What is a VPN, and what does it actually do?
A VPN sends your traffic through an encrypted connection to a server elsewhere, so the network cannot read it and websites see the server's address, not yours.
Start here if you have never used a VPN, or you have and still could not say what it does. These guides explain what a virtual private network actually changes when you turn it on, what it hides from the network and from websites, what it cannot do, and the vocabulary you will meet everywhere else.
11 guides · RSS
A VPN sends your traffic through an encrypted connection to a server elsewhere, so the network cannot read it and websites see the server's address, not yours.
A VPN app takes over your phone's network path, encrypts every packet, and sends it to a server that forwards it to the internet under its own address.
A VPN hides your IP address from websites and your traffic from the Wi-Fi and your ISP. It does not hide your accounts, cookies or the fact you use a VPN.
Yes. With a VPN on, websites and apps see the VPN server's address instead of yours. Here is who can still see your real IP, and the leaks to check for.
The exit IP is the address websites see when your VPN is on: the server's, not yours. Here is what it tells you and why an app should verify it.
No. A VPN hides your IP from websites and your traffic from the network, but accounts, cookies, device identifiers and the provider still know you.
On Wi-Fi you do not control, such as hotel, campus or café networks, a VPN is worth having. On your own home network it is optional. Here is how to decide.
In most countries, yes: businesses and individuals use VPNs every day. A VPN does not make an illegal act legal, and a few countries regulate providers.
A VPN tunnel is each of your packets sealed and encrypted inside another packet addressed to the VPN server, which unwraps it and sends it on.
A plain-English glossary of the VPN terms you meet in apps and settings: tunnel, exit IP, protocol, WireGuard, kill switch, DNS leak and more.
A VPN server is the machine that decrypts your tunnel and forwards your traffic under its own address. Here is what it sees and what it should not keep.