Quick answer
A VPN, or virtual private network, creates a protected tunnel between your device or network and a VPN endpoint. Internet services then usually see the endpoint's public IP address instead of your connection's original public address.
Original example
Using public Wi-Fi
A work laptop can connect to an organization's VPN over café Wi-Fi. Traffic inside the VPN tunnel is protected on the way to the organization's VPN gateway, which then forwards it toward approved resources or the wider internet.
What a VPN changes
A VPN moves trust from the local network toward the VPN provider or organization and changes where protected traffic exits. The provider may still be able to observe connection information or traffic after it leaves the tunnel.
HTTPS remains important because it protects browser traffic to the destination; a VPN does not automatically make every website, download, or account safe.
Common misunderstandings
- A VPN does not make a person anonymous in every context.
- A VPN does not replace HTTPS, security updates, or careful account practices.
Related answers
Sources
- Guide to Enterprise Telework, Remote Access, and Bring Your Own Device Security - National Institute of Standards and Technology, accessed 2026-10-30
This is an unreviewed preview draft. Corrections can be sent after the owner configures a verified contact address.