Short answer: no, a VPN does not make you anonymous. A VPN changes one thing a website sees about you — your IP address — and leaves the rest untouched. I proved it to myself on November 4, 2026, by running my own tiny web server and logging exactly what arrives with each visit: the browser and operating system, the language, the page you came from, and, on the second visit, a cookie the server set on the first. Swap in a VPN and only the IP line of that log changes. Everything else still identifies you just as well.
That distinction matters, because VPN adverts sell "total anonymity" while delivering something narrower and still useful: a different IP address and an encrypted tunnel to the VPN server. Both are worth having. Neither makes you anonymous.
The test: my own server, two visits
I ran a small Python web server on this Linux machine and pointed two requests at it, both dressed up to look like an ordinary Chrome browser on Linux. The first visit carried no cookie; the second visit reused the cookie jar from the first, the way a real browser does automatically. Here is what the server logged, word for word.
Visit 1 — a brand-new visitor:
| What the server saw | Value |
|---|---|
| Page requested | /article-page |
| Browser and OS | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 Chrome/130.0 Safari/537.36 |
| Language | en-US,en;q=0.9 |
| Came from | https://www.google.com/ |
| Cookie | none — first visit |
Visit 2 — the same visitor, one click later:
| What the server saw | Value |
|---|---|
| Page requested | /another-page |
| Browser and OS | identical to visit 1 |
| Language | identical to visit 1 |
| Cookie | session_id=abc123demo — the cookie the server set on visit 1, sent back automatically |
That cookie line is the whole story in miniature. The server did not need my name, my email, or my IP address to know visit 2 was the same person as visit 1. The cookie did it. And cookies are only the most obvious identifier in the log.
What a VPN changes: exactly one line
Run the same two visits through a VPN and the server log looks almost identical, with one difference: the "from" address at the top of each entry changes from your real IP address to the VPN server's address. A site I queried during the test, api.ipify.org, reported this machine's public address as 104.29.196.211 — that is the address any website would see from this machine without a VPN. With a VPN, it would see the VPN server's address instead, and its guess at your city and country would change to match.
Everything else in the log stays the same:
- Your browser fingerprint stays the same. The User-Agent line above advertises the browser, its version, and the operating system. Real browsers leak far more through JavaScript: screen size, installed fonts, time zone, graphics hardware. A VPN touches none of that.
- Your language and referrer stay the same. The language header and the page you came from are sent by the browser, not the network.
- Your cookies stay the same. A cookie set while you were on the VPN is still sent on later visits, VPN or not. Log in to an account and the site knows exactly who you are, VPN or not — the account, not the IP, is the identifier.
- Your DNS can still give you away. If your DNS queries bypass the VPN tunnel, your internet provider (or anyone watching the network) can still see which domains you look up. I covered this separately when I captured my own DNS traffic — the fix is a VPN that routes DNS through the tunnel, or encrypted DNS, not just any VPN switched on.
So a VPN hides your IP address from websites and hides your traffic from your internet provider and from the local Wi-Fi network. That is a real privacy win. It is not anonymity, because anonymity means nobody can link your visits together — and cookies, logins, and fingerprints do exactly that linking.
What a VPN is actually good for
This is not a case against VPNs. Used for what they do, they are worth it:
- Public Wi-Fi. On a cafe or airport network, a VPN encrypts your traffic so others on the same network cannot read it. Without one, plain HTTP traffic is visible to anyone listening.
- Hiding browsing from your ISP. Your provider sees your connection go to the VPN server and nothing more — not the sites you visit afterwards.
- A different apparent location. Streaming catalogues and region-blocked sites see the VPN server's country, not yours.
What a VPN cannot do is make an account anonymous, stop a site recognising a returning browser, or protect you from malware, phishing, or a data breach at the service itself. Anyone selling a VPN as a cloak of invisibility is selling the one line of the log it changes as if it were the whole log.
What actually gets you closer to anonymity
If anonymity is genuinely the goal, the honest answer is a different toolset, and it comes with real trade-offs. According to the Tor Project, the Tor Browser routes traffic through multiple relays so no single relay knows both who you are and where you are going, and it deliberately makes all its users' browsers look alike to resist fingerprinting. That is the difference between hiding one identifier and hiding the pattern. The cost is speed, and some sites block Tor exits or demand endless captchas.
The Electronic Frontier Foundation's Surveillance Self-Defense guide makes the same point from the other side: anonymity is a property of your whole setup — browser, accounts, cookies, and behaviour — not of any single tool. Practical steps that matter more than a VPN subscription include using a separate browser or profile for anything you want kept apart, never logging in to a personal account in that profile, blocking third-party cookies, and treating every "remember me" checkbox as an identity decision.
FAQ
Does a VPN hide my browsing from my internet provider? Yes, mostly. Your provider sees an encrypted connection to the VPN server, not the sites you visit. But the VPN provider itself can now see that traffic instead — so the question becomes whether you trust the VPN provider more than your ISP, and what its logging policy actually says.
Can a website still track me with a VPN on? Yes. Cookies, logins, and browser fingerprinting all work exactly the same with a VPN on. A VPN changes your IP address; it does not clear your cookies or disguise your browser.
Does a VPN hide me from Google or Facebook? No. If you are logged in, the account identifies you regardless of IP address. Your search history and social graph are attached to the account, not the connection.
Is Tor better than a VPN for anonymity? For anonymity, yes — Tor is designed for it, while a VPN is designed to change your apparent location and encrypt one hop. For everyday privacy and speed, a VPN is usually the more practical tool. They solve different problems.
Should I still use a VPN? If you use public Wi-Fi, want your ISP out of your browsing, or need a different apparent location — yes. Just buy it for those reasons, not for anonymity it cannot deliver.
Conclusion
A VPN is a good tool sold with a bad promise. My server log shows why: of everything a website learns about you on a visit, a VPN changes only the IP address. The browser, the language, the referrer, and the cookie all survive untouched — and the cookie alone is enough to link your visits together. Use a VPN for public Wi-Fi, for keeping your ISP out of your browsing, and for location. For anonymity, look to Tor and to separating your identities — and be suspicious of any advert that claims one app purchase buys it.
How this article was made
The server-log evidence is my own test, run on November 4, 2026, on a Linux virtual machine: a Python http.server logging full request headers, visited twice with curl using a standard Chrome-on-Linux user agent, with the second visit reusing the first visit's cookie jar. The public IP figure is what api.ipify.org reported for this machine during the same session. Claims about Tor's design are attributed to the Tor Project, and the anonymity-is-a-whole-setup point to the Electronic Frontier Foundation's Surveillance Self-Defense guide, both linked below. This article was drafted with AI assistance and reviewed against the test output before publication.
Sources: Tor Project — about Tor · EFF Surveillance Self-Defense · Privacy Guides — VPN overview
