"a VPN makes you anonymous"

privacysecurity

A commercial VPN moves your trust from the local network to the VPN company: it hides traffic from the coffee shop and your IP from sites, while seeing everything itself.

Browser fingerprinting, logins, and cookies identify you regardless of IP; 'no-logs' claims have been contradicted in court cases and breach disclosures. Useful tool, wrong noun.

A consumer VPN moves the point at which your traffic enters the internet, so the sites you visit see the provider's address rather than yours and your local network sees an encrypted tunnel rather than your destinations. That is a real change and it is not anonymity.

What it actually does is transfer trust. Your internet provider can no longer see which sites you visit; the VPN provider can. Whether that is an improvement depends entirely on which of the two you would rather trust with a complete log, and the answer is genuinely different for someone on a hostile public network than for someone at home in a country with strong communications privacy law.

The parts it does not touch are the parts that identify you. Logging into an account identifies you completely regardless of the tunnel. Browser fingerprinting works the same. Cookies persist. And the advertising claims about anonymity are marketing rather than engineering, which matters because people take real risks on the strength of them. The honest framing is that a VPN is a tool for changing who can observe you, and choosing it well means knowing which observer you are actually worried about.

Disputed / commonly mistold A popular version of this story is inaccurate - see the note above.

Also known as: vpn myth

← All glossary entries