What a VPN is and isn't (and when it's actually worth it)
A VPN is one of the most over-sold products in online safety. The adverts make it sound like an invisibility cloak that blocks hackers, viruses and surveillance all at once. The real picture is more useful and a lot more boring. Here is the honest version, so you can decide whether you actually need one.
What a VPN actually is
A VPN, or virtual private network, sends your internet traffic through an encrypted tunnel to a server run by the VPN company, before it heads out to the wider internet. That gives you two practical effects:
- The network you are on, whether that is your home broadband, the café wifi or your office, can no longer see which websites you visit. It only sees an encrypted connection to the VPN.
- The websites and apps you use see the VPN server’s address and location, not your real ones.
Almost everything a VPN does comes back to those two things.
What a VPN is genuinely good for
- Public wifi. On networks you do not control, like cafés, airports and hotels, a VPN stops anyone else on that network snooping on your connection, or sitting between you and the sites you use to eavesdrop or tamper — a man-in-the-middle attack. This is the strongest everyday reason to use one.
- Keeping your browsing private from your provider. Your broadband or mobile provider can otherwise see and log the sites you go to. A VPN hides that from them.
- Appearing to be in another country. Handy for reaching your home streaming service while you travel. Worth knowing this often breaks the service’s terms, and they actively try to block it.
- Hiding your real location and IP address from websites.
What a VPN is NOT
This is where the marketing runs ahead of reality:
- It does not make you anonymous. You are not invisible. You have simply moved your trust from your internet provider to the VPN company, which can technically see your traffic. That is why their logging policy matters so much. And the moment you log into Google, Facebook or your email, those accounts identify you no matter what your IP says.
- It is not antivirus. A VPN does nothing about malware, dodgy downloads or infected attachments.
- It does not stop scams or phishing. If you hand your card details to a fake shop, a VPN will not save you. Spotting the fake is what saves you. See how to check if a website is legit and how to spot a phishing email.
- It does not make you “unhackable”. No single product does, and anyone claiming otherwise is selling something.
”But isn’t my connection already encrypted?”
Partly, and this is where it gets misunderstood. Almost every site now uses HTTPS, the little padlock, and that encrypts the contents of what you do on a site: the pages you read, the passwords and messages you type. What it does not hide is which sites you visit. Your provider can still see the domains you connect to, because the address look-ups your device makes (DNS) and part of the secure handshake (the server name) reveal the site even over HTTPS. So your internet provider can build a list of the sites you go to, just not what you did once you were there.
That is exactly where a VPN still earns its place at home: it hides those site addresses from your provider too. The trade-off is that the VPN company can now see them instead, which is why their no-logs policy matters so much. If you would rather not run a VPN all the time, switching on encrypted DNS (often labelled DNS over HTTPS in your browser or phone settings) closes part of the gap by hiding your look-ups, though the server name can still leak in other ways.
The truth about free VPNs
Running a VPN costs real money. So if one is completely free, it is worth asking how they pay for it. Plenty of free VPNs make their money by logging what you do and selling it, or by injecting ads, which is the exact opposite of what you were trying to achieve. A few solid companies offer limited free tiers, but as a rule, treat free VPNs with caution. When we compare options, we will point out the ones worth trusting.
So, do you actually need one?
- Worth it if you often use public wifi, you want your browsing kept private from your provider, or you need to reach content from another country.
- Less essential if you are only ever on your own home network and you assumed it made you hack-proof. It does not.
How to choose, in short
When we compare specific VPNs, the things that matter are an independently audited no-logs policy, the country the company is based in, real-world speed, how many devices it covers, and price. We will work through those honestly and only point you to ones we would happily use ourselves.
For the bigger picture on staying private, start with our simple guide to protecting your privacy online, and browse the rest of the VPNs and privacy section.