A virtual private network (VPN) routes traffic through a VPN server and encrypts the connection between your device and that server. Websites generally see the VPN server’s public IP instead of the address assigned by your home or mobile provider. That can be useful, but a VPN is not an invisibility switch and it does not remove every form of tracking.
What changes when a VPN connects?
Without a VPN, your device sends internet traffic through your local network and internet service provider (ISP). With a VPN, supported traffic enters an encrypted tunnel to the VPN server, then travels from that server to the destination. Your ISP can still see that you are connected to a VPN and can observe connection timing and volume, but it normally cannot read the destinations inside a properly configured tunnel in the same way it could without the tunnel. The VPN provider becomes an important party you must trust.
What a VPN can help hide
- Your usual public IP address from websites reached through the tunnel.
- Some DNS request details from the local network, if DNS is routed through the VPN correctly.
- Network traffic content from people observing the local Wi-Fi link, subject to the VPN’s configuration and the protection provided by HTTPS.
- Your direct destination requests from your ISP, though traffic patterns and the fact of a VPN connection can remain visible.
What it cannot hide
A VPN does not make you unidentifiable after you sign in to an account. Websites may recognize cookies, account IDs, payment details, device characteristics, or browser fingerprints. Apps with location permission may use GPS or other device signals. A VPN also cannot make a phishing page trustworthy, remove malware, or guarantee that every app uses the tunnel.
Choose a VPN with a clear trust model
Look for transparent ownership, a readable privacy policy, modern protocols, a clear explanation of what connection data is collected, a credible way the service earns money, and independent security assessments when available. “No logs” is a broad marketing phrase unless the provider explains which logs are excluded and which operational records remain. Do not assume a free service is unsafe or a paid service is automatically trustworthy; evaluate its actual practices.
Test whether it changed your public route
- Open the KiwiVPN public IP checker before connecting.
- Record the displayed address and provider.
- Connect the VPN, refresh the checker, and compare the address.
- If DNS privacy matters, use a reputable DNS leak test and follow the VPN vendor’s troubleshooting guidance.
- Disconnect and check again to understand how your normal connection behaves.
A changed IP confirms that this browser request reached the checker through a different public route. It does not prove that every app is protected, that DNS is always routed through the tunnel, or that the VPN provider stores no data.
Common questions
Does a VPN prevent all tracking?
No. It reduces exposure of your usual IP address to destination websites, but account login, cookies, browser fingerprinting, and app permissions can still identify or profile activity.
Is a VPN necessary on every public Wi-Fi network?
Not always. HTTPS is a critical baseline for protecting website content. A trusted VPN can add a layer against local network observation, but it cannot prevent phishing or unsafe downloads.
Can websites still see my country?
They may estimate the VPN exit server’s country from its public IP. Your account details, GPS permissions, language, or other signals may indicate something different.
Related KiwiVPN guides
Read DNS leaks: what they are and how to test, Cookies, IP addresses and tracking, and Proxy vs. VPN.
Further reading
Browse all KiwiVPN guides or return to the public IP checker.