What is a VPN Explained Simply: How It Works and Why You Need It

What is a VPN, explained using a post office

Imagine everything you do online is sending letters. You open a website—you send a letter asking for a page. All your mail goes through a local post office: your internet service provider (ISP), mobile operator, or the owner of the Wi-Fi network you are using.

Most letters today are sealed: websites use HTTPS, so outsiders cannot read the contents. But the address on the envelope is visible. The postal worker knows who you are writing to, when, and how often. This builds a fairly detailed picture: a bank at 9 AM, a clinic at noon, a kids' clothing store in the evening.

A VPN acts like a mail forwarding agency in another city. You put all your letters in a thick, locked bag and send it to the agency. The local post office only sees that you keep writing to that one address. The agency opens the bag, forwards your letters under its own name, collects the replies, and sends them back to you in a similarly locked bag. The recipients see the agency's return address, not yours.

This analogy also reveals the main limitation. The forwarding agency sees the addresses on all your letters. A VPN just swaps one middleman for another: your ISP used to see those addresses, and now the VPN service does. We will discuss the issue of trust further down.

How a VPN works: tunnels, encryption, and foreign IPs

Now, let's explain this without the post office. You install a VPN app on your phone or computer. When you turn it on, it connects to a VPN server and tells your system to route all traffic through it. Every request from your device is encrypted, packaged, and sent to this server. This is what we call a tunnel.

The server unpacks the request and sends it out to the internet under its own name and IP address. An IP address is a number that tells a website where the connection is coming from: the country, often the city, and the ISP. With a VPN on, websites see the server's IP address instead of yours.

A protocol dictates exactly how data is packaged and encrypted. The most common ones are OpenVPN, WireGuard, and IPsec. In Russia, Xray-based protocols have become widespread recently, especially VLESS. Its traffic looks like a regular HTTPS connection to a website, making it a reliable choice for many services.

What does VPN stand for?

VPN stands for Virtual Private Network. The name reflects its original purpose. Companies used it to connect remote employees and offices over the regular internet, making it seem like all computers were sitting in the same closed network. It is 'private' because outsiders cannot get in, and 'virtual' because no one had to lay physical cables just for this network.

Corporate VPNs are still around: employees use them to access work emails and internal systems. Consumer VPN services—the ones people usually ask about—use the same technology for a different goal: to secure a single person's traffic and show websites a different IP address.

Types of VPNs

The term 'VPN' covers a few different things today. Who actually sees your traffic depends on which one you use.

• A corporate VPN is provided by an employer and connects to the company's internal network. The company sees the traffic.
• A subscription VPN service is the most common option for personal use. You pay the provider, they run the servers and give you apps or setup guides. The service sees the traffic.
• A self-hosted server. You can rent an overseas server and set up a VPN yourself. The hosting provider is the only middleman, but you have to handle installation, updates, and troubleshooting.
• A browser VPN. Some browsers offer a secure proxy built right into their settings. It only encrypts the traffic from that specific browser.
• Free VPN apps. Technically, these are also services, but they don't make money from subscriptions. We explain how they do profit in the security section below.

Who a VPN hides your traffic from

Your internet traffic has three types of observers, and they all see different things.

Your ISP and mobile operator

Without a VPN, your ISP sees which websites and services you connect to, along with when and how much data you transfer. It cannot read the contents of HTTPS pages, but website names are visible twice: in DNS requests (how your device finds a site's IP) and at the start of every secure connection, where the site name is usually sent in plain text.

With a VPN, your ISP just sees one long connection to the VPN server, the time spent, and the data volume. Whatever happens inside the tunnel is hidden.

The owner of the Wi-Fi in a cafe, hotel, or office

They see the exact same things as your ISP. On public networks, there is the added risk of fake hotspots. In Russia, public Wi-Fi also requires logging in with a phone number (via Gosuslugi or SMS), tying your browsing history directly to you. We cover this in detail in our article on using a VPN on public Wi-Fi.

Websites and apps

Without a VPN, a website sees your IP address and uses it to determine your country, approximate city, and ISP. With a VPN, it sees the server's IP address. This is why having a VPN on might cause websites to display a different country's version, demand a CAPTCHA, or block you entirely.

Since spring 2026, some Russian services have been restricting access for users with active VPNs. According to RBC, the Ministry of Digital Development (Mintsifry) mandated this for major platforms (T-Bank Journal has the details). If a banking app or a marketplace like Ozon stops loading, split tunneling can help: Russian apps connect directly, while everything else goes through the VPN.

What a VPN does not hide and cannot protect against

The most common myth is that a VPN makes you anonymous. A website might not know your IP address, but it has plenty of other ways to figure out who you are.

If you log into your email, a social network, or an online store, the service knows it is you regardless of your IP address. Cookies and advertising IDs also survive IP changes: the ad network sees the exact same browser, just pretending to be in another country. Then there is browser fingerprinting—a unique mix of screen resolution, installed fonts, and OS version that is often identifiable on its own.

On a phone, your location is not just tied to your IP. Any app with location permissions pulls coordinates from your GPS and cell towers, and a VPN has zero effect on this. A taxi app knows exactly where you are standing, VPN or no VPN.

A VPN also does not fix device security. It cannot tell a fake banking site from a real one: if you type your password into a phishing page, it just goes to the scammers through an encrypted tunnel. It does not delete malware or protect you if you use the same password across ten different websites. That is what password managers, two-factor authentication, system updates, and basic common sense are for.

Why you need a VPN on your phone and computer

Myths aside, there are a few clear, practical reasons for an average person to turn on a VPN.

• Public Wi-Fi. Networks in cafes, airports, or hotels belong to strangers, and sometimes they aren't even the networks they claim to be. A VPN hides all your traffic from them, including DNS requests.
• Privacy from your ISP. Not everyone wants their internet provider tracking the websites they visit. A VPN shifts this data to the VPN service, so it really comes down to who you trust more.
• Remote work. A corporate VPN lets you access internal company systems from home or on a business trip. It is provided by your employer and is not meant for personal browsing, as the company sees your traffic.
• Foreign services that blocked Russian users. ChatGPT, Claude, Spotify, and several others restricted access from Russia on their own accord. We analyzed the situation with ChatGPT, Claude, and Gemini in Russia in a separate article.

Why a VPN is especially useful on a phone

Your phone ends up on foreign networks far more often than your computer: Wi-Fi on the subway, in malls, on trains, or at a friend's place. Phones also have more apps constantly sending background data. A VPN on a phone operates at the system level, encrypting traffic from all those apps at once.

There are downsides, too. A VPN drains the battery slightly faster, though the exact impact depends on the protocol and the app. Banking apps and some Russian services might run poorly or refuse to load while the VPN is active. Again, split tunneling is the best workaround.

What you need to start using a VPN

To get a VPN running, you need three things: a server, a client app on your device, and connection details to link the two.

• The server is hosted by the VPN service. A subscription usually includes servers in several countries, and you can switch between them.
• The client is the app on your phone, computer, or TV. Some services offer their own app, while others recommend third-party ones. For VLESS, these include apps like Incy, Happ, Hiddify, or v2RayTun.
• Connection details include a login and password, a configuration file, a key, or a subscription link. A subscription link is more convenient than a single key: if the service adds or replaces servers, the app will update the list automatically.

From there, the process is identical on any device: add the subscription to the app, pick a server, and hit connect. A VPN or key icon appears in your phone's status bar, and as long as it is there, your traffic is going through the tunnel.

For example, with Byte VPN, you copy the subscription link from your dashboard and add it to an app like Incy on iOS or Android. All available servers instantly appear in the app.

Why your internet sometimes slows down with a VPN

Usually, a VPN is practically invisible, but sometimes pages take longer to load. This generally boils down to one of three reasons.

• Distance. Your traffic routes through a server that might be in another country. Every extra leg of the journey adds latency, which is most noticeable in games and video calls.
• Server load. If too many users are on the same server, they all share the available bandwidth.
• The network path. The connection between you and the server might be congested, and different ISPs route traffic differently.

The encryption itself barely impacts speed on modern phones and computers. So, if your VPN feels slow, the first step is to switch servers—ideally to one geographically closer. If none of them work, contact support. Your ISP might be throttling that specific connection method.

Is it safe to use a VPN?

The technology itself is safe. Modern protocols use robust encryption, and banks and major corporations have relied on VPNs to secure their systems for decades. The real risks lie in who runs the server and who built the app.

The first risk is the service itself. Remember the forwarding agency analogy: everything your ISP used to see is now visible to the VPN service. That includes your real IP address, connection times, data volume, and the websites you visit. It cannot see inside HTTPS pages, but the addresses alone are enough to build a detailed profile. If a service logs this data, it can be sold, leaked, or handed over upon request.

The second risk is the app. A VPN client requires system-level permissions to intercept and route all network traffic. iOS and Android explicitly warn you about this on your first connection. A malicious or shady app can exploit this access for its own gain. We have documented cases ranging from data harvesting to turning users' phones into proxy networks in our article on free VPNs.

The third risk is leaks. A poorly configured app might leak some requests outside the tunnel, usually DNS queries. You can check this in just a few minutes; we explain how in our guide on how to check your VPN.

How to know if you can trust a VPN service

• The owner is public, their contact info is available, and there are clear terms of service on the website.
• It is obvious how the service makes money. If you aren't paying cash, you are paying with something else—usually ads or data.
• The privacy policy clearly states what data is logged and for how long.
• The provider does not promise 'complete anonymity' or '100% protection.' A VPN simply cannot fulfill those promises.

We put together a detailed checklist and a quick test you can run tonight in our guide on how to choose a VPN.

Is it legal to use a VPN in Russia?

Using a VPN in Russia is not prohibited. The restrictions target something else: advertising VPN services that provide access to blocked resources, and popularizing bypass methods. As of September 1, 2025, there are also fines for searching for extremist materials. We break down exactly what the laws say in our article on whether using a VPN is legal.

How a VPN differs from proxies and Tor

All three technologies hide your IP address from websites, but they operate differently.

A proxy is a middleman for a specific program. You enter the proxy server's address in a browser or app's settings, and only that program's requests go through it. Everything else connects directly. Classic HTTP and SOCKS proxies do not encrypt traffic, meaning website addresses and anything sent without HTTPS are just as visible as they would be without a proxy.

A VPN works at the system level, encrypting everything your device sends. The line can get blurry, though. VLESS is technically a proxy protocol, but mobile apps wrap the entire device's traffic through the system's VPN mechanism, so there is no practical difference for the user.

Tor is a network of volunteer-run servers. A request bounces through three random nodes, and no single node knows both who you are and what website you're visiting. This offers far more anonymity than a VPN, but it is noticeably slower. Many websites bombard Tor users with CAPTCHAs, and the final node in the chain can see any unencrypted (non-HTTPS) traffic. It is simply not convenient for daily browsing.