What a VPN Can—and Cannot—Do for Your Privacy

Understand the tunnel

A virtual private network routes some or all of your device's internet traffic through a VPN provider's servers. It can be useful for connecting to a workplace network or protecting traffic on an untrusted local network. It also shifts trust: your internet provider may see less about the destination, while the VPN provider may see connection metadata. HTTPS still matters because it protects content between your browser and a website.

Read beyond the slogan

Before paying, inspect the provider's privacy policy, logging claims, ownership, independent audits if available, supported devices, and cancellation terms. Marketing phrases such as “military grade” or “complete anonymity” do not prove that a service is safe. A VPN does not stop phishing, malware, tracking by a signed-in account, or information you voluntarily submit. Free services also deserve scrutiny about how they fund operations.

Choose based on the problem

For remote work, use the VPN approved by your employer. For travel, weigh a reputable provider against cellular data and other practical options. Keep account passwords unique, use multifactor authentication, and leave software protections on whether the VPN is connected or not. If privacy is your goal, identify which observer you are concerned about and compare the provider's actual behavior with that threat model.

Sources and further reading

• FTC: Online Security and Privacy
• CISA: Securing Wireless Networks