Guides

What is a VPN and how does it work

A VPN (virtual private network) builds an encrypted tunnel between your device and a remote server, and your traffic exits to the internet from that server. Your internet provider stops seeing which sites you visit, and websites see the server's IP address instead of yours. It is a privacy tool, not an invisibility cloak.

🛡️

One encrypted tunnel

Everything your device sends is wrapped in encryption before it leaves your network card. On the path between you and the VPN server, nobody can read the content or see the destination.

🌍

A different IP address

Websites see the address and location of the VPN server, not your home connection. To them, you appear to be wherever the server is.

🔑

Not anonymity

A VPN hides your traffic from the network, not from the services you use. Any site you log into still knows exactly who you are.

How a VPN actually works

The VPN app on your device encrypts every outgoing packet and sends it to a single destination: the VPN server. The server decrypts the packet, forwards it to the real destination — a website, a messenger, a game server — and relays the answer back through the same tunnel. From the outside, all anyone sees is a stream of unreadable data between you and one server.

The encryption is handled by a protocol. WireGuard is the current standard for speed and simplicity; OpenVPN is the older, heavier workhorse; protocols in the Xray family are built to keep working on networks that actively interfere with VPN traffic. All of them use the same well-studied ciphers, such as ChaCha20 and AES — the differences are in performance and resilience, not in the strength of the math.

What your provider sees — and what the website sees

With the tunnel up, your internet provider sees that you are connected to one IP address, how much data flows, and when. It no longer sees domain names, page addresses, or content. DNS lookups — the step that would normally reveal every site name — also travel inside the tunnel, so the provider's own DNS servers stay blind.

The website on the other end sees a normal visitor arriving from the VPN server's IP address. Its geolocation matches the server's country, which is why prices, languages, and search results can change when you switch locations.

What does not change: cookies, browser fingerprint, and your account. If you sign in to a service, it identifies you by your login, VPN or not. The tunnel moves your network identity, not your browser's memory.

When you actually need a VPN

The clearest cases are untrusted networks and an inquisitive provider. On public Wi-Fi in a hotel, airport, or café, the network owner can observe unencrypted traffic and see every domain you visit even on HTTPS; a VPN reduces their view to a single encrypted stream. At home, it stops your provider from building a log of your browsing history — data that in many countries is stored and can be sold or handed over.

  • Public Wi-Fi — hotels, airports, cafés, coworking spaces
  • Keeping browsing history away from your internet provider
  • Working with company resources from networks you do not control
  • Getting a stable route to services that perform poorly through your provider's peering
  • Checking how your site or prices look from another country

What a VPN does not do

A VPN is not anonymity. The VPN provider takes the place of your internet provider in the chain, which is why its logging policy matters — a service that keeps activity logs has simply moved the record, not removed it. Aurora keeps no activity logs, but even then, anonymity requires far more than a tunnel: browser fingerprinting, payment trails, and your own accounts all identify you.

It also does not protect you from yourself. Entering your password on a phishing page, downloading an infected file, or reusing a leaked password works exactly the same through a tunnel. A VPN is not an antivirus and not a spam filter.

Finally, expect two practical limits: streaming services actively block IP ranges that belong to known servers, so access to a specific catalog is never guaranteed, and encryption plus the extra hop always costs some speed — usually a modest share of your bandwidth and a few dozen milliseconds of latency.

How to choose a server

For speed, pick the server closest to you geographically. Every extra thousand kilometers adds roughly 10–20 ms of round-trip latency, and long routes cross more congested links. If you just want privacy on your normal browsing, a nearby server gives you the best of both.

Pick a country deliberately only when location itself is the point: you need to appear in a specific market, test regional content, or reach a service that routes poorly from your region. If a server feels slow, try another one in the same country before blaming the whole service — load is per-server, not per-country.

What it looks like in practice

Day to day, a VPN is one switch in an app. You install it, sign in, press connect, and it stays in the background — modern protocols like WireGuard reconnect in under a second when you move between Wi-Fi and mobile data, so there is nothing to babysit.

Good clients add a kill switch: if the tunnel drops, traffic is blocked instead of silently leaking through your normal connection. One subscription typically covers all your hardware — with Aurora, up to 7 devices at once — so the phone, laptop, and tablet share one account. Battery and speed overhead on current hardware is small enough that many people leave the tunnel on permanently.

Frequently asked questions

Does a VPN slow down my internet?
Yes, somewhat — encryption and the extra hop through a server always cost something. With WireGuard and a nearby server the loss is usually a small fraction of your bandwidth plus a few dozen milliseconds of latency. Distant servers or overloaded ones cost noticeably more, so trying a different server is the first fix.
Can my internet provider tell that I use a VPN?
Usually yes. The provider sees a persistent encrypted connection to one IP address and can often recognize the protocol's signature. What it cannot see is what travels inside — sites, pages, messages. Protocols from the Xray family are designed to make the tunnel itself harder to distinguish from ordinary HTTPS traffic.
Does a VPN make me anonymous?
No. It hides your traffic from your local network and provider, and hides your IP from websites, but the VPN service itself sees your connection, and any account you sign in to knows who you are. Browser fingerprints and payment records persist. Treat a VPN as privacy from the network, not anonymity from the world.
Is it legal to use a VPN?
In most countries, yes — VPNs are ordinary business tools used for remote work and security. A handful of countries restrict or regulate them, and anything illegal without a VPN remains illegal with one. Check the rules that apply where you live and travel.
Do I need a VPN on home Wi-Fi?
The network itself is yours, so the public-Wi-Fi risk is gone. What remains is your internet provider: without a tunnel it sees every domain you visit and can store that history. If that record bothers you, a VPN at home is exactly the tool that removes it.
Does a VPN protect me from viruses and phishing?
No. A VPN encrypts traffic in transit; it does not inspect files or judge websites. An infected download or a fake login page works identically through the tunnel. For those threats you need an up-to-date system, a password manager, and healthy skepticism — a VPN solves a different problem.

Keep reading

Try Aurora

14-day money-back guarantee. Up to 7 devices on one subscription.

Protect my devices