What Does a VPN Actually Hide?

"A VPN hides everything you do online" is the most common thing people believe about VPNs, and it is wrong. A VPN is a genuinely useful privacy tool, but it has a specific job: it encrypts your connection and changes your apparent location. It does not make you invisible, anonymous, or immune to tracking. Knowing exactly what a VPN hides — and what it leaves wide open — is the difference between using one effectively and trusting it for protection it was never designed to provide. This explainer lays out both sides clearly.

How a VPN works, briefly

A VPN creates an encrypted tunnel between your device and a VPN server. Your traffic travels inside that tunnel, then exits to the wider internet from the server, which has its own IP address. Two things follow from this: anyone watching your local connection sees only encrypted data, and the websites you visit see the server's IP, not yours. Everything a VPN hides — and fails to hide — flows from that simple design.

What a VPN does hide

Your traffic from the local network and your ISP. On any network you are on — home, office, or public Wi-Fi — the encrypted tunnel means the network operator and your internet provider can see that you are connected to a VPN, but not the contents of your traffic or which specific sites you visit. This is the core benefit and it is real, especially on untrusted Wi-Fi.

Your IP address and rough location from websites. Sites you visit see the VPN server's address, so your real IP and approximate location are masked. This is what enables changing your apparent region.

What a VPN does not hide

This is the part the marketing skips. A VPN does not make you anonymous, and it does not stop most online tracking.

Anything you log into. The moment you sign into an account — email, social media, a shop, an AI app — that service identifies you by the account, regardless of your IP. A VPN changes nothing here.

Cookies and browser fingerprinting. Websites track you with cookies stored in your browser and with fingerprinting (your browser, device, fonts, and settings combine into a near-unique signature). A VPN touches none of this; switch servers and the same cookies and fingerprint still identify you.

The VPN provider itself. Your traffic is hidden from your ISP, but the VPN company now sits in the same position — it can see where you connect. That is precisely why an independently audited no-logs policy matters: you are choosing whom to trust, not eliminating trust.

Malware, phishing, and what you reveal. A VPN is not antivirus. It will not stop a malicious download, a phishing site, or you typing your details into a scam form.

A simple mental model

Think of a VPN as a private, sealed road from your house to a distant on-ramp. No one along your street can see what is in your car or where you are headed, and you join the motorway from a different town. But once you arrive at a destination and hand over your name, they know exactly who you are — and any tracking device already attached to your car travels with you.

Bottom line

A VPN reliably hides the contents of your traffic and which sites you visit from your ISP and local network, and it masks your IP and location from the sites you reach — strong, worthwhile privacy, especially on public Wi-Fi. It does not make you anonymous, defeat cookies or fingerprinting, hide you from services you log into, or protect against malware and phishing. Use a VPN for what it is — connection privacy and location masking — and pair it with good account hygiene, tracker-blocking, and security tools for everything it cannot do.

Sources and further reading

Get a VPN that hides your traffic