VPN decision guide · updated 2026-11-03
What a VPN can and cannot hide
A VPN can hide your destination traffic from the local network and ISP when the tunnel works, but shifts visibility to the VPN provider and does not make you anonymous. Updated 2026-11-03.
Short answer: what changes when you use a VPN?
A VPN routes covered device traffic through an encrypted tunnel to a VPN server. Your ISP and local network can generally see that your device connects to the VPN, along with timing and traffic volume, while the VPN provider becomes the intermediary that can observe connection metadata. The websites you contact see the VPN server's public IP address rather than your connection's public IP, but can still identify you through sign-in, cookies, browser signals, or information you provide. This assumes the VPN is connected, configured to cover the traffic, and not leaking it.
What can my ISP or public Wi-Fi network see?
They can see your device's connection to a VPN server and may observe timing, volume, and network metadata. With a functioning encrypted tunnel, they generally cannot read the destinations and contents carried inside that tunnel. This does not cover traffic that bypasses the tunnel, such as excluded split-tunnel apps or traffic exposed by a disconnect, leak, or misconfiguration. Without a VPN, HTTPS still encrypts page contents in transit, though network observers may still learn some connection metadata.
What can the VPN provider see?
The provider receives the tunneled traffic and has to route it onward. It can see your source connection and destination connection metadata; unencrypted HTTP content can be readable at the provider, while HTTPS continues to protect content between your browser and the website. What the provider logs, retains, or shares depends on its service and practices. A VPN therefore moves trust from the ISP or local network to the VPN provider; it does not remove that trust requirement.
What can a website still learn about me?
A site sees the VPN server's exit IP for that connection, not necessarily your home or mobile public IP. It can still recognize an account you sign into, cookies or other browser identifiers, details you submit, and signals from your device or browser. A VPN does not erase existing site data, prevent tracking by itself, or guarantee that a site cannot infer your approximate location.
Does a VPN make me anonymous or stop attacks?
No. A VPN is a network privacy tool, not anonymity, antivirus, phishing protection, or a defense against compromised devices and accounts. It also does not by itself prevent a VPN app or provider from collecting information. The FTC advises checking an app's encryption, permissions, privacy policy, and data sharing; CISA cautions that personal VPNs shift residual risks from the ISP to the VPN provider.
How can I check what my connection reveals?
Check your public IP and DNS resolver with the IP and DNS privacy explainer, then review the privacy checklist for account and browser protections. Repeat checks after connecting, disconnecting, changing networks, or enabling split tunneling. A browser check is a point-in-time observation, not proof that every app or future connection is covered.