GLOSSARY · VIRTUAL PRIVATE NETWORK
VPN
A VPN creates an encrypted tunnel between your device and a server operated by the VPN service. Your traffic leaves the internet from that server, so websites see the server's IP address and not yours, and the local network sees only the encrypted tunnel.
Why it matters
A VPN protects traffic on networks you do not trust, such as public Wi-Fi, and hides your address from the sites you visit. It does not make you anonymous: the VPN company can see where your traffic goes, and sites can still identify you through logins, cookies and browser fingerprints. Some sites also restrict traffic from known VPN addresses.
In practice
Judge a VPN by testing it, not by its marketing. Check the address and location it shows, then run the leak tests for DNS and WebRTC. Look for IPv6 handling and a kill switch. Our guide on VPNs and proxies explains how they differ and which to use for what.
Related terms
- Kill switch: A kill switch is a VPN feature that blocks your internet access whenever the VPN connection drops, so that no traffic is sent over your normal, unprotected connection.
- Split tunneling: Split tunneling lets you decide which apps, sites or destinations go through the VPN tunnel and which use your normal internet connection.
- Proxy: A proxy server is an intermediary that makes requests on your behalf.
- DNS leak: A DNS leak is when your device sends its DNS lookups to a resolver you did not intend, usually your internet provider's, while you believe a VPN or proxy is handling your traffic.