Most Homes Don't Need a VPN. How to Tell If Yours Does.

Marta Lane · Updated April 14, 2026 · 5 min read

You've seen the ads. Hackers on your connection, reading every word you type. The cure, they say, is a VPN, on every device, starting today.

That advice had its day. The danger it sells was real once, and the web spent the past decade quietly closing it. What's left is a short list of home situations where a VPN still earns its keep, and a one-minute test to check whether your house is on it.

"It encrypts your traffic": mostly done already

The padlock in your browser's address bar means the connection is already scrambled. That's HTTPS, and nearly every site that matters uses it: by Google's own count, more than 90% of the pages Chrome users visit are on encrypted sites, and that has held for years.

Your bank and your email switched first. The FTC now tells consumers that encryption is so widespread, even public Wi-Fi is "usually safe." Your home connection, behind your own router and your own password, starts ahead of that.

A VPN adds a second tunnel around traffic that is, for the most part, already locked.

"It stops viruses and scams": it can't see them

A VPN is a tunnel. It moves your traffic and never looks inside. A virus arrives through a VPN just as easily as without one. And the same FTC advice page warns that scammers encrypt their fake websites too.

The padlock says the line is private. It says nothing about whether the people on the other end are honest. If your worry is viruses or fake login pages, the tool for that job is antivirus, plus a careful eye. A VPN was never built for it.

"It makes you invisible": the watchers don't need your address

Sign in to your email or Facebook through a VPN and you've told them who you are. No detective work required. Cookies still follow you. So does browser fingerprinting, where small details like your screen size and browser version add up to a recognizable picture. The EFF, the web's longest-standing privacy watchdog, says VPN advertisements "vastly oversell" what the product can do. What private-browsing tools actually hide is a story of its own — invisibility is not on the menu at any price.

"It hides your browsing from everyone": it relocates the view

A VPN takes your list of visited sites away from your internet provider by handing that same list to the VPN company. The FTC is blunt about this: using a VPN app means giving its maker permission to see your online activity. A serious company treats that as a duty of care. Plenty of free ones treat it as inventory for advertisers. Either way, somebody can still see the list. The question is who, and under what promise.

The four home cases that are real

Your provider's logbook bothers you. Encryption hides what you do on a site, but the names of the sites you visit still pass through your provider in the open, all day. Since a 2017 act of Congress, it can legally sell that history without asking you. An FTC study found the six biggest U.S. providers (about 98% of the mobile internet market) building advertising profiles from user data. A VPN is the one everyday tool that takes your site list off your provider's books. The full story is in our piece on what your provider sees.

The network isn't yours. If your internet comes with the apartment (a landlord's router or a building's shared Wi-Fi), whoever runs that network can see the same site list your provider would. A VPN seals your browsing into an envelope only you can open. On a connection you don't control, that's plain housekeeping.

Your "home" computer leaves home. If the laptop you bank on also rides to cafés and hotel rooms, home rules stop at your front door. Hotel Wi-Fi carries its own traps, including login pages that load before a VPN can switch on; we walked through them here. A VPN already running at home is one less thing to set up on the road.

You'd rather not broadcast your location. Every site you visit sees your IP address — a number that typically places you within about 30 miles and names your internet provider. That's enough for a scammer to dress a message in convincing local detail. What an IP gives away is its own article; if that exposure bothers you, hiding the IP is exactly a VPN's job.

The one-minute test

Four questions, yes or no:

Would it bother you that a year of your site history sits in your provider's records, and may be for sale?
Is your home internet run by someone other than you, like a landlord or a building?
Does the computer or phone you bank on regularly use Wi-Fi away from home?
Would you rather websites and strangers not know your town and your internet company?

Every "no" means the ads were not talking to you. Keep your money. The padlock is already doing the heavy lifting.

A "yes" or two puts you in the minority a VPN was actually built for. That changes the question from whether to which.

If you answered yes

Pick the VPN you will actually keep running. For a non-technical household that means simple: one app and a single on switch. Total VPN is built as a 3-in-1, bundling the VPN with an ad blocker and an antivirus, which covers the two jobs a VPN alone can't do: the viruses and the trackers. The current introductory deal is $1.59 a month; after the first term it renews at the standard rate of $99 a year unless you cancel.

Yes to one of the four? Cover it with one simple app →

30-day money-back guarantee on annual plans.

It won't make you anonymous, and it won't replace careful clicking. What it will do is the exact work the four real cases ask for: seal the site list and hide the IP. If you'd rather run a VPN on its own, without the bundle, Surfshark VPN is the single-purpose alternative.