SS Safe Surf Lab
vpnprivacypublic wifi

VPN use karne se kya hota hai? What a VPN really does for you

What happens when you use a VPN: what it hides, what it doesn't, who can still see your activity, and what India's 2022 CERT-In rules mean for VPN users.

SS Safe Surf Lab team · · 6 min read · 5 sources
Churchill Club Top 10 Tech Tech Trends Debate 2013 — I chose Deep Learning / Machine Learning
Photo: jurvetson (CC BY 2.0) via Openverse

VPN use karne se kya hota hai? In short: a VPN (Virtual Private Network) puts your internet traffic inside an encrypted tunnel to a server run by the VPN company, so your Wi-Fi network and your internet provider (Jio, Airtel, BSNL and so on) can’t read what’s inside, and the websites you visit see the VPN server’s IP address instead of yours. It does not make you anonymous, it doesn’t stop most tracking, and it means you are now trusting the VPN company instead of your internet provider.

That second sentence matters as much as the first, so let’s go through both.

What actually happens when you turn a VPN on

Without a VPN, your phone or laptop talks to websites through your internet service provider (ISP). The ISP and anyone on the same network, like a café Wi-Fi, can see which sites and servers you connect to.

With a VPN switched on, three things change:

  1. Your traffic is encrypted between your device and the VPN server. As privacy educators at Techlore put it, your ISP sees only an encrypted tunnel going to the VPN.
  2. Websites see the VPN’s IP address, not yours. Your real IP address is hidden from the sites and apps you use.
  3. The VPN provider now sits in the middle. It can see your real IP address and where your traffic is going, which is the same view your ISP had before.

In simple Hinglish: VPN aapke data ko ek band, locked pipe mein bhejta hai. Bahar wale (Wi-Fi owner, ISP) pipe dekh sakte hain, lekin andar kya ja raha hai nahi. Lekin pipe ka doosra sira VPN company ke paas hota hai.

What a VPN is genuinely good for

Safer use of public Wi-Fi

This is the most widely recommended use. US National Security Agency guidance, summarised by Malwarebytes, advises avoiding public Wi-Fi where you can. If you must use it, the NSA recommends using a VPN to encrypt your traffic, visiting only HTTPS websites, and turning off file and printer sharing. The US Federal Trade Commission also notes that VPN apps can encrypt mobile traffic sent over public networks.

Most websites already use HTTPS, which protects the content of the page. A VPN adds a layer on top that also covers other traffic from your device, including DNS lookups (the “address book” requests that reveal which sites you’re visiting), as long as the VPN is set up properly.

Keeping your browsing away from your ISP

ISPs can collect a lot of data. A 2021 FTC staff report found that many large US ISPs collect, keep and share large amounts of customer data, and that’s one of the main reasons people use VPNs. With a VPN, your ISP sees a connection to a VPN server, not the list of sites you visit.

Hiding your IP address from websites

Your IP address roughly reveals your location and your internet provider. A VPN replaces it with the VPN server’s address, which is also why people use VPNs to appear to be in another city or country.

What a VPN does not do

This is where most marketing goes too far. Based on the sources above, a VPN does not:

  • Make you anonymous. The VPN company sees your real IP address. If you log in to Google, Instagram or your bank, they know exactly who you are regardless of your IP.
  • Remove the need for trust. It moves trust from your ISP to the VPN provider. Techlore’s summary is blunt: you keep information away from your ISP by giving that same information to the VPN company instead.
  • Stop cookies and online tracking. Ad trackers follow you through cookies and browser fingerprints, not just your IP. Browser features like Firefox’s tracking protection deal with that; a normal VPN does not.
  • Protect you from scams, phishing or malware. If you type your password into a fake website or install a dodgy app, the VPN won’t save you.
  • Always cover every app. Leaks can happen, for example when DNS requests still go to your router or ISP, or when apps are excluded through “split tunneling” settings.
  • Guarantee encryption at all. The FTC warns that not all VPN apps encrypt your traffic or make you anonymous, and that some share information with third parties.

Quick comparison: who sees what

WhoWithout VPNWith VPN
Public Wi-Fi owner / same networkSites and servers you connect toOnly that you’re connected to a VPN
Your ISP (Jio, Airtel, etc.)Sites and servers you connect toOnly that you’re connected to a VPN
VPN providerNothingYour real IP and where your traffic goes
Websites you visitYour real IP addressThe VPN server’s IP address
Sites you log in toYour identityStill your identity

VPN use in India: what to know (as of October 2026)

Using a VPN as an ordinary person is not banned in India. But there is an important rule change you should know about.

On 28 April 2022, CERT-In (India’s cybersecurity agency, under the IT ministry) issued directions under the IT Act. As reported by Business Today, VPN providers, along with data centres and cloud providers, must collect customer details and keep them for at least five years. CERT-In later clarified that this applies to VPNs sold to individual customers, not business or corporate VPNs, and the compliance deadline was extended to 25 September 2022.

What happened next:

  • Several well-known VPN companies, including NordVPN, Surfshark and ExpressVPN, said they would remove their physical servers from India rather than comply, according to industry coverage at the time.
  • Tribune India reports that CERT-In was still sending compliance notices to providers in the 2023 to 2025 period.
  • Legal commentators have questioned whether parts of the directions go beyond what the IT Act allows. We could not find a court ruling that settles this, so treat the legal picture as unresolved.

Two practical takeaways: first, a VPN is not a way around Indian law, and anything illegal stays illegal with or without one. Second, if a VPN company says it keeps “no logs”, check how it handles Indian users given these rules. “No-log” claims are promises from the company, and privacy groups have long cautioned that they are hard for users to verify.

Rules like this can change, so check CERT-In’s official notices or recent reporting before relying on any of the details above.

How to choose and use a VPN sensibly

If you’ve decided a VPN fits your needs, the FTC’s advice is a good checklist:

  1. Research the provider before installing. Find out who runs it, where it’s based and how long it has been around.
  2. Read the privacy policy and terms. Look for what data is collected, how long it is kept and whether it is shared with third parties.
  3. Install only from official sources. Use the provider’s own website or the official Google Play Store or Apple App Store, never a modified APK.
  4. Be careful with free VPNs. Running servers costs money. If you aren’t paying, ask how the company makes its money, because sharing data with third parties is one way.
  5. Check the settings. Make sure split tunneling isn’t leaving apps you care about outside the tunnel, and use the app’s leak protection or “kill switch” if it has one.
  6. Keep your other habits. Use HTTPS sites, strong unique passwords and two-factor authentication. A VPN adds to these; it doesn’t replace them.

Do you actually need one?

A VPN is worth it if you often use public Wi-Fi (airports, cafés, hotels, college networks), if you don’t want your ISP to see which sites you visit, or if you want to hide your IP address from websites. It’s not worth it if you expect total anonymity, protection from hackers and scams, or freedom from ads and tracking. For those, a VPN is at best one small part of the answer.

The honest summary: a VPN is a privacy tool that changes who can see your traffic. Choose a provider you have good reason to trust, because you’re handing them the view your ISP used to have.

Frequently asked questions

Does a VPN make me completely anonymous? +

No. The VPN provider can still see your real IP address, and websites can still recognise you through logins, cookies and browser tracking. A VPN shifts who can see your traffic rather than making it invisible.

Is it legal to use a VPN in India? +

Using a VPN is not banned for ordinary users in India. Since 2022, CERT-In directions require VPN providers serving Indian users to keep certain customer records, and anything illegal stays illegal whether or not you use a VPN.

Should I use a free VPN? +

Be careful. The US FTC has warned that some VPN apps share information with third parties and that not every VPN app actually encrypts your traffic, so read the privacy policy and check who runs the service before installing one.

Will a VPN slow down my internet? +

It can, because your traffic takes an extra trip through the VPN server and is encrypted along the way. How much depends on the provider, the server distance and your own connection.

Sources

  1. FTC provides tips for using VPN apps (ftc.gov)
  2. VPNs: What They Do (and What They Don't) - Techlore (techlore.tech)
  3. NSA advice for securing wireless devices - Malwarebytes (malwarebytes.com)
  4. MeitY orders VPN companies to collect and store user data for at least 5 years - Business Today (businesstoday.in)
  5. Tunneling through restrictions: The double-edged sword of VPNs in India - Tribune India (tribuneindia.com)
About this guide. Researched and drafted with AI assistance from the sources above, then checked against our editorial rules. It reflects what was publicly known on October 31, 2026; details can change, so confirm with the official source before acting on it. How we work →

Our reviews

In-depth reviews from Safe Surf Lab that go with this topic.

Keep reading