Why use a VPN on your phone — what it protects, what it doesn't, and what to look for

A VPN (virtual private network) encrypts the traffic between your phone and the VPN's server, so the network you're connected to — a café's Wi-Fi, a hotel network, an airport hotspot — can't read or tamper with what you send. It's one of the simplest privacy upgrades you can make, but it's also oversold. Here's an honest look at when a VPN is worth it.

What a VPN protects

• Public Wi-Fi. On a network you don't control, anyone running it — or anyone on it, if it's poorly set up — can see which sites and services you connect to and try to redirect you. A VPN wraps everything in an encrypted tunnel, so the Wi-Fi only sees scrambled traffic going to one server.
• Your browsing from the network itself. Most websites already use HTTPS, which encrypts page contents. A VPN goes further: it hides which sites and apps you're using (including DNS lookups) from the Wi-Fi operator or mobile network you're on.
• Travel. On hotel and airport networks abroad, a VPN gives you the same encrypted connection you'd want at home, and many apps let you connect through a server in your home country.
• Logging back in after a switch. When you change carriers you re-sign in to banking, email and everything else — often on whatever Wi-Fi is nearby. That's exactly when an encrypted connection helps.
• Extra filtering. Some VPN apps also block known malicious and tracking domains (NordVPN's Threat Protection is one example in our comparison).

What a VPN does not do

• It doesn't make you anonymous. You're shifting trust from the network to the VPN company, which is why its privacy record matters.
• It doesn't stop phishing or weak passwords. A fake login page works the same over a VPN. A password manager is the tool for that.
• It doesn't improve coverage. Your signal and data speed still come from your carrier, and a VPN adds a small amount of overhead, so speeds can be slightly lower and data use slightly higher.
• Some apps push back. A few banking and streaming apps restrict VPN connections; most VPN apps let you exclude specific apps when that happens.

What to look for before you pay

• An independently audited no-logs policy — not just a promise on the homepage.
• Modern protocols (WireGuard or the provider's own WireGuard-based protocol) for speed and battery life on phones.
• Auto-connect on untrusted Wi-Fi and a kill switch, so you're protected without remembering to tap a button.
• Enough devices for your household — one subscription can often cover every phone on your plan.
• The renewal price, not just the intro price: long-term deals are cheapest up front and usually renew higher.
• Be careful with "free." Running a VPN costs money; if it's free, ask how it's paid for. A few reputable providers offer genuinely limited free tiers.