Disclosure: some links on best60.com may be affiliate links. If you buy through them, we may earn a commission at no extra cost to you.
VPN stands for virtual private network. A VPN creates an encrypted connection between your device and a server run by the VPN service. Your internet traffic travels through that connection before reaching the wider internet.
That one change has two main effects. People on your local network can't read your traffic, and the websites you visit see the VPN server's IP address instead of yours.
How a VPN works, step by step
Here's what happens when you turn a VPN on and open a website:
- The app connects to a VPN server. Your device and the server verify each other and agree on encryption keys.
- Your traffic gets encrypted. Data leaving your device is scrambled before it goes out.
- It travels through a "tunnel." Your internet provider can see that you're connected to a VPN server, but it can't read the contents of the traffic inside.
- The VPN server forwards your request. It decrypts the traffic and sends it to the website using its own IP address.
- The reply comes back the same way. The server encrypts the response and sends it to your device.
The tunnel is a useful image, but it is really just encrypted data moving over the normal internet.
Without a VPN vs with a VPN
Without a VPN: your internet provider can see which sites you connect to. Websites see your IP address, which reveals your rough location and your provider. On shared Wi-Fi, the network operator can also see some details of your activity.
With a VPN: your provider sees an encrypted connection to the VPN server. Websites see the server's IP address. On shared Wi-Fi, the operator sees encrypted traffic going to one place.
One important point: most websites already use HTTPS, which encrypts the content of your connection to that site. A VPN adds a layer on top and hides which sites you are visiting from your local network and your internet provider.
What a VPN is good for
- Using public Wi-Fi in hotels, cafés and airports with less exposure.
- Keeping your browsing from your internet provider.
- Reducing IP-based tracking, since sites see a shared server address.
- Connecting securely to work networks through a business VPN or similar tool.
- Appearing to connect from another region, subject to the rules of the services you use.
What a VPN can't do
A VPN is one tool, and it has clear limits:
- It doesn't make you anonymous. Logged-in accounts, cookies and browser fingerprinting can still identify you.
- It doesn't stop malware or phishing. Some apps add blockers, but you still need good habits.
- It moves trust rather than removing it. The VPN provider can potentially see what your internet provider used to see, so choosing a provider you trust matters.
- It won't fix weak passwords. Use a password manager and two-factor authentication too.
Why VPNs can slow your connection
Your data takes an extra stop and has to be encrypted and decrypted. The effect depends on your connection, the distance to the server, how busy that server is and which protocol you use. Picking a nearby server usually helps.
Protocols in brief
A protocol is the set of rules a VPN uses to build its tunnel. You'll usually see these names in app settings:
- WireGuard: modern, lean and widely adopted.
- OpenVPN: older, proven and highly configurable.
- IKEv2: common on phones because it handles switching networks well.
Most people can leave this on the automatic setting.
Common features worth knowing
- Kill switch: blocks internet traffic if the VPN connection drops, so nothing slips out unprotected.
- No-logs policy: the provider's promise about what it doesn't record. Independent audits add credibility.
- Split tunneling: lets you choose which apps use the VPN.
- Simultaneous connections: how many of your devices can be connected at once.
How to start using one
- Choose a provider. Well-known services in our directory include NordVPN, Proton VPN and ExpressVPN. Check each one's current plans and privacy policy.
- Install the app on your device from the official site or app store.
- Sign in and connect to a nearby server.
- Turn on the kill switch if the app offers one.
- Test that your IP address has changed by using an IP lookup site.
Before you commit, read our guide on how to choose a VPN, which covers what matters and what is mostly marketing.
Rules on VPN use vary by country, and some streaming services and workplaces restrict them. Check what applies to you.
Quick summary
- A VPN encrypts traffic between your device and a VPN server.
- Websites see the server's IP address, not yours.
- It helps most on public Wi-Fi and for privacy from your internet provider.
- It doesn't make you anonymous or replace other security habits.
- Choose a provider you trust, since your traffic passes through its servers.