Understanding VPNs: two completely different things
The biggest confusion in privacy discussions comes from the word "VPN" meaning two entirely different technologies.
Enterprise / business VPNs
Primary purpose: connect remote workers to office network infrastructure.
Key functions:
- Remote access — access office file servers from home.
- Site-to-site — connect branch offices together.
- Network extension — make remote workers part of office network.
- Internal services — access company databases, printers, internal websites.
Technology: IPsec protocols, enterprise firewalls, Active Directory integration, network routing and subnets.
Real-world example: you work from home but need to access your company's internal customer database that's only available on the office network.
Consumer / privacy VPNs
Primary purpose: hide your internet activity and location from ISPs, governments, and hackers.
Key functions:
- Privacy protection — hide browsing from ISP tracking.
- Public WiFi security — encrypt traffic at coffee shops.
- Geo-bypassing — access region-locked content.
- IP masking — hide your real location.
Technology: OpenVPN, WireGuard protocols, consumer VPN apps, no-logs policies, global server networks.
Real-world example: you're at Starbucks and want to check your bank account without the coffee shop (or hackers) seeing your financial activity.
Proxy servers: the middle ground
Proxies act as intermediaries between your computer and the internet, but they're simpler and more limited than VPNs.
How proxies work: your computer → proxy server → website. The website sees the proxy's IP address instead of yours, but only for specific applications (usually web browsing).
Proxy advantages:
- Speed — faster than VPNs (less encryption).
- Application-specific — can proxy just browser traffic.
- Cost — often free or cheaper than VPNs.
- Simple setup — just configure browser settings.
- Caching — can speed up repeated requests.
Proxy limitations:
- No encryption — traffic visible to ISP and proxy operator.
- Application-specific — doesn't protect all internet traffic.
- DNS leaks — your real IP can be revealed.
- Limited protocols — usually HTTP/HTTPS only.
- Trust required — proxy sees all your unencrypted traffic.
When to use proxies:
- Bypass geo-blocking — quick access to region-locked websites.
- Web scraping — rotating IP addresses for data collection.
- Testing — see how websites appear from different locations.
- Speed optimisation — corporate proxies for caching popular sites.
- Basic IP hiding — when full VPN protection is overkill.
Tor: maximum anonymity with trade-offs
Tor (The Onion Router) provides the highest level of anonymity by routing your traffic through multiple random servers worldwide.
How Tor works: your computer → entry node → middle node → exit node → website. Each layer only knows the previous and next step, making it nearly impossible to trace traffic back to you.
Tor advantages:
- Maximum anonymity — nearly impossible to trace.
- Free and open source — no corporate control.
- Decentralised — no single point of failure.
- Censorship resistance — works in restrictive countries.
- Hidden services — access .onion websites.
- No logging — designed to be anonymous.
Tor limitations:
- Very slow — multiple hops create significant delay.
- Limited applications — mainly for web browsing.
- Exit node risks — malicious exit nodes can monitor traffic.
- Blocked by some sites — Netflix, banking sites often block Tor.
- Complexity — requires careful usage to maintain anonymity.
- Stigma — associated with illegal activities.
When to use Tor:
- Journalism — protecting sources and research.
- Activism — organising in oppressive regimes.
- Whistleblowing — anonymous document sharing.
- Research — anonymous information gathering.
- High-risk situations — when privacy is literally life-or-death.
Side-by-side comparison: which tool for which job?
| Feature | Business VPN | Consumer VPN | Proxy | Tor |
|---|---|---|---|---|
| Primary purpose | Network access | Privacy protection | IP masking | Anonymity |
| Security level | High | High | Medium | Maximum |
| Speed | Fast | Good | Fastest | Slow |
| Setup complexity | IT managed | Simple app | Basic config | Moderate |
| Cost | Enterprise licensing | $3–15/month | Free to $10/month | Free |
| Traffic coverage | All applications | All applications | Specific apps only | Tor browser only |
| Logging | Business monitoring | Varies by provider | Often logged | No logs possible |
| Geo-bypassing | Not intended | Excellent | Good | Limited |
| Corporate acceptance | Required for business | Generally accepted | Widely accepted | Often blocked |
Real-world scenarios: what should you actually use?
Coffee shop banking. Need to check your bank account at Starbucks. Best choice: consumer VPN. Why: encrypts your entire connection, protecting banking credentials from WiFi eavesdropping. Banks accept VPN connections. Avoid: Tor (banks block it), proxy (no encryption).
Working from home. Access company files and systems remotely. Best choice: business VPN (company-provided). Why: designed specifically for secure office network access. Integrates with company authentication systems. Note: consumer VPNs won't help you access internal company resources.
Streaming geo-locked content. Watch Netflix content from another country. Best choice: consumer VPN or proxy. Why: VPN provides security + geo-bypassing. Proxy works but offers no privacy protection. Avoid: Tor (too slow for streaming, often blocked).
Sensitive research. Researching sensitive topics without leaving traces. Best choice: Tor. Why: maximum anonymity makes it nearly impossible to trace research back to you. Trade-off: much slower browsing speed, some sites may block access.
Multi-office business. Connect branch offices to headquarters. Best choice: site-to-site VPN. Why: creates secure tunnel between office networks, allowing seamless resource sharing.
Web scraping project. Collecting data from websites without getting blocked. Best choice: rotating proxies. Why: can quickly switch IP addresses to avoid rate limiting. Faster than VPN for high-volume requests.
Common misconceptions debunked
Myth: "VPNs make you completely anonymous." Reality: consumer VPNs hide your IP address but don't make you anonymous. Your VPN provider can still see your activity, and browser fingerprinting, cookies, and login accounts can still identify you. For true anonymity, you need Tor plus careful operational security.
Myth: "All VPNs are the same." Reality: business VPNs and consumer VPNs serve completely different purposes. A business VPN connects you to your office network; a consumer VPN hides your activity from your ISP. They use different technologies and solve different problems.
Myth: "Tor is only for illegal activities." Reality: Tor has many legitimate uses including journalism, research, activism, and protecting privacy in oppressive regimes. The majority of Tor users are using it for legitimate privacy protection.
Myth: "Free proxies are safe." Reality: free proxies often monitor and log your traffic, inject ads, or even steal credentials. The proxy operator can see all your unencrypted traffic. Only use proxies from trusted sources, and never send sensitive information through free proxies.
Myth: "VPNs slow down your internet significantly." Reality: modern VPNs with good infrastructure typically reduce speeds by 10–30%. The encryption overhead is minimal on modern hardware. Tor, however, can be 5–10× slower due to multiple hops through volunteer servers.
Decision framework: choosing your privacy tool
1. What's your primary goal?
- Access office network: business VPN.
- Hide browsing from ISP: consumer VPN.
- Quick geo-bypassing: proxy.
- Maximum anonymity: Tor.
2. How much speed matters?
- Speed critical: proxy or no tool.
- Speed important: consumer VPN.
- Privacy over speed: Tor.
3. What's your technical expertise?
- Beginner: consumer VPN apps.
- Intermediate: proxy configuration.
- Advanced: Tor with proper OpSec.
4. What's your threat model?
- Casual privacy: consumer VPN.
- ISP / government surveillance: VPN or Tor.
- Life-or-death anonymity: Tor only.
Our recommendations by use case
Most people: consumer VPN. Best balance of privacy, speed, and ease of use for everyday internet activity — public WiFi protection, ISP privacy, geo-bypassing, simple setup.
Remote workers: business VPN + consumer VPN. Use company VPN for work, consumer VPN for personal privacy. Don't mix the two; keep work/personal traffic separate.
High-risk users: Tor + proper OpSec. Maximum anonymity for journalists, activists, researchers in sensitive situations. Requires training, slow but secure, operational security critical.
Whichever tool you pick, verify it's working: check your apparent IP and location before and after enabling it.
Related reading: What is a VPN? · How VPNs work · What is an IP address?