What Is a VPN? – Definition and How It Works
Learn what a VPN does, how it differs from a proxy, what it protects against, and the claims that do not survive examination.
A virtual private network creates an encrypted tunnel between a device and a VPN server. All of the device's traffic travels through it, and the destination sees the server's address rather than the device's.
1. What It Actually Changes
- The local network cannot see your traffic — only that a tunnel exists.
- The destination sees the VPN server's address, not yours.
- Your provider sees a connection to the VPN, not your destinations.
- The VPN operator sees everything the local network would have.
That last point is the one marketing omits: a VPN moves trust from your network operator to the VPN operator.
2. VPN Versus Proxy
| Aspect | VPN | Proxy |
|---|---|---|
| Scope | The whole device | Per application, usually |
| Encryption | Yes, to the server | No, beyond what the protocol provides |
| Traffic types | All | Typically HTTP or TCP |
| Configuration | Operating system or client | Application settings |
| Typical use | Privacy, remote access | Egress control, geography, collection |
For collection work proxies are usually preferred because they are per-request and can be pooled; a VPN applies to everything at once.
3. What It Protects Against
- Untrusted local networks, where the pertinent risk is other parties on the same link.
- Network operator visibility of which sites you visit.
- Destination-side profiling of your home address.
- Reaching private networks remotely, which is the original enterprise purpose.
4. What It Does Not Do
- It does not make you anonymous. Accounts, cookies, and browser characteristics identify you regardless.
- It does not stop tracking. Logged-in identity travels with you.
- It does not add security to HTTPS, which was already encrypted end to end.
- It does not hide activity from the VPN operator.
- It does not defeat fingerprinting, since nothing about the client changes.
5. The Trust Question
Every VPN sees your destinations. Claims of no logging cannot be verified by a user, and independent audits are point-in-time rather than continuous.
Free services are the ones most likely to monetise the traffic they carry, which makes "free VPN" the configuration to be most cautious about.
6. Shared Exits Have Consequences
Many customers share a VPN server's address, so its reputation is collective. That is why VPN users encounter more verification challenges and occasional refusals — they inherited a reputation from strangers.
7. Where a VPN Fits, and Where It Does Not
Fits: untrusted networks, accessing private infrastructure, reducing destination-side profiling of a home address, and viewing region-specific content for legitimate reasons.
Does not fit: collection at scale, where per-request control and pooling matter; anonymity, which needs a different threat model; and anything where the VPN operator is less trustworthy than the network you are avoiding.
8. Summary
A VPN encrypts a device's traffic to a server that then makes requests on its behalf, hiding destinations from the local network and the device's address from destinations.
It relocates trust rather than eliminating it, does not provide anonymity or defeat tracking, and gives way to proxies for collection work where per-request control is required.