What Is a VPN & Do I Need One? Complete 2024 Guide

Updated on: April 25, 2024
Fact Checked by Eric Goldstein
Katarina Glamoslija Katarina Glamoslija
Updated on: April 25, 2024

I’ve spent many years using, testing, and researching VPNs (virtual private networks), but I know that most people are either new to VPNs or don’t fully understand how they work or why they should use one.

I also know it’s hard to find a comprehensive introductory guide to VPNs — many online articles fail to provide helpful or in-depth information about them.

So, I decided to put my experience with VPNs to good use and write my own comprehensive guide. It will help you understand how VPNs work, what they do (and don’t do), and how to use a VPN — and if you want to buy one, I’ve recommended some of the best VPNs on the market. My favorite is ExpressVPN, as it’s super secure, offers blazing-fast speeds, and has user-friendly apps.

Try ExpressVPN Now

How Do VPNs Work?

VPNs are online apps that have servers located all over the world. When you connect to a VPN server, it encrypts all your traffic, making the websites you visit and files you download unreadable. In addition, a VPN replaces your actual IP address with an IP address that matches your server location — for example, if you connect to a server in the UK, you will receive a UK IP address, making it seem as if you are in the UK.

The Analogy

Imagine your son wants to ask for a cookie, but knows you won’t give him one. Instead, he has a friend ask you for a cookie. Since you want to make sure your son’s friend feels welcome, you give his friend a cookie. However, the friend gives your son the cookie.

The friend places the cookie in a paper bag, to make sure nobody in your house sees him carry the cookie back to your son’s room. While you can see the friend going to your son’s room, you don’t know what’s in the bag. In this analogy, your son’s friend is the VPN server and the bag represents the encryption.

The Technical Explanation

A VPN acts as a “middleman” between you and your internet connection. When you connect to the internet without a VPN, your internet service provider (ISP) assigns you an IP address that coincides with your real location (such as the city you live in) and it receives the website address you want to visit and connects you to the website.

However, when you connect to a VPN server, the process is slightly different. You still need to connect to the internet via your ISP, which assigns you an IP address. But when you connect to a VPN, it assigns you an IP address that coincides with the location of the VPN server. Your website request is now routed through the VPN server, which means any website you visit will only see your VPN IP address, and not your real one.

When you connect to a VPN server, it establishes a VPN tunnel, which is an encrypted connection between the VPN server and the internet — any information passing through that encrypted connection, such as your browsing data, is completely unreadable, so nobody can spy on it.

Quick summary of the best VPNs in 2024:

  • 🥇1. ExpressVPN — Best overall VPN in 2024 (super-fast speeds, great security, and easy-to-use apps).
  • 🥈2. Private Internet Access — Great VPN for torrenting (with bonus P2P-friendly features & advanced security).
  • 🥉3. CyberGhost VPN — Fast VPN with optimized streaming servers + convenient automation features.

Reasons Why You Need a VPN

Here are the main reasons people use a VPN:

  • Security and privacy. A VPN protects your data and privacy when you surf the web.
  • Streaming. A VPN is great for safely streaming your favorite content. It helps prevent your internet service provider from possibly throttling your speeds — some ISPs do this when users engage in heavy bandwidth activities, like streaming. In theory, you could use a VPN to watch movies and shows on streaming platforms that aren’t available in your current location. However, doing so is against most streaming platforms’ Terms of Service and may be considered copyright infringement, so neither I nor any of my colleagues at SafetyDetectives condone this activity.
  • Torrenting. A VPN allows you to securely and privately download files.
  • Gaming. You can use a VPN to lower your ping (how long it takes for a device to communicate with the gaming server), circumvent unfair IP address bans, and protect your network against DDoS attacks.
  • Firewalls and censorship. There are some VPNs that allow users to circumvent firewalls at work/school, while others help people in countries that censor the internet.
  • Bandwidth throttling. A VPN helps prevent ISPs from intentionally slowing down user speeds due to the user consuming excess data while torrenting or gaming.

Security & Privacy

VPNs are great tools for security and privacy. When I connect to a VPN server, my ISP and other third parties like the government or a hacker are unable to see which websites I visit. I always connect to a VPN at home, as well as when I surf the web on a public Wi-Fi network, such as at a cafe, the airport, or a hotel.

A public Wi-Fi network is less secure than my home network and more vulnerable to bad actors trying to spy on my traffic. For example, I connected to a VPN server as soon as I logged on to the free public Wi-Fi at my auto mechanic’s shop while I waited for my car to get fixed — this way, hackers couldn’t see the username and password I entered for a site or my credit card information when I purchased something on Amazon.

In addition, a VPN changes your IP address, so nobody can see it and use it to find your geographical location. Your IP address doesn’t reveal your street address, but it does reveal what town or city you live in. This helps advertisers track your location and target you with annoying geo-specific ads. However, you can hide your location with a VPN and even make it appear as if you’re in a different country.

Streaming

Streaming sites sign licensing agreements with copyright holders to air content in a certain country. For example, Netflix might only be able to legally broadcast a TV show in the US, the UK, and Canada. If you travel abroad, you probably won’t be able to watch your favorite TV show.

VPNs change your IP address, which reveals your location, so it’s theoretically possible to get around these restrictions. But I don’t recommend this because it violates most streaming websites’ Terms of Use and might even break copyright law.


My team and I at SafetyDetectives do not condone copyright infringement. The VPNs we recommend have strict no-logging policies that prevent them from seeing or recording what you do online. This means you’re responsible for how you choose to use a VPN, so please be sure to follow all applicable rules and regulations.

Torrenting

Torrenting is legal in most parts of the world, but it’s illegal to download copyrighted files. To prevent customers from using peer-to-peer (P2P) sites to illegally torrent copyrighted content, ISPs may block torrent sites, slow down P2P connections, or send their customers written warnings.

You can avoid all of these measures with a good VPN for torrenting. The VPN will encrypt your online traffic and shield your ISP from seeing that you’re visiting a torrent site.

My team and I don’t condone using a VPN to illegally download copyrighted files. I strongly recommend that you avoid torrenting copyrighted content and check your local laws to make sure it’s safe to torrent.

Gaming

I can’t guarantee that a VPN will lower your ping 100% of the time, but it almost always does for me when I use ExpressVPN, which is my favorite gaming VPN in 2024. In my speed tests on servers in 10+ countries, my ping always dropped from 160–170 ms to 80–111 ms while playing Dota 2 and Counter-Strike: Global Offensive. I was able to enjoy more stable and lag-free gaming sessions connected to the VPN.

A VPN also helps protect you from distributed denial-of-service (DDoS) attacks, which flood your network with unwanted traffic until it forces you offline. What’s more, if you get banned or suspended while playing a video game, the video game typically bans your IP address and not your account. So, you can bypass the ban by simply changing your IP address with a VPN and get back to playing the game.

Firewalls and Censorship

Countries like China, Russia, and Indonesia use sophisticated firewalls to restrict access to social media platforms, news sites, and other online platforms. The good news is there are a handful of VPNs that have obfuscation tools that help you evade government censorship and allow you to access practically any website you wish. You can also use obfuscation to bypass firewalls at universities and workplaces.

Bandwidth Throttling

Without a VPN, your ISP can see which sites you browse and how much data you consume on each website. If you use too much data, it might throttle your connection speeds to limit your data usage. For example, if your ISP sees you binging Netflix over the weekend, it might start slowing down your connection to that site.

However, if you use a VPN, your ISP can’t see which website you access. It will still see how much data you use, but without knowing which sites you’re on, your ISP won’t be able to throttle your connections.

What a VPN Doesn’t Do

VPNs are great security tools for protecting your data and privacy, but they also have their limitations. Here’s what a VPN can’t do:

Protect Your Device from Malware

VPNs can’t detect or remove malware. If you accidentally download a malicious file, a VPN can’t stop it from compromising your device and stealing your passwords, credit card numbers, photos, and other sensitive data.

Some VPNs include a malware blocker as part of their ad-blocking feature. However, the malware blocker only prevents you from connecting to shady sites that might host malware — it doesn’t actually block malware from accessing your device.

For full protection against malware, I recommend using a good antivirus. There are many top antiviruses on the market, but my favorite one is Norton. Its malware scanner registered a perfect score in our tests and also includes other excellent features like anti-phishing protection, a firewall, dark web monitoring, webcam protection, a password manager, and even a VPN (Norton Secure VPN).

Make You 100% Anonymous on the Internet

A VPN encrypts your internet traffic and changes your IP address to provide extra layers of protection and privacy, but it’s impossible for a VPN to make you completely anonymous — and here’s why:

  • When you make online payments, payment processors and vendors collect your payment data.
  • Websites use browser fingerprinting (a method to track site visitors) to collect specific information about your device, including language, operating system version, screen resolution, timezone, and more.
  • Your VPN and internet connections go through your ISP’s network.
  • If you use social media platforms, they’re able to access personal information like your email address, name, and phone number.

Prevent Sites From Using Cookies

Cookies are small text files that are downloaded to your device when you visit a legitimate website and agree to its cookie policy. Cookies have many uses, like automatically logging website users into their accounts or saving users’ website preferences (for example, which languages they picked). However, sites can also use cookies to track your online behavior and share information about your preferences with advertisers.

VPNs can’t protect you from cookies because they’re not designed to intercept and store your cookies on their servers. To get rid of cookies, you need to clear your browser’s cache and cookies, use your browser’s incognito/private mode, or use third-party browser extensions that block cookies.

Circumvent Internet Shutdowns

An internet shutdown is the intentional disruption of internet communication. Internet shutdowns sometimes occur in restrictive countries when violent protests or military interventions take place.

I’ve seen people claim you can use a VPN to bypass internet shutdowns, but unfortunately, that’s not true. If you don’t have internet access, you can’t use a VPN.

Stop Your ISP From Seeing Your Real IP Address

A VPN can’t prevent your ISP from seeing your IP address. While it can stop websites, governments, and hackers from seeing your real IP address, your VPN connection is through your ISP’s network, so your ISP will always see your connection.

To make things clearer, here’s what your ISP sees when you use a VPN:

  • Your real IP address.
  • The IP address of the VPN server you’re connected to.
  • How much data you use while connected to the VPN server.
  • Which port the VPN connection uses.
  • When you connect to the VPN server.

But none of that information allows your ISP to compromise your privacy by seeing which sites you browse, so that’s good news.

Encrypt What You Do on Other Sites

VPNs encrypt your connection to a website, but they can’t encrypt what you do on those sites. The owner of that website will still be able to see what you type, upload, or download. For example, a VPN can’t prevent Facebook from seeing a picture you upload or Twitter from reading one of your Tweets.

VPNs From A to Z

What Are VPN Clients?

A VPN client is a software you download and install on your device and use to connect to a VPN server. It’s also called a VPN app. The VPN client communicates with the VPN server to establish the encrypted VPN connection.

Most top VPNs have clients for iOS, Android, Windows, macOS, and Linux that are very easy to install and use. For example, here’s what ExpressVPN’s Windows client looks like:

VPNs From A to Z

What Are VPN Servers?

A VPN server is computer hardware that’s configured to run VPN software. Here’s what the VPN server does:

  • Encrypts your traffic — The process involves creating an encrypted connection (or tunnel) between the VPN client and the VPN server. This way, all of your data, including the websites you visit, is scrambled.
  • Changes your IP address — When you connect to a VPN server, it assigns you an IP address that coincides with the server’s location. All of the sites you access while connected to the VPN server will only see the VPN server’s IP address (and not your real IP address).

VPN Encryption Explained

Encryption converts data from a readable format to an unreadable format. For example, if you access Facebook while connected to a VPN, your ISP won’t see that you’re connecting to facebook.com — instead, it’ll see gibberish like “HFUh3245KFh894.” VPN encryption makes it nearly impossible for someone to spy on your internet traffic.

To encrypt and decrypt user traffic, VPNs use encryption keys, which are randomly-generated strings of bits (the smallest unit of data in a computer). Only the VPN client and server have access to the encryption keys.

VPN encryption also relies on encryption ciphers, which are algorithms used to perform the encryption and decryption process. There are many types of encryption ciphers out there, but most top VPNs use Advanced Encryption Standard (AES), ChaCha20, or both.

What Are VPN Protocols?

A VPN protocol determines how a VPN connection is established between the VPN client and the VPN server. Here’s a list of all available VPN protocols:

  • OpenVPN — Popular open-source protocol that provides strong security and good speeds.
  • WireGuard — Modern open-source protocol that’s just as secure as OpenVPN but much faster.
  • IKEv2/IPSec — Secure and fast protocol that can resist network changes. For example, the VPN connection won’t drop if you switch from mobile data to Wi-Fi.
  • SoftEther — Open-source protocol that’s fast and secure, but only a few VPNs provide access to SoftEther because it’s difficult to integrate into their services.
  • SSTP — Secure protocol, but many VPNs don’t use it since it’s not natively available on iOS and macOS.
  • L2TP/IPSec — Provides decent security and good speeds, but many top VPNs don’t use this protocol due to allegations that it has been compromised by government agencies.
  • PPTP — Has very fast speeds, but its encryption is very weak, which is why top VPN providers don’t support this protocol.

Also, some providers have their own ultra-secure and fast proprietary protocols — for example, ExpressVPN has Lightway, and Hotspot Shield has Hydra.

Do VPNs Slow Down Your Speeds?

Using a VPN will always slow down your speeds at least a little bit, and here’s why:

  • Encryption. VPNs add a layer of encryption to your traffic, and the encryption-decryption process increases the time it takes for the VPN and your ISP to route your data.
  • It routes your traffic through a VPN server. Instead of heading straight to the internet, your connection first passes through a VPN server. The further the distance is between you and the VPN server, the longer it takes for the internet signal to travel from your device to the VPN server.

But the best VPNs minimize the speed loss so it’s barely noticeable. In our tests, ExpressVPN is the fastest VPN in 2024.

How to Increase VPN Speeds

Here are some ways to fix noticeable slowdowns with a good VPN:

  • Use the quick-connect feature. Most top VPNs come with this feature, which automatically connects you to the fastest server for your location.
  • Manually connect to a nearby server. If a quick-connect feature isn’t available, I recommend manually connecting to a server in your country. If there isn’t a server in your country, then connect to a server in a neighboring country.
  • Select a fast VPN protocol. Many VPNs use OpenVPN by default, but I recommend using WireGuard or IKEv2/IPSec, which are both faster than OpenVPN.
  • Use split-tunneling (if available). This feature lets you pick which apps and websites use the VPN and which apps use your local network. The less traffic the VPN has to route, the more you’ll boost your speeds. For instance, if you only want to use the VPN for torrenting, you can split-tunnel only P2P traffic through the VPN.
  • Don’t use Wi-Fi. Wi-Fi speeds are influenced by the strength of your connection’s Wi-Fi signal. So, if the signal is weak, you’ll experience noticeable slowdowns. I recommend using a wired connection (also called an ethernet connection) instead — my VPN speeds are always 40–60% faster over a wired connection.
  • Close background apps. Unused web-connected apps can eat away at your bandwidth, slowing down your VPN speeds. For example, if you’re only using a VPN for streaming, you should shut down social media and gaming clients.

What Is a No-Logs Policy & Why Is It Important?

A no-logs policy is the VPN’s guarantee that it won’t collect your IP address and browsing traffic. This way, if the government requests a user’s data, the VPN won’t have any record of it.

All the top VPNs in 2024 have a strict no-logs policy, which details all of the data the VPN does and doesn’t collect.

Does a VPN Guarantee Online Privacy?

A VPN protects your online privacy by hiding your traffic and preventing anyone from tracking your IP address. However, to actually guarantee your internet privacy, the VPN needs to have a no-logs policy.

The thing is, most VPNs have a no-logs policy. What sets them apart from one another and ensures your privacy is protected is whether the no-logs policy has been verified by an external source.

For example, let’s take a look at some VPNs. ExpressVPN, Private Internet Access, CyberGhost VPN, Proton VPN, TunnelBear, and VyprVPN have all had their no-logs policies independently audited and confirmed by a third-party security firm. CyberGhost VPN, Private Internet Access, and Proton VPN all issue regular transparency reports, which show all of the requests for user data the VPN received from government agencies and law enforcement and how the VPN had no data to hand over. Plus, Private Internet Access had its no-logs policy verified in multiple US court documents, and ExpressVPN’s was also proven true when Turkish authorities seized one of its servers but weren’t able to find any user data on it.

How Do I Know If My VPN Is Working?

VPNs From A to Z

The best way to check if your VPN is working is to perform a leak test, which checks to make sure that only the VPN IP address is exposed, and not your actual IP address. Here are the 5 easy and quick steps for how to perform a VPN leak test:

  • Step 1. Visit ipleak.net without being connected to the VPN.
  • Step 2. Screenshot the results, which display your real IP and DNS addresses.
  • Step 3. Open the VPN app and connect to a VPN server.
  • Step 4. Visit ipleak.net again.
  • Step 5. Compare the results with the results from the previous screenshot. If the current results don’t show your real IP or DNS addresses, the VPN is working.

If you see your real IP and DNS addresses in the leak test results, the VPN isn’t working and is leaking your data. In that case, I strongly recommend ditching that provider and switching to a VPN that has airtight leak protection. I’d personally go with ExpressVPN, as it has full protection against DNS, IPv6, and WebRTC leaks. I ran leak tests while connected to servers in 20+ countries and never saw any leaks.

Is It Illegal to Use a VPN?

Using a VPN is legal in most countries — it only becomes illegal if you use the VPN to engage in criminal activities. However, restrictive countries like China, Iran, and Saudi Arabia have banned VPNs, so you might face legal repercussions if you’re caught using a VPN in those countries.

I strongly recommend you thoroughly research the local laws of your country or the country you plan to visit to make sure it’s safe to use a VPN.

Frequently Asked Questions

What do you use a VPN for?

You can use a VPN for many different reasons. These include protecting your data when you surf the web, streaming movies and shows more securely, securing your P2P traffic, and improving your gaming experience. VPNs can also circumvent firewalls that restrict your online access, and prevent your ISP from throttling your bandwidth.

What’s the best VPN?

ExpressVPN is the best VPN in 2024 — it has servers in 105 countries, provides industry-leading security and privacy features, works with all top streaming sites (including Netflix, Disney+, and BBC iPlayer), has intuitive apps for all platforms, and backs each purchase with a 30-day money-back guarantee.

Do VPNs work with Netflix?

Not all VPNs work consistently with Netflix, but all of the ones on my list do. If you’re looking for a really good VPN for Netflix, I recommend ExpressVPN — in my tests, it worked with Netflix Serbia 100% of the time, has the fastest streaming speeds on the market, and is very easy to use.

How much does a VPN cost?

On average, a VPN will cost between $8 and $13 per month, but most providers have long-term plans that provide great savings and deals. For example, ExpressVPN’s longest plan starts at $6.67 / month and comes with 3 additional months for free.

If you want an excellent low-cost VPN, check out Private Internet Access, which has prices as cheap as $2.03 / month.

Are there free VPNs?

Yes, but I generally recommend avoiding them — most free VPNs are missing important security features (like a kill switch and a no-logs policy), don’t work with streaming sites, limit how much data you can use, have very slow speeds, and have buggy apps.

That said, if you insist on using a free VPN, I’d go with Proton VPN. It provides unlimited data, strong security, and good speeds. However, it limits you to 1 connection, provides servers in only 5 countries (the US, Japan, Romania, Poland, and the Netherlands), and doesn’t allow streaming or torrenting.

Overall, I strongly recommend getting an affordable premium VPN like ExpressVPN or one of Proton VPN’s paid plans to get significantly better value.

Can I use a VPN on more than 1 device?

Yes. The industry average is 5–10 simultaneous connections. ExpressVPN allows 8 connections, Proton VPN allows 10 connections. However, if you have a lot of devices or have a large family, I recommend getting a VPN that supports unlimited simultaneous connections, like Private Internet Access or Surfshark.

Do VPNs work on all platforms?

Yes, most VPNs have dedicated apps for all major operating systems, including iOS, Android, Windows, macOS, and Linux. Many top providers also have apps for Fire TV and Android TV devices.

You can also use a VPN on devices that don’t natively support VPNs, like gaming consoles or some smart TVs with a router. Most VPNs require a tricky manual setup on a router, but ExpressVPN actually has an easy-to-install router app.

What’s the difference between a VPN and a proxy?

A VPN is an online service that encrypts your traffic and changes your IP address. A proxy is a service that changes your IP address, but it doesn’t encrypt your traffic.

Basically, a proxy is less secure than a VPN, so you should avoid it if you’re looking to protect your online data.

Common VPN Terms Explained

IP Address A unique set of characters assigned to your device, which acts as your digital address and lets your device communicate with other devices and servers on the internet.
ISP Stands for internet service provider, which is the provider that allows you to access the internet.
VPN Provider A company that provides you with access to a VPN service.
Encryption A method that scrambles your data to prevent a third-party from monitoring it.
VPN Client An app you install on your device to use a VPN service.
VPN Server Hardware that runs VPN software, which is responsible for encrypting your traffic and changing your IP address.
VPN Tunnel The encrypted VPN connection created between your device and the VPN.
VPN Protocol A set of rules that determine how a VPN client and VPN server establish an encrypted VPN connection.
Kill Switch A feature that disables online access if the VPN disconnects to prevent data leaks.
No-Logs Policy A guarantee that the VPN provider doesn’t collect your IP address, the sites you visit, and the files you download.
Double VPN A VPN connection that goes through 2 VPN servers instead of 1 VPN server, adding an extra layer of encryption.
Obfuscation A feature that hides VPN traffic, making it look like normal internet traffic. It’s used to bypass government and other firewalls.
Split-tunneling A feature that lets you choose which traffic uses the VPN connection, and which traffic uses your local network.
IP, DNS, and WebRTC Leaks Types of data leaks a VPN can suffer, which can compromise your privacy. Top VPNs protect you against these types of leaks.
Geo-Blocks A form of protection that websites use to prevent you from accessing certain online content if it’s not available in your country. For example, geo-blocks prevent you from using BBC iPlayer outside of the UK.
Peer-to-peer (P2P) Support This means the VPN allows torrenting on its servers.
5/9/14 Eyes Alliances A group of countries that share surveillance data with each other. The 5/9/14 Eyes alliance consists of the US, Canada, New Zealand, the UK, Australia, Norway, Denmark, France, the Netherlands, Italy, Spain, Belgium, Germany, and Sweden.
Proxy Server A server that hides your IP address just like a VPN, but it only provides weak encryption or doesn’t provide any encryption at all.
Smart DNS A service that provides access to streaming sites by spoofing your DNS traffic. It doesn’t change your IP address or encrypt your traffic.

Quick Overview of Top Recommendations:

Our Rank
Our Score
Best Deal
1
9.8
save 49%
2
9.6
save 83%
3
9.4
save 84%
The listings featured on this site are from companies from which this site receives compensation and some are co-owned by our parent company. This influence: Rank and manner in which listings are presented. 
Learn more
About the Author
Katarina Glamoslija
Katarina Glamoslija
Head Content Manager
Updated on: April 25, 2024

About the Author

Katarina Glamoslija is Head Content Manager at SafetyDetectives. She has nearly a decade of experience researching, testing, and reviewing cybersecurity products and investigating best practices for online safety and data protection. Before joining SafetyDetectives, she was Content Manager and Chief Editor of several review websites, including one about antiviruses and another about VPNs. She also worked as a freelance writer and editor for tech, medical, and business publications. When she’s not a “Safety Detective”, she can be found traveling (and writing about it on her small travel blog), playing with her cats, and binge-watching crime dramas.