How VPN Works
A Virtual Private Network (VPN) is typically used to allow an employee access to a secure corporate network.
However, with the Riseup VPN, we use the same technology to allow everyone greater security when accessing the public internet. This type of VPN is called a personal VPN.
In a normal internet connection, all your traffic is routed from your computer through your ISP (Internet Service Provider) and out onto the internet and finally to its destination. At every step of the way, your data is being recorded and is vulnerable to man-in-the-middle attacks (the danger of this is much less if you are using a secure protocol like https).
With a personal VPN, your traffic is encrypted on your computer, passes through your ISP and on to the VPN Server. Because the data is encrypted, your ISP has no knowledge of what is in your data that they relay on to the VPN Server. Once your data reaches the VPN Server, it is decrypted and forwarded on to its final destination.
With the personal VPN, if your data is not using a secure connections then it is still vulnerable from the point it leaves the VPN Server. However, by routing your data through the VPN server, you have achieved two important advantages:
- Your data is protected from blocking, tracking, or man-in-the-middle attacks conducted by your ISP or network operators in your local country.
- Your data now appears to use the IP address of the VPN server, and not your real IP address. Most websites gather and retain extensive database on this IP address, which has now been anonymized.
Because your traffic appears to originate from the VPN Server, the recipient of your network communication does not know where you actually reside (unless, of course, you tell them).
In the case illustrated above, the website in California thinks that the laptop in Brazil, the laptop in Europe, and the giant cellphone floating over Canada are all coming from New York, because that is where the VPN server is.