SPONSORED · PRIVATE EMAIL

Proton Mail

Compare encryption scope, account recovery, and migration needs before switching.

Vanishio may earn a commission if you buy through this link.

Explore Proton Mail
STEP-BY-STEP GUIDE

What a VPN Actually Hides (and What It Does Not)

See how a VPN changes network visibility, what the VPN provider can observe, and why logins and browser tracking still matter.

◷ 12 minBeginnerBy Vanishio EditorialPublished Oct 30, 2026Substantive update: Oct 31, 2026
See how a VPN changes network visibility, what the VPN provider can observe, and why logins and browser tracking still matter.

What changes when a VPN is on

A VPN creates an encrypted connection from your device to a VPN server. Your local network or internet provider sees a connection to the VPN, while websites generally see the VPN server’s public IP address rather than your home address. This can be useful on networks you do not control or when you want to reduce direct IP exposure to a website.

The provider becomes part of the trust model

The VPN provider operates the other end of that connection and may be able to observe connection metadata. Review its privacy policy, logging claims, ownership, jurisdiction, technical documentation, and any independent assessment. An audit can examine a defined scope at a point in time; it is not proof that every system or future operation is risk-free.

What a VPN does not hide

A VPN does not erase browser cookies, stop a service from recognizing an account you sign into, remove information you post, or protect a device with malware. Browser fingerprinting and payment details may still link activity. A VPN also cannot guarantee anonymity or prevent every form of tracking.

Set it up with realistic expectations

Install the provider’s official app, enable current security features, and use a supported protocol. Check how the app handles dropped connections and whether DNS traffic is protected. Avoid free services with unclear ownership or data practices. The word “no logs” is a provider claim to evaluate, not something to infer from a VPN icon.

A VPN is one layer. Combine it with current software, unique passwords, multifactor authentication and sensible browser settings when those steps match your needs. For sensitive work, follow your organization’s security rules rather than installing an unapproved VPN.

Step-by-step plan

  1. Understand the basic network path

    A VPN typically creates an encrypted tunnel between your device and the VPN provider, so your internet access provider does not directly see each destination in the same way.

  2. Understand what websites can still see

    Websites can still recognize account logins, cookies, browser properties and information you share.

  3. Compare provider policies and technical evidence

    Look for current independent assessments and documented handling of connection information.

  4. Use layered protections

    A tracker-blocking browser, unique passwords, and account security habits can address problems a VPN cannot.

Make these actions your own

Your checklist is saved locally in your browser; no account or identity scan is required.

Open privacy checklist →

Frequently asked questions

Can websites still identify me while I use a VPN?

Yes. Signing in, cookies, browser characteristics and information you provide can identify or link your activity.

Does a no-logs claim mean a provider stores no data at all?

Not necessarily. Read what the provider says it collects for accounts, payments, support, security and service operation, and review the scope of any external assessment.

Sources and further reading

Review source dates and policies before acting; external pages may change.

  1. ssd.eff.org ↗
  2. protonvpn.com ↗
  3. protonvpn.com ↗