What a VPN does—and what it cannot do

A virtual private network, or VPN, creates an encrypted route between your device and a VPN server. Your web request travels through that route before continuing to the destination website. This changes who can observe each part of the journey—but it does not erase every trace of identity or activity.

The two changes a VPN makes

1. It encrypts traffic on the first leg

Without a VPN, a local network and internet provider can learn significant information about a connection. HTTPS already encrypts the contents of most modern websites, but network metadata still exists. A VPN adds an encrypted tunnel from the device to the provider's server, which is particularly useful when the local network is not under your control.

2. It changes the public IP address websites see

The destination sees the VPN server's public IP address rather than the home or mobile connection's public IP. This can change the approximate location associated with the request. It does not stop a site from recognizing a logged-in account, a tracking cookie, or a distinctive browser.

What a VPN does not do

• It does not make you anonymous. Account logins, payment details, cookies, fingerprinting, and behavior can still link activity to a person.
• It does not fix compromised credentials. A password manager and multi-factor authentication address that layer.
• It does not make unsafe downloads safe. A VPN is not a replacement for software updates, careful downloads, or endpoint security.
• It does not encrypt a file forever. File protection requires encryption at rest and careful sharing.

When a VPN is worth considering

The clearest cases are frequent use of hotel, airport, café, coworking, or other shared networks; remote work where a secure connection matters; and a desire to reduce network-level profiling by an access provider. A VPN can also provide a consistent encrypted route across devices, but the value depends on using it reliably.

The harder question is not “Is a VPN good?” but “Which risk am I solving?” If the urgent problem is password reuse, start with a password manager. If the concern is sensitive documents in the cloud, start with file encryption. Add a VPN when the connection is the weak layer.

How to judge a VPN responsibly

1. Read the current privacy and logging claims, including any independent assessments the provider publishes.
2. Check support for every platform you actually use and the simultaneous connection limit.
3. Compare the full subscription charge and renewal price, not only the promotional monthly equivalent.
4. Look for clear protocol choices, kill-switch behavior, support documentation, and an understandable cancellation process.
5. Treat performance claims as conditional. Distance, server load, device, protocol, and base connection all matter.

Where NordVPN fits

NordVPN is the connection-focused option among the three products in this guide. Its official documentation currently describes support for common device platforms and up to 10 simultaneous connections. Its current protocol guidance documents NordLynx, OpenVPN, and NordWhisper. Read our full NordVPN review for the fit and tradeoffs.