Skip to content
Tunnexa
Get Tunnexa

What is a VPN, and how does it work?

A VPN, or virtual private network, sends your phone's internet traffic through an encrypted tunnel to a server run by the VPN provider. Websites see the server's IP address instead of yours, and the Wi-Fi you're on only sees scrambled data. It protects your connection. It doesn't make you anonymous.

Download Free See How It Works
DefinitionPlain English

VPN

/ˌviː.piːˈɛn/ · noun

Short for virtual private network. An app or service that carries your internet traffic through an encrypted tunnel to a server, so the network you're on can't read it and websites see the server's address instead of yours.

Encrypts Hides your IP Not anonymity

"Turn the VPN on before you join the hotel Wi-Fi."

How it works

How does a VPN work?

Think of it as a sealed pipe from your phone to a server you pick. Here's the trip a single request takes.

One request · example route● Connected
Your phone IP 203.0.113.24 The VPN app encrypts each request before it leaves.
Encrypted tunnel The Wi-Fi and your provider only see scrambled data heading to one server.
VPN server IP 198.51.100.7 Unwraps the request and sends it on.
Normal web traffic, HTTPS where the site uses it
The website Sees 198.51.100.7 Answers the server, not your phone.
  1. 1

    Your phone seals the request

    The VPN app encrypts everything before it leaves your phone. The rules for building that tunnel are called a protocol. WireGuard and OpenVPN are the common ones; you can compare VPN protocols in plain words.

  2. 2

    The server unwraps and forwards it

    At the VPN server, your request is decrypted and passed to the website, with the server's IP address as the return address. That's why sites see the server's location, not yours.

  3. 3

    The reply comes back the same way

    The site answers the server, the server encrypts the reply, and your phone unwraps it. The detour adds a little delay, which a nearby server keeps small.

Who sees what

What changes when you turn it on

A VPN doesn't make your data vanish. It changes who can see which part of it, and that includes the VPN provider.

What the Wi-Fi network, your provider, websites and the VPN provider can see with and without a VPN
Who Without a VPN With a VPN
The Wi-Fi network Café, hotel, airport ● Which sites you visit, and anything sent without HTTPS ● Scrambled data going to one VPN server
Your internet provider Home broadband or mobile carrier ● Which sites you visit, and when ● That you use a VPN, and how much data moves
Websites and apps ● Your IP address and rough location ● The server's IP address. If you log in, they still know it's you.
The VPN provider Nothing ● Your traffic passes through its servers, so its logging policy matters. Here's how to tell if a free VPN is safe.

HTTPS already encrypts what's on most web pages. What it doesn't hide from the network is which sites you're visiting. That's the gap a VPN closes on Wi-Fi you don't control.DNS is the quiet part of this. Before your phone opens a site, it looks up the site's address, and those lookups often go to your provider unencrypted. A good VPN sends them through the tunnel too, so the list of sites you look up stays private.

Honest limits

What does a VPN do, and what doesn't it do?

People often expect more from a VPN than it can give. Here's the honest split, so you know what you're getting.

It does

Protect the connection

  • Hides your IP address from the sites and apps you use.
  • Encrypts traffic between your phone and the server, so public Wi-Fi can't read it.
  • Keeps DNS lookups inside the tunnel, with DNS leak protection switched on.
  • Gets you online on some networks that block VPNs, if you pick the right protocol.

It doesn't

Make you invisible

  • Make you anonymous. Sign in to an account and that site knows exactly who you are.
  • Stop phishing links or malware by itself. You still need to think before you tap.
  • Hide your activity from the VPN provider. You're moving your trust to them.
  • Speed things up. It adds a short detour, so expect a small slowdown.
  • Change the law or a network's rules. VPN rules differ by country.
Real situations

Do I need a VPN on my phone?

It depends on where you connect. Our rule of thumb: if you didn't set up the network yourself, turn the VPN on before you log in to anything.

Worth it

Café, hotel and airport Wi-Fi

You don't know who runs the network or who else is on it, and a fake hotspot with a familiar name takes a minute to set up. This is the main reason people install a VPN on their phone.

Using a VPN on public Wi-Fi
Worth it

Travelling

A new network every day, and hotel Wi-Fi you didn't set up. Check the local rules on VPNs before you go.

Helpful

Networks that block VPNs

Some work, college and hotel networks block VPN traffic. Certain protocols get through more often.

Helpful

Shared or rental Wi-Fi

A flat share, a dorm, a holiday rental. You don't control the router or know who else is on it.

Optional

Mobile data

Harder to snoop on than open Wi-Fi, but your carrier still sees which sites you visit.

Optional

Your own home Wi-Fi

A network you set up is one you can trust. A VPN still keeps your browsing from your provider.

Watch out

Banking apps

Some refuse to open on a VPN. Let them skip the tunnel instead of switching the VPN off.

Checklist

How to choose a VPN

Use this list on any VPN, ours included. If a provider can't answer one of these clearly, that tells you something.

Price matters less than you’d think. A paid VPN can still keep too much, and a free one can be careful. What counts is what the provider stores, who runs it and how it pays its bills.

Here’s what you get in Tunnexa for free, with or without an account.

Download Free
  1. A no-logs policy with specifics

    It names what is never stored, not just "we respect your privacy".

  2. A company you can reach

    A real support address, and someone answering it.

  3. A clear funding model

    If it's free, you should know who pays for the servers.

  4. Modern protocols

    WireGuard or OpenVPN at least, ideally with a choice.

  5. DNS leak protection

    On by default, so lookups don't slip around the tunnel.

  6. A kill switch

    Or support for Android's Always-on VPN, which does the same job.

  7. From Google Play

    Not an APK from a download site.

  8. Sensible permissions

    A VPN has no business reading your contacts or messages.

FAQ

VPN questions

Still unsure? Write to us at support@tunnexa.com.

What does VPN stand for?

Virtual private network. "Virtual" because the private link runs over the ordinary internet instead of a cable of its own.

Is it legal to use a VPN?

In most countries, yes. A few restrict or ban VPNs, so check the rules where you are, especially when you travel.

Does a VPN hide my browsing history?

From the Wi-Fi network and your internet provider, largely yes. Not from sites you log in to, not from your browser's own history, and not from the VPN provider, which is why its logging policy matters.

Do I need a VPN on my phone?

If you use public Wi-Fi, travel, or join networks you don't control, it's worth having. On your own home Wi-Fi it's optional.

Does a VPN slow down your internet?

A little. Your traffic takes a detour through the server, and encryption takes some work. Picking a nearby server keeps the difference small.

What's the difference between a VPN and a proxy?

A proxy usually forwards traffic for one app or browser, often without encryption. A VPN covers the whole phone and encrypts everything between you and the server.

Can the Wi-Fi owner see what I do with a VPN on?

They can see that you're connected to a VPN server and roughly how much data you use. They can't see which sites you visit or what's on them.

Can I use a VPN for free?

Yes, but check how a free VPN pays for its servers before you trust it. Tunnexa is free on Android, and you can connect without an account.