What Is a VPN? Meaning, How It Works and What It Doesn’t Do

A VPN, short for Virtual Private Network, encrypts everything your device sends and passes it through a server the VPN company operates. Websites then see that server’s IP address in place of yours, and your ISP is left with an encrypted connection and no record of which sites you opened. The sections here cover what that protects, what it leaves exposed, and how the pieces fit together.

What Is a VPN?

The VPN meaning is literal. Virtual, because the private network exists in software instead of cabling. Private, because the traffic inside it’s encrypted and unreadable to whoever is watching the connection. Network, because your device joins the VPN company’s network and takes an IP address there.

Two things change the moment you connect:

• Your IP address. Sites, apps, and trackers record the server’s IP address in whichever country you picked, instead of the one your ISP assigned.
• Your traffic. Everything between your device and that server is encrypted, so an ISP, a network administrator, or a stranger on the same Wi-Fi sees encrypted data going to a single destination.

Businesses have used the same technology for decades to let staff open internal systems from outside the office. Consumer VPNs apply it to ordinary browsing.

How Does a VPN Work?

Three mechanisms do the work, in order, every time you connect.

• Authentication. The app proves your account to the VPN server, and the two sides agree on the encryption keys for the session.
• Encryption. The connection is wrapped in AES-256 or ChaCha20, the same class of cipher banks and governments use. Intercepted traffic reads as noise.
• Encapsulation. Each data packet is placed inside another packet, like a sealed envelope inside a courier bag. The outer layer takes the traffic to the VPN server, which unwraps it and passes the request on.

Without that tunnel, your ISP assigns your IP address, sees every domain you request, and keeps records of it. In the UK, those records are retained for up to a year by law, and in the US they can be sold.

DNS deserves the same attention as the tunnel. A VPN worth paying for answers your DNS lookups on its servers, so the list of domains you visit never arrives at your ISP separately from the encrypted traffic.

What Does a VPN Do?

• Hides your IP address from sites you visit. Advertisers, forums, and streaming platforms log the server’s IP address instead of your home one.
• Encrypts public Wi-Fi sessions. Hotel, airport, and cafe networks are shared with strangers, and encryption makes intercepted traffic worthless.
• Keeps browsing away from your ISP. It records a connection to a VPN server and nothing about what passes through it.
• Changes which region a service sees. A server in another country loads that country’s Netflix catalog or opens home banking while you travel.
• Covers torrent traffic. A VPN for torrenting keeps your IP address out of the swarm, where it’s otherwise visible to every peer.
• Gets past network filters. School, office, and national blocks work on the destination, and an encrypted tunnel to a VPN server gives them nothing to match.

What a VPN Doesn’t Do

• It doesn’t make you anonymous. Signing in to an account identifies you regardless of your IP address. Google knows it’s you when you’re logged in, no matter which country the connection appears to come from.
• It doesn’t stop cookies or browser fingerprinting. Trackers that identify your browser instead of your IP address keep working. A private window and a tracker blocker deal with those.
• It doesn’t remove malware. Some VPNs filter known malicious domains, which helps, but nothing in the tunnel scans files or cleans an infected machine.
• It doesn’t hide your activity from the VPN company. You move trust from your ISP to the VPN, so an audited no-logs policy and a sensible jurisdiction outrank any feature list.
• It doesn’t exempt you from the law or a platform’s rules. Age checks, copyright, and local law apply exactly as they did before.

Types of VPN

• Personal VPN. The consumer apps described here. You subscribe, install the app, and connect to the company’s servers for privacy and region changes.
• Remote access VPN. What employers deploy so staff can open internal systems from home. The destination is the company network, and the open internet stays outside it.
• Site-to-site VPN. A permanent encrypted link between 2 office networks, configured on routers and firewalls instead of on your laptop.

VPN Protocols Compared

The protocol is the rulebook for building the tunnel, and it decides the balance between speed and compatibility. Most apps pick for you, and the default is usually right. The exception is a filtered network, where switching to an obfuscated option is the difference between connecting and not.

Protocol	Strength	Best for
WireGuard	Fast, modern, compact code	Everyday use on any device
NordLynx	NordVPN’s WireGuard build	Speed without the IP address reuse issue
Lightway	ExpressVPN’s own protocol	Quick reconnects on mobile
OpenVPN	Older, heavily audited	Routers and awkward networks
IKEv2	Survives network switches	Phones moving between Wi-Fi and mobile data
Stealth, NordWhisper	Disguises VPN traffic	Networks that block VPNs by signature

Does a VPN Slow Your Connection?

Encryption costs something, though far less than the reputation implies. In our September testing on a 190.36 Mbps connection, the fastest VPN averaged 7.8% loss across British, American, and Japanese servers, and most of the field stayed inside 15%. Distance decides the rest. A nearby server costs a few percent and a handful of milliseconds; a server on another continent adds 200 ms or more of ping, which shows up in calls and games but not in video playback.

Are VPNs Legal?

Yes, in the overwhelming majority of countries, such as the US, the UK, Canada, Australia, and across the EU. Businesses rely on the same technology daily. A short list of countries restricts or bans them, including China, Russia, Iran, Turkmenistan, Belarus, and Oman. An illegal act stays illegal with the VPN switched on. Encryption changes who can observe the activity, while the law stays exactly where it was. Our guide to VPN legality covers the country list in detail.

How Much Does a VPN Cost?

The longest plans are the cheapest, so the monthly figure depends on how far ahead you commit.

• NordVPN: $3.49 a month on the 2-year Basic plan
• Proton VPN: $2.99 a month over 2 years
• ExpressVPN: $2.99 a month over 28 months

Every one of them offers a refund within 30 days, which makes a month of use effectively free if you cancel in time. Monthly plans cost 3 to 4 times as much, and renewals cost more than these introductory figures.

Try NordVPN Risk-Free

Do VPNs Protect Against Viruses?

Not by themselves. A VPN encrypts traffic; it doesn’t inspect downloads or scan a hard drive. Several now bundle filtering that helps at the edges. NordVPN’s Threat Protection Pro blocks known malicious domains, trackers, and ads; Proton VPN’s NetShield does the same at the DNS level, and ExpressVPN includes Advanced Protection. Bundled antivirus arrives on NordVPN’s mid-tier plans. Treat those as an extra layer, with antivirus software still doing the scanning.

How Do You Use a VPN?

1. Subscribe and create an account.
2. Install the app on the device you browse from.
3. Sign in and switch on the kill switch, which cuts the connection if the tunnel drops.
4. Connect to a server nearby for speed, or in a specific country for that region’s apps.

Our full setup guide covers phones, smart TVs, consoles, and routers, including the settings to change on the first connection.

Conclusion

A VPN is a narrow tool that does its narrow job well. It encrypts what leaves your device, swaps the IP address the internet sees, and puts your browsing beyond your ISP. It doesn’t anonymize you, clean an infected machine, or place you outside the law, and any explanation promising otherwise is selling something. Judge one on its no-logs record, its jurisdiction, and its speed, in that order.

Get NordVPN

---

Frequently Asked Questions