What Does a VPN Hide? (And What It Does Not)

VPN advertising often oversells what the technology can do. Claims of complete anonymity and total invisibility are common — but misleading. Understanding what a VPN actually hides, and what it does not, is essential for using it effectively and avoiding false security.

This guide cuts through the marketing language to explain exactly what a VPN conceals, what remains visible, and what complementary tools and habits you need for genuine online privacy.

What a VPN Actually Hides

When you activate a VPN, several things change about how your internet connection appears to the outside world. Here is what is genuinely hidden:

Your Real IP Address

Your IP address is the most identifiable piece of information about your internet connection. It reveals your approximate geographic location, your internet service provider, and can be used to track you across websites. A VPN replaces your real IP address with the IP address of the VPN server you are connected to.

This is the primary function of a VPN and the thing it does best. When you visit a website, they see the VPN server's IP address — not yours. This prevents websites from logging your real location and makes it harder to track you across the web.

Your Internet Service Provider

Without a VPN, your ISP sees every website you visit, every service you use, and can log this data. In many countries, ISPs are legally required to retain this information. With a VPN, your ISP sees only that you are connected to a VPN server — the content and destinations of your traffic are invisible to them.

This is particularly valuable on public WiFi networks where a malicious ISP or hotspot operator could monitor your activity, as well as in countries with invasive surveillance or mandatory data retention laws.

Your Browsing Activity

A VPN encrypts all traffic between your device and the VPN server using strong encryption (typically AES-256). This means that anyone who intercepts your traffic — hackers on the same network, your ISP, or government surveillance systems — sees only encrypted gibberish.

The encryption is end-to-end, meaning only your device and the VPN server can decrypt the traffic. Even the VPN server itself cannot inspect the content of your browsing — it simply routes encrypted packets to and from your destinations.

Your DNS Queries

DNS (Domain Name System) queries are the requests your device makes to translate website names into IP addresses. Normally, these queries are sent to your ISP's DNS servers, which means your ISP can see every website you visit — even before you connect to it. A quality VPN routes these queries through its own DNS servers, preventing your ISP from monitoring them.

However, not all VPNs handle DNS queries correctly. Some VPNs leak DNS requests, meaning they still go to your ISP's servers despite the VPN connection. We cover how to test for this in our DNS leak test guide.

What a VPN Does Not Hide

This is where understanding the limits of VPN technology becomes critical. A VPN does not make you invisible, and overestimating its capabilities can lead to behaviors that compromise your privacy.

Your VPN Provider Itself

When you use a VPN, you are shifting trust from your ISP to the VPN provider. Your VPN provider sees your real IP address, knows when you connect, and can see how much bandwidth you use. This is why the VPN provider's logging policy matters enormously. A no-log VPN that does not record your activity is fundamentally different from one that maintains detailed connection logs.

Even a no-log VPN typically knows your real IP address (temporarily), when you connected, and which VPN server you used. The question is what they do with that information and whether they can be compelled to hand it over to authorities.

Websites You Log Into

Logging into a website with your real account reveals your identity to that service regardless of your IP address. If you log into Facebook, Google, or any service with your personal account, that service knows exactly who you are. Your IP address changes, but your account is tied to your identity through cookies, login sessions, and account credentials.

This seems obvious, but it is worth stating: a VPN does not make you anonymous on websites you actively use. It only changes the IP address those services see — it does not change who you are to them.

Browser Fingerprinting

Even with a VPN, your browser sends a remarkable amount of information to every website you visit. Screen resolution, installed fonts, browser extensions, time zone, language preferences, and behavioral patterns — all of this can be combined to identify you without using your IP address at all. This is called browser fingerprinting, and it is increasingly used by trackers and sophisticated advertisers.

A VPN does nothing to prevent fingerprinting. In fact, because your IP address now matches a different geographic region, your browser settings may make you more distinguishable if they do not match the apparent location.

Your Device's IP Address (for Incoming Connections)

If you are running servers, peer-to-peer applications, or any service that requires incoming connections, a VPN does not hide your device's IP address for those connections. Anyone connecting to your service will still reach your device's actual IP address.

Metadata and Connection Patterns

While a VPN encrypts the content of your traffic, metadata about your communications can still be collected. This includes when you communicate, how much data you send, how long you are connected, and the general categories of activity (even if not the specific content). Advanced adversaries can analyze traffic patterns to infer what you are doing even without decrypting the content.

Specific Leak Risks to Understand

Beyond what a VPN does not inherently hide, there are specific technical vulnerabilities that can expose information a VPN is supposed to protect:

DNS Leaks

As mentioned earlier, DNS queries can sometimes bypass the VPN tunnel and go to your ISP's servers directly. This reveals every website you visit to your ISP, completely defeating the privacy purpose of the VPN. Running a DNS leak test regularly is essential to verify your VPN is configured correctly.

WebRTC Leaks

WebRTC is a browser technology that enables real-time communication (video calls, live streaming) directly between browsers. It can reveal your real IP address even when you are connected to a VPN, particularly local and public IP addresses that the VPN does not affect. Most reputable VPN providers include WebRTC leak protection, but it should be verified.

IPv6 Leaks

As the internet transitions from IPv4 to IPv6, some VPN configurations may not properly route IPv6 traffic through the tunnel. This can result in your real IPv6 address leaking. Quality VPN providers block or route IPv6 traffic appropriately.

Kill Switch Gaps

When a VPN connection drops, your device may continue sending traffic over your regular internet connection without your knowledge. This IP leak is precisely why a VPN kill switch is essential. Without one, you may be unprotected for seconds or minutes without realizing it.

What Additional Privacy Tools Do You Need?

A VPN is one layer of a comprehensive privacy strategy. Here is what you should pair it with:

A Privacy-Focused Browser

Browsers like Firefox with privacy-focused settings, Brave, or Tor Browser address fingerprinting and tracking far better than Chrome or Safari. Combined with a VPN, this creates a more complete privacy stack.

Tracker Blockers

uBlock Origin, Privacy Badger, and similar extensions block the trackers that follow you across websites. Even on a VPN, companies like Google and Facebook track you through embedded scripts on countless websites. A good tracker blocker breaks these connections.

Good Browsing Habits

Logging out of Google account when not using it, clearing cookies regularly, avoiding Chrome's sync features, and being thoughtful about which extensions you install all contribute to privacy. No tool compensates for careless habits.

For High-Risk Users: Tor

For journalists, activists, or anyone facing serious threats, Tor Browser provides stronger anonymity than any VPN by routing traffic through multiple encrypted relays. Tor's anonymity comes from routing through thousands of volunteer-operated relays, making traffic analysis extremely difficult. The tradeoff is significantly slower speeds. A VPN plus Tor provides layered protection, though the specifics of how they are combined matter.

The Verdict: What a VPN Actually Gives You

Here is a honest summary of what a quality VPN provides:

• IP address masking from websites, advertisers, and casual surveillance
• Traffic encryption from ISP monitoring, network eavesdroppers, and WiFi hackers
• Location privacy — websites and services see the VPN server location, not yours
• Reduced tracking from IP-based profiling, though not from cookie-based and fingerprinting tracking
• Protection on public WiFi from man-in-the-middle attacks on the same network

And what it does not provide:

• Anonymity — your VPN provider knows who you are (if they require account info)
• Protection from account-level tracking — logging into personal accounts still identifies you
• Immunity from browser fingerprinting — you still need anti-fingerprint tools
• Complete security — malware, phishing, and social engineering attacks work the same with or without a VPN

FAQ: What Does a VPN Hide?

The Bottom Line

A VPN is a powerful and essential privacy tool, but it is not a comprehensive privacy solution. It effectively hides your IP address from websites, encrypts your traffic from your ISP and network observers, and protects you on public WiFi. It does not make you anonymous, does not stop browser fingerprinting, and does not protect against account-level tracking.

Think of a VPN as a crucial piece of your privacy toolkit — one that works best when combined with privacy-focused browsers, tracker blockers, and thoughtful browsing habits. Understanding its real capabilities helps you use it effectively without over-relying on it for protection it cannot provide.

Ready to explore VPN options? See our comparison of no-log VPNs for services that take privacy seriously, or the best VPNs for privacy in our comprehensive guide.