VPN vs antivirus: do I need both?
Also asked as: Does a VPN protect against viruses? · Is a VPN a replacement for antivirus?
Direct answer
They protect different things. A VPN encrypts your traffic in transit and hides your address, so it protects you from your network and your ISP. Antivirus inspects what arrives on and runs on the device, so it protects you from malware. A VPN does not stop a virus, and antivirus does not hide your browsing; if you need both protections, you need both tools.
What a VPN covers
Anyone between your device and the VPN server — the café Wi-Fi, the hotel network, your ISP — sees an encrypted stream and nothing else, and every site sees the server's address instead of yours. It has no view of what is inside a file you download or a page you open.
What antivirus covers
Files, installers, scripts and, increasingly, the behaviour of running programs. It works on the device after the data has arrived, which is exactly the point at which a VPN has finished its job. A phishing page delivered over a perfectly encrypted tunnel is still a phishing page.
What neither does
Neither stops you entering a password on a fake login page, reuses a breached password for you, or makes you anonymous to a service you sign in to. A password manager handles the first two. The comparison article walks through all three tools and which threat each one answers.
Related questions
- Is a VPN safe?A VPN is as safe as the provider behind it. What decides it: who runs the servers, what is logged, how the service makes money, and whether you can leave.
- Why should I use a VPN?The reasons a VPN earns its place: untrusted Wi-Fi, keeping browsing off your ISP's record, and appearing in another country. And the reasons that are myths.
- Does a VPN protect me on public Wi-Fi?A VPN encrypts everything before it leaves your device on café, hotel and airport Wi-Fi, defeating snooping and fake access points. What it does not cover.
- Does a VPN make me anonymous?A VPN hides your address and your traffic from your network. It does not make you anonymous: accounts, cookies, fingerprinting and the provider still know.