Blog
-
Why Your Device Has Several IPv6 Addresses at Once
A link-local one, a routable one, a rotating one, sometimes more. What each is for, which one a site sees, and why rotation hides less than it looks.
-
The Names That Only Exist on Your Own Network
Printers and shared drives answer to names no public resolver has heard of. Two things break them: a tunnel swallowing them, or them leaking out.
-
What Your Device Announces to a Network Before You Open Anything
Joining a network makes your device introduce itself: a name, a request pattern, service advertisements. A tunnel covers none of it.
-
Which Route Wins When the Tunnel and the Local Network Disagree
Your device holds several overlapping routes at once. The rule that picks between them explains the tunnel-is-up-but-unused failure exactly.
-
What a Guest Network Actually Separates
A guest SSID either puts visitors on their own address range or merely stops them reaching each other. Which one you have is a question you can answer.
-
What a VPN Hides About Your IP Address, and What It Leaves Alone
An IP address is a routing label, not an identity. Here is what yours reveals, what a VPN substitutes, and the signals it never touches.
-
Why a Router VPN Behaves Differently From a VPN App
Moving the tunnel to your router covers every device and gives up per-device control, kill switches, and easy server switching.
-
What an ASN and Reverse DNS Reveal About Your Connection
Every IP address belongs to a registered network with a name attached. That is how sites tell a home connection from a data centre.
-
What a Traceroute Shows Before and After You Connect
A traceroute lists the network hops to a destination. Comparing one with and without a VPN makes the tunnel visible.
-
Why Port Forwarding Breaks Behind a VPN
Inbound connections arrive at the VPN server, not your router. Your forwarding rules are correct and never get consulted.
-
What MAC Address Randomization Hides, and What It Doesn't
A MAC address identifies your device to the local network only. Randomizing it helps against Wi-Fi tracking and does nothing online.
-
What WebRTC Reveals About Your Local IP Address
Browser real-time communication needs to discover your addresses to connect peers directly. That discovery can expose more than a VPN intends.
-
How to Read Your Own Network Settings
Address, gateway, subnet mask, and resolver: what each field means and what it tells you when a VPN misbehaves.
-
What Still Names the Sites You Visit: SNI Explained
Encrypted connections announce the hostname before encryption starts. That field is why private DNS alone does not hide your browsing.
-
Why Flushing the DNS Cache Fixes Odd VPN Behavior
Cached name lookups outlive a VPN connection change, so sites resolve to the wrong place. Clearing the cache is a real fix, not folklore.
-
What Your VPN's DNS Setting Actually Changes
VPN clients offer several DNS options and the labels are vague. Here is what each one does to where your name lookups go.
-
DNS over HTTPS vs a VPN: What Each One Hides
Encrypted DNS protects your name lookups only. A VPN protects the whole connection. They solve overlapping but different problems.
-
Who Runs Your DNS Resolver, and Why It Matters
Your resolver sees every hostname you look up. Knowing which one you use, and how it was chosen, is a basic privacy check.
-
How DNS Resolution Works, Step by Step
Turning a hostname into an IP address involves caches, a resolver, and a chain of authoritative servers. Each step is a place things can leak.
-
Why a VPN Gives You Two IP Addresses
Connecting a VPN adds a virtual network adapter with its own private address. Understanding it explains most routing confusion.
-
Shared vs Dedicated VPN IP Addresses
A shared VPN address hides you in a crowd; a dedicated one is yours alone. Each solves a problem the other creates.
-
Why IPv6 Is the Leak People Forget
Many VPN setups tunnel IPv4 and quietly let IPv6 traffic bypass the tunnel. Here is how that happens and how to check for it.
-
What CGNAT Means for Your IP Address
Carrier-grade NAT puts many subscribers behind one public address. It changes what inbound connections can reach you and how a VPN helps.
-
Static vs Dynamic IP Addresses: What Actually Changes
A static address stays put; a dynamic one is leased and may be reassigned. The difference matters more for reachability than for privacy.
-
Why Your Home IP Address Changes on Its Own
Home connections get their public address on a lease that can be renewed or reassigned. Here is what triggers a change and what it means for privacy.
-
Public vs Private IP Addresses: Which One a VPN Changes
Your device has a private address on your own network and a public one facing the internet. A VPN replaces one of them, not both.
-
Nobody Can Sell You the Fastest VPN: Measure Your Own Instead
A published speed figure describes a path you will never use. What actually sets your throughput, and a procedure for measuring your own result.
-
Is a Free VPN Safe? What You Can Verify From Your Own Device
The operator is in your traffic path by design. Which risks that creates, which of them your own machine can expose, and how to identify who is running it.
-
There Is No Best Free VPN, Only Limits That Fit or Do Not
A free tier's limits are its real specification. Which limits to read before installing, and why an unlimited free service is the odd one out.
-
What a Cheap VPN Is Economising On
Running exit infrastructure has real recurring costs. Where a low price comes from, what usually gets thinned first, and which corners you will notice.
-
Privacy From Whom? The Five Observers a VPN Treats Differently
Privacy is not one dial. Split it into who sees traffic, who links an address to you, who keeps records, who can compel them, and who owns the company.
-
Which Facts About a VPN Provider Are Still True Next Year
Sort what you learn about a provider by shelf life. Some facts last for years, some expire in weeks, and only one group belongs in a dated list.
-
"Best VPN Service" Is Five Different Purchases Wearing One Name
Best at what? The jobs people buy a VPN for pull toward incompatible choices, so a single winner cannot exist. Here are the five, kept separate.
-
How to Choose a VPN: Work Out Who You Are Hiding From First
Name the observer you actually care about and most VPN comparison criteria stop applying. The decision sequence, and where each branch leads.
-
VPN vs Smart DNS: What Changing Only Your Resolver Can Do
Smart DNS changes which resolver answers you and encrypts nothing. That makes it the clearest illustration of what name resolution alone affects.
-
VPN vs Tor: How Many Parties Can Connect Both Ends?
Both substitute the address a site sees. The real difference is how many independent operators are involved, and what that design costs you.
-
VPN vs Proxy: One Is an Application Setting, the Other Is a Route
A proxy is configured inside a program; a VPN edits your routing table. That single difference decides the scope and who resolves your names.
-
Do I Need a VPN at Home? What Changes on a Network You Run Yourself
On a network you administer, most of the usual case for a VPN does not apply. Here is what genuinely remains, and when it adds up to yes.
-
Why Use a VPN? Name the Observer, Name What It Loses
Every reason to run a VPN should name a party and the exact visibility it gives up. Some reasons survive that; several popular ones do not.
-
How Does a VPN Work? Follow a Single Packet Out and Back
The path one packet takes with a VPN connected, and what changes at each step: the interface, the route, the wrapping, the exit, the reply.
-
What Is a VPN? A Definition in Terms of Your IP Address
A VPN adds a network interface and substitutes the address remote services see. The definition, stated in addressing and routing terms.
-
Does a VPN Protect Against Hackers? It Covers One Hop
Mostly no. A tunnel covers the stretch between your device and the exit machine, and almost nothing people call being hacked happens on that stretch.
-
Where Your Browsing History Actually Lives
Your history exists in several places at once: the browser, a synced account, local caches, the resolver, and every site you visited. A tunnel touches one.
-
What Your Internet Provider Still Sees While the Tunnel Is Up
A tunnel hides which sites you reach from your access network. It does not hide that you connected, to where, for how long, or how much moved.
-
Can a VPN Be Hacked? Sorting the Parts That Can Fail
A VPN is cryptography, an app on your device, someone else's servers, and an account. Each fails differently, and the maths is the sturdiest part.
-
What a VPN Provider Can and Cannot Tell You About Legality
This page will not tell you what the law is, and neither can the company selling you a tunnel. How to separate law from terms of use, and where to look.
-
VPN Jurisdiction, Five Eyes, and What You Can Actually Check
Jurisdiction is a property of companies, and a VPN is several companies in several places. Why alliance names in marketing are a weak signal.
-
What Gets Examined When a VPN Says It Was Audited
The word covers several different exercises with different objects. Scope, date, and who commissioned it decide what an audit actually supports.
-
Which Words Do the Work in a VPN Logging Policy
A logging policy is a text, and most of it commits to nothing. The phrasings that constrain a company, the ones that only sound like they do.
-
What a No-Logs VPN Claim Covers, and What Exists Anyway
A no-logs claim is about what gets kept, not what the operator can see. The exit machine has to know both ends of your connection to work at all.
-
An Obfuscated Server Hides That You Are Using a VPN
Obfuscation disguises the tunnel's own signature, not its contents. It answers one narrow question and adds nothing to your privacy.
-
A Double VPN Splits Knowledge Between Two Servers
Two hops mean the entry server never learns your destination and the exit never learns your address. Whether that helps depends on who runs them.
-
Split Tunnelling Gives You Two Paths Out of Your Device
Routing some traffic through the tunnel and some around it is useful and cheap. The cost is that you must know which path anything is on.
-
How a VPN Kill Switch Fails Closed, and Where It Doesn't
A kill switch is a firewall rule that only permits traffic on the tunnel interface. Where those rules live decides whether it survives a crash.
-
AES-256 Names One Component of a VPN Tunnel
The cipher makes packet contents unreadable. Obtaining the key, checking who holds it, detecting tampering, and replacing it are separate jobs.
-
WireGuard or IKEv2: What Moving Between Networks Decides
Both handle a phone changing networks. The real split is one lives in your operating system's VPN stack and the other arrives in an app.
-
How OpenVPN and WireGuard Differ by Design
Two tunnels built to opposite briefs: a configurable session with a large codebase, or a minimal stateless one with fixed choices.
-
Which Part of Your VPN Is the Protocol?
The protocol is the negotiation and the packet format between your device and one server. Routes, resolvers, and firewall rules are separate layers.
-
Where the Slowdown Comes From When You Connect a VPN
Longer paths, an extra header on every packet, packet-size limits, shared server capacity, protocol behaviour. Which one is yours is knowable.
-
Changing Your VPN Location Only Changes the Exit Address
Picking a different server swaps the address you arrive from and the path your traffic takes. Everything else about your device stays put.
-
Finding and Reading Your VPN's Exit Address
The address the internet sees is not on your device at all. How to find it, and what its owner, reverse name, and reuse tell you.
-
What a DNS Leak Is, and Where in the Chain It Happens
A DNS leak is a name lookup that left by the wrong door. Where in the resolution chain it escapes, and what the wrong resolver learns.
-
Is My Real IP Address Still Showing?
The address case is the leak people ask about because it is the one they were promised. Here is what reverts it, and how to be certain.
-
The Four Kinds of VPN Leak, and How Each Is Detected
A leak is traffic that skipped the tunnel. It comes in four categories — address, DNS, IPv6, and WebRTC — and each is found a different way.
-
Confirming Your VPN Is Working, in the Right Order
Connected is not the same as working. Six observations, from your own device outward, that together show a tunnel is doing its job.
-
Narrowing Down Why Your VPN Is Not Working
A VPN failure lives in one of five places on your device. Here is the question that eliminates each, in the order worth asking them.
-
How Many Devices a VPN Covers: Counting Connections, Not Gadgets
Device limits count simultaneous connections, not installs. A router counts once, a double-tunnelled laptop counts twice, and stale sessions hold slots.
-
Using a VPN With a Smart TV: Covering a Device That Runs Nothing You Choose
Most smart TVs cannot run a VPN client at all, so coverage has to happen on the network — and the set may ignore the resolver you hand it anyway.
-
Installing a VPN on a Firestick: Why the Realistic Answer Is Upstream
A Fire TV stick can run a client, but you cannot inspect it and sideloading one is a trust problem. Covering it upstream is the honest answer.
-
Putting the VPN on Your Router: What You Are Committing To
A router tunnel covers devices that can never run a client, and commits you to one shared exit address and a piece of infrastructure that fails silently.
-
A VPN on a Chromebook: Which of the Three Layers Gets Covered
A Chromebook runs the browser, an Android container and a Linux container. A VPN in one does not cover the others, so check which yours reaches.
-
A VPN on Android: The Always-On Switch and the Private DNS Setting
Android puts the tunnel controls in the operating system: always-on, block-without-VPN, per-app coverage, and an encrypted DNS setting that can conflict.
-
A VPN on an iPhone: What Happens Between Networks
An iPhone's tunnel belongs to the operating system and is rebuilt every time the network changes. What happens in those intervals is the real subject.
-
A VPN on a Mac: What Happens to Name Resolution and Local Devices
On a Mac the tunnel is the easy part. One system resolver, a cache that outlives the change, and printers that vanish are the real subject.
-
A VPN on Windows 11: The Adapter, the Route, and the Resolver
Windows gives you a built-in client, a virtual adapter and an interface metric to inspect — plus a name-resolution habit that quietly undoes a tunnel.
-
Setting Up a VPN: Which Layer You Put the Tunnel On
Setting up a VPN is mostly choosing which layer carries the tunnel — one app, one device, or the whole network — and what happens when it drops.