Few technology products are marketed with as much exaggeration as the VPN. Adverts promise total anonymity and invulnerability, which sets people up to misunderstand what they bought. A VPN is a genuinely useful tool with a specific job — and knowing its real boundaries is what lets you use it sensibly.
At its core, a VPN (virtual private network) creates an encrypted tunnel between your device and a server run by the VPN provider. Your internet traffic travels through that tunnel, so the network you are on — and your internet provider — sees only encrypted data going to the VPN, not the sites you visit.
What it genuinely protects
A VPN is most valuable on networks you do not control, such as public Wi-Fi in a café or airport. It stops others on that network, and the network operator, from seeing which sites you visit or intercepting unencrypted traffic. It also hides your real IP address from the websites you visit, showing the VPN server's address instead, which can help with region-based access and reduces one crude form of tracking.
For those specific purposes — securing traffic on untrusted networks and masking your IP from destination sites — a reputable VPN does its job well.
What it does not do
A VPN does not make you anonymous. The websites you log into still know exactly who you are, because you signed in. Trackers and cookies still follow you, advertisers still build profiles, and your accounts still identify you. The VPN moves trust rather than removing it: your provider can now see the traffic your internet company used to — so the provider's honesty and no-logs practices matter enormously.
It also does not protect you from malware, phishing or weak passwords. A VPN encrypts the pipe; it does nothing about what you do at either end. Treating it as all-purpose protection is exactly the mistake the marketing encourages.
When one is worth it
A VPN earns its keep if you regularly use public or untrusted networks, want to keep your browsing from your internet provider, or need to access content tied to a different region. If you only ever use your own secured home network and care mainly about account security, your effort is better spent on a password manager and 2FA than on a VPN.
If you do choose one, favour a provider with an independently audited no-logs policy and a clear ownership history, and be wary of "free" VPNs — running a VPN costs money, and a free one is often paying its bills by monetising the very traffic you hoped to protect.