VPNs Explained: What They Do and Don’t Do

what is a vpn and how does it work

Wondering what is a vpn and how does it work? It is an encrypted tunnel from your device to a VPN gateway, shielding your traffic on public networks, but it does not make you fully private.

This explainer is part of our guide to types of technology, and it covers what a VPN does and where it stops.

Item Key fact
What VPN stands for Virtual Private Network
Connection points Two: an entry gateway and an exit node
Where protection ends At the exit node
Partial routing Known as split-tunneling
Original purpose Linking geographically dispersed local networks
VPNs tested by RTINGS 23 VPNs bought and tested

These figures come from a January 2026 Practive Security post and from RTINGS. Services and test counts can change, so check the sources before you rely on them.

How a VPN works, step by step

A Virtual Private Network is a technology used to establish an encrypted channel that connects systems or networks in different physical locations. It still uses the public internet, but it protects and manages the communications it routes, according to the Practive Security post of Jan 11, 2026.

In most cases the VPN software runs on your own device. Here is the usual flow:

  1. You switch on the VPN software on your phone or computer.
  2. Your device reaches an entry gateway run by the VPN provider, which is the point where encryption begins.
  3. Your traffic travels across the public internet inside an encrypted tunnel.
  4. At the exit node, the VPN protections end and your traffic continues onto the public internet.

Providers keep gateways at many locations around the world, so you can often choose where your traffic comes out.

what is a vpn and how does it work Connected devices
A person holds a smartphone displaying a padlock symbol in front of a laptop.

What a VPN does for you

The main job of a VPN is to limit who can see your traffic. The same source says a VPN encrypts the data sent through the connection so it cannot be seen from public network resources, such as a shared network in a café or hotel.

Here is what that gives you in practice:

  • Privacy on the route: the tunnel hides the content of your traffic from the networks it crosses.
  • Integrity checks: a peer-to-peer authentication sequence also protects the communication from being tampered with.
  • A different apparent location: a VPN is often used to mask the physical location of a system, or to get around region-based restrictions on content.
  • Remote access to a shared network: businesses use a VPN so separate systems behave as if they sit on one local network.

That last use is where VPNs started. They were originally built for professional or enterprise use, and only later became popular with individuals who care about privacy, as the Practive Security post explains.

What a VPN does not do

A VPN is not a perfect privacy tool. The Practive Security post says plainly that a VPN does not protect your privacy completely, and that your activity and your identity can still be exposed while you use one (source, Jan 11, 2026).

Think about it in terms of the route. The tunnel protects the stretch between your device and the exit node, and after that point your traffic meets the public internet again. A VPN also does not judge the messages you receive, so a convincing scam email is just as risky with a VPN switched on. Our guide on how to spot phishing emails covers that side of staying safe.

It also helps to understand the lock itself. If you want the mechanics behind the tunnel, read about how does encryption work.

Split tunneling and blocked access

Not every VPN sends everything through the tunnel. Some solutions, especially web-browser plugins, only send certain information through it, an approach called split-tunneling. That means a browser add-on may protect less of your activity than an app that covers the whole device.

You may also find that some sites refuse you. The Practive Security post notes that some professional service providers and companies block access when they detect a VPN, because VPNs are also regularly abused by the criminal underground. If a bank or work system rejects your connection, switching the VPN off for that service is often the simplest fix.

How do you choose a VPN?

Start with what you actually want to protect, then look at independent testing. RTINGS says it has 23 VPNs bought and tested on its VPN guide, which is a useful starting point for comparing services. The site also says it may earn an affiliate commission when you buy through its links, so keep that in mind when you read any ranking.

As a neutral example, the Practive Security post from January 2026 recommends Express VPN and Proton VPN, along with the VPN solutions provided by antimalware and antivirus software. This site does not endorse any product, and a recommendation from one author is a data point, not a verdict.

  • Check whether the app covers your whole device or only the browser.
  • Decide whether you need a particular exit location.
  • Read independent tests, and note who earns money from the links.

Frequently asked questions

What does VPN stand for?

Show answer

VPN stands for Virtual Private Network. It is used to establish an encrypted channel between systems or networks in different physical locations, according to the Practive Security post of Jan 11, 2026 at this link.

Does a VPN make me completely anonymous?

Show answer

No. The same source says a VPN is not a perfect solution and that your activity and identity can still be exposed while you use one.

Why does a site block me when my VPN is on?

Show answer

Some companies block access when they detect a VPN, because VPNs are also regularly abused by the criminal underground. Turning the VPN off for that service may resolve it.

Can a VPN change my apparent location?

Show answer

It is often used to mask the physical location of a system or to evade region-based restrictions on content. Check a service’s own terms before you rely on that.