VPN ads promise total privacy and security. The reality is narrower, and whether you need one depends on how you use the internet.
A virtual private network creates an encrypted tunnel from your device to a server run by the VPN company. From there, your traffic goes out to the internet. That’s useful in some situations and oversold in most ads.
What a VPN does
| A VPN can | A VPN can’t |
|---|---|
| Hide your browsing from your internet provider and from others on the same network | Stop websites and apps tracking you through accounts, cookies and device fingerprinting |
| Mask your IP address from the sites you visit | Make you anonymous |
| Protect you on networks you don’t trust | Protect you from phishing, scams or malware |
The trust question
When you use a VPN, the VPN company is in the position your internet provider used to be: it can see where your traffic goes. The Federal Trade Commission’s advice on VPN apps comes down to research before you trust one:
- Read reviews from independent sources and look into who runs the company.
- Read the privacy policy: what does it log, and does it share data with third parties?
- Check the permissions the app asks for.
- Remember that some VPN apps don’t fully encrypt traffic, and none can promise complete anonymity.
Watch for
“No logs” is a marketing claim unless it’s backed by something checkable, such as an independent audit. Treat bold claims carefully.
HTTPS already does a lot
Most websites, including banks, email and shopping sites, use HTTPS, which encrypts the content of your connection even on public Wi-Fi. A VPN mainly adds privacy about which sites you visit, not protection for the content itself.
When a VPN is worth it
- You often use public or hotel Wi-Fi and want to keep your browsing private from the network.
- You don’t want your internet provider to see which sites you visit.
- You need to reach a home or work network remotely.
If none of these fit, keeping your devices updated and using strong, unique passwords will do more for your security.
Verdict
A VPN is a useful privacy tool, not a security cure-all. If you pay for one, pay for trust: a provider with a clear policy and an independent audit.
Scammers sometimes use fake “security” apps and pop-ups to get access to devices; see how tech support scams work. And for privacy in another new place, read what happens to what you tell AI chatbots.
The essentials
- A VPN encrypts traffic between your device and the VPN company’s servers, hiding it from your internet provider and the local network.
- The VPN company can see that traffic instead, so trust in the provider is the whole point.
- Most websites already use HTTPS encryption, so a VPN adds less than ads suggest.
- A VPN doesn’t stop phishing, malware or tracking through accounts and cookies.
Reader questions
Are free VPNs safe?
Be careful. Running a VPN costs money, and some free services make it back by collecting or sharing data or showing ads. Read the privacy policy before using one.
Are VPNs legal in the United States?
Yes, using a VPN is legal in the U.S. Using one to break a service’s terms, such as streaming catalogs, can still get your account restricted.
Does my employer’s VPN protect my personal browsing?
A work VPN is for reaching work systems. Your employer may be able to see traffic that goes through it, so keep personal browsing off work devices and networks.
We describe how services generally work; features, settings and terms change often, and they differ between companies. This is general information, not legal advice. Check the provider’s current policies and official sources such as FTC.gov.