A VPN does one useful thing very well: it moves your traffic through a server you don't own, so your internet provider and anyone on the same Wi-Fi network can't watch where you go. That part is settled. The awkward question comes next — who is running that server, and what do they do with what they see?
Free and paid VPNs both encrypt. The difference is in the business model, the logging, the speed and the small print. Here's how to tell them apart without wasting an afternoon.
What a VPN Does — and What It Doesn't
A VPN creates an encrypted tunnel between your device and a server, then sends your traffic out to the internet from that server's IP address. Your ISP sees an encrypted stream to a VPN endpoint. A café's Wi-Fi sees the same thing. That's genuinely useful on public networks, on hotel Wi-Fi, and on mobile data you don't control.
It does not make you anonymous. If you're logged into your Google, Instagram or bank account, the VPN doesn't hide that from those services. It doesn't stop you clicking a phishing link, and it doesn't clean up malware you download. A VPN is a privacy pipe, not a security suite. Anyone who tells you otherwise is selling something.
The Business Model Behind "Free"
Servers cost money. Bandwidth costs money. So a free VPN is either funded by subscribers on a paid tier, or it's funded by you in a way that isn't obvious. The second category is where things get uncomfortable.
Watch for these patterns before you install anything:
- Vague or missing policies. No named company, no address, no explanation of what's collected.
- Permissions that don't fit. A VPN needs network access. It doesn't need your contacts, SMS or call logs.
- Ads served inside the app alongside claims of anonymous browsing.
- Data resale language tucked into the privacy policy — phrasing like "we may share information with partners."
- Aggressive upgrade screens that appear before you've even connected.
- Distribution outside official app stores, especially sideloaded APKs.
There are exceptions. A few established providers offer genuinely limited free tiers — a couple of servers, a device or two, sometimes a monthly data cap — as a way to earn your subscription. Those are usually funded by paying customers, not by your browsing history. That's a meaningfully different deal.
Logging and Privacy Policies: What to Read
"No logs" is a marketing phrase until you check what it covers. Every VPN needs some data to run: which server you connect to, your account email, your payment record, sometimes bandwidth used to enforce a cap. The question is whether that data is tied to your identity and how long it's kept.
Look for three things. First, a written policy that names the specific data collected and the retention period. Second, a jurisdiction you can look up, with a clear statement on how law enforcement requests are handled. Third, an independent security audit of the apps or infrastructure — not a self-published "we're secure" blog post, but a report from a firm with a reputation to lose.
Also ask how you can pay. If a provider accepts cash, gift cards or cryptocurrency alongside cards, that's usually a sign they've thought about anonymity. If the only option is a card tied to your name, that's not automatically bad, but it's worth knowing.
Speed and Everyday Use: Where Free Slips
Free tiers tend to be crowded. Fewer servers mean more users per server, and more users mean slower speeds, more buffering, and more captchas when you visit sites that flag shared IP addresses.
Paid plans generally give you more locations, faster protocols, and better routing. If you're choosing between two paid options, compare how many countries you actually need, whether the app supports a kill switch (it cuts your connection if the tunnel drops), and whether it works on the devices you own — router support matters if you want every gadget covered.
One tip: test the server closest to you first. A nearby server on a decent protocol will almost always beat a distant one, and the difference is more noticeable than any marketing claim about top speed.
Malware and Tracker Blocking: A Bonus, Not the Point
Some paid VPNs bundle DNS-level filtering that blocks known malicious domains, ad networks and trackers. It's a real convenience, and it can reduce exposure to sketchy sites. It is not antivirus. It won't catch a malicious email attachment, and it won't fix an already-infected machine.
A VPN protects data in transit. It doesn't decide whether the destination deserves your trust. Keep your OS and browser updated, use a password manager, and treat unexpected links as hostile.
On the free side, the direction is often reversed: bundled ad libraries and redirects are more common than filtering. If an app starts behaving oddly after installation, that's your signal to remove it.
How to Compare Two Options in Ten Minutes
- Open the privacy policy and search for the word "log." Read the surrounding paragraphs, not the headline.
- Find the company's legal name and country. If neither is listed, stop here.
- Check for an audit report with a date and a named auditor.
- Note the free tier's limits: data cap, number of servers, device limit, and whether it throttles.
- Install it, connect, then run a DNS leak test in your browser to confirm your real IP isn't exposed.
- Read the refund or trial terms in full before paying for a year.
- Check app permissions on your phone. Deny anything unrelated to networking.
Which One Should You Actually Use?
If you connect occasionally — banking on hotel Wi-Fi, checking email at an airport — a reputable free tier from a company that also sells a paid plan is a reasonable choice. You get real encryption, and you accept a data cap and fewer locations.
If a VPN is part of how you work or travel daily, pay for one. You're buying more servers, better speeds, a kill switch, multiple devices, and a company with a reputation it can't afford to burn. That's a fair trade.
What you should avoid is the random free app with no named owner, no policy and a permission list longer than your contacts. The cost of "free" in that case is usually your own data, and you won't see the invoice.
One last habit: a VPN changes where your traffic appears to come from, not who you are online. If you're using one because of a legal, employment or contractual obligation, check the rules that apply to you and, where the stakes are real, get advice from a qualified professional rather than a blog post.
