What a VPN protects — and the things people wrongly expect it to
A VPN is a useful privacy tool with a specific, narrow job. The marketing has stretched it into a security cure-all. Here is where the line really sits.
Short answer
A VPN encrypts the traffic between your device and the VPN provider and replaces your IP address with theirs — useful on public Wi-Fi and for keeping your internet provider from seeing your activity. It doesn't stop malware, phishing pages or scams, and it moves your trust to the VPN provider rather than removing the need for it.
A consumer VPN encrypts traffic between your device and the VPN provider's servers, and replaces your IP address with one of theirs. That is genuinely useful for specific problems — and almost useless for several others that VPN advertising implies it solves.
What it does well
- Stops the local network — a café, hotel or airport Wi-Fi — from seeing the sites you reach.
- Hides your real IP address and rough location from the websites you visit.
- Makes it harder for your internet provider to log and sell your browsing.
What it does not do
A VPN does not make you anonymous. Logins, cookies and browser fingerprints identify you regardless of IP. It does not stop malware, phishing or a weak password. And it moves your trust rather than removing it: your provider can now see what your ISP used to. That makes the provider's logging policy and jurisdiction the single most important thing about it.
A VPN relocates your trust from your internet provider to your VPN provider. Choosing one is really about deciding who you trust to see your traffic.
How to judge a provider
Prioritise a clear, ideally independently-audited no-logs policy, an honest statement of jurisdiction, and transparent ownership. Free VPNs are rarely free in the way that matters — if you are not paying, your data often is. As with every product on this site, we hold specific pricing and audit claims to source verification before publishing them.
PrivacyTechReview Editorial Team
Editorial
Our editorial team researches consumer security products using public vendor documentation and independent laboratory reporting.
