What Is a VPN and Do You Actually Need One?
VPN adverts promise total privacy and security online. The reality is more nuanced. A VPN is a useful tool in some situations, but it's not magic. Here's what it actually does.
What a VPN does
A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a VPN server. Your internet traffic goes through that tunnel, so:
- Your Wi-Fi network and internet provider can't see which websites you visit, only that you're using a VPN.
- Websites see the VPN server's IP address instead of yours.
What a VPN doesn't do
- It doesn't stop malware or phishing.
- It doesn't make you anonymous if you log into Google, Facebook or other accounts.
- It doesn't stop websites tracking you with cookies.
- It doesn't protect weak passwords.
When a VPN is useful
| Situation | Helpful? |
|---|---|
| Using public Wi-Fi in cafés and airports | Yes |
| Hiding browsing from your network provider | Yes |
| Accessing your company's internal network | Yes (work VPN) |
| Everyday browsing at home on HTTPS websites | Limited benefit |
| Stopping viruses and scams | No |
For public Wi-Fi risks, see public Wi-Fi safety.
The problem with free VPNs
Running VPN servers costs money. Many free VPN apps make money by showing aggressive ads, collecting and selling your data, or worse. Some have been found to contain malware. If you use a free VPN, choose one from a reputable company that offers a limited free tier of its paid service.
How to choose a VPN
- A clear no-logs policy, ideally verified by independent audits.
- Modern protocols like WireGuard or OpenVPN.
- A kill switch, which blocks internet if the VPN disconnects.
- A reputable company with transparent ownership.
- Good reviews from independent tech publications.
Will a VPN slow my internet?
Slightly, especially if the server is far away. Choose a nearby server for everyday use.
Is using a VPN legal?
VPNs are legal in most countries, but some countries restrict or regulate them. Check your local laws, and remember that illegal activities remain illegal with a VPN.
Built-in alternatives
Apple's iCloud+ includes Private Relay for Safari, and some browsers offer built-in privacy features. See browser privacy settings.
How to set up a VPN
Setting up a reputable VPN is simple:
- Choose a provider after checking independent reviews and audits.
- Download the official app from the provider's website or your device's app store.
- Sign in and connect to a nearby server for the best speed.
- Turn on the kill switch and auto-connect on untrusted Wi-Fi, if offered.
Many VPN apps can be set to connect automatically only on public networks, and stay off at home.
Common VPN myths
| Myth | Reality |
|---|---|
| "A VPN makes me completely anonymous" | Logged-in accounts, cookies and browser fingerprinting still identify you |
| "A VPN protects against viruses" | Some block malicious sites, but they're not antivirus |
| "Free VPNs are just as good" | Many free VPNs have weak privacy or show intrusive ads |
| "I need a VPN for banking at home" | Banking sites use strong encryption already |
Work VPNs are different
Companies often provide a VPN so employees can access internal systems securely. This is different from consumer VPNs; it connects you to your company network, and your employer may be able to see your traffic while it's connected. Use it for work only, and disconnect when doing personal browsing.
For broader protection, combine good habits from our browser security guide with strong passwords and 2FA.
Frequently asked questions
Do I need a VPN on my phone?
Only if you often use public Wi-Fi or want extra privacy. Mobile data is already fairly secure.
Can a VPN company see my activity?
Potentially, which is why trust and a verified no-logs policy matter.
Keep reading
SIM Swap Scams: How Criminals Steal Your Phone Number
Learn how SIM swap fraud works, the warning signs, and how to protect your bank and accounts that rely on SMS codes.
10 Signs Your Account Has Been Hacked (and What to Do)
Recognise the warning signs that your email, social media or other accounts are compromised, and take back control quickly.
How to Secure Your Home Wi-Fi Router in 10 Minutes
Change default passwords, turn on WPA2/WPA3, update firmware and lock down your router to keep your home network safe.