Do You Need a VPN? What VPNs Actually Do (and Don’t)
What a VPN really does
When you connect to a VPN, your device opens an encrypted connection to a server run by the VPN provider. All your traffic travels through that tunnel. To anyone between you and the server (the coffee shop’s network, your ISP) your traffic is unreadable. Websites you visit see the VPN server’s IP address, not yours.
Two real benefits come out of that:
- Protection on untrusted networks. On hotel, airport or coffee-shop WiFi, the tunnel means the network you’re on can’t read or tamper with your traffic, even for sites without perfect HTTPS.
- Hiding your IP address from the sites you visit. It reduces tracking by IP and gets around crude geo-blocking.
What a VPN does not do
Because a VPN shifts trust from the network to the provider. Your ISP can’t see what you do; the VPN provider can. You’ve swapped one observer for another, so the provider’s no-logs policy and jurisdiction matter. Choose providers with independent audits, not just bold claims on a homepage.
- It does not make you anonymous. Websites still fingerprint your browser, cookies still exist, and accounts you log into know exactly who you are. Anonymity requires far more than a VPN.
- It does not stop malware or phishing. Encrypted malware is still malware. The phishing email works just as well inside the tunnel.
- It does not encrypt “everything”. Your device, its apps and its security posture are all still exactly what they were.
- It can slow you down. Every packet takes a detour through another city. Expect some latency; most major providers have South African exit servers, which keeps the detour short.
When you actually need one
- Untrusted WiFi: hotels, airports, coffee shops. This is the classic and best use.
- Remote work: connecting staff to office systems over the internet. Business VPNs (and modern alternatives like WireGuard-based tunnels or overlay networks such as Tailscale and Netbird) are a different product from consumer VPNs and do a different job: they connect your people to your network, rather than hiding them from websites.
- Privacy from your ISP for general browsing, if that matters to you.
- Region-restricted content: people use VPNs for it; just know that’s convenience, not security.
If you only ever browse on home and mobile networks, and use HTTPS sites, a consumer VPN adds little. Most of its everyday value is on untrusted networks and for people who specifically want their browsing hidden from their ISP. It’s a useful tool, not a security foundation.
Choosing a consumer VPN (if you want one)
- Look for independently audited no-logs policies, not just marketing claims.
- Modern protocols: WireGuard (fast, modern) or OpenVPN. Avoid PPTP; it’s broken.
- A clear company structure and jurisdiction you’re comfortable with.
- Apps for all your devices, with a kill switch (cuts your internet if the VPN drops, so traffic never leaks outside the tunnel).
- Free VPNs deserve suspicion: many free providers monetise your data, which is the exact thing you’re paying to avoid.
For businesses, the more valuable conversation is secure remote access: a proper way for staff to reach the office network from home or the road, without exposing RDP or files to the whole internet. That’s part of what we set up for businesses across the Helderberg, alongside the networks it runs on.
Need staff working from anywhere?
ARTRIBE Tech sets up secure remote access and site-to-site connections for businesses, sized to your team and systems.
Talk to us about remote access →