What VPNs Can and Can’t Hide From Websites and ISPs

A VPN hides your IP address, location, and browsing activity from websites and your internet provider by encrypting your traffic and routing it through a remote server. However, it cannot hide the fact that you are using a VPN, your device’s hardware identifiers, or your activity on sites that require you to log in. This article explains exactly what a VPN protects, what it doesn’t, and how to close the gaps.

How a VPN Works

A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a server operated by the VPN company. When you connect, your device and the VPN server agree on encryption keys, and all data passing between them is scrambled. Websites and your internet service provider (ISP) see only the VPN server’s IP address and the encrypted data stream, not your real IP or the content of your traffic.

This basic mechanism is what provides most of the privacy benefits. But the same mechanism also creates a new party in the chain: the VPN provider itself. That provider can see everything you send, so your privacy is only as good as the provider’s logging policy and security practices.

What a VPN Hides From Websites

Websites see your IP address, which reveals your approximate location and can be used to track you across sessions. A VPN replaces that with the server’s IP, so the site sees the VPN’s location instead. This is why people use VPNs to access geo-restricted content or to avoid location-based price discrimination.

Beyond the IP, a VPN also hides your DNS queries. Normally, your browser asks a DNS resolver to translate a domain name into an IP address, and that query can be intercepted. With a VPN, DNS resolution happens inside the encrypted tunnel, so the site and your ISP cannot see which domains you are looking up.

What a VPN does not hide from websites:

Your login identity: If you log into Google, Facebook, or any service, the site knows who you are regardless of your IP.
Browser fingerprints: Your browser’s user agent, screen resolution, installed fonts, and plugins create a unique fingerprint that can identify you even without an IP.
Cookies and tracking scripts: Sites can still set cookies and run tracking pixels; a VPN does not block these.
Your real identity if you use it: If you enter your name, email, or payment details, the site knows them.

What a VPN Hides From Your Internet Provider

Your ISP is the company that provides your internet connection. Without a VPN, it can see every website you visit, every app you use, and the amount of data each consumes. It can also sell this data to advertisers or hand it to authorities. A VPN encrypts all that traffic, so the ISP only sees that you are connected to a VPN server and how much data you are sending. It cannot see which sites you visit or what you do on them.

However, the ISP can still see:

That you are using a VPN: VPN connections have recognizable patterns (specific ports, protocols, and server IPs) that ISPs can detect.
The time and duration of your VPN sessions: Even if the content is hidden, the metadata of when you connect and for how long is visible.
Your device’s MAC address: This is a hardware identifier that your ISP can see on your local network, though it is not transmitted over the internet.

What a VPN Cannot Hide at All

There are several things that a VPN simply cannot protect, no matter how good it is:

Your activity after you log in: If you log into a service, that service records your actions. A VPN does not anonymize you to the sites you are logged into.
Your device’s hardware IDs: Your phone’s IMEI, your computer’s serial number, and your MAC address can be used to identify you, and a VPN does not change them.
Your physical location if you use Wi-Fi: Your Wi-Fi network’s SSID and the physical location of the router can be triangulated, and a VPN does not hide your physical presence.
Malware and phishing: A VPN does not protect you from malicious websites or infected downloads. It only encrypts the connection.

Common Misconceptions

One common myth is that a VPN makes you completely anonymous. In reality, anonymity is a spectrum. A VPN hides your IP and encrypts your traffic, but if you log into accounts, use the same browser fingerprint, or pay with a credit card, you are still identifiable. Another myth is that a VPN protects you from all hacking. It does not; it only encrypts data in transit. If you download malware, it can still infect your device.

Another misconception is that a VPN is illegal. In most countries, using a VPN is legal, though some countries restrict or ban them. Always check your local laws. Finally, many people believe that a VPN slows down your internet significantly. While there is some overhead, modern VPNs are fast enough for most activities, and the slowdown is often negligible.

How to Choose a VPN That Fits Your Needs

Choosing a VPN depends on what you want to hide and from whom. Here are the key factors to consider:

Logging policy: Look for a provider that states it does not log your browsing history or connection timestamps. Be wary of providers that claim “no logs” but have been caught sharing data.
Jurisdiction: The country where the VPN company is based matters. Some countries have mandatory data retention laws that force companies to log.
Encryption and protocols: Look for OpenVPN or WireGuard protocols, which are considered secure. Avoid PPTP, which is outdated.
Kill switch: This feature stops all internet traffic if the VPN connection drops, preventing your real IP from leaking.
Server locations: If you need to appear in a specific country, make sure the VPN has servers there.

Limitations and Risks of Using a VPN

Using a VPN has its limitations. Some websites and streaming services actively block VPN IP addresses, so you may not be able to access them. Also, because your traffic is routed through a third-party server, that server can be a bottleneck, causing slower speeds. There is also the risk that the VPN provider itself is malicious or compromised. A rogue VPN could inject ads, steal data, or sell your information. Always use a reputable provider.

Another risk is that a VPN can give you a false sense of security. You might think you are fully anonymous and then log into your bank account or social media, which defeats the purpose. Finally, some VPNs are free, but they often make money by selling your data. Free VPNs are generally not recommended for privacy-sensitive activities.

Alternatives to a VPN

If a VPN does not meet your needs, there are alternatives:

Tor Browser: Routes your traffic through multiple volunteer-run relays, making it very hard to trace. It is slower but more anonymous.
Proxy servers: These hide your IP but do not encrypt your traffic. They are useful for bypassing geo-blocks but not for privacy.
DNS-over-HTTPS: Encrypts your DNS queries, but does not hide your IP or encrypt your traffic.
Private browsing mode: This only prevents your browser from storing history locally; it does not hide your activity from websites or your ISP.

Frequently Asked Questions

Can my internet provider see what I do on a VPN?

No, your ISP cannot see the content of your traffic when you use a VPN. It can only see that you are connected to a VPN server and how much data you are sending. It cannot see which websites you visit or what you do on them.

Can websites detect that I am using a VPN?

Yes, many websites can detect VPN usage by checking IP addresses against known VPN ranges or by analyzing connection patterns. They may block you or show a CAPTCHA. Some sites, like streaming services, actively block VPN IPs to enforce geo-restrictions.

Does a VPN hide my search history from my ISP?

Yes, a VPN encrypts your DNS queries and traffic, so your ISP cannot see your search history. However, if you are logged into a search engine like Google, the search engine itself can still record your searches.

Can a VPN protect me from malware?

No, a VPN does not protect against malware. It only encrypts your connection. You still need antivirus software and safe browsing habits to avoid malicious downloads.

Is using a VPN legal?

In most countries, using a VPN is legal. However, some countries, such as China, Russia, and Iran, have restrictions or bans on VPN usage. Always check your local laws before using a VPN.

Why is my VPN not working with some websites?

Some websites block known VPN IP addresses to prevent abuse or to enforce geo-restrictions. Try switching to a different server, or use a different VPN provider. If you need to access a site that blocks VPNs, you may need to use a residential proxy or a different tool.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.

More cards in this drawer

The whole Numbers and Powers drawer →