What Is a VPN? How It Works, What It Protects and How to Choose

A VPN (Virtual Private Network) encrypts your internet traffic and routes it through a server in a location you choose. Websites see the VPN server IP instead of yours. Your ISP cannot read your traffic or see which sites you visit. Your connection is protected from interception on any network. Over 1.5 billion people use VPNs worldwide for privacy, security, and accessing geo-restricted content — and the number grows every year as digital privacy awareness increases.

How a VPN Works: Step by Step

When you connect to a VPN, three things happen simultaneously. First, your device encrypts all outgoing traffic using AES-256 — the same standard used by governments and financial institutions worldwide. Second, the encrypted traffic travels through a secure tunnel to the VPN server in the location you selected. Third, the VPN server decrypts your request, forwards it to the destination, receives the response, re-encrypts it, and returns it through the tunnel to your device. The destination website sees only the VPN server IP — never your real IP or location. Your ISP sees only that you are connected to a VPN server — not what you are doing or where you are connecting.

What a VPN Protects You From

• ISP surveillance — Your internet provider cannot see which websites you visit, when you visited, or how long you stayed. Indonesian ISPs are legally required to retain certain data — a VPN prevents that data from being collected in the first place.
• Public Wi-Fi attacks — Encrypted traffic is unreadable to anyone monitoring the same network at a cafe, airport, hotel, or mall.
• IP-based tracking — Websites, advertisers, and data brokers cannot identify your real location or build behavioral profiles from your IP address.
• Geo-restrictions — Access streaming libraries, news sites, and services unavailable or restricted in Indonesia.
• ISP throttling — Some ISPs detect and slow down video streaming or gaming traffic — a VPN prevents this detection by encrypting traffic types.

VPN vs Proxy: The Fundamental Difference

Both VPNs and proxies hide your IP address from websites. Beyond that, they are different tools serving different purposes. A proxy routes traffic for one application only — typically just your browser — without any encryption. A VPN encrypts every app on your entire device simultaneously: browser, email, social media, banking apps, system connections, and everything else.

Feature	Proxy	VPN
Hides IP address	Yes	Yes
Encrypts traffic	No	Yes — AES-256
Covers all apps	No	Yes
DNS leak protection	No	Yes (quality VPNs)
Works on public Wi-Fi	Partially	Yes
Streaming reliability	Low	High
Kill switch	No	Yes (premium VPNs)

Protocols Explained

A VPN protocol determines how the encrypted tunnel between your device and the VPN server is established. Different protocols offer different trade-offs between speed, security, and compatibility:

• WireGuard — The fastest modern protocol. Under 4,000 lines of code make it leaner and easier to audit than alternatives. NordVPN implements it as NordLynx. Best for daily use.
• OpenVPN — The long-standing industry standard. Open-source, extensively audited, extremely reliable. Slightly slower than WireGuard but universally trusted.
• IKEv2/IPSec — Fast and stable, particularly good on mobile devices that frequently switch between Wi-Fi and cellular. Reconnects quickly after network changes.
• L2TP/IPSec — Older and slower. Avoid unless you have a specific legacy compatibility requirement.

What to Look for When Choosing a VPN

These factors separate genuinely protective VPNs from those that undermine the privacy they claim to provide. A no-log policy that has been verified by independent audit from firms like PricewaterhouseCoopers or Deloitte is essential — unverified claims are worthless. DNS leak protection that routes all DNS queries through private servers is non-negotiable for real privacy. A kill switch that blocks all internet access if the VPN connection drops prevents accidental exposure. Jurisdiction outside 5/9/14 Eyes surveillance alliances reduces legal pressure to hand over user data. Protocol support for WireGuard or NordLynx gives you fast connections without sacrificing security.

NordVPN meets every one of these criteria. It is based in Panama — outside major surveillance alliances — audited by PricewaterhouseCoopers twice, uses NordLynx for speed, and operates over 6,000 servers in 60 countries including Singapore and Japan for fast Indonesian connections. Plans start at under $4 per month with a 30-day money-back guarantee. After connecting, verify protection with the IP Checker and DNS Leak Test.

Frequently Asked Questions