What does VPN stand for?
Quick answer
VPN stands for Virtual Private Network. A VPN creates an encrypted connection, often called a tunnel, between your device and a server run by the VPN provider or your organization. Websites then see the VPN server’s IP address instead of yours.
How a VPN works
Setting one up usually takes a few taps in an app, but behind the scenes several things happen.
- You connect to a VPN server using an app or your device’s settings.
- Your device encrypts your internet traffic.
- The encrypted data travels to the VPN server.
- The server decrypts it and sends it on to the website.
- The website sees the VPN server’s IP address, not yours; see what is my IP address.
Common uses
| Use | Example |
|---|---|
| Work | Connecting securely to a company’s internal network from home |
| Public Wi-Fi | Adding protection on café or airport networks |
| Privacy | Hiding browsing activity from the local network or internet provider |
| Travel | Reaching services from home while abroad |
What a VPN doesn’t do
- It doesn’t make you anonymous: the VPN provider can see your traffic, so trust matters.
- It doesn’t stop phishing or malware; see what phishing is.
- Websites can still track you through cookies and logins.
- Most websites already encrypt pages with HTTPS, which protects much of your data even without a VPN; see what HTTPS adds to HTTP.
Choosing a VPN
| Look for | Why |
|---|---|
| No-logs policy, ideally independently audited | Less data stored about you |
| Modern protocols like WireGuard or OpenVPN | Speed and security |
| A reputable company | You’re trusting it with your traffic |
Free VPNs sometimes make money by collecting or selling data, so read their policies carefully.
Is using a VPN legal?
In most countries, yes. Some countries restrict or ban VPNs, and using a VPN to break the law or a service’s terms is still prohibited. Check local rules when traveling.
Business VPNs
Companies have used VPNs since the 1990s to link offices and remote staff securely. Many are now moving to newer “zero trust” systems that check each user and device for every request.
Still curious?
Jump to a random question from the archive.