1. “A VPN makes me completely anonymous online”
Not accurate. A VPN hides your IP address from the sites you visit and hides your browsing destinations from your local network and ISP. It does nothing about the accounts you log into, the cookies sites set, or browser and device fingerprinting — all of which can identify you regardless of which IP address you’re connecting from. EFF’s Surveillance Self-Defense project is explicit that VPN advertising which promises anonymity or protection from “government surveillance and online tracking” wholesale “vastly oversells the benefits of VPNs”.
2. “A VPN protects me from malware and viruses”
A VPN encrypts a connection; it doesn’t inspect files or block malicious downloads. Some VPN apps bundle basic ad- or malware-blocking as an extra feature, but that’s a separate tool riding alongside the VPN, not something the VPN protocol itself does. See VPN vs Antivirus: Do You Need Both? for how the two actually divide the work.
3. “Every VPN keeps zero logs, because they all say so”
A no-logs claim is a policy statement, not a technical guarantee, unless it’s backed by something verifiable — an independent third-party audit, or in a few cases a legal case where authorities confirmed a provider genuinely had nothing to hand over. EFF’s guide to choosing a VPN specifically recommends checking who runs the service, what jurisdiction it operates under, and what its actual track record is, rather than taking the marketing copy at face value. See No-Logs / Privacy-Focused VPNs for what to look for.
4. “Free VPNs are basically the same as paid ones”
Running global server infrastructure costs money somewhere. Reputable paid providers charge you directly; some free services instead monetise through data collection, advertising, or by deliberately limiting speed and server choice to push you toward a paid tier. That doesn’t mean every free VPN is a trap, but it does mean the business model is worth checking before you trust one with your traffic. See Free vs Paid VPNs.
5. “A VPN will always get me a lower price online”
Some retailers, airlines and subscription services do use location-based or dynamic pricing, so changing your apparent region can occasionally surface a different price. But there’s no guarantee: plenty of pricing depends on currency conversion, local tax, browsing history or account status rather than location alone, and some checkout flows explicitly detect and block known VPN IP ranges. Treat it as worth checking, not a reliable discount trick.
6. “Using a VPN is illegal”
In most countries VPN use is entirely legal and extremely common for remote work alone. But it isn’t universal, and some jurisdictions restrict, license or ban VPN use, or ban it for specific purposes. This genuinely varies by country and can change, so it’s worth checking rather than assuming either way — see our country-by-country legal guide.
7. “A VPN always makes your internet slower”
Routing traffic through an extra server and encrypting it does add some overhead, so a small speed reduction is normal. How noticeable it is depends heavily on server distance, server load and which VPN protocol is used — modern protocols and well-provisioned server networks keep the difference small for most everyday browsing and streaming. A VPN that consistently and dramatically slows every connection is more a sign of a poorly run service than an unavoidable law of VPNs in general.
8. “A VPN protects me on sites and apps I’m logged into”
Once you sign in to Google, Amazon, your bank or a social network with your own credentials, that service knows exactly who you are regardless of which IP address the connection is coming from. A VPN changes your network-level footprint, not your account identity.
9. “A bigger encryption number always means a safer VPN”
AES-256 encryption, the standard used by most reputable VPNs today, is already considered effectively unbreakable by brute force with current technology. Marketing that emphasises ever-larger numbers past that point is mostly noise — the more meaningful differences between providers are protocol quality, server infrastructure, independent audits and logging policy, not the headline encryption figure.
10. “You only need a VPN if you have something to hide”
This framing confuses privacy with wrongdoing. Basic privacy practice — limiting what your ISP or a shared network can see, being deliberate about which apps and sites hold your data — is standard guidance from bodies like the UK Information Commissioner’s Office (ICO) and the NCSC for everyone, not just people with something to conceal. The same logic applies to locking your front door: it isn’t an admission of guilt.
See what real providers actually offer, side by side
Related reading
Sources: EFF Surveillance Self-Defense – VPN glossary; EFF – Choosing the VPN That’s Right for You; Cloudflare Learning Center – What is a VPN?; ICO – Online safety guidance.