Using a VPN on mobile data

A VPN works on mobile data exactly as it does on Wi-Fi: every app's traffic goes through one encrypted tunnel to the VPN server, the carrier sees only that tunnel, and websites see the server's address instead of the one your carrier gave you. It adds a small amount of data overhead, it counts against your plan in full, and a modern protocol keeps the tunnel alive when the phone moves between mobile data and Wi-Fi.

What the carrier sees, with and without a VPN

Without a VPN, your mobile carrier is in the same position as a home ISP: it sees every server your phone connects to and the names of the sites you look up. With a VPN on, it sees one encrypted stream to one address, how much data flows and when, and that is all. It can tell you are using a VPN, because the destination is a known VPN address and the traffic pattern is recognisable, but it cannot see what is inside. What your ISP can see when you use a VPN goes through this in more detail, and it applies to carriers unchanged.

What moves is who can see your traffic, not whether anyone can. The VPN provider now sits where the carrier was. Culvert VPN does not log the websites you visit, your DNS queries or the contents of your traffic, and its servers see only an opaque connection id rather than an account; it does keep the IP address your phone connected from for up to 30 days for abuse handling, and the privacy policy states exactly that.

How much extra data it uses

Encryption does not make your traffic bigger in any meaningful way; each packet just gains a small header so the server can identify and check it. With WireGuard that header is a few dozen bytes on packets that are typically more than a thousand bytes long, so the overhead on browsing, video and downloads is a few percent. Traffic made of many tiny packets, such as voice calls and some games, carries proportionally more overhead because the header is a larger fraction of each packet. Even then it is a fraction of the total, not a multiple.

Two things can use more data than that overhead. A VPN that reconnects constantly spends a little on each handshake, and a TLS-wrapped transport on TCP, which the app falls back to on networks that block UDP, has a larger per-packet cost because it uses smaller packets (an MTU of 1280 bytes). Neither is likely on ordinary mobile data, which rarely blocks UDP.

Switching between mobile data and Wi-Fi

When the phone moves from Wi-Fi to mobile data or back, its address changes. Older VPN designs treated that as a disconnect. WireGuard and IKEv2 both recognise the same client arriving from a new address and carry on, so what you should see is a pause of a second or two and then normal service. If your VPN drops fully every time you leave the house, that is the app's handling, not something the network forces; VPN keeps disconnecting on Android covers the other causes.

Carrier address translation and keepalives

Mobile carriers put thousands of phones behind a shared public address and forget an idle connection after a while. A VPN has to send a small keepalive every so often, typically every 25 seconds or so, or the path from the server back to your phone quietly closes and the next reply is lost. This is why a VPN is slightly busier on mobile data than on a home network, and it is a modest cost to battery rather than data.

Speed and latency on mobile data

Mobile networks have higher and more variable latency than a decent Wi-Fi link, and their bandwidth swings with signal and cell load. The VPN adds its own cost on top: roughly 1 ms per 100 km to the server each way, plus load on the server. Choose a city with a low measured round trip and it is barely noticeable; choose a distant or busy one and it stacks with the network's own variability into something you feel. Does a VPN slow down your internet goes through the components.

One thing to expect: the route from a mobile carrier to a nearby city can be worse than from a home connection, because many carriers connect to the wider internet through a small number of exchanges. The measured round trip from your phone accounts for this; the map does not.

Battery

Encryption on a modern phone is cheap. What costs battery on mobile data is the radio, and a VPN affects that mainly through keepalives and reconnects. A stable tunnel on a nearby server is a small share of a day's use; an unstable one that reconnects every few minutes is not. Does a VPN drain your phone battery goes through what to check.

When to use it

On mobile data the local-network risk that makes a VPN valuable on public Wi-Fi is mostly absent; nobody else in the café shares your cell connection. The reasons to keep it on are the same as at home: keeping your traffic and DNS out of the carrier's view, keeping your address out of every site's logs, and having a stable identity for apps that behave differently by address. Whether that is worth the small overhead is your call, and it is a reasonable one either way.

Culvert VPN keeps a WireGuard tunnel across switches between Wi-Fi and mobile data, sends keepalives on a schedule that survives carrier address translation, and shows a live round trip from your phone so you can pick a city that suits the network you are on; it is free on Google Play.