What Can a VPN Hide, and From Whom?
A VPN hides the list of sites from the network you are on. It does not hide you from the VPN company, and it does not hide a logged-in account from the website. Your school or employer can still see that a VPN is running, and they can still read the laptop if it is their machine.
Who sees what
This is the question people type into Quora in five different ways. The answer changes with the observer.
They will not see the sites. They will see that you are using a VPN.
- Your ISP, with no VPN: the domains you open, when, and how much data. Not the text inside HTTPS pages.
- Your ISP, with a VPN: one connection to the VPN server. Not the site list inside the tunnel.
- Cafe, hotel, or airport Wi-Fi: same as an ISP. They see domains without a VPN, and only the VPN server with one.
- Your school or office network: they see the VPN connection, the amount of data, and often block the VPN by address. They do not see the sites inside a working tunnel. On a laptop they own, or one with their management profile, they can see much more, VPN or not.
- The VPN company: they can see the sites if they choose to look, because the traffic exits there. A no-logs policy is a promise not to store it. Read how to check that promise before you treat it as a fact.
- The website: it sees the VPN's IP, not your home IP. If you are logged in, it still knows the account.
- Your bank: it sees a datacenter IP that thousands of other people share. That is why logins get flagged. A dedicated IP or a tunnel that ends at your house looks more like you.
What never moves
People buy a VPN to feel anonymous and then sign into Gmail. The account is the identifier. Cookies, browser fingerprinting, and the payment method you used to buy the VPN sit outside the tunnel.
- Logged-in Google, Facebook, Netflix, and your bank
- Malware that is already on the device
- A phishing page you typed the password into
- A work laptop with monitoring software installed
If the network blocks the VPN
Schools and offices do this on purpose. You will see the VPN fail to connect, or the connection will die. That is the network doing its job. Use your phone's own data if the site is allowed there. Do not treat a blocked VPN as a puzzle to solve on someone else's network.
Frequently asked questions
If I have a VPN on school Wi-Fi, can they see the websites I visit?
Not the sites inside the tunnel, if the VPN actually connects. They can see that you are using a VPN, how long, and how much data. Many schools block VPN servers outright. On a school-owned device they can see more than the network traffic.
Can my boss see what I search on company Wi-Fi?
On your own phone, company Wi-Fi can see the domains you open, and not the Google search text if the connection is HTTPS. A personal VPN hides the domains and shows them a connection to the VPN instead. Company policy may forbid that. On a company laptop, assume the device itself is monitored.
Can the VPN company see my passwords?
Not on an HTTPS site. They can see which site you opened. They could try to interfere with traffic, which is why the provider is the trust decision, not the padlock icon.