VPN Privacy Guide: What It Hides and What It Does Not

A VPN can mask your public IP address and protect traffic between your device and the VPN server. It does not make you anonymous, remove your browsing history or make a suspicious website safe.

If privacy is your reason for using one, start with what you want to protect and who you want to protect it from. That is more useful than a promise of “total protection.”

Reviewed: October 18, 2026.

What a VPN actually does

A virtual private network routes selected internet traffic through a VPN server. With a properly configured encrypted connection, your internet provider can see the connection to the VPN, while the sites you visit generally see the VPN server’s public IP address.

This changes who you trust. The VPN provider is in a position to observe information about your connection. HTTPS still matters for protecting the contents of communications between your browser and a website. The Electronic Frontier Foundation explains this distinction in its guide to encryption.

VPN, HTTPS and Incognito do different jobs

See Chrome’s explanation of Incognito and the Chromium team’s explanation of connection security for those limits.

What a VPN does not hide or prevent

• Your identity when you sign in. A service still knows which account you use.
• Other tracking signals. Cookies, browser fingerprinting and location permissions can reveal information independently of your public IP address.
• Information you submit. A form still receives the email address, name or payment details you enter.
• Scams and unsafe software. A VPN cannot undo a payment you authorize or make a malicious download harmless.
• Activity recorded on the device. It is not a substitute for device security, and it does not neutralize monitoring software on a managed work or school device.

The EFF’s VPN guide warns against treating VPNs as complete anonymity or security tools. Think of a VPN as one network-privacy measure with a specific job.

Questions to ask before choosing a provider

The FTC recommends checking the developer, permissions, encryption and data-sharing practices. Use those questions before relying on an app’s advertising.

• Who operates it? Look for an identifiable company, a clear privacy policy and a working support route.
• What does it retain? Read what the policy says about connection records, browsing activity and account information. “No logs” needs a specific explanation.
• What was audited? Check the date, scope and published findings. An audit is evidence about what was checked at that time, not a permanent guarantee.
• What permissions does it request? Question access that has no clear connection to the service you need.
• What does it cost later? Compare the renewal price, billing period, cancellation method and refund terms, not just the introductory monthly equivalent.

Free and paid services both deserve scrutiny. Price alone cannot establish trustworthiness.

Use privacy tools without dropping the basics

Keep your browser, operating system and VPN app updated. Install apps through the provider’s official distribution route. Use unique passwords and two-factor authentication where available. Deny unnecessary site permissions and take browser security warnings seriously.

Read the provider’s instructions to understand which apps and traffic its connection covers. A setting that excludes an app from the VPN changes the protection for that app. Do not assume that seeing a VPN icon means every connection on every device is covered.

For suspicious pop-ups, downloads or billing requests, use our adult website safety checklist. If your own images or work have been reposted, our content-removal guide covers reporting options.

Common questions

Does a VPN make public Wi-Fi completely safe?

No. It can protect traffic carried in its encrypted tunnel, but it does not solve phishing, malicious software or problems on your device. HTTPS already protects much web traffic; the FTC’s public Wi-Fi guidance explains why the older claim that every public network exposes everything is misleading.

Does it guarantee access to every website?

No. Availability depends on the service and network. A VPN does not replace an account, subscription or required verification.

Will it erase what I did before connecting?

No. Existing browser history, downloaded files, account records and billing records do not disappear.

The Dude’s take: Choose a privacy tool for what it can actually do. You deserve clear limits and evidence, not an invisibility promise.