A VPN sounds technical, but the idea is simple. It puts a private tunnel between your device and the internet, so sites and apps see a different address than the one your connection gives you. That helps on public Wi-Fi, limits what your internet provider can see, and is useful when you travel. It does not make you invisible, and it does not fix weak passwords. This guide covers what a VPN does, how it works, and how to start.
What a VPN actually does
VPN stands for virtual private network. When it is on, your traffic travels through an encrypted connection to a server run by the provider, and from there to the site or app you wanted. Replies come back the same way.
Two things change. The traffic between you and the server is scrambled, so someone on the same café Wi-Fi cannot easily read it. And the site sees the VPN server address instead of your real IP address. Connect to a server in another country and sites will usually treat you as if you are there.
Two things do not change. The provider can see that you are connected, which is why its logging policy matters. And once you log in to a site, that site still knows who you are. For more detail, see what a VPN is and how it works.
How it works in 4 steps
-
You open the app, pick a server, and tap Connect.
-
The app builds an encrypted tunnel to that server using a protocol such as WireGuard or OpenVPN.
-
Everything you send travels through that tunnel first. Anyone between you and the server sees scrambled data.
-
The server passes your request to the website, gets the reply, and sends it back through the tunnel.
With and without a VPN
| Situation | Without a VPN | With a VPN on |
|---|---|---|
| What a website sees | Your real IP address and rough location | The VPN server address and its location |
| On public Wi-Fi | Traffic is easier for others to observe | Traffic to the VPN server is encrypted |
| What your provider sees | Which sites you connect to | A connection to the VPN server |
| After you log in | The site knows your account | The site still knows your account |
| Malware and phishing | No protection | No automatic protection either |
A VPN changes the path your traffic takes and encrypts the first part of it. It is one layer, not a complete security package.
WireGuard vs OpenVPN in plain terms
The protocol is the set of rules for building the tunnel. WireGuard is newer and built from far less code, which makes it easier to review. Most current apps use it, or a provider variant based on it, as the default.
OpenVPN is older and works in more situations. It can help on restrictive networks, such as some workplaces or hotels, where other connections are blocked. It also has more options, which helps advanced users and confuses everyone else.
Start with the automatic setting. Change protocol only if the connection will not start, keeps dropping, or the provider support pages tell you to try the other one.
Getting started step by step
On a phone, install the provider app from the official app store, not from a link in an ad. Open it, sign in, and approve the system prompt asking permission to add a VPN configuration. That prompt is normal. Pick a server in your own country, tap Connect, and check the app shows connected.
On a computer, download the app from the provider website, install it, and sign in. The rest is the same: pick a server, connect, confirm the status. Our walkthrough covers the screens: how to set up a VPN. Set everything up at home first. Doing it for the first time on hotel Wi-Fi is a worse experience.
First settings to change
Kill switch: turn it on. If the VPN drops, it pauses your traffic instead of quietly continuing without protection.
Auto-connect: set the app to connect automatically on Wi-Fi you do not control, or on every network if you prefer a simple rule. Manual connection only works if you remember it every time.
Automatic protocol: leave it on automatic. The app will choose the protocol that fits the network. Manual choice is a troubleshooting tool, not a daily task.
While you are there, turn on two factor authentication for the VPN account if it is offered.
Common beginner mistakes
The biggest mistake is assuming the VPN is on because the app is installed. Check the connected status, especially after a restart or an update.
Next is picking a far away server for everyday use. Distance adds delay to every request. At home, a server in your own country is the sensible choice. Pick another country when you have a specific reason.
A VPN does not secure your accounts either. It does not replace unique passwords, a password manager, or two factor authentication, and it does not make a harmful download safe. And do not buy a long plan before trying the service on your own devices first.
What to do when something breaks
Disconnect and reconnect. If that fails, try a different server in the same country. Individual servers go down for maintenance or get blocked.
Still stuck? Switch the protocol from automatic to WireGuard or OpenVPN. Restart the app, then the device. Check that no second VPN app or work profile is fighting for the connection. Only one VPN should be active at a time.
If one website refuses to work with the VPN on, it may block known VPN addresses. Try another server, or disconnect for that one task and reconnect after.
Frequently asked questions
Is a VPN legal to use?
In most countries, yes, for ordinary personal use. Some countries restrict VPNs, and workplaces and schools can set rules for their networks.
Does a VPN make me anonymous?
No. It hides your IP address from sites and encrypts the first part of the connection. Sites still identify you when you log in.
Should I leave it on all the time?
You can, and auto-connect makes that easy. Some banking apps work poorly through a VPN, so you may need to disconnect briefly or use split tunnelling if offered.
Is a free VPN a good way to start?
Be careful. Servers cost money, so a free service pays somehow, through limits, ads, or data practices you need to read closely. A short paid plan is a safer way to learn.
How many devices can I use?
It depends on the plan. Most providers allow several connections at once, enough for a phone, a laptop and a tablet.
Summary
A VPN encrypts the connection from your device to the provider server, and sites see that server address instead of yours. Set it up at home, turn on the kill switch and auto-connect, leave the protocol on automatic, and use a server in your own country for daily use. Keep the limits in mind: no anonymity, no account security on its own, no substitute for careful habits. With those expectations, it is a simple tool that does one job well.
VPN Runner may earn a commission from links on this page. We verify prices, plan terms, server lists, refund terms and app availability on the providers' sites. We have not measured speeds.
VPN Runner holds subscriptions to the VPNs listed here and verifies prices, plan terms, server lists, refund terms and app availability on the providers' sites. We have not measured speeds.