VPN marketing is full of big promises: “total privacy”, “anonymous browsing”, “no one can see what you do online.” Some of that is true. A lot of it is overblown. Understanding exactly what a VPN hides — and what it doesn’t — helps you use one correctly and not develop a false sense of security.
Short Answer: A VPN hides your browsing activity from your ISP, your real IP address from websites, and your traffic from others on the same network. It does NOT hide your activity from websites you’re logged into, from Google or Facebook, or from your VPN provider itself.
What a VPN actually hides
Your IP address — from websites and servers you visit
When you visit a website without a VPN, the site sees your real IP address — which reveals your approximate location (city level, sometimes more precise), your ISP, and can be used to track you across sites. With a VPN, the website sees the VPN server’s IP address instead. Your real IP is hidden from the destination.
Your browsing activity — from your ISP
Without a VPN, your internet service provider can see every domain you visit, when you visit it, and how much data you transfer. They can’t see the content of HTTPS sites (that’s encrypted by TLS), but they can see that you visited, say, a mental health forum, a medical information site, or an adult content site. A VPN encrypts your connection before it leaves your device, so your ISP only sees that you’re connected to a VPN server — not what you’re doing through it.
Your traffic — from people on the same network
On public Wi-Fi (coffee shops, airports, hotels), other people on the same network can potentially intercept your traffic with the right tools. A VPN encrypts everything from your device to the VPN server, making it unreadable to any network snoopers. This is one of the strongest practical use cases for a VPN.
Related: Do You Need a VPN on Hotel Wi-Fi?
Your real location — from content providers doing geo-blocking
Streaming services, news sites, and some web services restrict content based on your country, determined by your IP. A VPN lets you appear to be in a different country by routing your traffic through a server there. This is how people access Netflix libraries from other countries or watch sports events that are blacked out in their region.
Your DNS queries — from your ISP (if the VPN has DNS leak protection)
Even on HTTPS sites, your DNS queries (translating domain names to IP addresses) can leak to your ISP’s DNS servers if your VPN isn’t configured properly. A good VPN routes all DNS traffic through its own servers and has DNS leak protection enabled by default.
What a VPN does NOT hide
Your activity from websites you’re logged into
If you’re logged into Google and search for something, Google knows exactly what you searched — regardless of your VPN. Your account identity overrides your IP address. The same applies to Facebook, Twitter/X, Instagram, your email provider, and any site where you have an account and are signed in.
A VPN hides your IP. It does not hide your identity when you’ve voluntarily authenticated.
Your activity from your VPN provider
All your traffic passes through the VPN provider’s servers. A VPN shifts trust from your ISP to your VPN company. If your VPN provider keeps logs (or is compelled to start keeping logs), your activity is exposed. This is why no-logs policies and independent audits matter. VPNs like ProtonVPN, Mullvad, and NordVPN have had their no-logs claims verified by third-party auditors.
Important: You are trusting your VPN provider with your browsing data instead of trusting your ISP. Make sure you’re choosing a provider with a verified no-logs policy and a good privacy track record.
Cookies and browser fingerprinting
Websites track you through browser cookies, which persist after your visit. Even if your IP changes, the same cookies identify you to the same sites. Browser fingerprinting takes this further — sites can identify your browser by its unique combination of screen resolution, fonts, timezone, language, and other attributes, without any cookies at all.
A VPN does nothing about either. If you want to prevent cookie tracking, use private browsing mode and clear cookies regularly. Fingerprinting is much harder to prevent — the Tor Browser is the most effective counter, not a regular VPN.
Your activity from your employer (if on a work device)
If your employer has installed monitoring software on your work device, a VPN won’t hide your activity from them. Enterprise device management (MDM) operates at the device level, above the network level. Your personal VPN is irrelevant if there’s keylogger or screen recording software installed.
Malware and viruses
A VPN is a network privacy tool, not a security tool. It will not protect you from malware you download and run, phishing attacks where you voluntarily enter credentials, or software vulnerabilities on your device. Some VPNs (NordVPN, Surfshark, PIA) include DNS-level malware blocking that prevents connections to known malicious domains — but this is an add-on feature, not the core VPN function.
Your activity from government surveillance (in most cases)
A VPN meaningfully raises the bar against casual surveillance, but a determined state actor targeting you specifically has other tools. Metadata (who you contacted, when, for how long) can often be inferred even from encrypted VPN traffic. If you face serious government surveillance risks, a VPN is one layer of protection but not sufficient on its own — the Tor network and other operational security practices are also needed.
The ISP question — does your ISP know you use a VPN?
Yes. Your ISP can see that you’re connected to a VPN server (based on the IP address of the VPN server and the pattern of encrypted traffic). They don’t know what you’re doing through the VPN, but they know you’re using one. In most countries, this is perfectly legal. In countries where VPNs are restricted, some VPNs offer obfuscation modes that make VPN traffic look like regular HTTPS traffic.
Does a VPN make you anonymous?
No. A VPN makes you more private — it limits what specific parties (ISP, network observers, websites) can see about you. But true anonymity requires much more: consistent use of Tor, no logged-in accounts, no browser fingerprinting, and careful operational security. Most people using a VPN don’t need full anonymity — they need privacy from their ISP and basic protection on public networks, which a VPN handles well.
Summary — what a VPN protects:
ISP snooping ✓ | Public Wi-Fi snooping ✓ | IP-based tracking ✓ | Geo-blocks ✓
Logged-in account tracking ✗ | Cookies ✗ | Malware ✗ | Employer monitoring ✗
Checklist — Using your VPN effectively:
- ✅ Enable kill switch so your real IP never leaks on disconnection
- ✅ Enable DNS leak protection (check via ipleak.net)
- ✅ Use private/incognito mode alongside VPN for cookie isolation
- ✅ Don’t log into personal accounts if you want IP-level anonymity
- ✅ Choose a VPN with a verified no-logs policy
- ✅ Always connect VPN before connecting to public Wi-Fi
FAQ
Can my ISP see what I do if I use a VPN?
Your ISP can see that you’re connected to a VPN server and how much data you’re transferring. They cannot see which websites you’re visiting or what content you’re accessing through the VPN.
Does a VPN hide my searches from Google?
Only if you’re not logged into a Google account. If you’re signed into Chrome, Google Search, Gmail, or any Google service, Google can link your searches to your account regardless of what IP address you’re using.
Can a website tell I’m using a VPN?
Some can. VPN providers’ server IP addresses are often known and appear on VPN detection databases. Streaming services, banking sites, and some government sites check for VPN IPs and may block them or ask for additional verification. Good VPN providers regularly rotate server IPs to avoid this.
Does a VPN hide my location completely?
Your IP-based location is hidden. But if your browser has location permissions enabled, websites can access your GPS location via your browser’s Geolocation API — completely bypassing the VPN. Always check your browser’s location permission settings.
Will a VPN stop targeted ads?
Partially. It removes your IP address from the targeting equation, but ad networks track you through many other signals: cookies, browser fingerprinting, logged-in Google/Facebook accounts, and device IDs. A VPN reduces but doesn’t eliminate targeted advertising.
Want help choosing the right VPN for your privacy needs? Try the VPN Picker →
Related reading: