VPN · guides

VPN: what a tunnel changes, and what it does not

By Alberto Gulotta · Updated 18 September 2026 · 4 min read

This is the entrance to the VPN tower. Nothing is argued down here. The atrium exists to show you what the building will hold, and to put you on the right floor in one click.

The tower is arranged the way the question actually arrives. Some arrive holding a name somebody told them to buy. Some come with a device they cannot get connected, or that stopped working the moment they connected it. Some come with a word they read in an article and did not understand — kill switch, DNS leak, split tunnelling. And some come because a bank, an employer or a country has made the decision for them. Those are four different needs and they do not share an answer, so they will not share a floor.

Everything above is written under the same two rules. A claim about a service is quoted from that service's own page, with the date we read it, because prices and policies change and an undated claim rots quietly. And no floor ranks anything until we have paid for the accounts out of our own pocket and used them for two weeks — this is the single most commission-driven category on the consumer internet, and the fastest way to be worth reading in it is to have nothing to sell.

The boxes below say which floors are open and which are still being built, and for the questions that have no floor yet, this is where to go today. The pages that already exist and touch these questions are private browsers and fingerprinting, which covers what a browser hides and what it does not; the Tor browser and onion services, for the cases where a VPN is the wrong tool; and what private DNS is, and what it does not hide, which is the one technical setting people change believing it does the job of a tunnel.

Not covered here. It will not tell you the best VPN. Not yet, and not on the strength of a features table copied from a press release. A verdict needs accounts we paid for, two weeks of daily use, and a written account of what broke. When that exists it carries the date it was done.

It will not carry affiliate links. Not on any floor, not later, not discreetly. In a category where most recommendations are paid placements, that is not a moral position — it is the only way a recommendation here could mean anything.

And it will not pretend a VPN is anonymity. That distinction decides who should be reading this tower at all, and it is drawn in full on the Tor browser page. If your requirement is genuinely that nobody can identify you, a VPN is not the building you want. What holds instead is simple: no rankings until we have paid for the accounts ourselves and used them for two weeks, and no affiliate links ever.