VPN explained: what it protects and what it does not

A virtual private network creates an encrypted connection between your device and a VPN server. Your internet provider sees a connection to that server rather than every destination, while websites generally see the VPN server’s address. This is useful on untrusted networks and can reduce local network snooping.

How it works

A VPN does not make a person anonymous. The VPN provider can still see connection metadata, websites can identify browsers with cookies or fingerprints, and logging into an account links activity to that account. A VPN also does not fix malware, weak passwords or unsafe downloads.

Practical takeaways

Choose a provider with a clear retention policy, modern protocols and transparent ownership. Turn on the kill switch only if you understand its behavior, and remember that speed, location and trust are trade-offs.

Use a VPN for a specific threat model, not as a magic privacy button. For banking and important accounts, combine it with HTTPS, updates and multi-factor authentication.

In short: A VPN moves trust from the local network to the VPN provider. It can protect traffic on public Wi-Fi, but it cannot replace good account security.