What Is a VPN?
The Complete Guide — No Jargon
Everyone's talking about VPNs. Your favourite YouTuber has a sponsorship deal with one, your colleague uses one "for privacy", and ads for them are everywhere. But what does a VPN actually do? Is it worth it? And which one should you pick?
This guide answers all of that — plainly, honestly, and without trying to sell you anything specific. By the end you'll know exactly what a VPN does, when it genuinely helps, and how to pick a decent one.
What Is a VPN?
VPN stands for Virtual Private Network. At its core, it's a service that creates an encrypted tunnel between your device and a server run by the VPN provider. All your internet traffic flows through that tunnel instead of going directly from your device to the website you're visiting.
Two things happen as a result. First, your internet traffic becomes encrypted — meaning even if someone intercepts it (like your ISP or someone on the same Wi-Fi network), they can't read it. Second, the website you visit sees the VPN server's IP address, not yours — so your real location is masked.
That's really the whole thing. VPNs aren't magic, and they don't make you invisible on the internet — but they do meaningfully improve your privacy and security in specific situations.
Types of VPN
Not all VPNs are the same thing. The word covers three quite different use cases:
This guide focuses entirely on personal consumer VPNs — the kind you'd pay a subscription for to protect your own browsing.
Why People Use VPNs
People reach for a VPN for a handful of genuine, practical reasons:
When You Should Not Use a VPN
VPNs solve real problems — but not every problem. There are situations where having one active can actually make things worse:
How a VPN Works (Simple Steps)
You don't need to understand cryptography to get this. Here's what actually happens when you connect to a VPN:
- 1You open the VPN app and connect. Your device establishes an encrypted connection to a VPN server — usually in a country of your choice.
- 2Your traffic is encrypted before it leaves your device. Before any data goes out, the VPN app encrypts it using modern protocols (usually AES-256 — the same standard used by banks and governments).
- 3The encrypted tunnel carries your requests. Your ISP sees only that you're connected to a VPN server. They can't see which sites you're visiting or what data you're sending.
- 4The VPN server decrypts and forwards your request. The VPN server receives your encrypted request, decrypts it, and forwards it to the website on your behalf.
- 5The website responds to the VPN server. The website sends its response to the VPN server — seeing only the VPN's IP address, not yours.
- 6The VPN server re-encrypts and sends back to you. The server encrypts the response and sends it back through the tunnel to your device, where your app decrypts it.
All of this happens in milliseconds. To you, it just looks like a slightly slower internet connection — though good VPNs keep the performance hit minimal.
What Your ISP Actually Sees With a VPN
One of the most common misconceptions is that a VPN makes you invisible to your internet provider. It doesn't — it just changes what they can see.
Your ISP can still see that you're using a VPN (the connection to the VPN server's IP is visible), how much data you're transferring, and when you're connected. They just can't read the contents. For most privacy purposes, that's the important part.
Key VPN Features to Understand
When you're shopping for a VPN, you'll run into a lot of terminology. Here's what actually matters:
VPN Protocols Explained
A VPN protocol is the set of rules that determines how the encrypted tunnel is created and how your data travels through it. Different protocols make different trade-offs between speed, security, and compatibility.
The current gold standard. Modern codebase (~4,000 lines vs OpenVPN's ~600,000), fast handshake, excellent performance. Used by most top providers now. If your VPN offers WireGuard, use it.
Been around since 2001 and has been audited extensively. Slower than WireGuard due to older architecture, but extremely well understood and trusted. Good fallback when WireGuard isn't available.
Handles network switching gracefully — good when your phone switches between Wi-Fi and mobile data. Fast reconnect times. Native support on iOS and macOS. Not open source in all implementations.
Many providers wrap WireGuard in a proprietary layer and rebrand it (NordVPN calls it NordLynx, ExpressVPN calls it Lightway). These are generally fine — usually WireGuard under the hood — but can't be independently audited.
Legacy protocols. L2TP/IPSec has known vulnerabilities and suspected NSA backdoors. PPTP is completely broken from a security standpoint. If your VPN only supports these, find a different VPN.
Best VPNs — Quick Comparison
These are the providers that consistently come out on top in independent tests. Prices are approximate and change with promotions — always check the current deal.
| Provider | Best for | Servers | Logs | Price/mo |
|---|---|---|---|---|
| NordVPN | All-round performance | 6,400+ in 111 countries | No-logs (audited) | ~$3.69 |
| ExpressVPN | Speed & ease of use | 3,000+ in 105 countries | No-logs (audited) | ~$6.67 |
| Mullvad | Hardcore privacy | 700+ in 49 countries | Strict no-logs | €5 flat |
| Surfshark | Budget, unlimited devices | 3,200+ in 100 countries | No-logs (audited) | ~$2.19 |
| ProtonVPN | Open-source & free tier | 8,900+ in 112 countries | No-logs (audited) | ~$4.99 |
Prices are based on longest available subscription. Always check current pricing on the provider's site. NordVPN link is an affiliate link.
Speed Impact Explained
Every VPN slows your connection down to some degree. The question is how much — and what determines that.
How to Choose a VPN
Ignore the marketing claims — virtually every VPN says it's "the fastest" and "the most secure". Instead, focus on these four things:
1. Independent audits
Has a third-party security firm actually verified the no-logs claim? Companies like Cure53 and KPMG publish these reports. If a VPN hasn't been audited, their no-logs policy is just a marketing statement.
2. Transparent ownership
Find out who owns the company. Some VPN brands are owned by larger companies with questionable data practices. Mullvad and ProtonVPN are among the most transparent about who runs them.
3. The protocol used
Look for WireGuard or OpenVPN support. If a provider uses a custom proprietary protocol they claim is better than WireGuard, that's a red flag — open protocols can be independently reviewed.
4. Refund policy
Most reputable VPNs offer a 30-day money-back guarantee. Use it. Sign up, test the speeds on your actual internet connection, make sure it works with the streaming services you care about, then decide.
Setup Guide (Step-by-Step)
Setting up a VPN is genuinely straightforward. Here's the typical flow:
- 1Choose a provider and sign upPick one from the table above. Sign up, and pay via their website (not the App Store — it's usually cheaper directly).
- 2Download the appEvery decent VPN has apps for Windows, macOS, iOS, and Android. Download from their official site or your device's app store.
- 3Log inOpen the app and sign in with the account you just created.
- 4Choose a server locationIf you just want privacy, pick a server in your own country for the best speeds. If you want to access content from another country, pick that country.
- 5ConnectHit the connect button. It takes a few seconds. Once connected, all your traffic flows through the VPN.
- 6Verify it's workingVisit our IP address checker (linked below) to confirm your IP has changed to the VPN's IP address. Also run a DNS leak test to make sure your DNS isn't leaking.
- 7Enable kill switch (recommended)Go into the VPN's settings and enable the kill switch. This protects you if the VPN disconnects unexpectedly.
How to Test Your VPN Is Actually Working
Connecting to a VPN doesn't automatically mean it's working correctly. Here's how to verify it's doing what it should:
1. Check your IP has changed
Connect to your VPN, then check your public IP address. It should show the VPN server's IP, not your real home IP. If it shows your real IP, the VPN isn't routing your traffic correctly.
🌐 Check your IP address →2. Run a DNS leak test
Even with a VPN active, your DNS queries can sometimes leak through and reveal what sites you're visiting to your ISP. Use our DNS lookup tool to verify your DNS isn't resolving through your local ISP's servers.
🔍 DNS Lookup Tool →3. Check for WebRTC leaks
WebRTC is a browser feature that can expose your real IP even through a VPN. Our Network Fingerprint tool checks for this and other browser-level information leaks.
4. Verify the kill switch works
Disconnect your VPN manually while browsing. If the kill switch is working, your internet should cut out immediately. If the page keeps loading with your real IP exposed, the kill switch isn't functioning.
VPN on Router vs Device
You can run a VPN in two fundamentally different ways. Each has clear advantages and trade-offs:
Best approach for most people: Use the app on phones and laptops (where you need flexibility), and set up router-level VPN if you want to cover a smart TV or games console without installing anything extra on it.
VPN Myths — Let's Clear These Up
VPN Risks and Downsides
VPNs are broadly safe and beneficial, but there are legitimate downsides worth being honest about:
Is a VPN Legal?
Yes — in the vast majority of countries, using a VPN is completely legal. It's a mainstream software category used by businesses, remote workers, journalists, and ordinary people every day. There's nothing inherently illegal about encrypting your own internet traffic.
The exceptions are a small set of countries that restrict or ban VPN use: China, Russia, Belarus, North Korea, Turkmenistan, Iraq, and the UAE either ban VPNs outright or heavily regulate which ones are permitted. In those places, using an unapproved VPN can carry legal consequences.
Important caveat: a VPN being legal doesn't make illegal activity legal. A VPN doesn't shield you from the legal consequences of what you do online — it just protects your privacy. Using one to do something illegal is still illegal.
Does a VPN Protect You on Public Wi-Fi?
Yes — this is one of the clearest and most well-established uses of a VPN. On a public Wi-Fi network (a coffee shop, airport, hotel, library), you're sharing the network with strangers. Without a VPN, an attacker on the same network can potentially intercept your traffic using a technique called a man-in-the-middle attack.
With a VPN, your traffic is encrypted before it leaves your device. Even if someone intercepts the data packets, all they see is meaningless ciphertext. The VPN also prevents rogue access points — fake Wi-Fi hotspots set up by attackers to harvest credentials — from being able to read your traffic.
Can You Still Be Tracked If You Use a VPN?
Yes — a VPN significantly reduces tracking, but it doesn't make you invisible. Here's the honest breakdown:
- •Your ISP seeing which sites you visit
- •Network-level surveillance of your traffic
- •Websites seeing your real IP address and location
- •Browser fingerprinting (screen size, fonts, browser version, etc.)
- •Tracking cookies that persist across sessions
- •Google/Facebook tracking when you're logged in
- •Your VPN provider potentially seeing your traffic
- •Government requests to your VPN provider
The biggest tracking vector most people overlook: if you're logged into Google Chrome with your Google account, Google can correlate your browsing across all sites you visit — your VPN IP changes nothing about that. A VPN is one layer of privacy, not a complete solution.
Do VPNs Work with Netflix and Streaming?
Sometimes — and it depends heavily on which VPN you use. Streaming services like Netflix, Disney+, BBC iPlayer, Hulu, and Amazon Prime Video actively detect and block VPN connections. They do this by maintaining blocklists of known VPN IP ranges and rejecting connection attempts from those addresses.
The result is that cheap or less popular VPNs often get blocked quickly. Premium providers like NordVPN and ExpressVPN invest significantly in rotating IP addresses and maintaining undetected server pools — so they tend to work more reliably with major streaming platforms. But even the best VPNs can't guarantee 100% uptime for every platform.
Note on legality: Using a VPN to access geo-restricted content technically violates most streaming services' terms of service, but it is not illegal. The worst outcome is your account being flagged — not legal consequences.
Is a Free VPN Safe to Use?
Most free VPNs are not safe — and some are actively harmful. Running VPN infrastructure is expensive: servers, bandwidth, staff, and security audits all cost money. When a VPN is free, the business model is almost always built around monetising your data: selling your browsing history to advertisers, injecting ads into web pages, or mining other valuable information from your traffic.
Independent research has found free VPN apps that inject tracking code, log detailed usage data and sell it, expose users to malware, and in some cases route user traffic through other users' connections (turning your device into a proxy node).
The safest recommendation: if budget is the concern, ProtonVPN's free tier is genuinely trustworthy. If you can spend €5/month, Mullvad or Surfshark gives you a full-featured, audited service.
What Does a VPN Not Protect You From?
A VPN is a powerful tool, but there's a lot of marketing hype that overstates what it actually protects against. Here's a plain-English list of what you're still exposed to even with a VPN running:
How VPNs Are Blocked
Governments, workplaces, streaming services, and network administrators all have reasons to block VPN traffic. Here's how they do it — and what good VPNs do to fight back.
VPN vs Other Privacy Tools
VPN vs Proxy
Both a VPN and a proxy sit between you and the website you're visiting — but that's roughly where the similarity ends. A proxy is a basic middleman: it forwards your request and makes the website see the proxy's IP instead of yours. Simple enough, but there's a catch. Proxies typically work at the application level (just your browser, for instance) and don't encrypt your traffic at all. Anyone watching the connection between you and the proxy — your ISP, someone on the same network — can still read exactly what you're doing.
A VPN, by contrast, encrypts everything leaving your device before it goes anywhere. All apps, all traffic, all the time — not just the browser tab you configured. The encryption is the fundamental difference. Proxies are fine for bypassing a regional block on a video or accessing a page that's restricted by country, but they're not a privacy tool. Don't use a free web proxy and think you're anonymous.
Bottom line: Use a proxy if you just need to quickly access a geo-blocked page in a browser and don't care about privacy. Use a VPN if you actually want your traffic to be private.
VPN vs Tor
Tor (The Onion Router) is the gold standard for anonymity — and it's free. Your traffic gets wrapped in multiple layers of encryption and bounced through at least three volunteer-run relays before it reaches the destination. Each relay only knows the previous and next hop in the chain, so no single node can link who you are with what you're accessing. It's genuinely impressive from a privacy engineering standpoint.
The problem is speed. Tor is slow — often painfully so. Streaming a video is essentially out of the question. Loading a standard webpage can take several seconds. This isn't a fixable bug; it's inherent to the architecture of routing traffic through multiple global relays. Tor is also blocked by many services (banks, streaming platforms, certain government sites) because exit nodes are publicly listed.
A VPN is faster, more practical for everyday use, and easier to set up on any device. The trade-off is that you're trusting a single company — your VPN provider — rather than a distributed network. If that company logs your activity or gets subpoenaed, there's a single point of failure. Tor eliminates that risk at the cost of usability.
VPN vs Smart DNS
Smart DNS is a niche solution designed for one specific job: bypassing geo-restrictions on streaming services. It works by rerouting only the DNS queries and a tiny portion of your traffic that reveals your location — everything else goes directly to the server as normal. The result is that a streaming platform thinks you're in another country, but your actual connection speed is barely affected.
This sounds appealing until you remember what Smart DNS doesn't do: it provides zero encryption, zero IP masking, and zero privacy. Your ISP can still see every site you visit. Anyone snooping on your network can still read your traffic. Smart DNS is purely a content-unblocking tool, not a privacy or security tool in any meaningful sense.
Many VPN providers (NordVPN, ExpressVPN, Surfshark) now include Smart DNS as part of their subscription. So you get the best of both worlds: use Smart DNS on your TV for unthrottled streaming, and the full VPN on your phone and laptop for everything else.
Bottom line: Smart DNS is great for streaming on devices where a VPN is awkward to install (smart TVs, games consoles). For anything requiring actual privacy, use a VPN.
Frequently Asked Questions
Do I need a VPN at home?
It depends. At home, your ISP can see your traffic, but it's not as exposed as on public Wi-Fi. If ISP tracking bothers you, or you want access to geo-restricted content, yes — a home VPN is worthwhile. If you mainly browse casually and don't have specific privacy concerns, it's optional.
Will a VPN affect my streaming quality?
It can reduce speeds slightly, but with a good VPN and a nearby server, the difference is usually imperceptible on a typical broadband connection. The bigger issue is that some streaming services actively block VPN IP ranges — NordVPN and ExpressVPN tend to be the best at staying ahead of these blocks.
Can my employer see my traffic if I use a VPN?
If you're on your employer's VPN, yes — that's the whole point of corporate VPNs. If you're on a personal VPN on a work device, your employer may still be able to see traffic through device management software. Don't mix personal and work use on company-managed devices.
Is my VPN provider trustworthy?
This is the right question to ask. The VPN provider can technically see your traffic (though reputable ones don't log it). That's why audited no-logs policies and company transparency matter so much. Look for providers that have published third-party audit reports.
What's the difference between a VPN and Tor?
Tor routes your traffic through three volunteer-run nodes and is much more anonymous — but it's also much slower and not practical for streaming or everyday use. A VPN is faster and easier, but you're trusting the VPN provider. Tor is better for high-stakes anonymity; a VPN is better for day-to-day privacy.
Can I use a VPN on my router?
Yes, many VPN providers support router-level installation. This means every device on your home network is automatically protected without needing an app installed on each one. It's more complex to set up but very convenient.
Do VPNs work on mobile data?
Yes. A VPN works on any internet connection — Wi-Fi or mobile data. On mobile data your ISP (mobile carrier) is the one doing the snooping, and a VPN prevents that too.
Check Your Connection Right Now
Whether you have a VPN or not, these free tools help you understand what the outside world can see about your connection:
How We Write About VPNs
No paid placements. The VPN comparison table above isn't influenced by advertising deals. The providers listed are there because they consistently perform well in independent reviews, not because they paid to be there.
We use these tools ourselves. SiteAlive monitors internet infrastructure, so we care about network privacy and security — not as a marketing angle, but because it's directly relevant to what we do.
We acknowledge limitations. VPNs are useful tools with real trade-offs. We've tried to be honest about what they do and don't protect against, rather than overselling them.
Ready to protect your connection?
Start by checking what your current IP address reveals about you — then decide if a VPN is right for your situation.
Sponsored · Affiliate link