A VPN is one of those tools that gets marketed as the answer to almost every privacy worry. Free one, and suddenly you're safe. Pay for one, and you're untraceable. That is marketing, not reality, and believing it is exactly how people get burned.
The real answer is more useful, and more limited. A VPN solves a specific problem really well. It just doesn't do most of the things the ads promise. Understanding the difference helps you use it properly, and stops you expecting it to do a job it can't.
What a VPN actually does
When you turn a VPN on, it creates an encrypted tunnel between your device and the VPN's server. Everything you send travels down that tunnel, which means anyone on the network in between, like on a dodgy cafe Wi-Fi, can't easily read it.
It also hides your real IP address from the sites you visit. Instead of seeing your actual location and connection, they see the VPN server's. That means your internet provider also loses the easy view of exactly which sites you're browsing, because that traffic is wrapped in the tunnel.
So, in short: a VPN protects you on public Wi-Fi and keeps your internet provider from seeing your browsing at a glance. Those are its two real, honest jobs.
What the tunnel covers, and what it leaves alone
The tunnel wraps traffic from the device running the VPN, and nothing else. Switch it on for your laptop and your phone is still out in the open until you set it up there too.
Inside the tunnel, a VPN hides where your traffic is going from the network. It does not hide what you do once you arrive. Log in to a bank, a shop or a social account and that site knows exactly who you are, because you told it. A tunnel hides the road you took, not the door you walked through.
One edge is worth knowing. An app that is switched off, or has crashed, protects nothing, and most good services offer a setting that blocks all traffic until the tunnel returns. Turn that on. A work-issued laptop usually runs software you never see, and it reports back.
What a VPN does NOT do
This is where the hype falls over. A VPN does not make you anonymous. Sites can still fingerprint your browser, your screen size, your fonts and your device, and work out it's you. And if you log in to an account, you are you, and no tunnel changes that.
A VPN does not stop every tracker. Many trackers live in ads and scripts on a page, and a VPN doesn't block those. And it most certainly does not protect you from viruses, phishing, or handing your password and card details to a scammer. Those threats come from what you click, not from the network.
It also does nothing about tracking inside the apps on your phone. An app can read your contacts and your location, then send the lot home, and that data travels just as happily through an encrypted tunnel. A VPN changes where your traffic enters the internet, not what your apps say about you.
Your VPN provider sees what your internet provider used to
Here is the trade nobody puts in the advert. A VPN does not remove the company watching your internet traffic. It swaps one for another. Your internet provider now sees an encrypted stream heading to a VPN server, so it can still tell you use one, roughly when, and how much data you move. It cannot see the sites inside that stream.
The provider can. Every site you reach passes through its servers, so it holds the map your internet provider used to hold. Whether it writes that map down, and for how long, is a policy question, not a technical one. Encryption protects the journey. It does not stop the company at the far end from keeping records.
None of that should stop you using a VPN. It is a reason to choose which company gets to know where you go.
When it's actually worth it
The genuine benefits are straightforward. Public Wi-Fi is first, and using a VPN on a cafe or airport network is a reasonable habit. Hiding your general location from sites and apps is next. And avoiding your provider recording the sites you visit is a real, if niche, privacy win.
For most everyday privacy, though, a VPN is a small part of a bigger picture. Good browser hygiene, strong account security, and checking the permissions you hand out matter far more. A VPN won't fix a weak password or a scam email. Those are on you.
Hotel, train and conference networks are shared networks, and shared networks are where a snooper still has a chance. Long-term travel is another reason to run one.
When a VPN is mostly theatre
Plenty of the situations sold as VPN emergencies are not emergencies. Most of the web now travels over encrypted connections by default, so the padlock in your browser already hides your pages from everyone sharing the network with you. On a modern cafe Wi-Fi, a VPN adds less than the advertising suggests, though it still hides which sites you visit.
Other cases sit outside its reach. A VPN will not stop someone stealing your password from a fake login page. It will not stop your card details being handed to a scam message, and it will not undo a bad permission you granted last year. Buying one and assuming you are covered is the real risk, because it invites you to relax where the danger lives.
A VPN changes the apparent route and location of your traffic. It is not a way around the law, a court order, or the terms of a service you use. If that is why you want one, it will not do what you hope.
The logging question
Ask what your provider writes down, because a record is the thing that can be handed to somebody else later. The useful distinction is between a live record of what you were doing and a simple record that you connected at all. Both are logs, and both matter.
Read the policy rather than skimming it for the word "no". Look for a plain statement of what is kept, how long it stays, and who can ask for it. An independent audit, where an outside firm checks the claims, is worth more than a promise on a marketing page. Your email address and your card payment are a trail too, and they can identify you without any browsing records at all.
None of this is exotic. It is the same question you would ask of any company holding data about you. What do they hold, why, and what happens when someone official asks.
How a free service pays for itself
Servers and bandwidth cost real money, and someone is paying. When the app is free, the most likely someone is you, in a currency that is not cash. A few funding models are worth recognising.
- Selling what it collects. The app gathers data about browsing, device and location, then passes it to advertisers or brokers. A privacy tool funded this way works against its own pitch.
- Advertising inside your browsing. Some services insert or replace ads on the pages you load, putting a company in the middle of everything you read.
- Running out your patience. Caps on data, queues, overloaded servers and sites that refuse to load push you toward the paid tier.
- Bundling something else. The free app exists to install something more valuable alongside it, or to make you a subscriber elsewhere.
Not every free option is bad. A long-standing reputation, a clear privacy policy, outside audits and a paid tier that visibly funds the operation all suggest the money comes from subscribers.
Pay for one, or use a free one?
Be genuinely cautious about free VPNs. A free service has to pay for itself somehow, and the most common way is by selling the data it collects. That rather defeats the point of using a privacy tool in the first place.
If you use one, use a reputable provider with a transparent policy that's been independently audited. A reputable paid option is usually safer and faster. And remember that a faster VPN matters day to day, because a slow one can turn browsing into a chore.
Pros
- Protects your data on public Wi-Fi, which is its most useful everyday job.
- Hides your real IP address and location from most sites you visit.
- Keeps your internet provider from seeing what you browse at a glance.
- Makes it easy to appear in another country for streaming or travel.
Cons
- Does not make you anonymous — you can still be fingerprinted and tracked.
- Does not block trackers, viruses, phishing or scam links.
- Can slow your connection, sometimes noticeably on a cheap service.
- Free VPNs often cover their costs by selling your data.
Best for: using public Wi-Fi safely and keeping your browsing out of your internet provider's hands. Skip if: you're expecting it to make you anonymous or protect you from scams, because those are on you, not the VPN.
Do you actually need one?
For a lot of people the honest answer is no, or not urgently. If you browse at home on your own connection, sign in to accounts you already own, and your main worry is adverts following you around, a VPN will not change much about your day. Those adverts follow you because of what the sites you visit already know.
Other situations are different. You use shared networks often, on a laptop through cafes, hotels and airports. You want your internet provider to stop holding a household list of the sites you visit, and that visibility is what bothers you. You travel and want the services you rely on to behave normally. If none of that describes you, the money is better spent elsewhere.
What protects you better than a VPN
For most people a VPN sits near the bottom of the list, which is not a criticism of it. It simply does less than the habits below.
- A password manager, so every account has its own long password and none of them are reused.
- Two-factor authentication on your email, bank and social accounts. Your email is the key to everything else.
- Updates on your phone, browser and computer, because most attacks use flaws that were fixed months earlier.
- Careful app permissions. Location, contacts, microphone and photos get handed out far too freely.
- Tracker and ad blocking in the browser, because it works on the scripts a VPN never touches.
- Checking where a link goes before you log in anywhere, which is the only real defence against a fake page.
None of it costs money, and together those habits beat a VPN against almost every threat you are likely to meet.
Questions
Will a VPN slow me down?
Often slightly, because your traffic takes an extra hop and gets encrypted. A good VPN keeps this minimal. A slow VPN can make everyday browsing annoying, so speed is worth checking rather than assuming.
Is a free VPN safe to use?
Be careful. A free VPN has to earn money somehow, and selling your data is the most common route, which works against the reason you'd use one. If you go free, use a reputable provider with a clearly stated, independently audited policy.
Do I need a VPN for everyday browsing?
Only if you regularly use public Wi-Fi or specifically want to hide what you browse from your internet provider. For most day-to-day privacy, solid account security and good browsing habits matter more than a VPN.
Will a VPN protect my accounts if a password leaks?
No. A VPN hides your traffic from the network, but it cannot stop a password being stolen from a fake login page or a breached company. Someone holding your password can sign in as you from anywhere, and no tunnel is involved. Unique passwords and two-factor authentication are the answer to that.
Can my employer see what I do on a work laptop if I use a VPN?
Usually yes. A device managed by your employer runs software you may never see, and that software can record activity, notice a VPN and report what it finds. Treat a work laptop as a work laptop, whatever you run on it.
Next, instead of reaching for a VPN, take five minutes to tighten your passwords, review app permissions and switch on two-factor authentication. That protects you against the threats a VPN can't touch. The VPN, if you still want one, is the easy part.
Nexgadgets provides general information, not professional advice. Always do your own research.
