A VPN hides some network information from some observers. It normally replaces the public IP seen by destinations and encrypts traffic between your device and the VPN server. It does not erase accounts, cookies, browser characteristics, or activity visible on the device.
The Short Answer by Observer
- Internet provider or local network: sees the VPN connection, not usually the destinations carried inside it
- Website: sees the VPN server IP, but still sees data the browser sends and any account you use
- VPN provider: receives the tunnel and can observe connection metadata and traffic leaving its server
- Advertiser or analytics company: may still recognize cookies, account IDs, and browser characteristics
- Employer or device administrator: may still monitor the device itself
- Person nearby: does not gain access merely because your public IP changed
What a VPN Hides From the Local Network and ISP
A correctly configured VPN encrypts the path from the device to the VPN server. This normally conceals the contents, destination addresses, and tunneled DNS queries from the Wi-Fi operator or ISP. They can still see the VPN server, timing, volume, and the fact that an encrypted connection exists.
For the exceptions and trust tradeoff, see the detailed guide to what an ISP can see.
What a VPN Hides From Websites
For routed traffic, a website normally receives the VPN server's public IP rather than the public IP assigned to your connection. That can change the website's approximate IP-based location and network-owner result.
What Websites Can Still See
- Accounts you sign into and information you submit
- Cookies, local storage, and links containing tracking parameters
- Browser type, language, screen characteristics, and other fingerprinting signals
- GPS or precise location if you grant browser or app permission
- Behavioral signals such as navigation, purchases, and repeated usage patterns
Review browser fingerprinting separately because changing an IP does not standardize the browser or remove its stored identifiers.
What the VPN Provider Can See
The VPN provider operates the tunnel endpoint. What it can technically observe depends on the protocol, application encryption, service architecture, and configuration. HTTPS protects web content from the VPN operator, but connection metadata may still be visible.
A VPN therefore shifts part of the trust relationship; it does not eliminate it. Evaluate the provider's documented data handling and evidence for its claims.
What a VPN Does Not Hide on Your Device
- Browsing history or downloaded files stored locally
- Malware, screen capture, or monitoring software installed on the device
- Activity recorded by an employer-managed browser or device agent
- Messages visible to an app before encryption or after decryption
- Personal information voluntarily entered into a service
Does a VPN Hide Search History?
It can keep the ISP from directly seeing searches carried inside the tunnel, but the search provider can record queries associated with a signed-in account, cookie, or browser. The browser may also keep local history unless configured otherwise.
Does a VPN Hide Your Location?
It changes IP-based location for routed traffic. It does not automatically change GPS, nearby Wi-Fi positioning, Bluetooth beacons, time zone, account region, or addresses you provide. IP-based location itself is approximate.
Does a VPN Make You Anonymous?
Not by itself. A stable login, browser fingerprint, payment relationship, or repeated behavior can connect sessions even when the exit IP changes. Anonymity requires a threat model and coordinated controls beyond a VPN connection.
How to Verify the Part a VPN Does Change
Compare public IPv4, IPv6, network owner, and approximate location before and after connecting. The guide to how a VPN changes an IP explains the expected result, and the working-VPN checklist covers unexpected cases.