| Situation | What a VPN does | Planning use |
|---|---|---|
| Public or shared Wi-Fi | Hides your outgoing traffic from your ISP and from the local network owner, such as a coffee shop | Worth switching on when you do not control the network |
| Websites you visit | Traffic appears to come from the VPN server’s IP address instead of your device’s | Masks your general location from sites, not your identity |
| Trust in the provider | Hides browsing data from the ISP, but all of it is visible to the VPN provider | You move trust from your ISP to the provider, so choose carefully |
| Tracking by companies | Does not stop GPS, cookies, tracking pixels or fingerprinting | Pair it with browser and account privacy settings |
| Streaming access | May change the location a service sees, but platforms increasingly block devices that appear to use a VPN | Do not buy a VPN for streaming alone |
These effects follow the EFF’s guide to choosing a VPN and the Internet Society’s policy brief on VPN restrictions.
What is the purpose of a VPN? It routes your connection through a provider’s encrypted tunnel, hiding your traffic from local networks and your ISP and masking your IP address, but it is not an anonymity tool.
A VPN is one part of a wider privacy setup. For the bigger picture, see our guide on how to stop online tracking.
Why people use VPNs, and what they expect
A security.org consumer survey of 1,008 U.S. adults found that 42% used a VPN for personal or work purposes in 2026, up from 32% in 2025. General privacy (56%) and general security (51%) were the most common reasons given. Those expectations are only partly met, and the gap is where most disappointment with VPNs comes from.
The EFF says VPNs are best suited for one thing: routing your network connection through a different network. The practical question is therefore which network you would rather not trust, whether that is a hotel hotspot, a shared office connection or your own ISP. If the answer is none of them, a VPN adds less than most marketing suggests.
Public Wi-Fi and your internet provider
On a network you do not control, a VPN hides your outgoing traffic from the local network owner and from your ISP. That is the clearest everyday benefit, and the Internet Society notes that limiting VPN access reduces people’s ability to protect personal data, particularly on insecure networks.
The benefit is smaller than it used to be. The EFF points out that the majority of web traffic is now encrypted using HTTPS, so a VPN is less necessary for everyone than it once was. HTTPS protects only the content of your communications. Domain names, the timing of visits and page or file sizes remain visible to observers on the network, and a VPN is what hides that metadata from the local operator.
Use these rules to decide when it is worth connecting:
- Connect on networks you do not control. Cafe, hotel, airport and other shared hotspots are where hiding traffic from the network owner matters most.
- Connect when metadata matters. If you do not want a local operator or your ISP to see which sites you visit, HTTPS alone will not cover that.
- Skip it when it adds nothing. On a home network you trust, with HTTPS sites, the gain is modest and you are adding a provider that can see everything you do.
What a VPN does not protect
A VPN is not a tool for anonymity, in the EFF’s words. It changes who can see your traffic and which IP address sites see. It does not change who you are when you log in, and several common exposures sit outside its reach.
- The VPN provider sees your traffic. While a VPN hides your browsing data from the ISP, it is all visible to the VPN provider, so the exposure moves rather than disappears.
- Companies can still track you. GPS, web cookies, tracking pixels and fingerprinting continue to work through a VPN, according to the EFF. The security.org report adds that a VPN cannot stop tracking tied to accounts, cookies, apps or advertising IDs.
- Logged-in activity is still logged-in activity. Signing in to a search engine, social network or shopping account ties your behaviour to that account whatever IP address you appear to have.
- Total anonymity is out of reach. The same survey report states that VPNs do not provide total anonymity or stop every form of tracking.
- Basic security comes first. The EFF says that for many circumstances a VPN is not the most important security step. Strong passwords, two-factor authentication, HTTPS-only mode, device encryption and software updates matter more.
Private browsing windows have a similar split between what they hide and what they do not, which Incognito Mode Explained: What It Does, What It Doesn’t, and How To Use It in 2026 – Cubeguard sets out. If your worry is a person or an app monitoring your own device, a VPN does not address it, and Is Someone Tracking My Phone? A Practical 2026 Guide To Detecting Unwanted Tracking – Cubeguard covers what to check instead.
Location, streaming and access
Your IP address gives an indication of your general location and can identify you to the sites you visit. AVG describes a public IP address as linking your device to your ISP and your geographic location. With a VPN running, the Internet Society explains, outgoing traffic appears to originate from the VPN server, so sites see the server’s address instead.
That is why access to international or non-local media and reducing online tracking each tied for third place at 27% among reasons in the security.org survey. Changing your apparent location is a real effect, but it is a conditional one. The EFF notes that video streaming platforms are increasingly blocking devices that appear to be using a VPN, so reaching a service from another country is never guaranteed.
If you are weighing a subscription mainly for streaming, treat any access as a bonus rather than the reason to pay. Hiding traffic on untrusted networks is the more dependable benefit.
How the encrypted tunnel works
The mechanism behind these effects is simple. A VPN creates an encrypted tunnel between your device and a remote server operated by a VPN provider, as the Internet Society describes it. Your traffic travels through that tunnel and leaves from the server, which is why websites see the server’s IP address.
Encryption is what stops intermediaries, such as network operators, from reading your data. The Internet Society adds that the tunnel provides integrity and authentication as well as secrecy. The protection applies between your device and the VPN server only. Once traffic leaves the server and travels on to the website, the VPN’s tunnel no longer covers it, which is another reason HTTPS still matters.
Choosing a VPN provider
Because the provider sees your traffic, choosing one is mainly a question of trust. The Internet Society warns that untrustworthy VPN services may use weak encryption, keep activity logs, inject ads or malware, or sell user data. It adds that trustworthy providers aggressively minimize the retention of connection metadata.
- Check logging and data practices. Read the privacy policy for what is kept about your connections and what is shared. The EFF reminds readers that a claim is not a guarantee, so verify what a provider says about itself against its policy.
- Be careful with free services. The security.org report found 43% of VPN users relied on a free service in 2026, up from 28% in 2025. A free service still has to be funded, so check how it makes money against its privacy policy before sending all your traffic through it.
- Compare against real prices. Among paid users in the same survey, the average reported cost was $21 per month. Treat that as a reported average, not a target.
- Match the tool to the threat. If your goal is untrusted Wi-Fi, a reputable VPN suits you. If your goal is hiding who you are, a VPN alone does not meet it.
- Fix the basics first. Strong passwords, two-factor authentication and up-to-date software come before a subscription.
Frequently asked questions
Is using a VPN legal?
VPNs are legal in many countries, but not all, according to AVG’s overview. Some countries restrict or forbid certain content, so check the rules where you are before relying on one while travelling.
Can a VPN replace antivirus software?
No. The security.org report found that 36% of respondents incorrectly believed a VPN alone can protect a device from viruses or malware. A VPN does not replace antivirus software.
Is there anything better than a VPN for anonymity?
The EFF says that if you are interested in increased anonymity, Tor is a better solution than a VPN.
Who relies on VPNs besides everyday users?
The Internet Society notes that businesses use VPNs to protect commercially sensitive information, and that journalists and domestic violence survivors also rely on them for protection.
