A VPN (Virtual Private Network) is one of those things everyone has heard of, mostly thanks to adverts on YouTube. But what does it actually do, and do you need one? In this guide I'll explain how a VPN works, what it's good for, and what it can't do, whatever the adverts say.
What is a VPN?
A VPN creates an encrypted tunnel between your device and a server run by the VPN provider. All your internet traffic goes through that tunnel, and websites see the VPN server's IP address instead of yours.
So instead of connecting straight to a website, you connect to the VPN server first, and it fetches things on your behalf.
How does it work?
- You open a VPN app and choose a server location, for example the UK, Ireland or the USA.
- Your traffic is encrypted and sent to that server.
- The VPN server connects to the website or app you're using.
- The reply comes back to the VPN server, which encrypts it and sends it on to you.
The result is that your broadband provider, or whoever runs the Wi-Fi you're on, can see that you're connected to a VPN but not which sites you're visiting. Websites see the VPN's location, not yours.
What a VPN is good for
Public Wi-Fi. Café, hotel and airport Wi-Fi can be poorly secured, and you don't know who's running it. A VPN keeps your traffic private from everyone else on that network.
Hiding your browsing from your broadband provider. Your provider can see which sites you visit. With a VPN, it only sees encrypted traffic going to the VPN.
Watching your own UK services while you're abroad. A VPN can make you appear to be at home. Bear in mind that many streaming services don't allow this in their terms, and some actively block VPNs.
Remote work. Companies have used VPNs for years so staff can reach work systems securely from home or while travelling.
Getting back into your home network. If you run your own VPN server at home, you can reach your own devices from anywhere. I show how in my Raspberry Pi VPN server guide.
What a VPN doesn't do
This is the part the adverts tend to skip:
- It doesn't make you anonymous. If you're logged into Google, Facebook or anything else, they still know it's you. Cookies and browser fingerprinting still work.
- It moves trust, it doesn't remove it. Instead of your broadband provider seeing your traffic, the VPN company can. Choose one you trust.
- It doesn't stop viruses or phishing. Some VPNs block known bad sites, but you still need updates, antivirus and common sense.
- Most of your browsing is already encrypted. Almost every site now uses HTTPS (the padlock in your browser), so on a decent network a VPN adds less than it used to. Its main value is hiding which sites you visit and protecting you on networks you don't trust.
Free vs paid VPNs
Running VPN servers costs money, so if a VPN is free, ask how it's paid for. Some free VPNs have collected and sold user data, or shown extra ads.
- Reputable paid VPNs usually offer faster speeds, more locations and a no-logs policy that's been independently audited.
- Encryption isn't really the difference. Good VPNs, free or paid, use the same standard protocols such as WireGuard and OpenVPN.
- A few trustworthy free tiers exist. For example, Proton VPN has a limited free plan from a company that also sells paid plans.
Well-known paid providers include NordVPN, ExpressVPN, Proton VPN and Surfshark. Whichever you look at, check for an independent audit and read the privacy policy.
Are VPNs legal?
In the UK and most other countries, yes. Using a VPN to do something illegal is still illegal, and using one to get round a service's terms (like a streaming service's region rules) can get your account blocked. A few countries restrict or ban VPNs, so check before you travel.
Do you need one?
- Often on public Wi-Fi? Yes, a VPN is worth having.
- Want to keep your browsing private from your broadband provider? It helps.
- Want to reach your home network while you're out? Set up your own VPN server instead.
- Just browsing at home on your own network? It's nice to have, but not essential.
A VPN is a genuinely useful tool. Just think of it as one layer of protection, not a magic invisibility cloak.
