What Is a VPN? Meaning, Uses and What It Cannot Do

A VPN (virtual private network) is a service you use through an app. It wraps all of your device’s internet traffic in an encrypted tunnel to a server the provider runs. Your network and internet provider see only that tunnel. Websites see the server’s IP address instead of yours. It is a privacy tool, not an anonymity tool.

Encryption scrambles data so that only the intended receiver can read it. The tunnel is the encrypted link between your device and the VPN server. An IP address is the number that identifies your internet connection. Sites use it to estimate where you are.

What does VPN stand for?

VPN stands for virtual private network. The name is older than the consumer apps that made it famous. The IETF is the organization that develops internet standards. Its RFC 4026 is a glossary from 2005. It defines a VPN as the use of public or private networks to create groups of users. Those users are separated from other network users and can communicate as if they were on a private network.

Each word in the name has a reason. “Virtual” means the private link runs over a shared network, usually the public internet. “Private” means the traffic is kept apart from everyone else’s, and modern VPNs also encrypt it. “Network” refers to the original job: joining an office network from outside it.

That original job still exists. The UK’s National Cyber Security Centre describes VPNs for organizations as encrypted network connections. They let remote users reach their employer’s services securely. The agency also notes that individuals use VPNs for different reasons.

The consumer VPNs we review use the same technology for the opposite purpose. They do not connect you to a private network. Instead, they connect you to the public internet through the provider’s server. That server then stands between you and everything you visit. This is the meaning of VPN that matters for the rest of this page.

What a VPN does

A consumer VPN does three concrete things.

1. It encrypts the traffic between your device and the VPN server. Internet data travels in small pieces called packets. Whoever runs your network sees encrypted packets flowing to one server, and how much data moves. That might be a coffee shop, a hotel, an employer or your home internet provider. The network operator does not see which sites or apps the packets belong to.
2. It replaces your IP address. Websites and apps see the address of the VPN server. The location they infer from it is the server’s, not yours. Our guide to changing your IP address compares this with other ways to do it.
3. It moves your exit point. Connect to a server in another country and you appear to browse from there. This is the basis of the streaming use case. It is also why Netflix shows the error “You seem to be using a VPN or proxy”. Netflix states that VPNs are not supported on its ad-supported plans or for live events.

Our how a VPN works page explains the mechanics, including tunnels, protocols and DNS. A protocol is the set of rules the app and the server follow to build the tunnel. DNS is the internet’s address book, which turns site names into IP addresses. For a plain list of what a VPN changes and what it leaves alone, see what a VPN does.

What a VPN does not do

The Electronic Frontier Foundation (EFF) is a digital rights group. Its Surveillance Self-Defense guide says VPN advertisements “vastly oversell the benefits of VPNs”. It says VPNs are best suited for one thing: routing your connection through a different network. Four limits follow from that.

• It does not make you anonymous. Sites can still identify you through cookies, logins, device fingerprinting and GPS, whatever your IP address. Cookies are small files a site stores in your browser to recognize you. Fingerprinting recognizes your device from the mix of settings it reveals to every site. A VPN changes one identifier among many. For anonymity, see VPN vs Tor.
• It adds little to HTTPS. HTTPS is the encryption behind the lock icon in your browser. Most web traffic already uses it between your browser and the site. HTTPS hides the content of pages, your login name and your messages. It leaves the metadata visible to the network: the domain names you visit, when, and how much data moves. A VPN hides that metadata from your network and your internet service provider (ISP). It shows all of it to the VPN provider instead.
• It does not stop malware or scams. Malware is software built to harm your device. Some apps include DNS-level blockers for known malicious domains. But a VPN does not scan downloads or stop you typing a password into a fake site.
• It does not change the law. Using a VPN is legal in most countries. What you do through it is judged the same way as without it. Our VPN laws tracker records the exceptions. It also covers the age-verification rules that made this a live question in 2026.

A VPN moves trust. Your ISP can no longer see your browsing, but the VPN provider can. The EFF’s guide says that whoever runs the service will see your traffic. That makes choosing a provider the whole decision.

Who needs a VPN

A VPN earns its fee for people in at least one of these situations.

• You regularly use networks you do not control, such as hotel, airport or conference Wi-Fi. You want the operator to learn nothing about what you do beyond the volume of data.
• You travel and need services that lock themselves to your home country. These range from banking apps to a streaming library you already pay for.
• You live or work somewhere that blocks sites or services. A VPN with obfuscation can get through. Obfuscation disguises VPN traffic so it looks like ordinary web traffic. Some countries have penalties, so check the laws tracker first.
• You do not want your internet provider to hold a record of the domains you visit.
• You want streaming catalogs from another country. You accept that this is the provider’s claim, that services actively block it and that results vary.

A VPN is a poor use of money if your worry is viruses or if you want to be unidentifiable. It is also poor value if you mostly use well-known apps at home, with an ISP you trust. Our page is a VPN worth it weighs the costs and the cases.

What to look for in a VPN

Every provider fact below comes from the provider’s official pages. We recorded them in our data on 31 October 2026.

• A modern protocol. WireGuard, or a protocol based on it, is the default at most providers today. NordVPN’s NordLynx is one example. WireGuard is a newer VPN protocol, and OpenVPN is an older one. Mullvad removed OpenVPN from its servers on 15 January 2026. It now runs WireGuard only. See WireGuard vs OpenVPN.
• A kill switch that is on. A kill switch blocks your internet if the VPN connection drops. Mullvad’s app has one built in. It is on by default and cannot be turned off. ExpressVPN’s Network Lock is on by default on Windows, macOS, Linux and Android, and always on for iOS. It blocks IPv4, IPv6 and DNS traffic outside the tunnel. IPv4 and IPv6 are the older and newer formats of IP address. Many apps leave the feature off until you turn it on. See what a kill switch does.
• A no-logs policy someone has checked. A no-logs policy is a promise not to record what you do online. An outside firm can check that promise in an audit or an assurance engagement. NordVPN has had six no-logs assurance engagements since 2018. Deloitte completed the most recent one on 12 December 2025. Proton VPN has a yearly no-logs audit by Securitum, and the fifth was published in 2026. A policy no one has checked is only a promise. See what “no logs” means.
• A jurisdiction you understand. Jurisdiction is the country whose laws apply to the company. NordVPN operates under Panamanian law, Proton VPN under Swiss law and Mullvad under Swedish law. Sweden is a member of the 14 Eyes intelligence-sharing group. Our Five, Nine and Fourteen Eyes page explains what that does and does not imply.
• The renewal price, not the headline price. On 31 October 2026, NordVPN’s Basic plan cost $3.49 a month on a 27-month term. That is $94.23 up front, and it renews at $139.08 a year. Mullvad charges a flat €5 a month, about $5.60, with no discount for longer terms. Proton VPN’s free tier allows one device and servers in 10 countries, with no streaming support.
• Independent speed data. We have not yet tested speed in our lab. So none of our pages ranks providers by speed. Our methodology explains which fields the score does use.

The limits worth remembering

Two incidents in our data show why the provider matters more than the technology. In October 2024, NordVPN received a binding warrant from the Panamanian prosecutor’s office. It had to hand over the user data it held. Under its policy, that is account data, not browsing activity. In April 2023, Swedish police searched Mullvad’s Gothenburg office with a warrant for customer data. They left with nothing, because Mullvad stored none. Both companies claim no logs, but they held different data about their users.

Expect some friction too. Some sites challenge or block VPN addresses. Banks sometimes treat a foreign IP address as fraud. Features also vary by platform. NordVPN’s macOS and iOS apps use what it calls VPN bypass prevention instead of the Windows app’s kill switch. After you install any VPN, check that it works with our VPN check tool before you rely on it. The rest of the Learn hub has the details behind each feature.

Related

• How does a VPN work?
• Is a VPN worth it?
• VPN vs proxy
• VPN vs Tor
• What “no logs” really means
• What a VPN kill switch does
• All VPN reviews
• Best VPNs for privacy