Questioning VPN functionality is normal. It is to be expected, really, with claims VPN providers are making, some of which are untrue or exaggerated. Obviously, you’ll find the biggest number of discrepancies when trying to get a free VPN. Paid VPN services usually have a strong incentive to keep you as a customer, and will try to live up to the expectations. Not all of them do so, mind you – shady practices are everywhere. Some are willing to either trick customers for monetary gain or turn over data to the authorities even though they promise they don’t. With that out of the way, let’s answer: “does VPN actually work?“
1. Data logging
This is probably why most people ask, “does VPN really work?“ By using a VPN, you choose to trust the VPN provider over your ISP (Internet Service Provider). The thing is, not all VPN services are created equal. Here’s why you shouldn’t believe every VPN service with claims of a no-log policy:
1. Users have no way to verify those claims
All they have is the VPN provider’s word and, in some cases, confirmation of the security firm who audited them. Well, not all independent security firms are reputable. Also, who’s to say that the VPN provider didn’t give them a kickback? After all, they’ll both gain profit and recognition.
2. They might have to, based on location
VPN providers who are based in countries that are members of the Five, Nine, and Fourteen-Eyes alliance are victims of large-scale espionage and have mandatory data retention laws. Authorities can send a formal request to the provider to hand the user data over. Alternatively, they can get a warrant, then seize the VPN servers in the data center.
3. It was proven otherwise many times
For example, the previous parent company behind IPVanish turned over personal information about a criminal who preyed on children in May 2016. It was for the right reason, but IPVanish claimed a no-logging policy at the time. There are many similar cases like this, as well as massive data leaks such as when 7 major VPN providers in China leaked over 1.2 TB of user data in July 2020.
4. The Privacy Policy says otherwise
Although providers claim zero-logging, their Privacy Policy can tell a different story. They might log your IP address, location, hardware model, language, operating system, undisclosed network information, and even MAC address or IMEI. Although they claim it’s for improvement of service, that’s more than enough to identify you as an individual.
5. That’s how some pay for operating costs
Many VPN services are collaborating with advertising or marketing agencies. In their defense, they insist data was “not sufficient to identify the individual“, and was intended to improve their business and reach the customers better. That’s suspicious when you see the point above.
How to make sure VPN won’t store data?
The only way to guarantee a VPN won’t store data is to build a VPN by renting or buying a VPS. Alternatively, you can create a VPN server on the router. Outside of that, pick a high-grade VPN with proof that a credible security firm audited their practices with good results. You can also pick one whose VPN servers run on RAM, such as TrustedServer mentioned in our ExpressVPN review. Stay away from most VPN browser extensions – they are known to sell data and are susceptible to WebRTC and DNS leaks.
2. Privacy vs. Anonymity
We went over this when we covered the top 6 VPN myths. So, does VPN actually work as VPN providers claim? It can, but that doesn’t mean you’ll remain 100% anonymous on the Internet. Even if you pay with gift cards, cryptocurrencies, or cash, you still have to connect to their service from your real IP address. Additionally, VPN can’t help if someone seeks to identify you by the number and type of devices, your user-agent, and your fingerprinting profile.
3. Security
Two of many security features that determine that VPN actually does work are:
1. Encryption
The problem lies in the fact that the encryption only applies to the traffic inside the VPN tunnel. In other words, both the entry and exit points are still vulnerable. Also, the encryption doesn’t apply between the VPN server and the open Internet. Furthermore, even while connected to a VPN, the data you enter on unprotected websites remains vulnerable. Finally, even though you’ll hide your IP with a VPN, if there aren’t a lot of other users connected to the VPN server, the investigation can still single you out and track your activity. Luckily, if a VPN provider refuses to snitch on you, you’re safe.
2. DNS
This is crucial when investigating does VPN work as advertised. If a VPN service is not supplying its own DNS servers, you’ll have to rely on the real ones, which is a big privacy risk. Even worse, you won’t be able to hide your VPN use, which might get you in trouble in China and other countries with powerful censorship.
4. Torrenting
You can trust most VPN services to support P2P traffic without fear of exposure to your ISP, and them sending you a hefty bill for torrenting. The same is possible with some proxies and most VPN proxies.
5. Streaming and geo-blocking
Streaming is usually a good way to verify if VPN actually works. To clarify, streaming services usually require the most powerful anti-VPN measures. So, if a VPN can reliably bypass a Netflix VPN block it’s almost guaranteed it can circumvent a VPN block on other websites and services in any location. You can also use the best VPN for Disney Plus and Amazon Prime VPNs list to the same effect.
6. Cookies and trackers
Even when making a VPN always ON, the cookies and trackers you pick up can still potentially identify you. Yes, it won’t be direct, but with enough data, your digital fingerprint will give you up. This is exactly why we taught you how to secure your privacy online. You should use those methods alongside a VPN, not instead of it.
7. VPNs are not Antivirus
VPNs and antivirus are entirely different. A VPN can’t do the job of antivirus and vice versa. Still, there are many who confuse VPNs for antivirus and expect them to work the same. An antivirus scans your system for malicious software against a database. However, a VPN protects your online data and identity by hiding it behind encryption and allowing users to access the internet remotely.
8. Censorship and DPI
Unlike what most premium VPNs claim, not all of them can prevent censorship. Some countries use the best technology to monitor the Internet. In such cases, even a VPN might fail to get results. They employ DPI, or Deep Packet Inspection, which can analyze what data packets are being transmitted on the web even if they are scrambled due to encryption. They also use browser fingerprinting techniques to recognize and analyze your browsing patterns. You can’t fool such methods with a VPN.
