VPN basics
What is a VPN?
A Virtual Private Network creates an encrypted tunnel between your device and a remote server. Your internet traffic passes through this tunnel, hiding the websites you visit from your ISP and hiding your real IP address from the websites you visit.
What VPNs are good for
- Privacy from your ISP: Hide which sites you visit from your internet provider
- Geo-unblocking: Watch Netflix US from outside the US, BBC iPlayer from outside the UK
- Public WiFi safety: Prevent snooping on coffee shop / hotel WiFi
- Bypass censorship: Access blocked sites in restrictive countries
- P2P privacy: Hide torrenting activity from your ISP
What VPNs are NOT good for
- Anonymity from advertisers: Google, Facebook, etc. track you via cookies, browser fingerprinting, and login state — not just IP
- Replacing antivirus: VPNs don't scan for malware (some include antivirus as a separate feature)
- Hiding from logged-in services: If you're logged into Google, they know it's you regardless of VPN
- Hiding from law enforcement determined to identify you: Use Tor + VPN if you genuinely need this
Picking the right VPN
If you want streaming primarily
Look for: Netflix unblocking, Disney+, BBC iPlayer in last 30 days of testing. Speed > 500 Mbps.
Top picks: ExpressVPN, NordVPN, Surfshark
If you want privacy primarily
Look for: Audited no-logs, privacy-friendly jurisdiction (Switzerland, Panama, BVI), open-source apps.
Top picks: Mullvad, Proton VPN, NordVPN
If you want budget
Look for: <$3/mo on 2-year plan, no compromises on encryption.
Top picks: Surfshark, PIA, CyberGhost
If you have many devices
Look for: Unlimited or 8+ simultaneous connections.
Top picks: Surfshark, PIA, IPVanish
Glossary
- WireGuard: Modern, fast VPN protocol. Smaller code = easier to audit.
- OpenVPN: Older but battle-tested. Slower than WireGuard but maximum compatibility.
- No-logs policy: Provider doesn't store records of what you do. Only meaningful if independently audited.
- Kill switch: Cuts your internet if VPN drops. Critical for torrenting or privacy use cases.
- Split tunneling: Lets you choose which apps go through the VPN and which don't.
- Obfuscation: Makes VPN traffic look like normal HTTPS. Needed in restrictive countries (China, UAE, Iran).
- Double-VPN / Multi-hop: Routes traffic through 2 servers in different countries. Higher privacy, slower speed.
- Onion-over-VPN: Routes VPN traffic through Tor. Maximum privacy, very slow.
- Five Eyes: Intelligence-sharing alliance — US, UK, Canada, Australia, New Zealand.
- 14 Eyes: Extended intelligence-sharing — Five Eyes + most of Western Europe.