Maybe a grandchild told you to “get a VPN.” Maybe you saw an ad promising to make you invisible online, or a headline warning that public Wi-Fi will steal your bank password the moment you connect. It’s confusing, and a lot of what gets said about VPNs is either overblown or trying to sell you something.
The truth is simpler than the ads make it sound. A VPN is an ordinary tool that does one specific job well: it protects your internet connection on networks you don’t control.
This guide explains what a VPN actually does, when it’s worth using, how to choose one from a company you can trust, and which “VPN” apps you should delete the moment you see them.
What Is a VPN, and Should You Use One?
A VPN encrypts your internet connection and hides your location, which is worth having on public Wi-Fi or while traveling, but it isn’t something most people need turned on every hour of the day.
VPN stands for virtual private network. In plain terms, it’s an app that wraps your internet traffic in an extra layer of encryption and sends it through a separate server before it reaches the website or app you’re using.
Plain talk: VPN
A VPN is an app that creates a private, encrypted tunnel for your internet traffic. Anyone else on the same Wi-Fi network, or your internet provider, sees that you’re connected to the VPN, but not what you’re actually doing online.
Whether you should use one depends entirely on what you’re doing and where. The rest of this guide breaks that down.
What a VPN actually protects
A VPN does two specific things:
- It encrypts your traffic, so if someone on the same network tried to intercept it, they’d see scrambled data instead of your actual activity.
- It hides your real location, by making it look like your connection is coming from the VPN server’s city or country instead of your own.
That’s really all it does. It doesn’t scan for viruses, block scam websites, or check whether an email is real. According to ExpressVPN’s own explanation of the service, a VPN protects the connection itself, not the device or the person using it.
What a VPN does not do
This is the part the ads tend to skip over. A VPN will not:
- Stop a scam phone call or text message
- Warn you that an email is a phishing attempt
- Verify that a website is legitimate before you type in your password
- Replace two-factor authentication or a password manager
- Remove malware already on your phone or computer
If you want help with those specific risks, our guides on how to spot a phishing email and what app permissions actually mean cover ground a VPN simply doesn’t touch.
Safety tip
Never treat a VPN as a reason to lower your guard. A scam email looks exactly the same whether or not you have a VPN turned on.
When a VPN is actually useful
Public Wi-Fi
This is the classic case. At a coffee shop, airport, or hotel, you’re sharing a network with strangers, and you have no way to know how well it’s secured. A VPN encrypts your traffic on that network so it isn’t sitting in the open. Our guide on public Wi-Fi safety covers the other habits worth pairing with it, like confirming the exact network name with staff before you connect.
Traveling, especially overseas
Hotel and airport Wi-Fi in an unfamiliar country carries the same risks as any public network, plus one more: some countries restrict access to certain websites or apps. A VPN can help you reach your usual banking, email, or messaging apps while you’re away, on top of the same encryption benefit you’d get at a local cafe.
Try this
If you’re planning a trip, set up and test your VPN app at home first, while you’re on a network you trust. That way you’re not troubleshooting settings for the first time in an unfamiliar hotel lobby.
Keeping your internet provider out of your browsing habits
Your home internet provider can normally see which websites you visit, even if it can’t see exactly what you typed. A VPN hides that from them too. Some providers also use this browsing history to sell targeted advertising. This one is a matter of personal preference rather than safety, and plenty of people simply don’t worry about it, while others prefer to keep that list of visited sites private.
When you probably don’t need one
- At home, on your own password protected Wi-Fi. The main risk a VPN solves, a stranger sharing your network, mostly doesn’t apply here.
- For casual browsing, like checking the weather, reading the news, or watching videos. There’s little to protect.
- As a way to avoid scams in general. A VPN has nothing to do with caller ID, text messages, or spotting a fake website. Treat it as one tool among several, not a substitute for the others.
| Situation | Is a VPN worth using? |
|---|---|
| Banking on airport or cafe Wi-Fi | Yes |
| Reading news on your home Wi-Fi | Not needed |
| Traveling overseas with hotel Wi-Fi | Often, yes |
| Checking the weather app | Not needed |
| Working from a coffee shop regularly | Worth it |
How to pick a reputable VPN
Choosing a trustworthy VPN doesn’t require technical knowledge, just a bit of care. The FTC’s own guidance on shopping for a VPN app lays out a sensible checklist, and it still holds up:
- Research the company first. Look for a real business with a name you can search for, reviews from sources you already trust, and a track record of more than a few months.
- Choose a paid plan over a free app. A company has to pay for its servers somehow. If you’re not paying with money, you may be paying with your data.
- Check what the app actually asks for. A VPN app has no reason to request access to your contacts, photos, or camera. Our guide on app permissions explains how to check this on your phone in a couple of minutes.
- Read the privacy policy, or at least skim it. Look specifically for whether the company says it logs or sells your browsing activity. A clear “no logs” policy is a good sign, especially if an outside security firm has reviewed and confirmed that claim.
- Confirm it actually encrypts your data. Not every app that calls itself a VPN does this properly. Sticking with a well known name largely solves this for you.
Scam and low-quality VPN apps to avoid
Not everything labeled “VPN” in an app store is trustworthy. A few warning signs, drawn from the FTC’s consumer guidance on VPN apps, are worth remembering:
- It’s free, with no paid option at all. Running VPN servers costs real money. If nobody is paying for that anywhere, the company is likely making money from your data instead.
- You can’t find who runs it. A legitimate company has a name, an address, and a support page. If a search turns up nothing, that’s a red flag on its own.
- It asks for permissions that don’t make sense, like access to your contacts or photo library.
- It’s hard to cancel. Some shady apps make the free trial easy to start and the subscription nearly impossible to stop. If that happens to you, our guide on canceling a subscription you forgot about walks through the steps.
- The reviews mention sudden charges or a service that stopped working right after signing up.
Say this
If you’re helping a parent or grandparent choose a VPN, try: “Let’s search the company’s name together first, before we install anything, just to see who actually runs it.”
A simple starting point
If all of this feels like more than you need to think about, here’s the short version: most people can get by without a VPN most of the time. Turn one on for public Wi-Fi and travel, from a paid provider with a recognizable name, and skip it the rest of the time. That single habit covers the situation where a VPN actually earns its place, without turning it into one more thing to manage every day.
Where to go from here
A VPN is one small, useful habit for the handful of times you’re on a network you don’t control, not a general defense against scams. For the everyday habits that do cover phishing, fake calls, and payment scams, our book Scam-Proof walks through those in the same plain, practical style as this guide.
