where you're going. They see that you're connected to a VPN server and that some encrypted data is flowing, and that's about it. Without a VPN, even with HTTPS everywhere, they can usually see which domains you visit through DNS lookups and connection details, just not the specific pages or content.

Second, the websites you visit see the VPN server's IP address instead of yours. That hides your rough location and makes it harder to link your visits together by IP.

That's really the whole list. Those are useful properties. But notice what moved: you didn't make your browsing invisible, you changed who can see it. Your ISP can't watch anymore, but the VPN company now sits in exactly that spot. You're trusting them instead. That's why picking a provider matters more than any feature list. Look for one with a clear business model (you pay them, so they don't need to sell your data), a no-logs policy that's been independently audited, and a track record. Free VPNs have to make money somehow, and the usual answer isn't great for privacy.

Now for what a VPN doesn't do, because this is where people get misled.

It doesn't stop tracking by websites. Cookies, browser fingerprinting, tracking pixels and ad networks all work fine through a VPN. If you're logged into Google, Facebook or Amazon, they know it's you no matter what IP you come from.

It doesn't protect your accounts. A VPN does nothing about weak or reused passwords, phishing pages, or giving your info to a site you shouldn't have.

It doesn't stop malware. Download something nasty and it runs just the same. Some VPN apps bundle ad or malware blocking, but that's an extra feature, not what a VPN is.

It doesn't make you anonymous. Hiding your IP is one piece of anonymity. It's not the whole thing, and anyone who needs real anonymity should look at tools built for that, like Tor, and understand their limits too.

So when is one worth it? I'd say a few clear cases:

• Public or untrusted Wi-Fi, like hotels, airports and cafés. HTTPS already protects most of what matters, but a VPN covers the rest and stops the network from seeing what you're doing.
• You don't want your ISP seeing your browsing. Some providers collect and use that data, and a VPN shifts that visibility to a provider you chose.
• Reaching content or services by region, within whatever the service's terms allow.
• Getting back into your own home network while you're away. This is a slightly different use, where you run the VPN yourself with something like WireGuard or Tailscale, and it's one of my favorite self-hosting tools.

If you want better everyday privacy and you've only got an hour, I'd actually spend it elsewhere first: a privacy-focused browser or a good content blocker, a password manager, and encrypted DNS. Those handle the tracking a VPN ignores. Then add a VPN from a provider you trust if your situation calls for it. It's a good lock on one specific door. Just don't mistake it for the whole house.