What Is a VPN, and How Does It Work?
On this page
A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a VPN server, so your traffic crosses an untrusted network — public Wi-Fi, your ISP — unreadable and appearing to originate from the server. It is genuinely useful for transport privacy and secure remote access, and genuinely oversold as a privacy panacea. Understanding both halves matters.
What does a VPN protect?#
Between your device and the VPN server, the tunnel provides:
- Confidentiality on the local network — Wi-Fi snoopers and your ISP see only encrypted traffic.
- IP masking — destination sites see the VPN server’s address, not yours.
- Secure remote access — reaching a private network as if you were on it.
That is real value, especially on hostile networks. But notice the scope: the protection runs to the VPN server, not all the way to every destination.
What a VPN does not do#
| Myth | Reality |
|---|---|
| ”A VPN makes me anonymous” | Trust just moves to the VPN provider |
| ”A VPN encrypts everything end to end” | Only to the VPN server; beyond it, normal rules apply |
| ”A VPN stops tracking” | Cookies, logins, and fingerprinting still identify you |
| ”A VPN replaces HTTPS” | You still need TLS past the server |
Once traffic leaves the VPN server for its destination, it is only as protected as it would otherwise be — so HTTPS still matters.
VPNs are one tool for transport security, related to IPsec and TLS. More at the Network Security hub.
Frequently asked questions#
What does a VPN actually do?
A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a VPN server, so traffic on the local network and to your ISP is unreadable and appears to come from the server’s location. It protects data in transit over untrusted networks and hides your IP from destination sites — but only up to the VPN server.
Does a VPN make you anonymous?
No. A VPN shifts trust to the VPN provider, who can see your traffic where it is not otherwise encrypted. It does not stop tracking via logins, cookies, or browser fingerprinting, and sites still use application-layer identifiers. A VPN is a tool for transport privacy and bypassing local restrictions, not anonymity.