What exactly does a VPN do?

What a VPN actually does

Think of a VPN as a sealed tunnel between your device and a server run by the VPN provider. Everything you send goes through that tunnel, wrapped in encryption✕Encryption turns readable data into unreadable code using a key. Only someone with the right key can read it again — the basis of secure communication and storage.More in the glossary →. Two practical effects follow from this.

First, encryption means that anyone able to watch your connection — the café Wi-Fi owner, other people on the network, or your internet service provider — sees only scrambled data. They can tell you are connected to a VPN, but not what you are doing inside it.

Second, IP masking means the websites you visit see the VPN server’s address instead of your own. Your rough location and the identity your ISP assigns you are hidden from the sites you load, which reduces IP-based tracking and lets you connect through a server in another country.

To understand where the tunnel begins and ends, it helps to know that the protection covers the path between you and the VPN server. Beyond that server, your traffic continues to its destination as normal.

What a VPN does not do

This is where accuracy matters. A VPN is a privacy tool, not an invisibility cloak.

• It does not make you anonymous. The VPN provider itself can see your connection, which is why a trustworthy, audited no-logs policy✕A no-logs policy means a VPN provider keeps no records of your online activity. That way there's nothing to hand over or steal in a breach.More in the glossary → matters.
• It does not replace antivirus✕An antivirus is a program that detects, blocks and removes malicious software. Modern ones combine known signatures with behavior analysis.More in the glossary →. It encrypts traffic; it does not remove malware✕Malware (from "malicious software") is the umbrella term for any harmful software — viruses, trojans, ransomware, spyware — that damages, spies on, or hijacks devices.More in the glossary → you download or block every malicious site.
• It does not hide you from accounts you log into. Sign into Google or Facebook through a VPN and they still know it is you.
• It does not guarantee you can watch every foreign catalogue — streaming services actively detect and block VPN addresses.

A VPN raises your baseline privacy and security. It does not turn risky behavior into safe behavior.

What is the difference between a VPN and a VPN client?

They are two parts of the same system. The VPN is the service and its network of servers; the VPN client (also called the app) is the software on your phone or computer that opens the encrypted tunnel to those servers. When you download a provider’s app and press connect, you are running the client. Most people use the words interchangeably, but strictly the client is the tool and the VPN is the service it connects to.

Does the Netflix VPN trick still work?

Sometimes, but it is far less reliable than it used to be. Streaming platforms now detect large numbers of connections coming from known VPN server addresses and block or restrict them, and their terms of service do not permit using a VPN to reach another region’s catalogue. Premium providers rotate their addresses to keep working, but no VPN can promise a specific catalogue will always open. If streaming access is your main goal, treat it as a maybe, not a guarantee.

Does a VPN hide my browsing from my internet provider?

Yes, the contents. With the tunnel active, your ISP can see that you are connected to a VPN and how much data you move, but not the individual sites or pages inside the tunnel. That is one of the most common reasons people use a VPN. It does not hide your activity from the VPN provider itself, so the provider’s logging policy is what you are really trusting.

The bottom line

A VPN encrypts your connection and swaps your visible IP address, which is genuinely useful for privacy on untrusted networks and against IP-based tracking. Judge one on its no-logs record, independent audits, speed and server coverage rather than marketing claims. This comparison ranks the providers that hold up best.