What Is a VPN?
Author: Domeny.ForSale editorial team Published
In brief: A VPN is a virtual private network that creates an encrypted connection between your device and a VPN server. It can provide secure access to a company’s network or route internet traffic through an intermediary server, changing the IP address visible to the websites you visit. It does not guarantee anonymity and does not replace protection against scams, malware or account takeovers.
How a VPN works and who can see your activity
VPN stands for Virtual Private Network. It sends data through what is known as a tunnel: a connection protected by encryption. In a typical consumer service, an app connects your device to the provider’s server, which then forwards traffic to the internet. A website will then usually see the VPN server’s IP address—its identifier on the network—instead of your connection’s public IP address.
Your internet service provider or Wi-Fi administrator can see the connection to the VPN server, its duration and the amount of data transferred. With the correct configuration, they cannot directly see the websites visited through the tunnel or the contents of the traffic. However, this does not mean your activity becomes invisible to everyone: the VPN operator may have access to some information.
The VPN tunnel ends at the VPN server, not at the website you visit. Further protection for the contents of your traffic is provided by technologies such as HTTPS, an encrypted connection between your browser and a website. When HTTPS is working correctly, the VPN provider should not be able to read passwords or form contents, although it may have access to metadata such as destination IP addresses and, depending on the configuration, domain queries as well.
Not every VPN covers all traffic from your device. Split tunneling allows you to route only selected apps or connections through the tunnel. Similarly, a browser extension advertised as a VPN may protect only browser traffic, not traffic from messaging apps or other programs.
When a VPN is genuinely useful
The easiest way to assess a VPN’s usefulness is to start with the task you need it to perform. Two solutions with the same name may serve completely different purposes.
- Access to company resources. A workplace VPN lets you connect to internal systems, drives or tools that are not publicly accessible. It does not necessarily reroute all your internet traffic.
- Limiting traffic visibility on a local network. On hotel or airport Wi-Fi, a VPN adds a layer of protection between your device and the VPN server. HTTPS already protects the contents of most modern connections to websites, but a VPN also covers other traffic routed through the tunnel.
- Using a different exit IP address. A server in another country can change the location a website identifies based on your IP address. However, it does not change your phone’s GPS location or the data stored in your account.
For example, if you are working from a hotel and need access to your company’s accounting system, use the VPN specified by your employer. Buying a consumer subscription will not give you access to the company’s network. If, on the other hand, you want to limit the information available to the hotel’s Wi-Fi administrator, a consumer VPN may serve that purpose.
Changing the server’s country does not guarantee access to a foreign film catalogue or a particular service. A service may detect and block VPN addresses or determine your region using account details. Check the platform’s current terms of service for its access rules.
What a VPN does not protect against
A VPN does not hide your identity from a service you log into. An online shop still knows your account, and a social media platform may link your activity to your profile, cookies and browser characteristics. Changing your IP address removes only one way of identifying you.
A VPN does not automatically recognise a fake login form. If you give your password to a scammer, the encrypted tunnel will simply deliver it securely to the wrong destination. Nor will it prevent every infection or protect data that is already accessible to malware on your device.
A VPN provider becomes another party you entrust with some information about your connection. The phrase “no logs” is a claim about not recording certain data, rather than a technical guarantee of complete anonymity. You need to check which data the claim covers and whether it excludes, for example, connection history.
How to choose a service and check your connection
Start by looking at support for your devices, a clear privacy policy and cancellation options. Check current prices, data limits, the number of simultaneous connections and renewal terms in the provider’s official pricing information and terms of service. A free VPN is not necessarily unsafe, but you need to check how it is funded and what restrictions it has.
When comparing services, pay attention to three things:
- Data processing policies: what is collected, how long it is stored and who operates the service. An independent audit can help you assess this, but it covers a specific scope and point in time.
- Protection if the tunnel disconnects: a kill switch blocks traffic when the VPN connection is lost, so it is not automatically sent through the normal route.
- Impact on everyday work: a distant or overloaded server may reduce speeds and increase latency. Some banks and other services may require additional verification when you use a VPN.
After starting the app, compare your public IP address before and after connecting. Also check whether the app covers the programs you need and whether it claims to protect against DNS leaks—queries for domain addresses sent outside the tunnel. A new IP address alone does not prove that all traffic is protected.
Before buying, write down one specific requirement: access to your company network, protection for traffic on an unfamiliar network or a different exit IP address. Only then choose a solution to match it—a VPN bought solely for the promise of “complete anonymity” will not meet that expectation.
See also: What is a domain option?
Read also
