What a VPN Actually Does (and Does Not Do)

Last reviewed September 21, 2026 · 3 min read

A VPN, or virtual private network, is a service that sends your internet traffic through an encrypted connection to a server run by the VPN company. From there, your traffic goes on to the website or app you are using. That one change explains almost everything a VPN can and cannot do.

What a VPN does

Encrypts the connection between your device and the VPN server. Someone on the same Wi-Fi network, or your internet provider, can see that you are connected to a VPN, but not the sites you are visiting or the data you are sending through that tunnel.
Hides your real IP address from the sites you visit. Websites see the VPN server's IP address instead of the one your home or mobile provider assigned to you. That makes it harder to tie your visit to your home network or approximate location.
Moves who can see your browsing. Instead of your internet provider seeing which sites you connect to, the VPN company can. You are not removing trust from the picture; you are choosing who to trust.

What a VPN does not do

It does not make you anonymous. If you log in to an account, the website knows who you are. Cookies, browser fingerprinting and your own behavior can still identify you.
It does not stop tracking by advertisers. Ad networks track you through cookies and device identifiers, not just your IP address.
It does not protect you from malware or phishing. A VPN will happily connect you to a scam site. Keep your device updated and be careful with links.
It does not replace HTTPS. Most sites already encrypt traffic between you and them with HTTPS. A VPN adds a second layer, mostly on the part of the journey between you and the VPN server.
It does not make illegal activity legal. Using a VPN does not change the law.

The trust question

Because your traffic passes through the VPN company, that company is in a position to see your activity. A good provider limits what it keeps, explains it clearly, and ideally has its claims checked by an independent audit. A bad one can be worse than no VPN at all. We cover this in free vs paid VPNs.

When a VPN helps

On public Wi-Fi at airports, hotels and cafes, where you do not control the network. See Is public Wi-Fi safe?.
When you want your internet provider or a network operator (school, workplace guest network) not to see which sites you connect to.
When you are traveling and want a consistent connection back to your home country's services, where the service's rules allow it.

When it does not help much

At home, on a network you trust, if your main worry is advertising trackers. Browser settings and tracker blockers do more for that. See do you need a VPN at home?.
If you expect it to protect an account with a weak or reused password. A password manager and two-factor authentication matter more.

The short version

A VPN is a tool for one job: protecting your traffic on the path between your device and the VPN server, and hiding your IP address from the sites you visit. It is useful, but it is one layer of privacy, not a shield around everything you do online.