What is a VPN, and what problem does it solve?

You join the Wi-Fi at a hotel, open your browser and switch on a VPN. The websites look the same, but the route to them has changed: there is now another server between your device and the internet. That change explains most of what a VPN can do, as well as its limits.

A VPN can help when you want protection on an unfamiliar network, an internet connection through another location, or access to work resources. You do not need to understand cryptography to use one thoughtfully. Start with three questions: which part of the connection does it protect, what address does the website see, and whom are you trusting with your traffic?

What VPN means

VPN stands for Virtual Private Network. A familiar business use is connecting remote employees to an organisation's internal network. Someone working from home can reach resources that would otherwise be available only inside the office.

In everyday conversation, VPN usually means a service that sends your internet traffic through an intermediary server. You install an app, select a location and connect. The app establishes a protected connection to the server and sends traffic through it according to its settings.

These are related but different uses. A corporate connection may provide access only to the work network, while a consumer service changes the route of ordinary internet traffic. The label VPN alone does not tell you which apps or destinations a particular connection covers.

What changes when you connect

Without a VPN, a request travels from your device through the router and internet provider towards the website. With a VPN, the service's server becomes another stop: your device sends data to it, and it contacts the website and returns the response.

A simplified route looks like this:

Device → protected connection → VPN server → website.

Your internet provider still carries the data to the VPN server. A VPN cannot create connectivity: if your phone has no internet access, it cannot connect through one. But for traffic inside a properly configured protected connection, the provider has less visibility into the final destinations and the data being exchanged.

The website normally sees the public IP address of the VPN exit instead of the address of your home or mobile connection. This applies only to traffic that actually follows that route. With split tunnelling, some apps may still connect directly.

The problems a VPN can help solve

The central idea is to provide another, protected route across a network you do not control. That has several practical uses.

Using an unfamiliar network. At a café or hotel, you did not choose the equipment and may not know who operates it. A VPN reduces the information about your network activity available to that operator. HTTPS already protects the contents of connections to websites that use it; the VPN adds a separate layer rather than making every website safe for the first time.

Connecting through another location. If a service uses your IP address to determine availability, another internet exit may change the result. This can be useful while travelling. However, websites may also check the country of your account, payment details or other signals, so changing your IP does not guarantee access.

Reaching a private work network. A work VPN may let you open an internal portal or use a company system from home. Your organisation arranges that access. Buying an ordinary VPN subscription does not automatically grant it.

Think of these as separate reasons for connecting. A location that works well for one task may be unnecessary for another. Knowing your purpose makes it easier to judge whether the service is doing what you need.

Where VPN protection ends

The protected connection to the VPN server and the connection to the website are different parts of the journey. HTTPS matters on the latter: it protects the exchange between your browser and the website even when an intermediary carries the data. MDN's explanation of TLS describes this independent protection.

Imagine sending a document by courier. A closed bag during the first stage is useful, but you still need to check the recipient. Likewise, a VPN cannot correct a fraudulent web address or stop you from willingly entering your password on a phishing page.

There is no contradiction here. Connection privacy, website authenticity and device security are separate problems. Each needs its own safeguards.

Who can observe the connection now?

A VPN transfers some trust from your local network and internet provider to the VPN operator. The operator may technically observe connection information; how much depends on the architecture and configuration. In normal use, HTTPS continues to hide the protected website exchange from intermediaries.

That is why a promise of “military-grade protection” is not a useful basis for choosing a service. Look at who operates it, what its privacy policy says about collected data, and what any published audit actually covers. EFF explains VPN selection and these trust boundaries.

Even an accurate no-logs statement does not mean that websites forget your visits. Cookies, account sign-ins and browser characteristics can still link activity independently of your new IP address.

Why the internet may feel slower

Your data has another part of the journey to complete. A distant server can make responses take longer. An overloaded server or an awkward route to it may reduce transfer speeds.

Download speed and latency measure different things. A film needs a steady stream of data. A video call also depends on timely delivery. In a game, delay can be particularly noticeable. An impressive speed-test result does not guarantee a good experience in all three.

Sometimes the alternative route works better than the original one, improving a particular service. That is possible, but it is not a reason to promise faster internet everywhere. If the connection worsens, compare a nearby location and another supported connection mode, changing one setting at a time.

How to check your connection

Start with ordinary tasks: open a few websites, play a video or make a short call. What matters is how the apps you use behave, not just whether the VPN says “Connected”.

Compare your public IP before and after connecting using a trusted address-checking page. A change shows that this browser request left through another address. It does not prove that every app, DNS request and both IP versions use the VPN.

Check the app's settings. Split tunnelling controls exceptions: which traffic goes through the VPN and which goes directly. A kill switch, where available, is intended to stop the traffic it covers when the protected connection fails. Its actual behaviour depends on the app and operating system, so understand it before relying on it during important work.

Hotel Wi-Fi may first require you to open a welcome page and accept the network's terms. Until then, internet access may be restricted and the VPN may keep trying to connect. Mozilla's public Wi-Fi guide describes this situation. Check the underlying network before assuming your subscription is the problem.

When a VPN is useful

Choose a VPN for a specific job: using a particular exit location, reducing observation by the local network, or accessing work resources. For an everyday user, a good result is straightforward: the apps you need work, the route is understandable and the service's terms are clear.

Keep the usual security habits too. Update your apps, check website addresses, use unique passwords and enable two-factor authentication. A VPN helps manage the connection. Those habits protect what you do at the other end of it.

See how a VPN works on your network with 2Wisp: connect your device, browse your usual websites, watch videos and make calls.