What Is a VPN? A Plain Guide for Australians

You're on the free Wi-Fi at an airport, your phone offers to "protect your connection", and a VPN app is one tap away. Before you tap, it helps to know exactly what changes. A VPN moves your traffic into an encrypted tunnel and hands it to a different company. That's useful in some places and pointless in others. The facts on this page were checked on official Australian government pages and the companies' own websites on 30 October 2026.

SecureCheck.com.au is an independent guide operated by Dominet BV. This page is general information, not legal or technical advice for your situation. We don't sell VPNs or security software. No link on this site is an affiliate link right now. We may earn a commission from VPN or security companies in future when a reader buys through a link on this site. If that happens we'll label those links and explain it in our affiliate disclosure, and it won't change the facts we publish. Facts were checked on official and company websites on 30 October 2026. Read our general information notice. Here we explain what a VPN changes and what it leaves exactly as it was.

The short answer

A VPN (virtual private network) is an app or setting that sends everything your device does online through an encrypted connection to a server run by the VPN company. From there, your traffic goes out to the internet as if it started at that server.

Three things follow from that:

• People on the same network as you, such as others on a cafe's Wi-Fi, can't read what you're sending.
• Websites and apps see the VPN server's IP address, not the one your internet provider gave you.
• The VPN company can now see the traffic your internet provider used to see. You've moved your trust, not removed the need for it.

The Australian Cyber Security Centre (ACSC) puts it plainly in its remote working tips: a VPN can hide your activity from others on the network, but it won't protect you from malware, phishing or vulnerabilities in your software.

How a VPN works, step by step

Without a VPN, your phone or laptop sends a request to your internet provider, which passes it to the website you asked for. Your provider can see which servers you connect to and when.

With a VPN switched on, the steps look like this:

1. Your device encrypts the request using the VPN app before it leaves.
2. Your internet provider carries it to the VPN company's server. The provider can see that you're connected to a VPN, and how much data is moving, but not what's inside.
3. The VPN server decrypts it and sends it on to the website.
4. The website replies to the VPN server, which encrypts the reply and sends it back to you.

Because the request reaches the website from the VPN server, the site sees that server's IP address and its location. That's why a VPN can make you look as if you're in another city or country, and also why streaming services notice. Netflix's help page says a VPN can make a device look like it's connecting from somewhere other than its physical location.

What a VPN hides, and from whom

It's easier to think about this as a list of who can see what.

The last row matters most. If you sign in to an account, that service knows who you are whatever IP address you arrive from. A VPN changes the path your data takes. It doesn't change who you are to the services you log in to.

What a VPN doesn't do

The ACSC lists three things a VPN won't protect you from: malware, phishing and vulnerabilities in your software. In practice that means:

• Scam messages still reach you. A fake text from a "bank" or a parcel company arrives the same way with or without a VPN. The National Anti-Scam Centre's Targeting Scams Report 2025 recorded $2.18 billion lost to scams in 2025. Very little of that depends on someone reading your Wi-Fi traffic.
• A bad download is still bad. If you install an infected app, the VPN tunnel carries the infection's traffic as faithfully as everything else.
• Out-of-date software stays exposed. Updates fix flaws. A VPN doesn't.
• You aren't anonymous. The VPN company can see your traffic, your accounts still know it's you, and your payment details are on file with the VPN company.
• It doesn't change the law. Something unlawful stays unlawful when you do it through a VPN. Our guide to whether VPNs are legal in Australia covers this.

VPNs and Australian metadata retention

Australia has a data retention scheme under the Telecommunications (Interception and Access) Act 1979. The Department of Home Affairs' Data Retention Guideline says providers must keep certain metadata for at least two years, and subscriber and account information for the life of the account plus two years.

The scheme has limits. Home Affairs' industry FAQs say it doesn't cover the content of communications, and internet access providers aren't required to keep the web addresses customers visit.

With a VPN on, the record your internet provider can keep is mostly that you connected to a VPN server, when and for how long. The detail of where your traffic went next sits with the VPN company instead, under whatever rules apply to it. Our metadata retention guide goes through the scheme in more detail.

When a VPN is useful

• Public Wi-Fi. The ACSC suggests avoiding public Wi-Fi for sensitive tasks where you can, and notes a VPN can hide your activity from others on the same network. Our public Wi-Fi guide has a short routine.
• Working away from the office. Many employers require a work VPN to reach internal systems. That's a different product from a consumer VPN app, run by your employer.
• Travel. Hotel and airport networks are shared networks. The ACSC's travel tips also say to check the local laws of the country you're visiting before using a VPN there, because some countries restrict them.
• Keeping your browsing away from your provider. If you'd rather your internet provider didn't see which servers you connect to, a VPN moves that view to the VPN company.

When you probably don't need one

• On your own home network, if you trust it. The main public Wi-Fi risk, strangers on the same network, isn't there.
• If your worry is scams. A VPN doesn't filter scam calls, texts or emails. Multi-factor authentication and the Scamwatch steps in our online scams guide do more.
• For Australian streaming at home. Stan, ABC iview and SBS On Demand are licensed for Australia, and a VPN can get you blocked rather than helped. Netflix suggests turning a VPN off if it causes an error, and notes some antivirus software includes a VPN that may be switched on without you realising.

How to pick a provider sensibly

The ACSC's advice is to use a reputable VPN provider. That's short, but it points at the right questions. Who runs the company? Has anyone outside the company checked its no-logs claims? What happens if you want your money back?

Independent checks are one useful signal. As examples from the companies' own sites: Proton VPN says the auditing firm Securitum completed its fifth consecutive annual no-logs audit in 2026 (Proton), and NordVPN says Deloitte Lithuania carried out its sixth no-logs assurance engagement between 10 November and 12 December 2025 (NordVPN). Naming them isn't a recommendation. Our VPN checklist sets out eight things to check with any provider, and the free VPN guide covers what you give up with a free plan.

Frequently asked questions

Does a VPN make me anonymous?

No. The VPN company can see your traffic, and any account you sign in to still knows it's you. A VPN changes who can see your traffic on the way, not who you are online.

Can my internet provider see what I do with a VPN on?

Your provider can see that you're connected to a VPN server, when, and roughly how much data you use. It can't read the encrypted traffic inside the tunnel. The VPN company can see where that traffic goes next.

Will a VPN stop scams and hacking?

No. The ACSC says a VPN won't protect you from malware, phishing or software vulnerabilities. Scam texts, calls and emails reach you the same way with or without one.

Is a VPN the same as the one my work gives me?

They work in a similar way, but a work VPN connects you to your employer's network so you can reach internal systems. A consumer VPN connects you to the VPN company's servers and then out to the internet.

Why does Netflix show an error when my VPN is on?

Netflix's help page says a VPN can make your device look like it's connecting from somewhere else, which can cause error E106. It suggests turning the VPN off. Our streaming guide covers Netflix, Stan, ABC iview and SBS On Demand.

Do I need a VPN on my phone?

Only if you use networks you don't trust, such as public Wi-Fi. On mobile data or a home network you trust, the main benefit is moving your browsing view from your provider to the VPN company.