A VPN (virtual private network) creates an encrypted tunnel between your device and a server run by the VPN provider. Everything you do online goes through that tunnel, so websites see the VPN server's IP address instead of yours, and your internet provider sees only encrypted traffic to the VPN.
How a VPN works
- The VPN app on your device connects to a server you choose, for example in Frankfurt.
- It encrypts all traffic before it leaves your device, using a protocol such as WireGuard or OpenVPN.
- The VPN server decrypts the traffic and sends it to the website.
- The website answers the VPN server, which sends the answer back through the tunnel.
To the website, the request came from Frankfurt. Check it: connect to a VPN and open our home page.
What a VPN protects
- Your IP address and location from the websites and apps you use.
- Your browsing from your internet provider or the owner of a public Wi-Fi network. They see that you use a VPN, but not which sites you visit.
- Your data on untrusted networks, such as hotel or café Wi-Fi. See is public Wi-Fi safe.
What a VPN does not protect
- Accounts you log in to. If you sign in to Google or Facebook, they know who you are.
- Cookies and fingerprinting. Trackers can still recognize your browser. See browser fingerprinting.
- Malware and phishing. A VPN is not antivirus.
- The VPN provider itself. It can see your traffic in place of your internet provider, so you must trust it.
Common reasons to use a VPN
| Reason | Does a VPN help? |
|---|---|
| Privacy from your ISP | Yes |
| Safe public Wi-Fi | Yes |
| Hiding your IP from websites | Yes |
| Watching content from another country | Often, but many services block VPNs |
| Avoiding throttling of specific apps | Sometimes |
| Complete anonymity | No, use Tor |
How to choose a VPN
- Independent no-logs audit. Look for a provider whose no-logs claim was checked by an outside firm.
- Modern protocol: WireGuard or a WireGuard-based protocol is fast and secure.
- Leak protection and a kill switch, which blocks traffic if the tunnel drops.
- IPv6 support or IPv6 blocking, so your real IPv6 address cannot leak.
- Jurisdiction and ownership that you are comfortable with.
- Avoid most free VPNs. Running servers costs money; free services often pay for it with ads or by selling data.
Test your VPN
Run the one-click VPN Leak Test, or check each part yourself after you connect:
- Check that our home page shows the VPN's IP and city.
- Run the WebRTC leak test.
- Use the VPN & Proxy Check to see whether websites can tell you use a VPN.
- Read about DNS leaks and make sure your VPN app prevents them.
Frequently asked questions
Does a VPN slow down my internet?
A little. Encryption and the extra distance to the server usually cost 10–30 percent of your speed, less with a nearby server and WireGuard.
Can I be tracked when using a VPN?
Yes, through accounts, cookies and browser fingerprinting. A VPN hides your IP, not your identity.
Should I leave my VPN on all the time?
On public Wi-Fi, yes. At home it is a matter of preference; some banking and streaming sites may ask for extra verification when you use a VPN.