VPNs: What They Hide and What They Don’t

A VPN hides your device’s public IP address from websites and encrypts traffic between your device and the VPN server, but it does not make you anonymous or hide everything you do. The VPN provider can often see connection details, and websites, apps, employers, and internet services may still identify or track you in other ways.

What a VPN actually does

A virtual private network creates an encrypted connection—often called a tunnel—from your device to a server operated by the VPN service. Your internet traffic travels through that tunnel before reaching its destination. To an ordinary observer on the local network, such as someone using the same café Wi-Fi, the connection is encrypted and its destination is generally less visible than it would be without a VPN.

Websites usually see the VPN server’s public IP address instead of the public IP address assigned to your home or mobile connection. This can reduce exposure of your approximate network location and make it harder for a site to connect activity to your home IP. It does not necessarily hide your actual location from an app that has permission to use GPS, or from information you provide yourself.

Encryption protects traffic in transit between your device and the VPN server. It is not a universal shield for everything stored on your device, nor does it guarantee that the traffic remains secret after it reaches its destination.

What a VPN can hide—and from whom

Privacy depends on who is observing and where in the route they sit. A VPN changes which parties can readily see certain network details; it does not eliminate all observers.

• Your local Wi-Fi operator: A VPN can prevent the network operator from readily reading the contents of traffic inside the tunnel. The operator can still see that your device is connected to a VPN server, along with timing and data-volume patterns.
• Your internet provider: The provider can generally see that you connect to a VPN server and observe the timing and amount of traffic. It may not see the final websites or the contents of properly encrypted traffic inside the tunnel, though technical details and exceptions vary.
• Websites you visit: They usually see the VPN server IP address, not your original public IP. They can still see your account activity, browser characteristics, cookies, and anything you submit.
• A VPN provider: It is the service your traffic passes through. Depending on its infrastructure and the protections used by websites and apps, it may have access to connection metadata and potentially some unencrypted traffic.

When a website uses HTTPS, the connection between your browser and that site is encrypted as well. A VPN does not replace HTTPS: it adds a protected link to the VPN server, while HTTPS protects the connection to the website. Without HTTPS or another form of end-to-end encryption, a VPN provider may be able to read more of the traffic content.

What a VPN does not hide

A VPN does not prevent a website from recognizing you after you sign in. If you use the same account, the service can associate activity with that account regardless of the IP address. Cookies and other browser storage can also preserve identity between visits.

Nor does a VPN automatically stop tracking technologies such as advertising identifiers, browser fingerprinting, or tracking pixels. A browser fingerprint may combine details such as screen size, language, and software settings. A VPN changes the network address but not necessarily those identifying characteristics.

• GPS and device permissions: An app with location permission may obtain location information independently of your IP address.
• Malware or account compromise: A VPN does not remove malicious software or secure a stolen password.
• Files and messages: A VPN does not necessarily encrypt a file saved on your device or a message after it reaches its recipient. App-level encryption and device security matter.
• Traffic patterns: Observers may still infer activity from connection times, volume, or other metadata, even when they cannot read contents.
• Local network exposure: A VPN cannot guarantee protection against every unsafe device, deceptive website, or phishing attempt.

Why people stop trusting VPNs

Using a VPN shifts trust rather than removing the need for trust. Without one, your internet provider can observe certain connection details; with one, the VPN provider becomes an important intermediary. The provider’s privacy policy, technical design, ownership, and operational practices therefore matter.

Claims such as “no logs” need careful interpretation. A provider might say it does not log browsing history while still processing account records, payment information, diagnostic data, or temporary connection details. Policies can change, and marketing statements alone do not prove what a service’s systems retain. Independent audits can offer useful evidence about specific systems or claims, but an audit covers a defined scope and point in time; it is not a guarantee of future behavior.

Free services deserve the same scrutiny as paid ones. Running servers and support costs money, and a service’s business model may involve advertising, data collection, or other practices. That does not mean every free VPN behaves badly, but “free” is not evidence of privacy. Read the policy and check what data is collected, how long it is retained, and whether it is shared.

How to assess a VPN service

Start by deciding what risk you want to reduce. Protecting traffic on an untrusted public network is different from preventing an account-based website from recognizing you or from hiding activity from a VPN provider. No single tool solves all of these problems.

• Read the privacy policy for specific information about connection records, browsing data, device identifiers, diagnostics, and sharing.
• Look for a clear explanation of how the service handles DNS requests, which can otherwise expose domain lookups outside the VPN tunnel.
• Check whether the app offers a kill switch. This feature is intended to block internet traffic if the VPN connection drops, but its behavior can vary by device and configuration.
• Review independent audits and ask what systems and claims they cover, when the work was done, and whether a report is available.
• Test for accidental exposure using reputable IP and DNS leak-checking tools, while remembering that a clean test is not proof of complete anonymity.

A VPN can also reduce speed. Traffic takes an extra route, and encryption and server load can affect performance. A nearby server may be faster than a distant one, but speed is not the only measure of privacy or reliability.

VPNs compared with other privacy tools

HTTPS protects data between an app or browser and a particular online service. It is essential for ordinary web use, but it does not hide your public IP address from that service. A VPN masks that address from the destination site, while the VPN provider can see the address you connect from.

Private or incognito browsing mainly limits what the browser saves locally after a session, such as history and cookies. It does not hide activity from websites, network operators, or a VPN provider. A privacy-focused browser or tracker-blocking settings can reduce some web tracking, but they do not replace encrypted connections.

For stronger account privacy, use distinct accounts where appropriate, review app permissions, limit unnecessary tracking, and secure accounts with unique passwords and multifactor authentication. These steps address risks that a VPN alone cannot.

Frequently Asked Questions

Can my internet provider see what websites I visit if I use a VPN?
Usually, the provider can see that you connected to a VPN server and how much data moved, but not the final destination in the same way it could without the tunnel. VPN configuration, leaks, and other technical details can affect this.

Can websites still track me when I use a VPN?
Yes. Sign-ins, cookies, browser fingerprinting, and information you submit can identify or link your activity even when your IP address is that of a VPN server.

Does a VPN make me anonymous?
No. It can conceal your original IP address from destination websites and protect traffic on some network segments, but the provider and online services may still have identifying information.

Can my VPN provider see my browsing?
The provider is positioned to handle your traffic, so it may see connection metadata and, in some cases, unencrypted content. HTTPS and other end-to-end encryption protect content beyond the VPN server, but the provider’s data practices still matter.

Is a VPN useful on public Wi-Fi?
It can add protection by encrypting traffic between your device and the VPN server. Still use HTTPS, keep your device and apps updated, and avoid suspicious links; a VPN does not make an unsafe site trustworthy.

Related

• Arizona Startups: Key Industries, Hubs and How to Connect
• Bluehost AI Store Dashboard: Setup and Use
• Local LLMs vs Cloud APIs: Privacy, Cost and Speed