A VPN — Virtual Private Network — is software that creates an encrypted tunnel between your device and the internet. It hides your activity from your internet provider, masks your location from websites, and protects your data on public Wi-Fi. This guide explains how it works, what it protects, and what it does not.
Normally when you use the internet, your device connects directly to websites and services. Your internet provider (BT, Sky, Virgin, etc.) can see every site you visit. The websites you visit can see your IP address — a number that reveals your approximate location and identifies your device. Anyone on the same Wi-Fi network as you can potentially see your traffic.
A VPN sits in the middle. When you switch it on, your device connects to a VPN server first, and that server connects to the internet on your behalf. Your internet provider sees only that you connected to a VPN — not what you did after that. Websites see the VPN server's IP address, not yours. Everything between your device and the VPN server is encrypted.
Think of it like a private postal service. Normally anyone can see the address on your letters. A VPN puts every letter inside an unmarked sealed envelope first — so the postal service only knows you sent something, not what it was or where it was going.
When you connect to a VPN, your device and the VPN server agree on an encryption key — a very long string of random data that only the two of them know. Everything you send is scrambled using that key before it leaves your device. Even if someone intercepts your data in transit, they see only meaningless noise — without the key, they cannot decode it.
The encryption standard used by every reputable VPN is AES-256 — the same standard used by banks, governments, and the military. It would take longer than the age of the universe to crack by brute force. For practical purposes, consider it unbreakable.
The mechanism that handles the connection — how the encrypted tunnel is established and maintained — is called the protocol. The main ones you'll encounter are:
For most users the protocol choice happens automatically — the VPN app selects the best one for your connection. You do not need to configure anything.
Your internet provider sees all of your traffic by default. In the UK, ISPs are legally required to retain browsing records for 12 months under the Investigatory Powers Act. When you use a VPN, they see only that you connected to a VPN server — not the sites you visited, the content you accessed, or the services you used.
Every website you visit logs the IP address that connected. Your IP address reveals your approximate location — usually your city — and can be used to identify your device over time. When using a VPN, websites see the VPN server's IP address instead of yours. This is also how VPNs allow you to access content restricted to certain countries — you connect to a server in that country and appear to be located there.
Unencrypted public Wi-Fi — in cafés, airports, hotels — is a genuine security risk. Anyone on the same network can potentially intercept unencrypted traffic. A VPN encrypts everything before it leaves your device, making interception useless even on insecure networks.
A VPN protects your connection — who can see your traffic, where you appear to be located, and what data is visible on shared networks. It does not make you invisible online, and it does not protect your accounts if you use weak passwords.
This is important and often misunderstood. A VPN is a connection tool, not a complete privacy solution.
A VPN does not make you untraceable. You are still identifiable through your accounts, cookies, browser fingerprint, and behaviour patterns. It significantly reduces what your ISP and passive observers can see — that is a meaningful privacy improvement, but it is not invisibility.
In the UK and many other countries, internet providers are permitted or required to log browsing activity. Many people use VPNs simply to prevent their ISP from building a profile of their online behaviour — not because they have anything to hide, but because they consider it a reasonable expectation of privacy.
Streaming platforms like Netflix, BBC iPlayer, and Disney+ licence content by country. A UK resident travelling abroad may find their normal content unavailable. A VPN with a UK server restores access. The same works in reverse — accessing US Netflix from the UK unlocks thousands of titles not available on the UK catalogue.
Anyone who regularly works from cafés, uses airport Wi-Fi, or connects to hotel networks benefits meaningfully from a VPN. The encryption prevents anyone on the same network from seeing your activity.
Some services — flights, hotels, software — charge different prices depending on your location. Connecting via a VPN server in a different country sometimes reveals lower prices. This is not guaranteed but is a practical use many people find worthwhile.
Yes, completely. VPNs are legal in the UK, throughout the EU, and in most countries worldwide. Using a VPN does not make illegal activity legal — if something is illegal to do online, it is still illegal to do via a VPN. But the tool itself is entirely legal and widely used by individuals, businesses, and journalists.
If you primarily use the internet at home on a private connection, the risk level is lower — though ISP tracking and streaming access are still relevant. If you regularly use public Wi-Fi, work remotely, travel, or care about your ISP not logging your browsing, a VPN is a practical and affordable tool that takes under five minutes to set up.
The cheapest quality VPN costs around £1.49–£1.69 per month on a two-year plan. For less than the price of a coffee a month, the privacy and security benefits are difficult to argue against for most people.
We've independently tested 8 of the most popular VPN services — scored on privacy credentials, speed, streaming performance, and value. No paid placements, no sponsored rankings.
See All VPN Reviews →