What a VPN Actually Hides (and What It Doesn't)

VPN marketing tends to promise "total privacy" and "complete anonymity." The actual technology does something narrower — and understanding exactly what it protects is more useful than the marketing copy.

What it does: reroutes and encrypts

A VPN creates an encrypted tunnel from your device to the VPN provider's server, and all your traffic exits from there instead of your real connection. Two direct consequences: your ISP can see that you're connected to a VPN, but not what's inside the tunnel, and any website you visit sees the VPN server's IP address, not yours.

What it doesn't do: make you anonymous

Once your traffic leaves the VPN server and reaches the actual website, it's no longer encrypted by the VPN — the site sees it exactly as it would without one, minus your real IP. If you log into an account, that site knows exactly who you are regardless of which IP address the request came from. A VPN hides your network location, not your identity once you identify yourself.

What it doesn't touch: cookies and browser fingerprinting

Tracking cookies, browser fingerprinting, and login-based tracking all work independently of your IP address. A site can still recognize you across visits through these methods even while your IP is masked by a VPN — that's a browser-level problem, not a network-level one, and needs browser-level tools (like blocking third-party cookies) to address.

Where a VPN genuinely helps

• On public Wi-Fi, where anyone on the same network could otherwise snoop unencrypted traffic.
• Hiding your general location/IP from sites and your ISP specifically.
• Accessing content gated by region, within whatever the service's terms allow.