Every VPN claims to be private. The word appears on every homepage in the industry, and it is almost never defined. What actually separates a VPN that protects your privacy from one that simply moves your data to a different company is a short list of verifiable properties — most of which you can check yourself in a few minutes.
This guide sets out those properties, explains how to test the claims rather than trust them, and is honest about what a VPN cannot do no matter which one you pick.
Key Takeaway:
A VPN does not make you private. It moves the record of your browsing from your ISP to your VPN provider. Choosing well means choosing who you would rather hold that record — and confirming they actually can’t produce it.
The Five Things That Actually Matter
| Property | Why it matters | How to verify it |
|---|---|---|
| Audited no-logs policy | Records that don’t exist can’t be demanded or leaked | Look for a named audit firm and a recent date, not a claim |
| Jurisdiction | Determines who can legally compel them | Check the operating company, not the marketing address |
| Leak protection | A leak exposes exactly what you paid to hide | Test it yourself — see below |
| Kill switch | Stops traffic if the tunnel drops mid-session | Confirm it exists on your platform |
| Ownership | Several “independent” brands share one parent company | Search the parent company’s name and history |
“No Logs” Is a Claim, Not a Feature
Any provider can write “we do not log” on a website. The question is whether anyone independent has checked, and what exactly was checked.
A meaningful audit names the firm that performed it, states the scope, and carries a recent date — infrastructure changes, so a five-year-old audit describes a company that no longer exists in that form. Be alert to scope narrowing too: an audit of the apps is not an audit of the server logging.
The strongest evidence is not an audit at all, but a court case where a provider was compelled to produce records and genuinely had none. That has happened to a handful of providers, and it is worth more than any marketing page.
Some run RAM-only servers, which hold nothing on disk and wipe entirely on reboot. It is a genuine architectural improvement rather than a policy promise, and it is a reasonable thing to prefer.
Jurisdiction: Useful, but Widely Overstated
Intelligence-sharing arrangements between countries get a great deal of attention in VPN marketing, and the reasoning is sound as far as it goes: a provider based somewhere with no mandatory data retention has less it can be forced to produce.
Two cautions. First, check which company actually operates the service — a brand may advertise a privacy-friendly base while the operating entity sits elsewhere. Second, jurisdiction matters far less than logging: a provider in a hostile jurisdiction holding no records is safer than one in a friendly jurisdiction holding detailed ones.
🔍 Test the Leak Protection Yourself
This is the part nobody can fake, and it takes about a minute. A VPN that leaks is worse than no VPN, because it gives you confidence you have not earned.
- Check your address changed. Note it before connecting, then confirm afterwards with our IP checker.
- Test for DNS leaks. If your lookups still travel to your ISP’s resolver, they retain a list of every domain you visited regardless of the tunnel. Use our DNS leak test.
- Test WebRTC. Browsers can expose your real address through WebRTC even with a VPN active — our WebRTC leak test checks it.
- Test the kill switch. Connect, start a download, then disable your network adapter briefly. Traffic should stop dead rather than fall back to your normal connection.
The full procedure is in how to check your VPN is actually working.
⚠️ Free VPNs and the Privacy Trade
Running a VPN network costs real money — servers, bandwidth, staff. A service given away free is funded some other way, and for a meaningful share of free providers that means logging activity and selling it, injecting advertising, or in documented cases routing other people’s traffic through users’ connections.
That is the exact opposite of what you wanted. If privacy is the goal, a free VPN is usually a downgrade from no VPN, because you have handed a stranger the record your ISP already held. See are free VPNs safe? for the detail.
What a VPN Cannot Do
Being clear about this matters more than any recommendation:
- It does not make you anonymous. Log into an account and you have identified yourself, tunnel or not.
- It does not stop fingerprinting. Your browser, fonts, screen and GPU identify you independently of your address.
- It does not block trackers or ads unless the provider adds a separate filtering feature.
- It does not protect you from malware or from entering details into a phishing site.
- It does not hide activity from the sites you use — only from your ISP and the local network.
To see how much is identifiable without your address at all, our what this site already knows about you page shows it live, stores none of it, and needs no signup.
Options Worth Considering
We earn a commission if you sign up through the links below, which is disclosed here and on our affiliate disclosure page. That is exactly why the checklist above matters more than any recommendation — including ours. Run the leak tests yourself before trusting any provider, and cancel within the refund window if it fails them.
- PureVPN — wide server coverage and a published audit history; check the current audit date before subscribing.
- IPVanish — owns much of its own server infrastructure, which reduces third-party exposure.
If your goal is a specific location or scraping work rather than personal privacy, a proxy may fit better than a VPN — see VPN or proxy: which is safer?
Frequently Asked Questions
Which VPN is genuinely the most private?
There is no permanent answer — ownership, audits and infrastructure all change. Judge against the five properties above and re-check periodically rather than trusting a ranking.
Does a VPN hide me from my ISP?
It hides the content and destination of your traffic from them, provided DNS is not leaking. They can still see that you are connected to a VPN, and how much data moves.
Is a paid VPN always better than a free one?
Paying removes the incentive to monetise your data, but it does not guarantee good practice. Paid providers have been caught logging too — verify rather than assume.
Do I need a kill switch?
If a momentary drop exposing your real address would matter to you, yes. Reconnections happen routinely on mobile and on unstable Wi-Fi.
Does a VPN slow my connection?
Some, always — encryption and a longer route both add overhead. A well-run provider on a nearby server usually costs a small percentage; a distant server costs much more.
Can I be tracked while using a VPN?
Yes, by several routes: logging into accounts, browser fingerprinting, cookies, and leaks. The address is one identifier among many.
Is using a VPN legal?
In most countries, yes. A few restrict or ban them, so check local law if you travel. Legality of the VPN is separate from legality of what you do through it.