5 min read
No. A VPN changes one thing — the address you arrive from — and hides your traffic from whoever runs the network you're on. Everything else stays exactly where it was: the accounts you're signed into, your cookies, your browser fingerprint, your phone's advertising identifier, and the permissions you granted to installed apps. Here's who sees what, and what actually identifies people.
| Who | Sees | Doesn't see | |---|---|---| | Your internet provider | that an encrypted connection exists, volume, timing | which sites you open and what you do there | | The site you visit | the VPN server's address, your browser fingerprint, cookies, your account | your home address and ISP | | The VPN service | the address you connected from and where traffic is headed | the contents of HTTPS sessions | | Ad networks | your profile from cookies and fingerprint — it survives an IP change | — | | Apps on your phone | whatever you granted them permission to see | — |
The table makes the core point: a VPN protects the channel between you and the server, not your identity. The moment you sign into mail, a social network or a shop, that service knows who you are regardless of which country the request came from.
1. Signing into an account. The most common and most underrated. An account ties all your sessions together — the one from your home address and the current one through a server in Finland.
2. Browser fingerprint. Your browser version, installed fonts, screen resolution, language, time zone and graphics parameters combine into a fairly rare signature. Time zone is especially telling: a German address paired with a Moscow time zone is a contradiction any script on the page can read.
3. Cookies and local storage. They don't vanish when your address changes. A site that recognised you yesterday recognises you today.
4. Your phone's advertising identifier. iOS and Android each have one, and apps transmit it regardless of which server your traffic passes through.
5. Your own behaviour. The same set of sites, the same active hours, the same typing rhythm — enough to correlate profiles without any IP address at all.
In April 2026 a researcher publishing as runetfreedom documented an issue in popular mobile clients built on the xray and sing-box cores: in standard configurations they open a local SOCKS5 proxy with no authentication. Any other app on the same phone can connect to it directly, bypass system protections, and learn the real outbound address of the VPN server. The list included v2RayTun, V2BOX, v2rayNG, Hiddify, NekoBox, Clash and others; developers were notified on 10 March 2026 and no fixes had shipped by the 7 April write-up.
The takeaway isn't "VPNs are useless." It's narrower: your exposure depends on the client and the server operator, not only on the protocol.
To avoid swinging too far the other way — a VPN solves specific, useful problems:
In increasing order of effort:
Five checks in order — address, DNS, WebRTC, IPv6 and behaviour on a drop — are collected here: how to check your VPN is working. DNS deserves separate attention: it's the most frequent leak and it hands your ISP the list of sites you visit — DNS leaks.
It secures the channel: traffic runs on VLESS with Reality masking, which to network equipment looks like an ordinary HTTPS session rather than a VPN signature. No logs of visited sites are kept and registration is optional — you can use the service without an account, with Apple, Google or email sign-in available if you want it. Details: does a VPN keep logs.
What it doesn't do, and can't: erase your cookies, alter your browser fingerprint, or undo the fact that you're signed into your own account. Promises of "complete anonymity" are marketing, not engineering.
Does a VPN make you completely anonymous? No. It changes your visible address and hides traffic from the network operator, but accounts, cookies, browser fingerprint and mobile advertising identifiers remain.
Can my ISP tell I'm using a VPN? With protocols that have a recognisable signature, yes. With masking protocols the connection looks like ordinary HTTPS to a real site, which makes it much harder to single out.
Can the VPN service see my passwords? HTTPS content is encrypted between you and the site, so passwords aren't visible to anyone in between. The addresses you connect to are.
Does private browsing help alongside a VPN? It stops history and cookies persisting after you close the window, which is useful — but your browser fingerprint doesn't change.
Which is safer for anonymity, a VPN or Tor? Different jobs. Tor distributes trust across three relays; a VPN concentrates it in one operator but is fast and works with every app.
Best video calling messengers instead of WhatsApp & Telegram. Review of Zoom, Teams, Signal, FaceTime. Bypass blocks with BessyVPN - bessy.my More
Does a VPN keep logs and what can your ISP see? An honest look at VPN privacy and anonymity. BessyConnect on VLESS+Reality keeps no browsing logs. More
What a DNS leak is and how to run a dns leak test with your VPN on. Learn to check your VPN for leaks and fix them. BessyConnect — a private, leak-free VPN. More
