What is a VPN? A Plain English Explanation
A VPN — Virtual Private Network — is software that creates an encrypted tunnel between your device and the internet. It hides your activity from your internet provider, masks your location from websites, and protects your data on public Wi-Fi. This guide explains how it works, what it protects, and what it does not.
VPNs Ranked 2026
The simplest explanation
Normally when you use the internet, your device connects directly to websites and services. Your internet provider (BT, Sky, Virgin, etc.) can see every site you visit. The websites you visit can see your IP address — a number that reveals your approximate location and identifies your device. Anyone on the same Wi-Fi network as you can potentially see your traffic.
A VPN sits in the middle. When you switch it on, your device connects to a VPN server first, and that server connects to the internet on your behalf. Your internet provider sees only that you connected to a VPN — not what you did after that. Websites see the VPN server's IP address, not yours. Everything between your device and the VPN server is encrypted.
Think of it like a private postal service. Normally anyone can see the address on your letters. A VPN puts every letter inside an unmarked sealed envelope first — so the postal service only knows you sent something, not what it was or where it was going.
How the encryption actually works
When you connect to a VPN, your device and the VPN server agree on an encryption key — a very long string of random data that only the two of them know. Everything you send is scrambled using that key before it leaves your device. Even if someone intercepts your data in transit, they see only meaningless noise — without the key, they cannot decode it.
The encryption standard used by every reputable VPN is AES-256 — the same standard used by banks, governments, and the military. It would take longer than the age of the universe to crack by brute force. For practical purposes, consider it unbreakable.
The mechanism that handles the connection — how the encrypted tunnel is established and maintained — is called the protocol. The main ones you'll encounter are:
- WireGuard — the modern standard. Fast, lightweight, open source. Used by NordVPN (called NordLynx), Surfshark, and others.
- OpenVPN — older, well-established, slightly slower. Highly trusted, used as a fallback by most providers.
- Stealth — hide.me's obfuscation protocol, designed to bypass VPN blocks in restrictive networks.
- IKEv2 — good for mobile devices, handles reconnection well when switching between Wi-Fi and mobile data.
For most users the protocol choice happens automatically — the VPN app selects the best one for your connection. You do not need to configure anything.
What a VPN protects
Your ISP can't see what you're doing
Your internet provider sees all of your traffic by default. In the UK, ISPs are legally required to retain browsing records for 12 months under the Investigatory Powers Act. When you use a VPN, they see only that you connected to a VPN server — not the sites you visited, the content you accessed, or the services you used.
Websites can't see your real IP address
Every website you visit logs the IP address that connected. Your IP address reveals your approximate location — usually your city — and can be used to identify your device over time. When using a VPN, websites see the VPN server's IP address instead of yours. This is also how VPNs allow you to access content restricted to certain countries — you connect to a server in that country and appear to be located there.
Public Wi-Fi is no longer a risk
Unencrypted public Wi-Fi — in cafés, airports, hotels — is a genuine security risk. Anyone on the same network can potentially intercept unencrypted traffic. A VPN encrypts everything before it leaves your device, making interception useless even on insecure networks.
The short answer
A VPN protects your connection — who can see your traffic, where you appear to be located, and what data is visible on shared networks. It does not make you invisible online, and it does not protect your accounts if you use weak passwords.
What a VPN does NOT protect
This is important and often misunderstood. A VPN is a connection tool, not a complete privacy solution.
- It does not hide you from websites you log into. If you log into Google, Google knows it's you — regardless of what IP address you used.
- It does not block cookies or trackers. Advertising trackers follow you across the web using cookies and browser fingerprinting. A VPN does not stop this.
- It does not protect your accounts. If you use weak passwords and one gets breached, a VPN does not help. That's what a password manager is for.
- It does not make you anonymous. Anonymity is very difficult to achieve online. A VPN improves your privacy significantly — it does not guarantee anonymity.
- It does not protect against malware you install yourself. If you click a bad link and download malware, a VPN does not stop it running on your device.
Common misconception
A VPN does not make you untraceable. You are still identifiable through your accounts, cookies, browser fingerprint, and behaviour patterns. It significantly reduces what your ISP and passive observers can see — that is a meaningful privacy improvement, but it is not invisibility.
Why people use VPNs in 2026
Privacy from ISP tracking
In the UK and many other countries, internet providers are permitted or required to log browsing activity. Many people use VPNs simply to prevent their ISP from building a profile of their online behaviour — not because they have anything to hide, but because they consider it a reasonable expectation of privacy.
Accessing streaming content
Streaming platforms like Netflix, BBC iPlayer, and Disney+ licence content by country. A UK resident travelling abroad may find their normal content unavailable. A VPN with a UK server restores access. The same works in reverse — accessing US Netflix from the UK unlocks thousands of titles not available on the UK catalogue.
Security on public Wi-Fi
Anyone who regularly works from cafés, uses airport Wi-Fi, or connects to hotel networks benefits meaningfully from a VPN. The encryption prevents anyone on the same network from seeing your activity.
Avoiding price discrimination
Some services — flights, hotels, software — charge different prices depending on your location. Connecting via a VPN server in a different country sometimes reveals lower prices. This is not guaranteed but is a practical use many people find worthwhile.
Is using a VPN legal in the UK?
Yes, completely. VPNs are legal in the UK, throughout the EU, and in most countries worldwide. Using a VPN does not make illegal activity legal — if something is illegal to do online, it is still illegal to do via a VPN. But the tool itself is entirely legal and widely used by individuals, businesses, and journalists.
Do you actually need one?
If you primarily use the internet at home on a private connection, the risk level is lower — though ISP tracking and streaming access are still relevant. If you regularly use public Wi-Fi, work remotely, travel, or care about your ISP not logging your browsing, a VPN is a practical and affordable tool that takes under five minutes to set up.
The cheapest quality VPN costs around £1.35–£1.55 per month on a long-term plan. For less than the price of a coffee a month, the privacy and security benefits are difficult to argue against for most people.
Ready to choose a VPN?
We've independently tested 8 of the most popular VPN services — scored on privacy credentials, speed, streaming performance, and value. No paid placements, no sponsored rankings.
See All VPN Reviews →