To take action : 5–15 min to assess your need · Depending on your devices and accounts
Do you really need to pay for a VPN?
Define the need before choosing a subscription.
PatchYourself · Last editorial revision : · Sources
Fictional example: an everyday situation
An advertisement promises Kim invisible browsing through a VPN. She realizes her accounts still identify her when signed in. She instead considers what she wants to hide from the network and which provider she would trust.
The problem
A VPN creates an encrypted tunnel between your device and a server. For traffic actually carried inside it, the local network and internet provider mainly see a VPN connection. Websites generally see the VPN’s exit IP address.
This moves some trust to the VPN provider. HTTPS still protects exchange contents as far as the website: a VPN does not automatically read a valid HTTPS connection’s contents.
What a VPN does not guarantee
A VPN does not make you anonymous when signed into accounts. It does not stop all cookies, fingerprinting, malware or credential theft on fake sites. Blocking features added by some products are separate from the tunnel itself.
A VPN can help access a work network or limit observation on a local network. Do not assume it is sufficient in a targeted-surveillance situation.
What to do now
Step 1: State your need
Are you accessing a work network, limiting network observation or responding to a worrying advertisement? For work, use your organization’s approved service. For personal accounts, unique sign-ins, recovery and updates remain priorities.
Step 2: Examine the provider
Check its operator, funding model, retention, device support and audit limitations. A free service is not necessarily malicious; a paid one does not guarantee privacy.
Compare current prices and renewal terms. Claims such as “no logs” or “total security” should be checked against detailed policies and verifiable evidence.
Step 3: Understand coverage
Some apps may be excluded from the tunnel, and the connection may drop. Review routing settings and what happens after disconnection. Do not install a product asking you to disable device protections without understanding why.
Go further
Public Wi-Fi and HTTPS
HTTPS contents are already encrypted between browser and website, even on public Wi-Fi. A VPN adds a tunnel to its server but does not make a fake site legitimate. See public Wi-Fi.
Encrypted DNS and Tor
Encrypted DNS protects requests to the resolver without hiding every network destination. Tor uses a different model, distributing the path across several relays. These tools address different needs and should be chosen for the situation, not a promise of invisibility.
Sources and verification
References used for this revision. Menus and offers can change; consult the provider’s help for your version.