What Is a VPN? A Plain-English Explanation for Non-Techies

The one-sentence version

A VPN is a private tunnel between your device and the internet: everything you send goes in scrambled, comes out at a server somewhere else, and continues from there — so the network you're using can't see where you're going, and the sites you visit can't see where you are.

The version with a picture

Normally your laptop hands each request to whatever network you're on — the café's router, your home router — which passes it to your internet provider, which sends it on to the site. Every one of those steps can see which site you asked for. With a VPN, one more step gets inserted at the very beginning, and it changes what all the others can see.

The café router, the hotel network and your internet provider all sit in the middle — and with the tunnel up, all any of them see is one encrypted stream to one address.

What it hides

• The list of sites you visit, from the network you're on. Your provider, the hotel, the airport — all of them stop getting a running log of your destinations.
• Your real location and address, from the sites you visit. They see the VPN server's address instead.
• Everything, from other people on the same Wi-Fi. Including whoever set up a network named to look like the hotel's.

What it does not hide

This is the part the ads skip, and it's the part that keeps people from being disappointed:

• Anything you're logged into. If you sign into your email, your email provider knows it's you. A different address changes nothing about that.
• Cookies and browser fingerprinting. Ad networks recognise your browser by its own characteristics, not just your address.
• What you type. A VPN does not stop you handing your password to a convincing fake login page.
• Your identity, in any legal sense. A VPN is privacy from the network, not anonymity from the world.

The honest framing is that a VPN moves your traffic out of one company's view and into another's. That's an improvement when the second company's job is privacy and it has been independently audited — and it is not an improvement at all when the second company is free and unaccountable.

VPN vs incognito vs Tor

Three things people use interchangeably that do completely different jobs.

How you actually use one

Much less involved than the explanation suggests. You install an app, sign in, and press one button. The app picks a nearby server unless you choose a country yourself, and from that moment everything on the device goes through the tunnel — every browser, every app, not just the one you're looking at.

Two settings are worth turning on the first day. A kill switch stops your traffic entirely if the VPN connection drops, instead of quietly letting it continue in the clear. Auto-connect on untrusted networks means joining hotel Wi-Fi doesn't depend on you remembering.

How to tell a good one from a bad one

Because a VPN sees everything your network used to, the choice matters more than the feature list suggests. Four things separate the ones worth paying for:

• Has anyone independent checked the no-logs claim? Every provider makes the claim. Only some have had an outside firm examine their systems and publish a report. That audit is the difference between a policy and a promise.
• Which country's laws apply? The provider can be compelled by the courts where it is registered. Somewhere without a mandatory data-retention law is a meaningfully different starting point.
• Do you pay for it? Running servers in a hundred countries is expensive. A free VPN is funding that somehow, and the most common answer is the data you came to protect.
• How many servers, and where? This is a speed question more than a privacy one — a server near you costs you far less than one across an ocean.

Notice what is not on that list: protocol names, encryption bit-counts, and the other specifications VPN sites lead with. Every mainstream provider uses strong, modern encryption. That part is table stakes, and it is not where they differ.

Do you actually need one?

A straight answer, by situation:

• You use hotel, airport or café Wi-Fi. Yes — this is the clearest case, and the one where the benefit is concrete rather than philosophical.
• You'd rather your internet provider not log and monetise your browsing. Yes, with the caveat that you're choosing a different party to trust. Here's what they can actually see.
• You travel and want your own subscriptions to work abroad. Usually — with real limits, covered in our streaming guide.
• You're at home, on your own connection, and don't mind your provider's logs. Then no, not really. That's a legitimate answer and you won't hear it from a VPN advert.