What your VPN actually does — and what it will never do 🛡️

Cliquez ici pour lire en français

You’ve seen the ad. It interrupts a YouTube video mid-sentence: a reassuring voice, a glowing green padlock, and a promise — bulletproof security, access to content from anywhere in the world, hackers rendered powerless. All with a single tap. VPNs have become one of the most aggressively marketed tech products on the internet, propped up by massive ad campaigns and influencers paid on commission. The result? A lot of people have installed one. Very few actually know what it does. And even fewer know what it doesn’t. It’s time to set the record straight.

Inside the tunnel 🔐

VPN stands for Virtual Private Network. The concept is easiest to understand through an analogy. Every time you browse the internet without one, you’re essentially sending an open letter — your internet provider, the sites you visit, and every server relaying your data along the way can read what you’re doing, see your digital identity, and track your location. A VPN slips that letter into an encrypted envelope and routes it through an intermediary address before it reaches its destination.

In practice: when you activate a VPN, your connection is rerouted through a server managed by your VPN provider, located somewhere else in the world. Your internet traffic is encrypted and sent through that secure server before being transmitted to its destination — under the VPN server’s IP address, not yours. Connect to a US-based server from Yaoundé, and you appear to the internet as a user browsing from the United States. Your actual provider can no longer see which sites you visit. The sites themselves no longer see your real IP address.

That’s the core mechanic. Nothing more, nothing less. And it’s right here that the misunderstandings begin to pile up.

Unblocking geo-restricted content: half the story 🌍

This is usually promise number one in VPN advertising. And it’s… partially accurate. Geo-blocking works like this: streaming platforms like Netflix, Canal+ or YouTube Premium negotiate broadcasting rights on a country-by-country basis. They identify your location through your IP address and serve you the catalogue available in your region. A VPN can technically make you appear to be browsing from another country, potentially opening up a different library.

But the reality is considerably messier than the ads suggest. Netflix updates its detection algorithms regularly, maintains blacklists of IP addresses linked to VPN services, and actively blocks them. Some providers see their servers blacklisted within days. Most free VPNs are flagged almost instantly. Even some paid services have their servers blocked over time. It’s an ongoing cat-and-mouse game between streaming platforms and VPN providers — and the platforms are increasingly winning. Only premium services that continuously invest in renewing their infrastructure manage to stay ahead, and even then, nothing is guaranteed.

There’s also something worth saying plainly: using a VPN to change your apparent location and access a foreign catalogue goes against the platform’s terms of service. If Netflix detects a VPN, it can restrict what you see to globally available titles, display an error message, or ask you to disable the tool. It isn’t illegal in most countries, but a temporary block on your account is a very real possibility. Consider yourself warned.

What a VPN does — and what it will never do 🛡️

This is where the marketing crosses the line from useful to misleading.

« A VPN protects you from hackers and viruses. » You’ve heard that one. It’s wrong — or at least not in any meaningful sense. A VPN will never protect you from viruses, malware, or ransomware — that’s what antivirus software is for. It also won’t protect you from phishing: fake emails or counterfeit websites designed to steal your login credentials. If you download an infected file, it’ll arrive on your device through an encrypted tunnel — but infected all the same. Click a fraudulent link, and your VPN won’t raise a flag. A VPN secures your connection. It does not protect your files or your behaviour online.

What a VPN actually does: it encrypts the data moving between your device and the VPN server. It masks your IP address. It prevents your internet provider from seeing which sites you visit. These are genuinely useful functions — as long as you don’t mistake them for comprehensive protection.

One more thing that often gets overlooked: a VPN does not make you anonymous. It masks your IP address, yes. But if you’re logged into your Google, Facebook, or WhatsApp account, those platforms know exactly who you are — VPN or not. Your online behaviour reveals far more about your identity than your IP address ever did.

The real risk of public Wi-Fi 📶

Here’s where a VPN earns its keep. In a café in Akwa, at Nsimalen International Airport, or at a hotel while travelling, unsecured public Wi-Fi networks can be exploited by bad actors. A technique known as a « man-in-the-middle attack » allows someone connected to the same network to intercept unencrypted data. If you’re entering a password or logging into a service without HTTPS on public Wi-Fi, you’re taking a genuine risk. A VPN is valuable in this context, encrypting your data so that anyone attempting to intercept it gets nothing legible.

That said, it’s worth keeping the threat in perspective. In 2026, the vast majority of websites and apps use the HTTPS protocol, which already encrypts the exchange between you and the server. The danger of public Wi-Fi is real — but it’s also one of the most overstated selling points in VPN advertising. The risk is most acute on unencrypted connections or poorly configured apps, and is far from a constant, inevitable threat. For professionals handling sensitive data on the go, though, the extra layer of protection is a sensible call.

VPNs, censorship, and local restrictions in Africa 🌍

This is where the conversation becomes particularly concrete for African internet users. Across the continent, internet shutdowns and platform blocks are a thoroughly documented reality. According to a report by Top10VPN, internet shutdowns cost Sub-Saharan Africa approximately $1.11 billion in 2025, affecting around 116 million users. In multiple countries, platforms like Facebook, Twitter/X, and WhatsApp have been blocked during election periods or times of social unrest.

In Cameroon, internet users and entrepreneurs have reported sites being blocked by local operators. It was business owners and young entrepreneurs who first turned to VPN solutions to continue working internationally. Using a VPN in Cameroon is currently legal, and no law prohibits it.

But the limits are just as important to understand. A VPN can bypass site blocks — but if an operator or government cuts internet access entirely, the VPN becomes useless. It cannot create a connection where none exists.

And the legend that a VPN « boosts your internet speed »? Largely false. By rerouting your data through an additional server, a VPN typically adds latency rather than removing it. It can occasionally help if your provider is intentionally throttling specific types of traffic — a practice known to exist — but in most cases, you’ll experience a slight slowdown, not an improvement.

How to choose — and what to avoid at all costs ⚠️

Not all VPNs are created equal. And some are genuinely dangerous.

Free VPNs deserve particular scrutiny. Multiple cybersecurity reports have flagged VPN applications on both the Google Play Store and the App Store that contained spyware or trojans. Presenting themselves as security tools, they were in reality back doors for attackers. A poorly built free VPN can do the exact opposite of what it promises: collect your data, sell it to third parties, or worse, compromise your device entirely.

If you’re ready to use a VPN, here’s what actually matters when choosing one. Look for a verified, independently audited no-logs policy — meaning the provider retains no record of your connection activity. Prioritise modern encryption protocols like WireGuard or OpenVPN, which are widely considered robust and reliable. Pay attention to the provider’s jurisdiction: a VPN based in a country with strong privacy laws offers meaningfully better guarantees. Among the consistently well-reviewed options, NordVPN, ExpressVPN, and ProtonVPN regularly appear in serious independent evaluations. If you need a free option you can actually trust, ProtonVPN operates without logging your activity and is governed by strict Swiss privacy laws.

A good tool, properly understood 💡

A VPN is not a magic shield. It’s a precise tool, genuinely useful in the right contexts — and useless, or even counterproductive, when asked to do things it was never built for. It encrypts your connection, masks your IP address, and can help you navigate around certain geographic or local restrictions. But it is not a replacement for antivirus software, basic digital common sense, or everyday vigilance against scams.

Real online security is not a single app. It’s built in layers: a reliable VPN, an up-to-date antivirus, strong and unique passwords, a healthy suspicion of unsolicited links, and the habit of checking a URL before entering any sensitive information. Cybersecurity isn’t a product you install and forget. It’s a practice. And no YouTube ad will ever tell you that.

Do you use a VPN? For security, streaming, or getting around local restrictions? Share your experience in the comments — the TechGriot community always has something to say. 👇