Doing so much online banking, shopping, etc. opens us up to potential attacks—including theft and the abuse of personal information. That’s where a Virtual Private Network (VPN) comes in.
Photo by Readers Digest
What is a VPN?
“A VPN is an online service that allows consumers to encrypt all their web traffic as it comes and goes from their devices,” says Ray Walsh, a technology expert at ProPrivacy. “This secures the data in an impenetrable tunnel that stops anybody from being able to analyze or steal their data and web-browsing habits.” In short, it’s the key to maintaining your privacy and safety.
According to Amy Smith, a senior technology analyst at Fit Small Business, a VPN is a bit like a personal cloaking device. “When you use a VPN, it encrypts your data, so it’s like you’re surfing the web invisibly,” she explains. “Your IP address is masked, too. So if there are any local network attacks with the purpose of stealing data, you’re much more protected.”
Who should get a VPN?
There are three main reasons a person might want to consider getting a VPN, according to Austin Norby, director of cyber initiatives at Blue Star Software.
- For connecting geographically distributed networks into a virtual/private network.
- For those who don’t want their Internet Service Provider (ISP) to be able to see their Internet traffic. “This does not prevent someone from eventually seeing your traffic, only those in between the two VPN endpoints,” says Norby. “This may or may not be a legal use of a VPN, depending on where you are in the world.”
- For those whose ISP prevents access to certain sites or content but allows for VPN traffic. “This can be used to fake a geographic presence somewhere else in the world,” he notes, adding that this may be another gray legal area in some locations.
Because the last two possible uses are potentially illegal, depending on where you live, Norby says of both points: “This is not legal advice or permission. Please consult with a lawyer in your area before attempting this kind of usage.”
What can a VPN protect users from?
“A VPN can protect people against badly implemented public Wi-Fi hotspots and purposefully set up ‘evil twin’ hotspots designed to help steal people’s data,” Walsh explains. “A VPN also stops local network administrators that are hosting Wi-Fi hotspots in coffee shops, hotels, airports, or elsewhere from invading your privacy by monitoring the websites that you visit.”
And you’re not just being paranoid if you want that extra privacy protection while surfing on public networks. “It is possible for Wi-Fi-hosting venues to collect data about consumers, which is later sold in bulk to third parties such as data brokers,” says Walsh. “This means that any data amassed about consumers while they use public Wi-Fi could potentially be sold on for profit and end up in a database.” A VPN can prevent that.
Some VPNs can provide a little extra protection, if you know what you’re looking for. “Some VPNs might provide a service that scans for known malware or exploitation attempts in the traffic and removes that code or content and blocks those connections,” says Norby. But you can’t expect that from every VPN. “This is not inherent in VPN technology and requires that the VPN service provider is scanning your unencrypted traffic, which does tend to violate the principles some users are looking for when using a VPN—namely privacy,” he explains.
How expensive is a VPN?
“While there are free VPN offerings, many are capturing all your information and are barely more than thinly veiled malware,” says Dave Hatter, a software engineer and cybersecurity consultant who currently works for intrustIT. If you want a VPN that will truly protect you, he says it’s best to stick with software from well-known, reputable vendors such as Symantec and Nord. “You can get solid, quality VPN offerings very inexpensively, and it’s much less expensive than the cost of identity theft or having your bank account drained,” he adds. Currently, Nord has a VPN deal for $3.49 per month for three years.
“There has been a lot of hype recently about VPN services and exactly what they can or cannot do,” Norby says. And that’s why he thinks you need to know about the following claims and limitations:
- Traffic is only encrypted from VPN-endpoint to VPN-endpoint. This means that if you use servers to create the VPN tunnel and you must direct traffic through the VPN server in order to travel the tunnel, all traffic between your computer and the VPN server is visible. All traffic after the VPN destination server and the actual destination is visible (unless other precautions are taken).
- When using a VPN service, the VPN service provider has the technical ability to read every single packet that traverses their network and log it for later consumption or distribution to ad services and/or local law enforcement. Whether or not this will happen is usually stated in their legal documents…which few people read. If privacy is of high importance to you, make sure to read those documents and understand exactly how your data will be used as it traverses the VPN service provider network. And remember that even if they say they won’t use your information, they have the ability to do so. Factor such possibilities into your risk calculation.
- Antivirus or anti-malware services offered by the VPN service provider require them to scan your traffic. They can remove the malicious content from your traffic and that’s great. However, if they can remove content from your traffic, they can also add it back in, including malicious content, custom ads, custom tracking, and so on. Again, include that in your risk calculations.
How can the average person find the right VPN?
“The best way to get a VPN is to visit a legitimate privacy advocacy website that reviews and tests VPNs like ProPrivacy.com,” says Walsh. “Here, consumers can access honest information and guides designed to help them find a VPN provider that is suited to their needs and get it up and running problem-free.” Of course, if you’ve got children, you’ll want to take additional steps to keep your kids safe online.
While there are several VPN providers with servers in the United States, if you’re worried about the U.S. government’s prying eyes, you can choose a VPN with servers located in other countries, says Smith. “NordVPN is in Panama, CyberGhost VPN offers servers in 112 different locations, and VyprVPN Services has jurisdiction in Switzerland,” she notes. “For the best security of your data, do a bit of research into the location to ensure that your data is locked down thanks to specific privacy laws.”
A few final notes
“VPNs are popular all over the world because their advantages are universal to all people,” Walsh explains. “Online freedom and privacy are considered two of the most fundamental human rights in modern society, because the ability to access news and educational materials—as well as the ability to communicate freely both locally and globally—are vital to maintaining autonomy and self-determination both politically and within civil society.”
Plus, he adds, “VPNs are one of the few online services that allow consumers to escape tyranny, political oppression, and unfair corporate surveillance by actively protecting their data and therefore their digital footprint from unwanted surveillance. For this reason, privacy advocates consider VPNs one of the primary tools for gaining and maintaining a healthy online presence.”
Article by Leah Campbell and The Readers Digest