Network

What Is a VPN?

A VPN changes communication-route visibility and the IP visible to destinations, but it also makes the VPN provider a new trusted party.

VPNs are tools often introduced in discussions of anonymity and privacy.

However, it is dangerous to think of a VPN as "a service that makes you anonymous if you use it." A VPN is a mechanism that changes how the communication path is visible. It can change the IP address visible to the destination, or protect the communication path on public Wi-Fi and similar networks.

At the same time, it also makes the VPN provider a new trusted party.

The VPN provider is in a position to handle information related to the user's connection source and destinations. That is why, when choosing a VPN, you check not only the name and price, but also the operator, logging policy, audits, transparency reports, app implementation, and payment methods.

This article organizes the basics of VPNs, what they can protect, what they cannot protect, and their trust model.

VPN Basics

VPN stands for Virtual Private Network.

It creates an encrypted communication path from the user's device to a VPN server, then sends traffic outward through that VPN server. From the destination website's perspective, the access appears to come from the VPN server's IP address, not from the user's home or workplace IP address.

Stage	What happens	Meaning for anonymity
Device	Connects to the VPN server with a VPN app	Creates a path different from the ordinary connection
VPN server	Relays the user's traffic outward	The IP visible to the destination becomes the VPN-side IP
Destination site	Receives the access as coming from the VPN server	The home IP becomes harder to see directly
ISP	Sees communication to the VPN server	The final destination becomes harder to see directly
VPN provider	Becomes the relay point	Becomes a new trusted party

A VPN is useful when you do not want to show your home IP directly to a destination, or when you want to protect the communication path on public Wi-Fi.

However, a VPN does not make anonymity complete.

What Changes With a VPN

When you use a VPN, the IP address visible to the destination changes.

Also, from the ISP's perspective, it is visible that the user is connecting to a VPN server. It becomes harder to see the user as communicating directly with the destination website.

Perspective	Without VPN	With VPN
IP visible to the destination	Home or workplace connection IP	VPN server IP
Destination visible to ISP	Destination IP is visible	VPN server is visible
Public Wi-Fi operator	Can more easily observe destinations and traffic volume	Sees traffic as communication to the VPN server
Communication content	Protected if HTTPS, weak if HTTP	The section up to the VPN server is protected, but processing at the destination remains
Trusted parties	ISP and destination	VPN provider is added

A VPN changes who can see what.

The information does not disappear. Where it is visible changes.

What a VPN Cannot Protect

Even when you use a VPN, requests still reach the destination website.

If you are logged in, the behavior is linked to the account. If Cookies are sent, you are treated as the same browser. If the post body mentions a workplace or routine places, a picture of the person can be built from the content.

Remaining information	Why it remains	Example
Login state	The service processes the account	Logging in to a real-name social media account
Cookie	The browser sends stored information	Seen as the same user even if the IP changes
Post content	You publish it yourself	Writing about region, workplace, or family
Browser characteristics	User-Agent and screen size are exposed	Becomes fingerprinting material
Payment and registration information	Related to the VPN contract	Linked through real-name payment or email

A VPN changes the IP visible to the destination.

However, accounts, Cookies, post content, and device information are separate issues.

Perspectives for Looking at Practical Options

For beginners, there are too many VPN services.

It is important to know credible candidates. However, using a particular service does not make anonymity complete. Look at the reason for introducing it together with its limits.

Proton VPN is a VPN from Proton, which has long operated privacy-oriented services such as Proton Mail. On the official site, you can check supported devices, servers, transparency reports, no-logs policy audits, open-source apps, and similar information. The ability to check operational transparency is a reason to introduce it both for learning and practical use.

URL : https://protonvpn.com/

Mullvad VPN is characterized by a design that uses numbered accounts and does not require an email address or password. Its payment methods, logging policy, and app information can be checked on the official site. It is useful as an example for learning a design philosophy that reduces registration information.

URL : https://mullvad.net/

Check item	Reason to look
Logging policy	See what it says it does not store
Audits	See whether there is external verification
Transparency reports	See the stance toward legal requests
Apps	See whether they are open source and what devices are supported
Payment	See the relationship between real-name payment and anonymity
Jurisdiction	Think about legal requests and the operating environment

When choosing a VPN, do not trust advertising claims of "complete anonymity."

Look at where trust moves.

Checks Before Using a VPN

Before using a VPN, decide your purpose.

Do you want to protect the communication path on public Wi-Fi, avoid showing your home IP to the destination, or avoid directly showing the final destination from a workplace or school network? If the purpose differs, the points to check also change.

Check item	Reason
Can you trust the VPN provider?	It becomes a new trusted party
Does DNS go through the VPN?	DNS alone can leak to the ordinary connection
Are you not logged in with a real-name account?	Even if the IP changes, the account links the activity
How will payment and registration information be handled?	VPN contract information also becomes correlation material
Is browser storage separated?	Cookies can make you appear to be the same user

A VPN is an easy tool to use every day.

At the same time, because it is easy to use, it is easy to think "I turned on the VPN, so I am safe." A VPN changes how the communication path is visible. It does not automatically make post content or account operation safe.

What to Understand as VPN Basics

This article covers VPN basics.

Detailed comparison of VPN and Tor, DNS leaks, WebRTC leaks, how to choose a VPN provider, and using VPNs on public Wi-Fi are covered in separate articles.

The point to understand here is that a VPN is a "tool that changes who can see what." When you use a VPN, the IP visible to the destination changes, but the need to trust the VPN provider appears.

Summary

A VPN is a mechanism that creates a communication path from the device to a VPN server and sends traffic outward through the VPN server.

It changes the IP address visible to the destination and makes the final destination harder for an ISP or public Wi-Fi operator to see directly.

However, a VPN is not a tool that completes anonymity by itself.

Login state, Cookies, post content, browser characteristics, and payment information remain. In addition, the VPN provider becomes a new trusted party.

When using a VPN, check what changes, what remains, and whom you will trust.

Related tools

Public IP Check

WhatIsMyIP

An external resource related to this article. Open it only when it fits your situation and threat model.