LONDON (AP) — Out and about and looking for an internet connection to check email or post a video to TikTok? It’s tempting to hop on the free Wi-Fi at a coffee shop or mall. But don’t do it unless you’re protected.
Using unsecured internet access can be risky. Hackers can stealthily place themselves between you and the internet and watch everything you do online, smuggle malware onto your device, or even set up a fraudulent hotspot that looks authentic. This is one of those times when it’s best to use a virtual private network, or VPN.
VPNs should be a part of most people’s internet security toolkit. For novice users, they can seem technically bewildering at first.
What is a VPN?
A virtual private network is a service that hides your online activity from anyone on the internet. A VPN encrypts your traffic data so that no one else can read it, and routes it through private tunnels to secure servers around the world.
If regular internet use is like a passing city bus, then using a VPN is like riding in a limousine with tinted windows. Everyone can see the bus’ passengers and the destination sign. Meanwhile, the limousine reveals little to people on the street about what it’s carrying or where it’s going.
Why do I need a VPN?
Privacy is one of the most important reasons. If you connect to a free public Wi-Fi network, such as in a hotel lobby or coffee shop, a VPN will prevent anyone from electronically eavesdropping on you.
You can also use it at home if you don’t want your ISP knowing what you’re doing. But if that’s not a problem, then it probably isn’t necessary, as long as your network is password protected.
Another important use for a VPN is to “spoof” your location and make it appear as if your phone or computer is somewhere else. Choose from a list of countries where your VPN provider has servers and presto, you have a different IP address that makes a website think you’re in, say, Singapore or Germany instead of on your desk in New York or on your phone in London. Now you can open localized versions of websites or stream videos that are only available in a certain country.
VPNs also help people bypass censorship in countries with strict internet controls.
Remember that a VPN doesn’t hide everything. For example, if you log into your Gmail account, Google still knows who you’re emailing.
Aren’t VPNs illegal?
VPNs are perfectly legal in most countries. However, they are banned or restricted in places where authorities control internet access or engage in online surveillance and censorship, such as North Korea and China.
How do I choose a VPN?
There are dozens, if not hundreds, of VPN services available, but not all are credible. Experts warn that some may be run by shady operators.
Start with technical review sites that have tested and analyzed their privacy policies, encryption practices, ease of use, speed, price, and other categories. Some review sites rank VPNs based on specific applications, such as streaming.
Some well-known or established providers include NordVPN, Mullvad, Proton, Surfshark, ExpressVPN, and Private Internet Access.
There are a few key features to look out for.
One of these is a ‘kill switch’ that stops all internet traffic if the VPN connection is lost, preventing any stray bits of data from escaping.
“The kill switch is a pretty powerful security feature,” because it never leaves you vulnerable, says Paul Bischoff, a security and privacy advocate at consumer research group Comparitech. But he says some people find it annoying because, for example, if your phone changes networks, your connection drops for a moment.
Experts also recommend VPNs with a “no-logging” guarantee. This is a promise that no online activities will be recorded. However, it is not easy for a regular user to verify whether the VPN operator keeps such promises, so look out for audits by third-party inspectors.
Please note that you will have to pay a monthly fee to use most reputable VPNs.
What about free VPNs?
Experts warn against using free VPNs, as many of these services lack sufficient security or may collect your data.
Bischoff warned that some free VPNs may be from rogue providers. These providers provide little information about who is behind the VPNs or what security they use.
“Some of these are outright malware,” Bischoff said. They can inject ads into your browsing or be unable to unblock many streaming services. Free VPNs also tend to be slower because they “typically have too many users on too few servers,” he said.
Some reputable VPNs offer a free version, but these usually have limitations, such as limiting usage to one device or a data cap. They’re a good option if you only want to browse privately occasionally.
Isn’t it difficult to install and set up a VPN?
You can install a VPN on your computer like any other piece of software, or on your smartphone as an app. Or you can add it to your browser as a plugin.
Keep in mind that a VPN plugin is mainly useful for quick browsing sessions and helps block ads and trackers, while computer-based VPNs cover all of your online traffic, giving you more comprehensive protection.
Aren’t there many technical settings?
Most VPNs “tend to come with pretty secure options right out of the box,” Bischoff said.
“Normally you can just open it, install it, set it up and forget about it.”
An important choice to pay attention to is the VPN protocol. This is the set of rules for how data is encrypted and sent over the network.
Most VPN services let you choose from several protocols. Two of the most common are WireGuard, which has fast connections that make it suitable for streaming, and OpenVPN, which supports strong encryption and is highly customizable. Both are considered safe and secure.
Are there any disadvantages?
VPNs typically slow down your internet speed somewhat, since all that data has to be encrypted when it goes out and decrypted when it comes in, which takes some extra time. Bischoff estimates that a VPN will slow down your internet speed by about 5-10%.
You may also encounter more captchas — puzzles designed to disable bots — or even be blocked by some websites. That’s because cybercriminals often use VPNs to carry out their crimes, which results in their IP addresses being blacklisted, Bischoff said, adding that this is more common with free VPNs.
Research by Comparitech has found that some streaming websites are more aggressive in blocking VPN traffic, most notably sports website DAZN and the BBC’s iPlayer service.
___
Need help solving a technical challenge? Write to us at onetechtip@ap.org with your questions.