What a VPN does (and what it can hide)

A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a VPN server. Because of that encryption, someone watching your connection at places like your Wi‑Fi network or your internet service provider typically can’t read the exact websites you visit or the contents of your traffic.

However, “hide” is not the same as “disappear.” Traffic has to go somewhere, so after the VPN server receives it, the destination (for example, a website) still receives a connection—often using the VPN server’s IP address rather than your own.

A simple model: observers, what they can see, and where VPN changes it

Think in terms of who is observing your activity:

  • Local network observers (e.g., someone on your Wi‑Fi) usually can’t see inside the encrypted tunnel, but they can often see that encrypted traffic is happening.
  • The destination you connect to (the website/app) usually can see that connection came from the VPN server’s address, and it can also use other signals to recognize you.
  • The VPN provider receives your encrypted traffic and handles the tunnel. While content is encrypted end-to-end only in certain designs, the provider may still have visibility into connection details (commonly called metadata).

Key limits and exceptions

Even when a VPN encrypts traffic, several factors can change what is visible:

  • Account-based tracking: If you log into a service, the service can link activity to your account regardless of your VPN.
  • Browser/device fingerprinting: Websites can combine browser settings and device characteristics to recognize you.
  • IP-based visibility remains: Your real IP is typically replaced by the VPN server’s IP, but the destination can still record the VPN IP.
  • Leaks from misconfiguration: Some VPN setups can fail to protect specific traffic types if features like “kill switch” or DNS handling are not working as intended.

If you’ve heard claims like “it hides everything,” treat them as overstated unless you understand the exact threat model (who you’re trying to keep from seeing what) and the VPN’s operational behavior.

Practical checks you can do

You can validate the claim “my activity is hidden from X” by checking what an observer would see:

  1. Verify your apparent IP: Use an IP-checking website while connected to the VPN; it should show a VPN server address, not your typical home network IP.
  2. Test DNS behavior: Look for whether DNS requests appear to be handled by the VPN (some setups may still expose DNS otherwise).
  3. Check for protection continuity: Temporarily disconnect the VPN and confirm whether traffic is blocked or continues—your goal is to detect avoidable leaks.
  4. Compare experiences with/without VPN logins: If you use the same accounts, expect the destination to still associate activity with you.

Final takeaway

A VPN can help hide your browsing content from certain on-path observers by encrypting your traffic and masking your direct IP. It cannot make your activity universally invisible, especially to the websites/apps you connect to, and it does not eliminate all leak paths or visibility into connection details.