Privacy guide
Understanding the Technology Behind VPN
Understand the technology behind VPN connections, encryption and tunnelling with this plain-language introduction.
You do not need to master encryption to configure a VPN sensibly. Use a supported app, a documented protocol and a connection test you understand.
What you will accomplish
Check the three settings that matter to your own setup.
Do it now
Review protocol selection
Find the app's protocol setting. Use its recommended automatic mode or a supported modern option documented for your device. Do not select an old protocol merely because it connects.
Check: The setting matches the provider's current instructions.
Review traffic coverage
Check whether the app protects the whole device, selected apps or only a browser extension. Review split-tunneling exclusions and the kill-switch explanation.
Check: You know which traffic the app is intended to route and what happens if it disconnects.
Verify without overclaiming
Use the connection check and test the applications you actually need. An address change in one browser is not proof that every app uses the same route.
Check: Your browser observation and the app's documented settings make sense together.
Check the result
Your browser observation and the app's documented settings make sense together. Change one thing at a time so you know what made the difference.
If something does not work
If the connection is unreliable, use official troubleshooting for your operating system. On a work device, follow the administrator's approved configuration.
Open the VPN Connection Check to observe this browser's connection and follow the independent DNS-test instructions.
Background and further explanation
Protocols without the jargon
A protocol defines how the connection is established and traffic is carried. WireGuard and OpenVPN are examples supported by many providers, but availability differs by app and operating system. Follow the current instructions for the product you use rather than assuming a protocol name guarantees an outcome.
A kill switch is intended to restrict traffic during certain connection failures; its scope depends on the app and platform. Split tunneling deliberately routes some traffic differently. Read the provider's explanation before relying on either.