What a VPN Actually Does (And What It Doesn't)

No — and this is one of the most dangerous misconceptions about VPNs. A VPN hides your IP address from websites and replaces it with the VPN provider's IP. But it doesn't prevent tracking via browser fingerprinting, cookies, login sessions, or behavioral analysis. If you're logged into your Google account, Google knows who you are regardless of VPN. If you use the same browser fingerprint everywhere, you can be tracked. A VPN is one layer of privacy, not anonymity. For actual anonymity (and even that's imperfect), you'd need Tor plus browser hardening plus behavioral changes.

Yes, in terms of content. Your ISP can see that you're connected to a VPN server and the volume of traffic, but they can't read the encrypted content. Without a VPN, your ISP can see every domain you visit (via DNS requests) and, for unencrypted traffic, the actual content. With a VPN, all they see is encrypted tunnel traffic to one IP (the VPN server). This is genuinely useful in contexts where ISP surveillance or DNS-based content filtering is a concern.

Some are, most are not, and the bad ones are worse than having no VPN. A VPN routes all your traffic through the VPN provider's servers. You're choosing to trust them instead of your ISP. Free VPN providers need revenue somewhere — often that's selling your browsing data to advertisers, which defeats the entire privacy purpose. Some free VPNs have also been caught injecting ads, logging all traffic, or containing malware. If you need a VPN, pay for one from a reputable provider with a published privacy audit. Mullvad and ProtonVPN are frequently cited as privacy-first options.

Yes, significantly. On public Wi-Fi networks (airports, coffee shops, hotels), other users on the same network can potentially intercept unencrypted traffic. A VPN encrypts your traffic before it leaves your device, so even if intercepted, it's unreadable. However, modern HTTPS has reduced the risk considerably — most sensitive traffic is already encrypted end-to-end. The main remaining risk on public Wi-Fi is DNS leaks and rogue access points. A VPN addresses both. For high-security situations on public networks, a VPN is a reasonable precaution.