What Is a VPN and What Does It Actually Do?

You are on hotel WiFi, your phone pops up a VPN app ad, and you wonder whether you need one. So, what is a VPN? A virtual private network is an encrypted connection between your device and a server run by someone else, usually a VPN company or your employer, that carries your internet traffic before it reaches the wider web.

How a VPN Works, Using a Sealed Envelope as the Comparison

The National Institute of Standards and Technology describes a VPN in its NIST glossary as a virtual network built on top of existing physical networks that can provide a secure way to send data. Other definitions on that page add the two working parts: encryption, and "tunneling" links of the virtual network across the real one.

Picture mailing a postcard. Every mail carrier who touches it can read it. Now put that postcard inside a sealed, opaque envelope addressed to a trusted friend in another city, who opens it and mails the postcard onward for you. People handling the envelope along the way see only that you sent something to your friend.

A VPN does roughly the same thing with data:

1. Your device scrambles (encrypts) your traffic before it leaves.
2. The scrambled traffic travels to the VPN server, so the local network sees a connection to that server and little else.
3. The VPN server unwraps it and sends it on to the website or app you asked for.
4. The website sees the VPN server's internet address, not the one your home or coffee shop network gave you.

Two things follow from that comparison. The local network loses its view of your activity, which is the main benefit. But the friend in the other city, the VPN provider, now sits in the position the local network used to hold. You are moving trust, not removing the need for it.

What a VPN Is Used For in Everyday Life

The question people search most after the definition is what a VPN is actually used for. A few situations come up again and again.

Working from public WiFi

Microsoft's support page on how to connect to a VPN in Windows says a VPN connection can help provide a more secure connection, using the example of working from a coffee shop or a similar public place. On a shared network you do not control, the tunnel keeps other people on that network from seeing where your traffic goes.

Reaching your employer's private network

This is the original job of a VPN. Companies run them so staff can reach internal files and tools from home as if they were in the office. Apple's VPN overview for device deployment, written for IT teams, covers the protocols organizations configure on iPhone, iPad and Mac, including IKEv2 and an Always On option that keeps work traffic inside the tunnel.

Keeping your browsing away from the local network

At home, the network operator is your internet provider. A VPN means your provider sees a connection to the VPN server rather than the list of sites you open. Some people want that. Others are happy trusting their provider more than an app company.

Where You Run Into VPNs on Your Phone and Computer

Many readers first meet the word in a settings menu, which explains searches like "what is a VPN on my phone" and "how do I turn it off".

• Android: Google's help page to connect to a VPN on Android puts the controls in the Settings app under Network & internet, then VPN. If your phone lays things out differently, search Settings for "VPN". From there you can add a VPN, connect, or tap the settings icon next to a VPN to turn it off or forget it. Google notes some steps work only on Android 14 and up, and that Pixel 7 and later phones include a built in VPN by Google at no extra cost where available.
• Windows 10 and 11: Microsoft lists the path as Settings, Network & internet, VPN, then Add VPN, where you enter a connection name, server address and sign in details your provider or employer gives you.
• iPhone and Mac: VPN profiles installed by an app or your employer show up in the Settings app. If you see one you never set up, ask whoever manages the device or remove the app that added it.

Seeing a VPN entry is not automatically a sign of trouble. Security apps, ad blockers and work profiles often install one. An entry you cannot explain is worth checking, though, because a VPN profile routes all your traffic through someone else's server. Our guide on how to know if your phone is hacked walks through that kind of check.

Limits of a VPN and the Myths That Oversell It

VPN ads promise a lot. The tunnel itself does something narrower.

Myth: a VPN makes you anonymous

It hides your traffic from the local network and swaps your visible internet address. It does not stop websites from recognizing you when you sign in to your Google, Amazon or social accounts, and it does not erase cookies or other tracking tied to your browser.

Myth: a VPN protects you from scams and malware

Encryption in transit does nothing if you type your password into a fake login page or install a bad file. Those threats arrive through the tunnel just as easily. Learning what phishing looks like and how malware gets onto devices protects you more than any VPN switch.

Myth: a VPN is needed for every website

Most sites already use HTTPS, which encrypts the content between your browser and the site. A VPN adds a second layer that mainly hides which sites you visit from the network you are on. Useful on sketchy WiFi, less so on a home network you secured yourself.

Real limit: you are trusting the provider

Since the provider can see what the local network used to see, picking one is a trust decision. A free app with no clear business model, vague ownership and a long list of permissions is a poor candidate for handling all of your traffic.

What to Do Now That You Know How a VPN Works

Start by deciding what problem you want solved. If it is public WiFi, a VPN from a provider you trust, or one built into your phone, is a sensible habit for those moments. If your employer requires one, use the profile they give you and nothing else for work traffic. If your worry is account takeovers, your time is better spent on the basics in protect your online accounts in 10 minutes and on securing your WiFi router at home.

One final check costs nothing: open your phone's VPN settings today and look at what is listed. If every entry is something you recognize, you are fine. If not, you now know exactly what that line in your settings can see. For more plain English security guides, browse our tech section.