VPNs explained: what they protect and what they don't

VPN advertising promises anonymity, safety and invisibility in one subscription. The technology underneath is genuinely useful — and much narrower than the ads. A VPN does exactly one structural thing: it builds an encrypted tunnel from your device to a server operated by the VPN company, and your traffic exits to the internet from there. Everything it does and doesn't do follows from that one sentence.

What the tunnel actually buys you

Protection from the local network. On café, hotel or airport Wi-Fi, everyone's traffic shares the same air and the same router. With a VPN, an eavesdropper on that network sees encrypted tunnel traffic to one address — not which sites you visit or what you send. This is the original, legitimate use case, and it pairs with the judgement calls in why public Wi-Fi is riskier than people think.

Shrinking what your internet provider can see. Without a VPN your provider can log every destination you contact; with one, it sees a single encrypted stream to the VPN server. Note the honest phrasing: the observation moves, it doesn't vanish — the VPN company now sits where the provider was, which is why the provider's own logging policy and jurisdiction matter more than its speed claims.

Address swap. Sites see the VPN server's address instead of yours. That's how region switching works, and it also quietly removes one small tracking signal.

Safer roads for work. The "corporate VPN" many people already use is the same technology: a private path into an office network. If your employer offers one for its systems, that's the tool doing a real job.

What it does NOT do (the list the ads skip)

It doesn't make you anonymous. You log into accounts — mail, shopping, social — with your name attached. Sites know exactly who you are; they just see a different address. Anonymity would require changing behaviour, not just the tunnel.

It doesn't stop ads or tracking. The tracking industry runs on cookies, browser fingerprinting and logins — none of which care what your IP address is. A VPN doesn't touch them; browser privacy settings address that layer far more directly.

It doesn't scan for malware or phishing. Some products bundle blockers, but the tunnel itself happily carries you to a fake banking site at encrypted speed. The defence there remains link scepticism, not routing.

It doesn't fix a compromised device. Malware running on your machine watches your screen and keyboard from inside the tunnel — encrypting the road outside the computer helps nothing once the passenger is compromised.

It doesn't make anything legal. Local law still applies, to you and to the service; a tunnel is not a jurisdiction change.

The free-VPN warning, stated once and plainly

Running a VPN network costs real money in bandwidth. A free service has to earn that back somehow, and the currency available is you: injected ads, harvested data, sold traffic profiles. The same rule as everywhere else on this site — if you can't tell what the product is, the product is your data — applies double to a service whose entire job is handling your traffic. If you use a VPN at all, use one whose business model you can explain in a sentence.

The honest summary: a VPN is worth having for public Wi-Fi, worth considering for provider-visibility reasons, and worth skipping the day you catch yourself calling it "anonymous browsing". It moves trust from one operator to another — so the decision worth making is whether you trust the operator, not whether the technology sounds powerful.