Every podcast you listen to insists you need one. Advertisements claim hackers are circling your laptop like sharks. A VPN — a virtual private network — has become the most marketed piece of software in consumer tech, and the gap between the marketing and the machine is wide enough to drive confusion through for years. So let us take the thing apart slowly: what a VPN actually does, wire by wire; what it provably does not do; and the specific, unglamorous situations where paying $3 to $6 a month for one is genuinely sensible.
What a VPN Literally Does
Strip the branding away and a VPN does exactly one thing: it wraps your internet traffic in an encrypted tunnel between your device and a server run by the VPN company, and your traffic exits onto the internet from that server instead of from your home. Two consequences follow, and everything else in this article is commentary on them.
First, the people who run the network you are on — your internet provider at home, or the café whose Wi-Fi you borrowed — can no longer see which websites you visit or what you do there. They see one encrypted stream going to one VPN server, and that is all. Second, the websites you visit see the VPN server’s address and location instead of your home address and location. A site that used to greet you with your own city’s weather now thinks you are in Amsterdam, or Dallas, or wherever you pointed the tunnel. That is the whole mechanism. It is a privacy tool for the road your data travels, not a cloak for the destinations or for you.
What Changes in Practice
At home, the honest summary is that the privacy gain is real but modest: you are paying $3 to $6 a month to hide your browsing from one company (your internet provider, which can otherwise see and log the sites you visit and, in the US, has legal room to use that data) by showing it to another company (the VPN provider, which now occupies the exact same vantage point). Whether that trade improves your life depends entirely on which company you trust more — a question the advertisements never ask, because the answer might be “neither.”
On networks you do not control, the balance shifts hard in the VPN’s favor. Public Wi-Fi’s real dangers — fake hotspots, nosy operators, manipulated connections — are attacks on the road, and the tunnel is precisely a defense of the road: on café Wi-Fi with a VPN running, a hostile hotspot sees encrypted noise. (This is why our guide to public Wi-Fi banking safety puts VPN use above plain public Wi-Fi and below your own mobile data.) The location change has one more practical use everyone knows and ads dance around: streaming libraries and prices differ by country, and appearing to be elsewhere changes what you are offered. Whether a given service’s terms allow that is between you and the service; the mechanism, though, is just the tunnel doing its one job.
What a VPN Does Not Do (the Longer List)
This section exists because most disappointment with VPNs is purchased here. A VPN does not make you anonymous: if you log into your accounts — and you will — the sites know exactly who you are, tunnel or no tunnel. It does not stop tracking in general: cookies, browser fingerprinting, and the accounts themselves follow you through the tunnel untouched, because they operate at the destination, not on the road. It does not protect you from malware, phishing, or scams; a fraudulent site reached through a VPN is a fraudulent site with an encrypted commute. It does not hide your activity from the VPN company itself, which is why the provider’s logging policy and track record are the product, in a way the app’s color scheme is not. And it does not speed anything up — expect 5 to 20 percent slower speeds, since your data now travels further and squeezes through encryption both ways. The Electronic Frontier Foundation’s Surveillance Self-Defense guides make these same distinctions carefully, and they are the most advertisement-free words on the subject you will find.
The Trust Swap, Examined Honestly
Since the VPN moves trust rather than creating it, choosing one is mostly choosing a company. The signals that matter: a clear no-logs policy that has survived independent audits or, better, a real-world test (servers seized or subpoenaed that produced nothing are the strongest evidence this industry offers); a business model where you are the customer — paid subscriptions — rather than the product; and ownership you can identify. The reputable shortlist is boring on purpose: Mullvad (about $5 a month, deliberately minimal — it barely wants to know you exist), Proton VPN (with a strong free tier and a Swiss privacy pedigree), and IVPN. Free VPNs invert the model: running servers costs money, and if you are not paying it, your traffic is the likeliest revenue — the single arrangement worse than trusting your ISP.
The Daily Friction Nobody Puts in the Ads
A VPN that is always on creates small taxes that only appear in week two. Banking and shopping sites, seeing your login arrive from a VPN server’s address — the same address thousands of strangers are also emerging from — may demand extra verification or refuse outright, because in their fraud models that address has a reputation. Streaming services actively block known VPN servers, so the location trick works in a permanent arms race of some servers working and others not. Hotel and airline Wi-Fi login pages (captive portals) often cannot load until the VPN is switched off, which is how you end up troubleshooting your privacy tool in a lobby instead of using it. And every device in the house needs its own connection or a router-level setup, which is genuinely available on many routers but turns one app subscription into a small IT project. None of this is disqualifying — travelers accept worse friction from airport security — but it is the honest price list, and it explains why the most common real-world pattern is a VPN switched on for specific networks and tasks, not worn as a permanent second skin.
Split Tunneling: the Feature That Makes It Livable
Most good VPN apps offer split tunneling — the ability to send only chosen apps through the tunnel while the rest of your traffic travels normally. This is the feature that resolves the friction above into a workable daily arrangement: the browser and the travel laptop’s work tools go through the VPN on strange networks; the banking app, which distrusts VPN addresses, goes direct on your mobile data; the printer and smart TV at home never meet the tunnel at all, because local devices cannot find each other through it. Set once, split tunneling turns the VPN from an all-or-nothing ideology into plumbing — invisible until the day you are on an airport network, when it quietly becomes the most sensible $5 you spend.
One More Honest Boundary: Your Employer and Your Country
Two contexts change the answer completely and deserve plain statements. At work, the calculus inverts: a personal VPN on a work device can violate company policy outright, and the tunnel your employer provides is a different tool with a different job (reaching the office network), not a privacy product for you. Keep the two ideas in separate drawers and never route personal browsing through an employer’s system expecting privacy from the one party who can certainly see it. And the value of every claim in this article — logging policies, audits, jurisdictions — depends on where you live and what you do; a VPN is a meaningful layer for ordinary privacy in most places, and it is not a magic shield against a determined state-level adversary anywhere. Tools have sizes. This one is a good medium-sized tool, and using it at its true size is the difference between being protected and feeling protected.
Who Should Actually Pay for One
Three profiles get real value. The traveler and public-Wi-Fi worker, for whom the tunnel repairs the one genuinely dangerous environment in everyday computing. The household whose provider is the bigger concern — heavy-handed ISP data practices, or a streaming-throttling grudge — where the trust swap lands in your favor deliberately rather than by default. Anyone whose work or safety makes their traffic interesting to others — journalists, activists, researchers — for whom this is one layer among several, used with full knowledge of its limits.
And the honest counterpart: the homebody with a reputable ISP, updated devices, and no public-Wi-Fi habit is buying very little with a VPN subscription. Their money defends better elsewhere — a password manager, backups, updates turned on. The sharks in the advertisements are real about one thing only: somebody is watching the road. A VPN chooses who. Choose with your eyes open and it is a perfectly good tool — just a smaller one than the ads promised.
