A VPN does not make you anonymous. Here is what it does

A VPN removes one identifier from one class of observer. That is a real and useful thing, and it is much narrower than the word anonymous implies. Being precise about the gap is the difference between using the tool correctly and relying on it for something it was never going to do.

What a VPN genuinely does

Your network operator stops seeing your destinations. Without a tunnel, your provider can compile a complete list of the sites you open from DNS lookups and from the hostname in each TLS handshake, without decrypting anything. Inside a tunnel there is nothing to read.

Websites see the server's address rather than yours. That breaks address-based geographic inference and address-based tracking.

Traffic on a shared network is protected. On café or hotel Wi-Fi, the other people on it — and the operator — see an encrypted stream to one address.

Those three are worth having, and for most people they are the entire reason to use one.

What it does not touch

Accounts. Sign into anything and that service knows exactly who you are. Address is irrelevant to a session cookie carrying your user ID.

Cookies and storage. Existing cookies persist through connecting to a VPN. The tracker that identified you yesterday identifies you today.

Browser fingerprinting. Your screen size, fonts, timezone, language, graphics rendering and dozens of other properties combine into an identifier that is frequently unique. EFF's Cover Your Tracks demonstrates it in one click. A VPN changes none of it, and a mismatch — a German exit address with an en-GB browser in a UK timezone — is itself a signal.

WebRTC. A browser API that reports the addresses your machine can be reached on, readable by any page without a prompt. A system VPN changes where traffic exits; it does not change what the browser says about its own interfaces. Test it with the WebRTC leak test.

Anything you type. Email addresses, payment details, real names. No tunnel helps with information you supply.

Your device. Malware on the machine sees everything before it is encrypted.

The trust that moved

Before: your ISP could see every site you opened.

After: your ISP sees an encrypted connection to one address, and your VPN provider is in the position your ISP used to be in.

That is not a swindle — it is the actual mechanism, and choosing to trust a provider whose business is not selling what it sees, over one that bills you monthly and is subject to telecoms retention rules, is a defensible trade. It is just a trade rather than a disappearance.

What actual anonymity requires

Layers, and discipline:

• Tor, or a comparable network where no single party knows both ends.
• A browser configured against fingerprinting. Tor Browser does this by making every user look identical, which is a different strategy from hiding.
• No accounts. None. A single sign-in links the session to an identity.
• Compartmentalisation. Separate identities that never touch, on separate profiles or separate machines.
• Consistency. Every deviation is a correlation opportunity.

That is a practice, not a purchase, and it is much harder than it sounds. Real anonymity failures usually come from an operational mistake rather than a technical break.

How to use a VPN well

Match it to what it does:

• Turn it on for untrusted networks, where it solves the problem directly.
• Use it to keep your ISP out of your browsing history, which it does completely.
• Use containers or separate profiles for account separation, which the tunnel cannot do.
• Do not assume it changes anything about a service you are signed into.

Confirm it is doing its job with what is my IP, which is the narrow, checkable claim: the address the web sees is the server's, not yours.

The one-sentence version

A VPN is a good tool for keeping your network operator out of your business and a poor tool for hiding from anyone you have ever given your name to. Both halves of that sentence are worth remembering when someone sells it as the first step to disappearing.

Why the marketing says otherwise

Anonymity is easier to sell than "your internet provider will stop compiling a list of the sites you visit". The second is the accurate claim and it takes a paragraph; the first is a word.

It is also, unhelpfully, close enough to true in casual use that it does not immediately fall apart. Someone who connects to a VPN and loads a news site is in fact not identified by that site. The failure only appears in the cases where it matters most, which is the worst possible property for a security claim to have.