What a VPN is actually for (and what it isn’t)

The short version

A VPN (virtual private network) builds an encrypted tunnel between your device and a server run by the provider. Your traffic then hits the internet from that server, with a different IP address. It’s mainly useful to: shrink what the local network can see (sketchy Wi‑Fi, sometimes your ISP), change your exit point, and isolate some uses a bit better. It does not make you anonymous, invisible to sites you log into, or immune to phishing.

What a VPN actually does

Without a VPN: your ISP (and sometimes the venue Wi‑Fi) can see which domains you visit; sites often see an IP tied to your area.

With a VPN:

• the path device → VPN server is encrypted
• the website mostly sees the VPN’s IP, not yours
• the local network mostly sees a connection to the VPN, not every destination (DNS — the service that turns a site name into an address — config matters)

Useful. Not magic.

When it makes sense

• Public Wi‑Fi / hotel / airport: an extra layer on a shared network
• Reducing local network snooping: fewer easy details for the hotspot operator
• Remote work access: the classic enterprise use (office resources over a tunnel)
• Bypassing geographic blocks (streaming, sites) — hit-or-miss, and sometimes against terms of service
• Contexts where you want less exposure of your home IP — with eyes open about limits

What a VPN does not do (despite the ads)

• Not anonymity. You have an account, a payment, possible logs. Cookies, Google logins, and browser fingerprints still re-identify you.
• Not antivirus. It won’t stop a malicious attachment or a scam site (unless separate add-ons — usually marketing).
• Not full ad-tracking protection. Web trackers still exist.
• Not “unhackable.” You move some trust to the VPN provider. A bad one just changes who might watch.
• Not a legal shield. Illegal activity is still illegal; a VPN isn’t a courtroom cape.

The EFF’s guidance is blunt: pick a VPN for a specific need, not a “100% privacy” fantasy.

How to choose without getting played

Useful criteria:

1. Credible logging policy (ideally audited) — “no logs” alone isn’t enough
2. Jurisdiction and reputation (breach history, transparency)
3. A kill switch (cuts internet if the tunnel drops)
4. Maintained apps, modern protocols (WireGuard / OpenVPN, etc.)
5. Clear payment and support — be wary of free VPNs that monetize your data

“Unlimited free” usually means someone else is the product.

To compare options without brochure jargon, BuzzDecoded also keeps a tools page: /en/tools/vpn.

VPN vs private DNS, HTTPS, Tor (briefly)

Tool	What it mainly changes	What it does not replace
HTTPS / TLS	Encrypts content between you and the site (bank, mail…)	Poorly hides metadata / domains seen by the local network
Private DNS (DoH/DoT, chosen resolver)	Limits what your ISP / hotspot sees of your name lookups	Doesn’t change your public IP; doesn’t encrypt all traffic
VPN	Tunnel + different exit IP; hides detail well from the local network	Strong anonymity, web anti-tracking, antivirus
Tor	Stronger anonymity via multiple relays; useful for some high-risk uses	Often slower; a poor default for everyday streaming / comfort

Realistic priority for many people: HTTPS everywhere (already true on most sites) → password / MFA hygiene → private DNS if you want less DNS leakage → VPN on hostile networks or for an IP need → Tor only when you clearly need higher anonymity.

A simple rule

Ask: who am I trying to reduce exposure from today?
Café Wi‑Fi? Your ISP? A website? A government? An ad tracker?
A VPN answers part of that list — not all of it. Sometimes HTTPS everywhere, a password manager, and fewer junk accounts beat a VPN subscription bought after one scary Instagram reel.

If you do subscribe, install it before you need it, test the kill switch once, and decide which apps use the tunnel (whole device vs browser-only). A VPN you forget how to enable at the airport is just another icon. Pair it with basic hygiene: updates, unique passwords, and skepticism toward fake hotspot names — the boring combo that prevents most real-world messes.

Going further

• EFF — Choosing a VPN: concrete criteria, marketing stripped out.
• CNIL: privacy framing and practical guidance (France).
• CISA: security basics for people and orgs.
• FTC-style consumer guides: network hygiene where a VPN is one tool among several.