# What is a VPN and why is it used: the plain-English version URL: https://webvpn.org/vpn/what-is-a-vpn/ Updated: 2026-09-12 What a VPN is in computer terms, why people use one, whether VPNs hide your IP address, what a VPN cannot do, and how to decide if you need one. No jargon, no pitch. A VPN is an encrypted connection from your device to a server operated by a VPN provider, your employer or yourself, through which all of your internet traffic is routed. It is used to stop the network you are on from seeing your traffic, to hide your IP address from websites, and to appear to be connecting from the server's location. That definition covers the mechanism. Understanding why people use VPNs, and why some of those reasons hold up better than others, requires seeing what actually changes when the tunnel is on. This article explains the pieces, walks through what each party on the network can see before and after, answers the IP address question directly, lists what a VPN cannot do, and ends with a short test for deciding whether you need one. ## What a VPN is, piece by piece The name is a small history lesson. "Virtual private network" originally described a way for a company to connect offices over the public internet as if they were on one private network. The same technology now serves individuals, and the pieces are unchanged. - A client on your device: an app or a built-in operating system feature that builds the tunnel. - A server somewhere else, run by a commercial provider, your company, or you. - A tunnel between them: an encrypted channel inside which all your normal internet traffic travels. The protocol that builds it is usually WireGuard, OpenVPN or IKEv2. - An exit: the server decrypts your traffic and sends it on to the internet using its own IP address, then encrypts the replies and sends them back through the tunnel to you. From your device's point of view, the internet is now reached through the server. From the internet's point of view, you are the server. ## What each party sees before and after The clearest way to understand a VPN is to list who can see what. Without a VPN, your internet provider, or the operator of the Wi-Fi you are using, sees every domain you connect to through DNS lookups and connection metadata, even when the page content is encrypted by HTTPS. Websites see your real IP address and, from it, your approximate location and provider. With a VPN connected, your internet provider sees a single encrypted connection to the VPN server and nothing about its contents or destinations. Websites see the VPN server's IP address and location. The VPN provider sees your real IP address and every destination, which is the same view your ISP used to have. That last point is the whole of VPN trust in one sentence. A VPN does not remove the party that can watch you; it changes who that party is. Whether the change is an improvement depends on whether the VPN operator is more trustworthy than your ISP or the coffee shop, which is why the no-logs guide on this site exists. ## Do VPNs hide your IP address? Yes, from the sites and services you connect to. While the tunnel is up, they receive connections from the server's address, not yours. Location lookups based on IP will place you where the server is. Two qualifications matter. First, this only works if all traffic goes through the tunnel. Leaks through DNS, IPv6 or a browser feature such as WebRTC can expose your real address even with the VPN connected; the DNS leak test guide explains how to check. Second, hiding your IP address is not the same as hiding you. If you log in to an account, the service knows who you are regardless of the address. Cookies and browser fingerprints identify a returning visitor with or without a VPN. The hide-your-IP guide on this site puts the VPN alongside Tor and other options for this specific job. ## Why people use VPNs The honest list of reasons is shorter than VPN advertising suggests, and each item has a limit. - Privacy on untrusted networks. On public Wi-Fi, a VPN stops the network operator and anyone else on the network from seeing your DNS lookups and connection metadata. HTTPS already protects page content; the VPN covers what HTTPS does not. - Privacy from an internet provider. At home, a VPN stops the ISP from logging which sites you visit. It is a real benefit if you distrust your provider, with the trade-off that the VPN provider now holds the same information. - Hiding your IP address. From websites, forums, game servers and anyone who might look up your address. - Appearing to be somewhere else. Services that behave differently by region see the server's location. Whether this is permitted depends on the service's terms. - Remote access. Connecting to a workplace or home network from outside as if you were inside it. This is the original use and still the one where the technology fits best. - Getting past network blocks. On networks that block certain sites or protocols, a VPN can carry the blocked traffic inside the tunnel, as long as the network does not also block the VPN. ## What a VPN cannot do Marketing overstates VPNs constantly, so the limits deserve their own list. - It does not make you anonymous. The provider can see you, and your browser and accounts identify you. - It does not stop malware, phishing or scams. Encrypted traffic to a malicious site is still traffic to a malicious site. - It does not hide you from the sites you log in to, or from the advertising networks that track you with cookies and fingerprinting. - It does not encrypt anything beyond the VPN server. From the server to the website, your traffic is exactly as protected as it would be without a VPN, which usually means HTTPS. - It does not protect other devices in your home unless it runs on the router. - It does not make an insecure connection secure on its own. Many of the "hacker on public Wi-Fi" scenarios were already solved by HTTPS. Anyone selling a VPN as a complete security product is selling something it is not. ## Commercial, workplace and self-hosted VPNs The word covers three different arrangements. A commercial VPN is a subscription to a company that runs servers in many countries; you are trusting that company with your traffic in exchange for privacy from your ISP and a foreign-looking address. A workplace VPN connects your device into an employer's network; here the employer sees everything by design, and the purpose is access, not privacy. A self-hosted VPN is a server you run on a machine at home or on a rented host; it gives you privacy from public Wi-Fi and access to your home network, but no anonymity, because the server's address is yours. Knowing which of the three you are using tells you who can see what. ## A four-question test for whether you need one Answer these in order. - Do you regularly use networks you do not control, such as cafes, hotels, airports or campus Wi-Fi? If yes, a VPN is worth having for those moments. - Do you specifically want your internet provider not to have a record of the sites you visit, and do you trust a VPN company more than the ISP? If yes, a reputable no-logs VPN fits. - Do you need to reach a home or work network from outside? If yes, a VPN is the right tool, and a self-hosted one may be the best fit. - Is your actual goal anonymity, or avoiding tracking by websites? If yes, a VPN alone will disappoint you; read the anonymity guides on this site and consider Tor Browser. If all four are no, you probably do not need a VPN, and installing one adds a company to your life without adding protection. ## What security educators tend to emphasise The framing in this article reflects what independent security educators and standards bodies have said about VPNs for years, and it differs from advertising in predictable ways. Digital-rights organisations that publish surveillance self-defence material describe a VPN as a tool for hiding traffic from your local network and ISP, and are explicit that it shifts trust to the provider rather than eliminating it. They caution readers not to treat a VPN as anonymity. Government cybersecurity agencies that publish consumer guidance on public Wi-Fi typically note that HTTPS already protects most sessions and present a VPN as an additional layer for metadata and unencrypted traffic, not as a requirement for basic safety. Security researchers who have audited VPN apps repeatedly find that the practical failures are leaks and logging, not broken encryption, which is why every guide on this site pairs "install a VPN" with "run a leak test and read the logging policy". ## Where to go from here If you now think a VPN fits your situation, read the safety guide on this site to learn how to judge a provider, and then the platform page for your device to see where the settings live. If your real goal turned out to be hiding your IP address or staying anonymous, start with the hide-your-IP guide instead; it will save you a subscription. ## FAQ Q: What is a VPN in computer terms? A: A VPN, or virtual private network, is software that creates an encrypted connection from your computer or phone to a remote server and routes your internet traffic through it. To the rest of the internet your traffic appears to come from that server. Q: Do VPNs hide my IP address? A: Yes, from the websites and services you connect to. They see the VPN server's IP address instead of yours. Your internet provider still sees your real address but only sees an encrypted connection to the VPN server, and the VPN provider sees both your address and your destinations. Q: Why is a VPN used? A: The common reasons are privacy from an internet provider or public Wi-Fi operator, hiding your IP address from sites, reaching services as if you were in another location, and connecting securely to a workplace or home network from outside. Q: Does a VPN make me anonymous? A: No. It hides your IP address from websites and your traffic from your local network, but the VPN company can see both, and your browser, accounts and habits still identify you. For anonymity, Tor and the practices in the anonymity guides on this site matter more. Q: Is a VPN the same as a proxy? A: They overlap. Both replace your visible IP address. A VPN encrypts all traffic from the device at the operating system level, while a proxy usually handles one application or one browser and may not encrypt anything. The web proxy history on this site explains the difference in practice.