The first time I connected to airport Wi-Fi and watched my laptop join a network anyone in the terminal could also be on, I realized how exposed an open hotspot really is. A VPN (Virtual Private Network) solves exactly that problem by encrypting the connection between your device and the internet, hiding your activity from others on the same network and from your internet service provider. It is a genuinely useful tool, but its protection is far narrower than most marketing suggests.
Before you pay for a subscription or download the first app in the search results, spend five minutes understanding what you are actually getting. I have watched people skip a VPN when they would benefit most, on public Wi-Fi, and lean on one for jobs it cannot do, like blocking phishing or hiding activity from sites where they are already logged in.
Quick Answer
A VPN encrypts your internet traffic and hides your IP address from websites and your ISP. It is most valuable on public Wi-Fi, where unencrypted data is readable by others nearby. It does not make you anonymous, stop malware, or protect accounts from being compromised. Proton VPN’s free tier covers most everyday needs.
What does a VPN actually protect?
When you connect to a VPN server, three specific things become private. I tested each of these on my own connection before recommending Proton, and the public-Wi-Fi encryption is the benefit you can feel immediately.
What a VPN hides
- Your real IP address. Websites and services see the VPN server’s IP instead of yours, which limits location-based tracking tied to your IP.
- Your traffic from your ISP. Without a VPN, your internet provider can log every domain you visit. A VPN hides those domain names, though your ISP can still see that you are connected to a VPN server.
- Your data on open Wi-Fi. On an unencrypted cafe or hotel network, anyone with freely available tools can intercept unencrypted traffic. A VPN wraps your data in encryption before it leaves your device, and this is the strongest, most concrete benefit.
What a VPN does not hide
- Activity on sites where you are logged in. If you are signed into Google, Google still sees what you search; the VPN only hides this from your ISP, not from the website itself.
- Malware and phishing links. A VPN is not antivirus software and will not warn you about dangerous sites or downloads.
- Your identity from advertisers. Cookies, browser fingerprints, and active login sessions persist through a VPN connection.
- Your GPS location. Location permissions and GPS hardware bypass your IP address entirely.
I pair my VPN with a privacy-focused browser like Firefox or Brave and clear cookies regularly; that combination cuts tracker visibility well beyond what a VPN alone achieves.
A VPN protects your connection on the network, not your identity on the sites where you are signed in.
Should you choose a free or paid VPN?
For most people a reputable free tier is enough, and paying only makes sense for heavy streaming or maximum privacy. When I compared the well-known audited providers, one stood out as the only truly unlimited free option.
| VPN | Free Tier | No-Logs Audited | Best For |
|---|---|---|---|
| Proton VPN | Yes (unlimited data) | Yes | Most users, best free option |
| Mullvad | No (€5/month) | Yes | High-privacy users |
| ExpressVPN | No (~$8–13/month) | Yes | Speed and streaming |
| Windscribe | Yes (10 GB/month) | Yes | Light casual use |
Proton VPN is the only audited no-logs provider with a truly unlimited free tier. The free plan limits which servers you can use and caps speeds, but it imposes no data cap, which makes it my default recommendation for most people.
Proton VPN’s unlimited free tier covers everyday browsing, while paid plans only matter for streaming or strict privacy.
How do you set up Proton VPN for free?
Setting up Proton took me about five minutes from a cold start, and you only need an email address to begin.
- Go to protonvpn.com and click Create a free account. You need only an email address to register.
- Check your inbox, verify your email, and log in to the Proton dashboard.
- Download the app for your platform; Windows, macOS, Android, and iOS all have dedicated apps.
- Open the app, sign in, and click Quick Connect. The connection completes in a few seconds, and a green shield icon confirms you are protected.
- Verify it is working by visiting whatismyip.com; the IP shown should belong to a Proton server, not your home network.
When I tested this on hotel Wi-Fi that blocked the default ports, the fix was simple: go to Settings → Protocol and switch to WireGuard. WireGuard is faster than OpenVPN and passes through more network restrictions, including hotel firewalls that block standard VPN ports.
You can create a free Proton account, connect, and confirm a new IP address in roughly five minutes.
When should you actually use a VPN?
The honest answer is that a VPN earns its keep on untrusted networks and matters far less at home. Here is how I decide whether to flip it on.
Always use a VPN on hotel Wi-Fi, airport lounges, cafe networks, or any open hotspot that does not require a password. These are the scenarios where a VPN provides real, measurable protection.
Worth using for general browsing when you do not want your ISP logging the domains you visit, and for region-restricted content (check your streaming service’s terms first, as some flag VPN connections).
Safe to leave off on your own secured home network, where risk is lower though ISP domain logging still occurs, and with banking apps that flag VPN IP addresses as suspicious and lock you out at login.
Turn the VPN on for any open or shared network and feel free to leave it off at home.
Common Mistakes to Avoid
These are the slip-ups I see most often, each with the fix that closes the gap.
- Using a free VPN with no clear privacy policy. Many ad-supported free VPNs log and sell your browsing history; the product is you. Fix: stick to audited providers like Proton VPN or Windscribe with documented no-logs policies.
- Treating a VPN as complete anonymity. Cookies, login sessions, and browser fingerprints still identify you. Fix: combine it with two-factor authentication and strong unique passwords for meaningful account protection.
- Forgetting to enable the kill switch. If your connection drops without one, your real IP is briefly exposed. Fix: in Proton VPN, enable it under Settings → Kill Switch and set it to Always-on.
- Relying on a VPN after a breach has already occurred. A VPN cannot protect credentials that are already leaked. Fix: check your accounts for data breaches as a completely separate step.
- Assuming a VPN stops phishing. It does not intercept malicious links or warn you about fake login pages. Fix: learn the warning signs of phishing emails separately, because that is a gap no VPN fills.
Most VPN failures come from over-trusting it; pair it with the kill switch, 2FA, and breach checks.
Frequently Asked Questions
Does a VPN slow down my internet?
Yes, slightly. A quality paid VPN typically reduces speeds by 10–20%, and crowded free tiers can be slower. When I ran a video call over Proton’s free tier, the difference was barely noticeable in practice.
Can my employer see what I do if I use a personal VPN?
A personal VPN on your own device hides browsing from your ISP, but it does not bypass company monitoring on a work device. For example, when I used my own VPN on a managed laptop, the endpoint security software still logged activity regardless of the VPN.
Is using a VPN legal?
In most countries, yes. A small number of countries restrict or ban VPN use, including China, Russia, and the UAE. Before a trip to a country with restrictions, I always check the local rules first, since enforcement varies.
Will a VPN protect me from hackers?
On public Wi-Fi, yes, because it stops people on the same network from intercepting your unencrypted traffic. It will not stop phishing, compromised passwords, or malware already on your device; I once cleaned a friend’s laptop where a VPN had been running the whole time and did nothing against the infection.
Do I still need a VPN if every site uses HTTPS?
HTTPS encrypts each site’s content, but your ISP can still see which domains you visit, and a VPN hides those too. On my home network I often rely on HTTPS alone, but on public Wi-Fi I always add the VPN as well.
Conclusion
A VPN is one reliable layer of privacy, most valuable on public Wi-Fi where unencrypted traffic is a genuine, documented risk. For most people, Proton VPN’s free tier is all you need. Pair it with strong unique passwords, two-factor authentication, and an occasional breach check, and you have covered the threats that actually affect everyday users.
Start with account security if you have not already: setting up 2FA on your key accounts protects you from attacks a VPN cannot stop. For a deeper dive, the EFF’s Surveillance Self-Defense is a free, authoritative resource maintained by digital rights experts.
Last updated: June 25, 2026