VPNs are marketed as a near-magical privacy solution, but the reality is more nuanced: a VPN genuinely protects certain things while doing nothing at all for others, and choosing the wrong provider can actually reduce your privacy rather than improve it. This guide explains exactly what a VPN does, how to pick one you can trust, and how to set it up correctly.

What a VPN Actually Does

A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a server run by your VPN provider, then routes your internet traffic through that server. This has two concrete effects:

  • Your internet service provider (ISP) can no longer see which websites you visit — they can see that you're connected to a VPN server and roughly how much data you're using, but not the specific sites or services within that encrypted tunnel.
  • Websites and services see the VPN server's IP address, not your home IP address — this masks your approximate location and makes it harder for websites to link your browsing directly back to your home network.

This is genuinely useful on untrusted networks, like public Wi-Fi in a café or airport, where a VPN prevents anyone else on that same network from snooping on your unencrypted traffic.

What a VPN Does NOT Protect

This is where a lot of marketing overstates things, and understanding the limits matters:

  • It does not make you anonymous. Websites can still identify you through login accounts, cookies, browser fingerprinting, and tracking scripts, regardless of your IP address.
  • It does not protect against malware or phishing. A VPN encrypts your connection; it does nothing to stop you clicking a malicious link or downloading an infected file.
  • It does not hide your activity from the websites themselves. If you log into your bank or social media account through a VPN, that service still knows exactly who you are and what you're doing — a VPN only hides that traffic from your ISP and networks in between.
  • It shifts trust rather than removing it. Instead of your ISP potentially seeing your browsing, your VPN provider now can. This makes the provider's own trustworthiness and policies critical.

Safety tip: Most encrypted websites (anything showing "https://" and a padlock icon) already protect the content of your browsing from your ISP to a large degree — a VPN mainly adds protection for the metadata (which sites you visit) rather than encrypting previously unencrypted traffic, since the vast majority of the web is HTTPS by default now.

Choosing a Trustworthy VPN Provider

Not all VPNs are equal, and some free VPN apps have been found to log and sell user data — precisely what people use a VPN to avoid. Look for:

  • A published, independently audited no-logs policy. Reputable providers commission third-party security audits of their logging claims and publish the results — look for this rather than taking marketing copy at face value.
  • A clear jurisdiction. Where the company is legally based affects what data-retention laws apply to it. This matters more to some users than others, but it's worth knowing.
  • Transparent ownership. Be wary of free VPN apps with unclear ownership structures, particularly on mobile app stores, since running VPN infrastructure costs money and free services need to fund themselves somehow.
  • Modern protocols. Look for support for WireGuard or OpenVPN rather than older, less secure protocols like PPTP.
  • A kill switch feature, which blocks all internet traffic if the VPN connection drops unexpectedly, preventing your real IP address and unencrypted traffic from leaking out.

Warning: Avoid unfamiliar free VPN apps, especially ones you find through app store searches with no established reputation. Some have been documented injecting adverts, selling browsing data to third parties, or bundling malware. A reasonably priced, well-reviewed paid VPN from an established provider is almost always a safer choice than a free unknown.

Setting Up a VPN on Windows

  1. Download the VPN provider's official app directly from their website (or a legitimate app store listing verified against their website), rather than a third-party download site.
  2. Install and sign in with your account credentials.
  3. Choose a server location — for general privacy while browsing at home, a nearby server usually offers the best speed; for accessing content from a specific country, choose that location, understanding some services actively try to detect and block VPN traffic.
  4. Enable the kill switch setting if available, usually found in the app's settings or preferences menu.
  5. Connect, and verify it's working by checking your IP address before and after connecting via a site like whatismyipaddress.com — the address should change once connected.

Setting Up a VPN on Your Phone

Most reputable VPN providers offer dedicated iOS and Android apps:

  1. Install the app from the official Apple App Store or Google Play Store.
  2. Sign in and enable Connect on demand or Always-on VPN in the app's settings if you want protection to persist automatically, particularly useful for public Wi-Fi.
  3. On Android, you can additionally set the VPN as "Always-on" and enable "Block connections without VPN" under Settings > Network & internet > VPN for stronger enforcement at the system level.

Configuring a VPN on Your Router

Setting up a VPN at the router level protects every device on your home network without installing individual apps, which is useful for smart TVs, games consoles and other devices that don't support VPN apps directly.

  1. Check whether your router supports VPN client functionality natively (many consumer routers don't, requiring third-party firmware like DD-WRT or a router specifically marketed as VPN-compatible).
  2. Obtain the specific configuration files or credentials from your VPN provider (usually found in an account dashboard under "Manual setup" or "Router configuration").
  3. Follow your router manufacturer's instructions to input the VPN server details, generally found under a "VPN Client" or "WAN" settings section in the router's admin panel.

This is a more advanced setup and not necessary for most households — installing the VPN app on individual devices that need it is simpler and sufficient for most use cases.

When a VPN Genuinely Makes Sense

  • Using public Wi-Fi at cafés, airports, hotels, or any network you don't control
  • Wanting to reduce the amount of browsing data your ISP can see and potentially sell to advertisers
  • Working remotely and needing to access a workplace's internal network securely (though this is usually a specific corporate VPN, not a consumer privacy VPN)
  • Travelling and wanting to maintain access to services you use at home

When It Doesn't Solve the Problem You Have

  • If your concern is a specific website tracking you, browser privacy settings and tracker blockers (see our guide on private browsing) address that more directly than a VPN
  • If your concern is malware, antivirus software and careful downloading habits are what actually protect you
  • If your concern is a compromised account, a VPN does nothing — strong unique passwords and two-factor authentication are the relevant defences

A VPN is a genuinely useful tool for a specific, well-defined purpose: hiding your browsing metadata from your network and ISP, particularly on untrusted connections. Understanding that boundary — and choosing a provider whose privacy claims are actually verified — is what separates a VPN that improves your privacy from one that just gives you a false sense of security.

Was this guide helpful? Explore more Privacy Settings guides, or browse all Security & Performance articles.