Skip to content

Practical security for real people & small teams

Do you actually need a VPN? An honest answer, situation by situation

By , ICT engineer Published

Guide type
Decision guide
Risk
Low
Time
5 min to decide
Cost
Free to about $10/month
Works on
Phone & computer
Last verified
2026-10-05

The short answer

  • At home, for security: usually no. Almost every website already encrypts your connection. A VPN does not stop phishing, scams, malware or hacked passwords, which is how most people actually get hurt.
  • A VPN is worth it when you want to hide your browsing from the network you are on (hotel, airport, school, your internet provider), when you travel to countries that block sites, or when your job requires one.
  • A VPN does not make you anonymous. It moves trust from your internet provider to the VPN company, which can see everything you do.
  • Free settings in your browser give most people the same protection. They are listed at the end.

What a VPN actually does

A VPN app creates an encrypted tunnel from your device to a server run by the VPN company. From there, your traffic continues to the website as normal. Three things change:

  • The network you are on (café Wi-Fi, hotel, your internet provider) sees only that you are connected to a VPN, not which sites you visit.
  • The websites you visit see the VPN server's IP address instead of yours, so they see a different approximate location.
  • The VPN company can now see the sites you visit and when. As the Electronic Frontier Foundation puts it: do not use a VPN that you do not trust.

What does not change: the websites and apps you sign in to still know exactly who you are. Google, Facebook, your bank and online shops track you by your account, cookies and device, not only by your IP address.

Do you need one? Find your situation

Your situationNeed a VPN?Why
Banking, shopping and email at homeNoThose sites are already encrypted (https). A VPN adds nothing against the real risks: fake websites and stolen passwords.
Café, airport or library Wi-FiOptionalThe FTC says that because of widespread encryption, public Wi-Fi is usually safe. A VPN hides which sites you visit from the network owner. Using your phone's hotspot is just as good.
Hotel, conference or school networkHelpfulThese networks are often monitored or filtered. A VPN keeps your browsing private from the operator.
Hiding your browsing from your internet providerYes, if it matters to youProviders can see which sites you visit and, in some countries, may use or sell that data. A VPN hides it from them, but the VPN sees it instead.
Travelling to a country that blocks websites or appsOften yesA VPN can reach blocked services. Check local law first: some countries restrict VPN use.
Watching another country's streaming catalogueIt may workMany streaming services block VPN servers and forbid it in their terms. This is about content, not security.
Protecting against hackers and virusesNoA VPN does not scan files, block scam sites or stop you typing a password into a fake page.
Staying anonymousNoYou are still logged in to your accounts, and the VPN company knows who pays and what you browse.
Accessing your company's internal systemsUse the one your employer providesThis is a different product, set up by your IT team. A consumer VPN does not replace it.

Free settings that give you most of the benefit

Before paying for anything, switch these on. They take five minutes and cost nothing.

  1. Force encrypted connections in your browser

    In Chrome (computer and Android): Settings › Privacy and security › Security › turn on Always use secure connections. In Firefox: Settings › Privacy & Security › HTTPS-Only Mode. Safari upgrades connections automatically. Your browser will warn you before loading any page that is not encrypted.

  2. Turn on secure DNS

    Every time you visit a site, your device asks a "DNS" server for its address, and on many networks those questions travel in plain text. In Chrome, Use secure DNS sits in the same Security menu and is on in automatic mode by default; check it has not been switched off. Firefox calls it DNS over HTTPS in Privacy & Security.

  3. Use your phone's hotspot instead of unknown Wi-Fi

    If you do not trust a network, share your phone's mobile data with your laptop. Your mobile connection is not shared with strangers.

  4. On Apple devices, consider iCloud Private Relay

    If you already pay for iCloud+, Private Relay hides your IP address from websites and your browsing in Safari from your network, using two separate relays so that, in Apple's words, no single party can see both who you are and which sites you visit. It is not a full VPN: it covers Safari and some app traffic, not everything.

  5. Fix the things that actually cause break-ins

    Unique passwords, two-step verification and updates prevent far more harm than any VPN. Check whether your passwords have leaked and learn the signs of fake login pages in our guide on what to do after clicking a phishing link.

If you decide you need a VPN: how to choose one

  • Prefer a paid service, or a free tier funded by paying customers. The FTC warns that many free VPN apps make money by showing ads or sharing your information with third parties, and that some do not encrypt traffic at all.
  • Look for an independent audit of the "no logs" claim, published on the company's website, and a clear privacy policy that says what is collected.
  • Check who runs it and where. The company's country decides which authorities can demand its data.
  • Use a modern protocol such as WireGuard, IKEv2 or OpenVPN, and a "kill switch" that blocks traffic if the VPN drops.
  • Read the app permissions. A VPN app can intercept all of your internet traffic, so it should not also ask for your contacts, photos or location.
  • Avoid browser "VPN" extensions that only cover one browser and often turn out to be advertising-funded proxies.

Don't

  • Don't install a VPN because a pop-up says your phone is "infected" or "being tracked". That is a scam advert.
  • Don't treat a VPN as permission to ignore browser warnings or to sign in on websites you reached from strange links.
  • Don't pay for lifetime deals from companies you have never heard of. A VPN company that disappears takes your data history with it.

Running a small business? Staff working from cafés need secure accounts more than a VPN: start with multi-factor authentication and updates from our small business cybersecurity checklist, and protect your family from the newest phone scams with our voice clone scam guide.

How we checked this

Written by Ariel, ICT engineer. On 2026-10-05 we compared this guide with the FTC's guidance on public Wi-Fi and VPN apps, the Electronic Frontier Foundation's Surveillance Self-Defense guide on choosing a VPN, Apple's documentation for iCloud Private Relay and Google's Chrome help pages. We did not test or compare specific VPN services for this guide, so it names none and contains no affiliate links. If we review VPNs in the future, it will be on accounts we pay for, as described in how we test.

Sources