How to Use VPNs: Simple Privacy Protection for Non-Tech People

A VPN (Virtual Private Network) is like a privacy tunnel for your internet connection. When you use the internet without a VPN, your internet service provider (ISP), the websites you visit, and anyone monitoring the network can see your real location and track your online activities. Data brokers buy this browsing data from ISPs and use it to build profiles about you. A VPN encrypts your internet traffic and routes it through a server in another location, making it much harder for anyone to track what you do online or determine your real location.

Despite what VPN marketing might claim, VPNs aren't magic privacy bullets that make you anonymous online. They're tools with specific benefits and limitations that you need to understand. This chapter explains exactly what VPNs can and can't do, helps you choose a trustworthy VPN service, and shows you how to set it up on all your devices. We'll cut through the technical jargon and misleading marketing to give you practical guidance on using VPNs as part of your overall privacy strategy.

What VPNs Actually Do (And Don't Do) for Privacy

When you connect to a VPN, your device creates an encrypted connection to the VPN company's server. All your internet traffic flows through this encrypted tunnel to the VPN server, which then sends it on to its final destination. To websites and services, it appears your traffic is coming from the VPN server's location rather than your actual location. This provides several concrete privacy benefits that matter for preventing data broker collection.

First, VPNs hide your browsing activity from your ISP. Without a VPN, Comcast, Verizon, or whoever provides your internet can see every website you visit. ISPs sell this browsing data to marketing companies and data brokers. With a VPN, your ISP only sees that you're connected to a VPN server – they can't see which websites you're visiting or what you're doing online. This cuts off a major source of data that feeds into broker databases.

VPNs also mask your real IP address from websites and services. Your IP address reveals your approximate location and can be used to track you across websites. Data brokers use IP addresses to link your various online activities together. When you use a VPN, websites see the VPN server's IP address instead of yours, making it much harder to track your activities or determine your real location.

However, VPNs have important limitations. They don't make you anonymous – you're still logged into your Google, Facebook, and Amazon accounts, which track you regardless of VPN use. VPNs don't protect against browser fingerprinting, cookies, or other tracking methods discussed in previous chapters. They also don't protect against malware or prevent you from entering personal information on websites. Think of a VPN as one privacy tool among many, not a complete solution.

Why You Need a VPN in 2024

The need for VPNs has grown as ISPs have become more aggressive about collecting and selling user data. In 2017, the US Congress voted to allow ISPs to sell your browsing history without your permission. ISPs now harvest browsing data, app usage information, and location data to sell to the highest bidder. This data eventually makes its way to data brokers who combine it with other information about you.

Public WiFi networks present another major privacy risk that VPNs address. When you connect to WiFi at coffee shops, airports, hotels, or other public places, your data can be intercepted by others on the same network. Hackers can see what websites you visit, capture passwords from non-HTTPS sites, and even redirect you to fake versions of legitimate sites. A VPN encrypts all your traffic, protecting it from interception even on insecure networks.

Geographic restrictions and censorship are additional reasons people use VPNs. Some websites block access from certain countries, and some countries block access to certain websites. VPNs let you appear to be connecting from a different location, bypassing these restrictions. While this isn't directly related to data broker privacy, it's a useful benefit that makes VPNs more valuable as an overall privacy tool.

Choosing a Trustworthy VPN Service

Selecting a VPN provider is crucial because you're essentially transferring your trust from your ISP to the VPN company. A bad VPN provider could log your activities, sell your data, or provide inadequate security. The VPN market is flooded with hundreds of providers making grand claims, but only a handful are truly trustworthy for privacy protection.

First, avoid free VPNs entirely. Running VPN infrastructure is expensive, and free providers make money somehow – usually by selling your data, injecting ads, or providing terrible security. Free VPNs defeat the entire purpose of using a VPN for privacy. The old saying applies perfectly here: if you're not paying for the product, you are the product.

Look for VPN providers with clear no-logs policies that have been independently audited. A no-logs policy means the VPN doesn't record your browsing activity, but many providers claim this without proof. Independent audits by reputable security firms verify these claims. ExpressVPN, NordVPN, ProtonVPN, and Mullvad have all undergone independent audits confirming their no-logs policies.

Consider the VPN's jurisdiction carefully. Providers based in countries with strong privacy laws and outside intelligence-sharing agreements offer better protection. Switzerland (ProtonVPN), Panama (NordVPN), and the British Virgin Islands (ExpressVPN) have favorable privacy laws. Avoid VPNs based in the US, UK, or other Five Eyes countries where governments can compel data disclosure.

Setting Up Your VPN: A Step-by-Step Guide

Once you've chosen a VPN provider, setting it up is surprisingly simple. We'll use ExpressVPN as an example, but the process is similar for other reputable providers. Start by visiting the VPN provider's website and signing up for an account. Use your dedicated privacy email address and pay with a privacy-friendly method if possible – some VPNs accept cryptocurrency or cash for maximum anonymity.

After creating your account, log into the VPN website and navigate to the download section. Download the appropriate app for your device – they offer apps for Windows, Mac, iPhone, Android, and often routers. Avoid downloading from third-party sites as these might contain malware. Always get VPN software directly from the provider's official website.

Install the VPN app like any other software. On Windows or Mac, double-click the downloaded file and follow the installation prompts. The installer might ask for administrator permissions – this is normal as VPNs need system-level access to route your traffic. On phones, install from the official app store and grant the VPN permission when prompted.

Open the VPN app and log in with your account credentials. Most VPN apps have a large connect button – clicking it connects you to the nearest or fastest server automatically. For privacy, you might want to manually select a server in a different country. The app will show your new IP address and virtual location once connected.

To verify your VPN is working, visit whatismyipaddress.com before and after connecting. Your IP address and location should change when the VPN is active. Also check for DNS leaks at dnsleaktest.com – you should only see your VPN provider's DNS servers, not your ISP's. If you see your real IP or ISP's DNS servers, your VPN isn't properly configured.

Configuring VPN Settings for Maximum Privacy

While VPNs work out-of-the-box, adjusting settings improves privacy protection. In your VPN app settings, enable the "kill switch" or "network lock" feature. This blocks all internet traffic if the VPN connection drops, preventing your real IP from being exposed accidentally. This is crucial for maintaining privacy during connection interruptions.

Choose the VPN protocol carefully. Most modern VPNs offer multiple options like OpenVPN, IKEv2, and WireGuard. For maximum security, use OpenVPN or WireGuard. They're open-source protocols with strong encryption. Avoid older protocols like PPTP or L2TP which have known vulnerabilities. Your VPN app usually selects a secure protocol automatically, but verify this in settings.

Enable DNS leak protection if available. This ensures all DNS requests (which translate website names to IP addresses) go through the VPN tunnel rather than directly to your ISP. Some VPNs call this "private DNS" or "VPN DNS." Without this protection, your ISP can still see which websites you visit even when using a VPN.

Consider enabling "obfuscation" or "stealth mode" if your VPN offers it. This disguises VPN traffic to look like regular HTTPS traffic, useful in countries or networks that block VPNs. It slightly reduces speed but improves privacy in restrictive environments. This feature is particularly important if you travel to countries with internet censorship.

Using VPNs on Different Devices

Setting up VPNs on multiple devices ensures consistent privacy protection. On smartphones, the process is similar to computers – download the official app, log in, and connect. Mobile VPN apps often include additional features like automatic connection on untrusted WiFi networks. Enable this for protection when connecting to public WiFi.

For streaming devices like Roku or smart TVs that don't support VPN apps, you have several options. You can set up the VPN on your router (covered next), use Smart DNS features some VPNs offer, or share a VPN connection from your computer. Each method has tradeoffs between convenience and privacy protection.

Browser extensions offer another way to use VPNs, but they only protect browser traffic, not other apps. They're convenient for quick privacy needs but shouldn't replace full VPN apps. If your VPN offers a browser extension, use it in addition to, not instead of, the main app. This provides redundancy and ensures browser traffic is definitely protected.

Some VPNs offer Linux support through command-line tools or GUI apps. The setup is more technical but provides the same privacy benefits. Gaming consoles can use VPNs through router setup or connection sharing from a computer. While more complex, protecting all devices prevents data leakage through unprotected connections.

Router VPN Setup for Whole-Home Protection

Configuring a VPN on your router protects all devices on your network automatically. This is ideal for devices that don't support VPN apps and ensures guests are protected too. However, router setup is more technical and not all routers support VPNs. Check if your router supports VPN client functionality – look for DD-WRT, Tomato, or AsusWRT compatibility.

If your current router doesn't support VPNs, you have options. You can buy a pre-configured VPN router from providers like ExpressVPN or FlashRouters. These come with VPNs pre-installed but cost more. Alternatively, buy a compatible router and configure it yourself – this is cheaper but requires technical comfort. Popular VPN-compatible routers include certain Asus, Netgear, and Linksys models.

To configure a VPN on a compatible router, access your router's admin panel (usually by typing 192.168.1.1 or 192.168.0.1 in your browser). Find the VPN client section – its location varies by router. Enter your VPN provider's server information, which they provide for router setups. This usually includes server addresses, authentication details, and certificates.

Router VPN setup has tradeoffs. All devices are protected automatically, but you can't easily change servers or disable the VPN for specific devices. Speed might be slower as most routers have less processing power than computers. Consider using router VPN for base protection while keeping VPN apps on devices for flexibility.

Common VPN Mistakes to Avoid

The biggest mistake people make is thinking VPNs provide complete anonymity. If you log into Facebook over a VPN, Facebook still knows who you are. VPNs hide your location and ISP, not your identity. Don't engage in the same tracked activities and expect different privacy results just because you're using a VPN.

Choosing VPN servers poorly reduces privacy benefits. Connecting to a server in your own country provides less privacy than international servers. Your traffic still falls under local laws and surveillance. For maximum privacy, connect to servers in privacy-friendly countries like Switzerland or Iceland. However, this increases latency, so balance privacy needs with performance.

Using VPNs inconsistently undermines privacy protection. If you only use a VPN sometimes, your ISP and trackers can still build profiles from unprotected sessions. For effective privacy, use your VPN consistently, especially for sensitive activities. Consider enabling auto-connect features to ensure you're always protected.

Trusting VPN marketing claims blindly is dangerous. No VPN provides "military-grade anonymity" or makes you "invisible online." These are marketing exaggerations. Understand what VPNs actually do – encrypt traffic and hide your IP – and don't expect more. Combine VPNs with other privacy tools for comprehensive protection.

VPN Performance and Speed Considerations

VPNs inevitably slow your internet connection because your traffic takes a longer route and undergoes encryption. Expect 10-30% speed reduction with good VPNs, more with overloaded or distant servers. This is a reasonable tradeoff for privacy, but understanding performance helps set expectations.

Choose nearby servers for better speed when privacy needs are moderate. Connecting to a server in your own country or region provides faster speeds while still hiding your exact location and encrypting ISP traffic. For activities requiring more privacy, accept slower speeds from distant servers.

Some VPNs offer specialized servers optimized for specific activities. P2P servers are configured for file sharing, streaming servers for video services, and Tor-over-VPN for maximum anonymity. Using appropriate servers improves both performance and privacy for your specific needs.

If VPN speeds are unacceptably slow, try different servers or protocols. WireGuard often provides faster speeds than OpenVPN while maintaining security. During peak hours, popular servers become congested – try less common locations. Premium VPN providers generally offer better speeds due to more servers and bandwidth.

Quick Wins You Can Do in 5 Minutes

Right now, choose a reputable VPN provider from our recommendations: ExpressVPN, NordVPN, ProtonVPN, or Mullvad. Visit their website and sign up for a monthly plan to test it out. Use your privacy-focused email address for registration. Most offer 30-day money-back guarantees, so you can try risk-free.

Download and install the VPN app on your primary device. The installation takes just minutes. Launch the app, log in, and click connect. Visit whatismyipaddress.com to verify your IP address changed. Congratulations – you've just prevented your ISP from tracking your browsing and hidden your location from websites.

Enable the kill switch in your VPN app settings. This crucial feature takes seconds to enable but provides important protection against accidental exposure. While there, set the VPN to automatically connect when you start your device. This ensures you don't forget to enable protection.

When to Use (and Not Use) Your VPN

Use your VPN whenever you're on public WiFi – coffee shops, airports, hotels, or any network you don't control. The encryption protects against hackers on the same network. Also use it for general browsing to prevent ISP tracking and hide your location from websites. This should be your default state.

Consider disabling your VPN for certain activities. Online banking sometimes flags VPN connections as suspicious, potentially locking your account. Some shopping sites show different prices based on location. Local news sites might block VPN access. For these specific situations, temporarily disabling your VPN is reasonable.

Always use a VPN when researching sensitive topics, downloading large files, or accessing geo-restricted content. These activities particularly benefit from the privacy and location-masking VPNs provide. The speed reduction is worthwhile for the added protection during these higher-risk activities.

Remember that VPNs are tools, not solutions. They protect against specific threats – ISP monitoring, location tracking, and public WiFi attacks. They don't protect against all privacy threats. Use VPNs as part of your broader privacy strategy, combining them with browser settings, tracker blocking, and careful online behavior.

Maintaining Your VPN Privacy

Keep your VPN app updated. Providers regularly release updates fixing security vulnerabilities and improving performance. Enable automatic updates if available, or check monthly for manual updates. Outdated VPN software might have known vulnerabilities that compromise your privacy.

Regularly verify your VPN is working properly. Monthly, check for IP and DNS leaks using online testing tools. Ensure the kill switch activates by disconnecting your VPN while browsing – all internet access should stop. These quick tests ensure your privacy protection remains effective.

Review your VPN provider's policies annually. Companies change ownership, update policies, or face legal challenges. A previously trustworthy VPN might become problematic. Stay informed about your provider through privacy news sites and forums. Be prepared to switch providers if necessary.

VPNs are powerful privacy tools when used correctly. They prevent ISP tracking, protect on public WiFi, and hide your location from websites. Combined with the browser settings, phone configurations, and data broker removals from previous chapters, VPNs add another important layer to your privacy defense. Next, we'll examine email privacy to prevent another major source of data broker information.