A virtual private network (VPN) creates an encrypted tunnel between a device or network and a VPN server. Internet traffic sent through that tunnel exits to the wider internet from the VPN server, so many websites see its public IP address rather than the address assigned to your home connection.
How the connection works
A VPN app authenticates with a provider and establishes an encrypted connection. Your device sends selected traffic through that connection; the VPN server forwards it to its destination. The destination replies through the same route. Encryption protects the link to the VPN endpoint, but HTTPS still protects the separate connection between your browser and a secure website.
Who can see what?
Your local network can generally see that a VPN connection is active, but the tunnel limits visibility into its contents. The VPN provider handles the traffic leaving its server and may observe connection metadata. Websites can still recognize accounts, cookies, browser settings, and other information you provide.
Important limits
A VPN does not make every app use the tunnel, prevent malware, guarantee anonymity, or make an unsafe website secure. Features and routing behavior vary by app, device, and configuration. Learn about common reasons people use a VPN and how to evaluate a provider.