What a VPN Actually Does—and What It Doesn't
Photo: AdvisorBooth.net editorial
Key Takeaways
- A VPN encrypts your internet traffic and masks your IP address from websites and your ISP.
- VPNs do not make you anonymous online — your behavior, logins, and browser fingerprint still identify you.
- Using a VPN shifts trust from your internet provider to the VPN provider itself.
- VPNs can reduce speed and do not protect against malware, phishing, or tracking cookies.
- Public Wi-Fi users and remote workers have the most practical reasons to use a VPN.
Encrypts traffic on untrusted networks
On public Wi-Fi, a VPN prevents other users on the same network from intercepting your unencrypted data. This is one of its most practically valuable and clearly demonstrated protections.
Hides your IP address from visited websites
Websites and online services see the VPN server's IP address rather than your own, making it harder to link your activity to your physical location or ISP account.
Limits what your ISP can observe
Your internet provider can no longer see which specific websites and services you visit when a VPN is active, reducing the data available to them for profiling or sale.
Enables secure remote access to private networks
VPNs were originally designed to let remote workers connect securely to company infrastructure, and this remains one of their most reliable and well-established use cases.
Does not provide true anonymity online
Logging into any account, using tracking cookies, or being identified by browser fingerprinting all expose your identity regardless of VPN use. Anonymity requires far more than masking an IP address.
Shifts trust to the VPN provider
Your VPN provider can see the same traffic your ISP previously could. If a provider logs and shares data, your privacy benefit is negated — making provider trustworthiness the critical variable.
Can noticeably reduce connection speed
Encrypting traffic and routing it through an additional server adds latency. The impact varies, but streaming, video calls, and gaming are often the first activities affected.
No protection against malware or phishing
A VPN operates at the network level and does not scan downloads, block malicious sites, or prevent social engineering attacks. It is not a substitute for antivirus software or cautious browsing habits.
How a VPN Actually Works
A VPN creates an encrypted connection between your device and a server operated by the VPN provider. All of your internet traffic passes through that server before reaching its destination — a website, an app, or an online service.
The practical effect is twofold. First, the data traveling between your device and the VPN server is encrypted, meaning anyone watching that connection — a hacker on the same coffee shop Wi-Fi, or your home internet provider — sees scrambled data instead of readable content. Second, the website or service you visit sees the VPN server's IP address, not your own. Your actual location and IP address are hidden from the destination.
This is meaningfully different from simply using HTTPS. As covered in our article what the padlock icon in your browser actually tells you, HTTPS encrypts the data between your browser and a website — but your internet provider can still see which sites you visit. A VPN adds a layer that obscures that information from your ISP as well.
Encrypts traffic on untrusted networks
On public Wi-Fi, a VPN prevents other users on the same network from intercepting your unencrypted data. This is one of its most practically valuable and clearly demonstrated protections.
Hides your IP address from visited websites
Websites and online services see the VPN server's IP address rather than your own, making it harder to link your activity to your physical location or ISP account.
Limits what your ISP can observe
Your internet provider can no longer see which specific websites and services you visit when a VPN is active, reducing the data available to them for profiling or sale.
Enables secure remote access to private networks
VPNs were originally designed to let remote workers connect securely to company infrastructure, and this remains one of their most reliable and well-established use cases.
What a VPN Doesn't Do
This is where many people's expectations diverge sharply from reality. A VPN does not make you anonymous online. If you log into Google, Facebook, or any account-based service while using a VPN, those platforms still know exactly who you are. Your login credentials, browsing behavior within those platforms, and purchase history are all fully visible to those companies.
VPNs also do not block tracking cookies, browser fingerprinting, or advertising trackers. Websites use these methods to recognize you across sessions regardless of your IP address. A VPN changes your apparent location but does nothing to prevent this kind of behavioral identification.
Critically, using a VPN shifts — rather than eliminates — the trust question. Instead of your internet provider seeing your traffic, your VPN provider does. The security value of a VPN depends entirely on whether that provider is trustworthy and what data, if any, they log.
Finally, VPNs offer no protection against malware, phishing attacks, or malicious downloads. They are a network-layer tool, not a security suite.
Does not provide true anonymity online
Logging into any account, using tracking cookies, or being identified by browser fingerprinting all expose your identity regardless of VPN use. Anonymity requires far more than masking an IP address.
Shifts trust to the VPN provider
Your VPN provider can see the same traffic your ISP previously could. If a provider logs and shares data, your privacy benefit is negated — making provider trustworthiness the critical variable.
Can noticeably reduce connection speed
Encrypting traffic and routing it through an additional server adds latency. The impact varies, but streaming, video calls, and gaming are often the first activities affected.
No protection against malware or phishing
A VPN operates at the network level and does not scan downloads, block malicious sites, or prevent social engineering attacks. It is not a substitute for antivirus software or cautious browsing habits.
When a VPN Makes Practical Sense
Despite its limitations, a VPN provides real, concrete value in specific situations.
Public Wi-Fi: Airports, hotels, and cafes run networks where other users could potentially intercept unencrypted traffic. A VPN eliminates that exposure by encrypting everything leaving your device. For more context on how different connection types compare, see Wi-Fi, Ethernet, and cellular compared.
Remote work: Many employers require a VPN to access internal company systems. This is the use case VPNs were originally designed for — creating a secure, private channel to a private network over the public internet.
Limiting ISP visibility: Internet providers in the United States can, under current regulations, collect and sell anonymized browsing data. A VPN prevents your ISP from seeing which sites you visit, though the VPN provider itself takes on that visibility.
VPNs and HTTPS Work Differently
Reduced speed is a real trade-off. Routing traffic through an additional server and encrypting it introduces latency. How much depends on the server's distance, load, and your base connection speed. Activities like video streaming or gaming are most likely to feel the impact.
The Bottom Line on VPN Privacy Claims
Marketing around VPNs often overstates what they deliver. Claims of "total anonymity" or "complete protection" do not hold up to scrutiny. What a VPN genuinely provides is a meaningful — but bounded — improvement in network-level privacy.
If your concern is someone on the same network snooping on your traffic, a VPN helps. If your concern is a website tracking your behavior across sessions, a VPN largely does not. Understanding that distinction is the most important thing a reader can take away from this topic.
31%
Internet users globally who have used a VPN
According to GlobalWebIndex research, roughly one in three internet users worldwide has used a VPN in a given month, reflecting widespread but often misunderstood adoption.
~10–30%
Typical speed reduction when using a VPN
Independent speed tests have consistently shown that VPN use reduces download speeds by roughly 10–30%, depending on server distance, protocol, and network conditions.
The technology is not inherently complex, but it is frequently misrepresented. Approached with accurate expectations, a VPN is a useful addition to a thoughtful approach to online privacy — not a replacement for one.
The content on this site is for informational purposes only and is not a substitute for professional advice. Always consult a qualified professional for guidance specific to your situation.