What Is a VPN?
A VPN pushes your traffic through an encrypted tunnel, so sites see the VPN server's IP instead of yours. Protocols compared, what it hides, what it does not.
How a VPN Works
A VPN (Virtual Private Network) opens an encrypted tunnel from your device to a server run by the VPN provider. Nobody on the way can read your data, and the sites you visit see the server's address, not yours.
- You pick a VPN server (say, in another country) and connect.
- Your device and the server do a handshake and set up the encrypted tunnel.
- All your traffic goes encrypted through the tunnel to the VPN server.
- The server decrypts it and passes it on to the destination, for example a website.
- The website sees the VPN server's IP address, not yours.
- The reply comes back the same way.
What a VPN hides: your real IP address, the location it points to, your browsing from your ISP, and unencrypted data from anyone listening on the network. What it does not do is make you anonymous. The VPN provider can see your traffic.
VPN Protocols
The protocol decides how the tunnel is built. Each trades speed, security and compatibility a bit differently:
| Protocol | Speed | Security | Notes |
|---|---|---|---|
| WireGuard | Excellent | Strong | Modern, lightweight (~4,000 lines of code), fastest option. Becoming the new standard. |
| OpenVPN | Good | Very strong | Open-source, battle-tested, runs on TCP or UDP. Most widely supported. |
| IKEv2/IPSec | Very good | Strong | Excellent for mobile. Reconnects quickly when switching networks. |
| L2TP/IPSec | Moderate | Moderate | Older protocol, double encapsulation adds overhead. Largely superseded. |
| PPTP | Fast | Weak | Obsolete, known vulnerabilities. Should not be used for security. |
Common VPN Use Cases
- Privacy from your ISP. They cannot see or log which sites you visit.
- Public Wi-Fi. In a cafe, airport or hotel, nobody nearby can read your connection.
- Geo-restricted content. Connect through another country to reach streaming services or sites locked to that region.
- Censorship. Where parts of the internet are blocked, a VPN gets you to them.
- Remote work. Staff reach internal company systems safely from outside the office.
- Less IP-based tracking. A different visible IP makes it harder for advertisers to follow you from site to site.
VPN Limitations
- Not anonymity. The provider sees your traffic. If they keep logs, those can be subpoenaed or stolen in a breach.
- DNS leaks. A badly set up VPN lets DNS queries out of the tunnel and reveals the sites you visit. Our IP Leak Test checks for this.
- WebRTC leaks. A browser can give away your real IP through WebRTC even with the VPN on.
- Speed. Encryption plus the detour through a remote server costs latency and throughput, typically 10 to 30%.
- VPN blocking. Streaming platforms and banks detect and block known VPN addresses.
- No malware protection. A VPN encrypts the connection. It does not scan for viruses or stop phishing sites unless the provider bundles that separately.
Choosing a VPN
- No-logs policy, ideally confirmed by an independent audit.
- Jurisdiction. Where the company is based decides what it can be forced to hand over.
- Protocols. WireGuard or OpenVPN give the best mix of speed and security.
- Kill switch. Cuts all traffic if the tunnel drops, so your real IP never slips out.
- Server locations. More countries means more unblocking options and better speeds nearby.
Once connected, run an IP leak test. IP, DNS and WebRTC should all show the VPN server, not you.
Try it on a real address. Free, no account needed.