VPN marketing is everywhere, and most of it is exaggerated. "Hackers can steal your data on public Wi-Fi!" — technically possible, but far less common than implied. "Complete online anonymity!" — not how it works. Before spending $5–15/month on a subscription, it helps to understand what a VPN actually does and what it doesn't.
How a VPN Works (The Short Version)
A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a server run by the VPN provider. All your internet traffic passes through this tunnel. From the outside, your traffic appears to come from the VPN server's IP address, not your own.
Two things happen as a result:
- Your ISP can't see what you're browsing — they only see that you're connected to a VPN server.
- Websites you visit see the VPN server's IP address, not yours — which can make it appear you're in a different location.
That's genuinely the core of it. Everything else — "military-grade encryption", "no-log policy", "fastest servers" — are either marketing terms for standard features or claims that are difficult to verify.
What a VPN Actually Protects You From
- ISP snooping: Without a VPN, your ISP sees every site you visit. In many countries ISPs sell this data to advertisers or are required to retain it. A VPN prevents this.
- Network-level surveillance: On your employer's or school's network, the network admin can see your traffic. A VPN tunnels past this (though this may violate their policy).
- Public Wi-Fi risks: On an open network, traffic that isn't HTTPS can theoretically be intercepted. Most modern sites use HTTPS anyway, but a VPN adds a second layer.
- Geo-restrictions: A VPN server in a different country lets you access content blocked in your region — the most practical use case for many users.
What a VPN Does NOT Protect You From
This is the part most VPN ads skip.
- Malware and phishing: A VPN doesn't scan for viruses or stop you from clicking a malicious link. You need separate antivirus software for that.
- Website tracking: Google, Facebook, and advertisers track you through cookies, fingerprinting, and logged-in accounts — not your IP address. A VPN does almost nothing to stop this.
- Complete anonymity: Your VPN provider can see your traffic. If they keep logs (and many do despite claims otherwise), that data exists. You're shifting trust from your ISP to your VPN provider.
- Legal protection: Using a VPN doesn't make illegal activity legal.
Free vs. Paid VPNs
Free VPNs are almost always the wrong choice. Running VPN infrastructure is expensive, so free services recoup costs by logging and selling your browsing data — the exact thing you're trying to protect. Some free VPN apps have been caught injecting ads or bundling malware.
The exception: Proton VPN's free tier is genuinely free and has been independently audited. It's slower than the paid version and limited to one device, but it's trustworthy for occasional use.
Among paid options, Mullvad ($5/month, accepts cash, no account email required) and ProtonVPN are consistently recommended by independent security researchers for their privacy practices. Both have published independent audits.
Do You Actually Need a VPN?
Honest answer: it depends on your threat model.
You probably benefit from a VPN if:
- You regularly use untrusted public Wi-Fi (cafes, airports, hotels)
- You're in a country with significant ISP surveillance or internet censorship
- You want to access geo-blocked streaming content
- You'd rather pay $5/month than have your ISP build a browsing profile on you
A VPN is probably not necessary if:
- You only browse from home on a trusted connection
- Your main concern is website tracking (a VPN barely helps — use uBlock Origin and Firefox instead)
- You want to be completely anonymous online (nothing achieves this reliably)
Bottom Line
A VPN is a legitimate privacy tool with real but limited benefits. It protects your traffic from your ISP and local network observers. It does not protect you from tracking, malware, or your VPN provider itself. If you use public Wi-Fi regularly or live somewhere with significant ISP surveillance, a reputable paid VPN is worth the cost. For most home users, it's optional.