Let's clear the air. If you've been anywhere near a tech channel recently, you've seen the ads. They promise military-grade encryption, total anonymity, and a magic shield against hackers. Most of it is marketing snake oil. Let's separate the actual utility of a VPN from the aggressive sales pitches, and then we'll talk about the different types of VPNs and what they are actually useful for.
Part of the confusion around VPNs is that the exact same acronym gets thrown around for two completely different jobs. Depending on what you're actually trying to accomplish, you're looking at very different tools. Let's break down the two different worlds of VPNs.
You aren't paying a monthly subscription for this. It's usually completely free, built right into your home router, your firewall, or handed to you by your company's IT department. Instead of trying to hide your traffic from the internet, this setup is just about securely bridging a gap. You (or your boss) control both ends of the tunnel. It takes a device sitting out in the wild and drops it safely onto a private, trusted local network.
What Remote Access is actually used for:
You aren't trying to access a private local network here. Instead, you are tunneling your outgoing traffic out to a data center so that the rest of the internet sees the VPN's IP address instead of your real one.
When you buy a commercial VPN subscription, you aren't eliminating the "man in the middle." You're just choosing a different man (or woman!). You take your traffic away from your highly regulated local Internet Service Provider (ISP) and hand it over to a completely unregulated company renting servers in a data center. If their exit node is logging your DNS queries or performing traffic analysis, you've actively put your network in a more dangerous position. You are trusting them implicitly.
Surviving Untrusted Networks
If you're sitting in a hotel lobby or an airport, your traffic is vulnerable to local packet sniffing. Firing up a VPN encrypts everything between your device and the provider. This prevents anyone on that local network from seeing what you're doing.
Protection in Peer-to-Peer Multiplayer Games
Most modern games use dedicated servers, meaning your IP is only shared with the game studio or the server provider. But if you're playing a peer-to-peer (P2P) multiplayer game, your machine is communicating directly with every other player in the lobby. That means your public IP address is sitting right out in the open for anyone running a basic network sniffer. Sore losers can easily grab that IP and hit your home network with a Distributed Denial of Service (DDoS) attack or use it for doxxing. Running a VPN routes that game traffic through the provider's infrastructure. If a salty player tries to DDoS you, they just hit the VPN's enterprise-grade firewalls instead of your home router.
Geo-Shifting
Want to watch a show that's only streaming in another region? Or maybe you're in Leonida but need your connection to look like it's coming from London. A VPN handles this perfectly by routing your traffic through a server in that location.
Dodging Automated ISP Strikes
ISPs monitor for peer-to-peer torrenting traffic to send out automated copyright notices. A VPN encrypts that traffic, meaning your ISP just sees a stream of scrambled data instead of your actual downloads. Note that torrenting by itself isn't inherently bad: after all, it's just a protocol— it's the payload that matters.
Give You True Anonymity
If law enforcement or a three-letter agency wants to find you, a commercial VPN won't stop them. You probably paid with a debit or credit card, which ties the account to your real identity. Even if you paid in crypto, agencies use timing correlation attacks. They match the exact millisecond a packet entered the VPN's infrastructure with when it exited. A subpoena to the data center yields your real origin IP. True anonymity requires layered routing like Tor, not a basic single-hop VPN.
Secure Your IoT Devices
Routing your smart fridge, cameras, or thermostats through an outbound VPN does absolutely nothing to protect them from external attacks. A proper stateful firewall using NAT is already dropping all unsolicited inbound internet traffic at your network edge. The VPN just makes your TV's outbound telemetry look like it's coming from Leonida instead of your actual house. If you want to secure IoT gear, put them on an isolated VLAN and use strict firewall rules to block them from reaching the broader internet.
Protect You From Malware
A VPN tunnel encrypts your traffic in transit. If you download a shady executable or click a bad link, that malware is just going to travel to your machine through a beautifully encrypted tunnel. It won't stop you from getting phished, and it won't stop ransomware.
A solid edge firewall, smart subnetting, and proper DNS filtering will do infinitely more to protect your infrastructure than routing all your traffic through a stranger's server.
What is a VPN?
At its core, a Virtual Private Network is exactly what the name implies: an encrypted tunnel between your device and another server. That's it.Part of the confusion around VPNs is that the exact same acronym gets thrown around for two completely different jobs. Depending on what you're actually trying to accomplish, you're looking at very different tools. Let's break down the two different worlds of VPNs.
World 1: The Remote Access VPN (Corporate & Home)
This is the original, old-school purpose of the technology. Back in the late 1990s, the entire concept was developed simply to give remote employees a secure, encrypted tunnel through the chaotic public internet straight into the corporate intranet. The consumer privacy marketing machine didn't hijack the technology until much, much later.You aren't paying a monthly subscription for this. It's usually completely free, built right into your home router, your firewall, or handed to you by your company's IT department. Instead of trying to hide your traffic from the internet, this setup is just about securely bridging a gap. You (or your boss) control both ends of the tunnel. It takes a device sitting out in the wild and drops it safely onto a private, trusted local network.
What Remote Access is actually used for:
- Working from your living room and needing to pull a file from an internal corporate server. Firing up a VPN client creates a secure tunnel straight through the enterprise firewall, dropping your remote laptop right onto the local corporate LAN.
- Accessing your home security cameras, NAS drives, or smart home hub while you're out of town, without exposing those devices to the open web.
- Managing remote servers or infrastructure securely without leaving sensitive management ports wide open to hackers.
World 2: The Commercial VPN (Privacy & Routing)
This is the heavily marketed stuff you see plastered all over YouTube sponsorships. You pay a monthly fee (or suffer through a restricted free tier with data caps) to borrow a server owned by a third-party company.You aren't trying to access a private local network here. Instead, you are tunneling your outgoing traffic out to a data center so that the rest of the internet sees the VPN's IP address instead of your real one.
When you buy a commercial VPN subscription, you aren't eliminating the "man in the middle." You're just choosing a different man (or woman!). You take your traffic away from your highly regulated local Internet Service Provider (ISP) and hand it over to a completely unregulated company renting servers in a data center. If their exit node is logging your DNS queries or performing traffic analysis, you've actively put your network in a more dangerous position. You are trusting them implicitly.
What Commercial VPNs Are Actually Good For
Commercial VPNs aren't entirely useless. They do a few things very well.Surviving Untrusted Networks
If you're sitting in a hotel lobby or an airport, your traffic is vulnerable to local packet sniffing. Firing up a VPN encrypts everything between your device and the provider. This prevents anyone on that local network from seeing what you're doing.
Protection in Peer-to-Peer Multiplayer Games
Most modern games use dedicated servers, meaning your IP is only shared with the game studio or the server provider. But if you're playing a peer-to-peer (P2P) multiplayer game, your machine is communicating directly with every other player in the lobby. That means your public IP address is sitting right out in the open for anyone running a basic network sniffer. Sore losers can easily grab that IP and hit your home network with a Distributed Denial of Service (DDoS) attack or use it for doxxing. Running a VPN routes that game traffic through the provider's infrastructure. If a salty player tries to DDoS you, they just hit the VPN's enterprise-grade firewalls instead of your home router.
Geo-Shifting
Want to watch a show that's only streaming in another region? Or maybe you're in Leonida but need your connection to look like it's coming from London. A VPN handles this perfectly by routing your traffic through a server in that location.
Dodging Automated ISP Strikes
ISPs monitor for peer-to-peer torrenting traffic to send out automated copyright notices. A VPN encrypts that traffic, meaning your ISP just sees a stream of scrambled data instead of your actual downloads. Note that torrenting by itself isn't inherently bad: after all, it's just a protocol— it's the payload that matters.
What Commercial VPNs Are Useless For
This is where the marketing goes off the rails. Here is what a commercial VPN will not do.Give You True Anonymity
If law enforcement or a three-letter agency wants to find you, a commercial VPN won't stop them. You probably paid with a debit or credit card, which ties the account to your real identity. Even if you paid in crypto, agencies use timing correlation attacks. They match the exact millisecond a packet entered the VPN's infrastructure with when it exited. A subpoena to the data center yields your real origin IP. True anonymity requires layered routing like Tor, not a basic single-hop VPN.
Secure Your IoT Devices
Routing your smart fridge, cameras, or thermostats through an outbound VPN does absolutely nothing to protect them from external attacks. A proper stateful firewall using NAT is already dropping all unsolicited inbound internet traffic at your network edge. The VPN just makes your TV's outbound telemetry look like it's coming from Leonida instead of your actual house. If you want to secure IoT gear, put them on an isolated VLAN and use strict firewall rules to block them from reaching the broader internet.
Protect You From Malware
A VPN tunnel encrypts your traffic in transit. If you download a shady executable or click a bad link, that malware is just going to travel to your machine through a beautifully encrypted tunnel. It won't stop you from getting phished, and it won't stop ransomware.
A solid edge firewall, smart subnetting, and proper DNS filtering will do infinitely more to protect your infrastructure than routing all your traffic through a stranger's server.