DocsConcepts

How a VPN works

Tunnels, IP addresses and why your traffic looks different from the outside.

Without a VPN, every request your device makes goes from your network, through your internet provider, to the site you're visiting. Each party along the way can see where the request comes from, and anything not otherwise encrypted can be read in transit.

The tunnel#

When you connect, the Pivien app creates an encrypted tunnel between your device and a Pivien server. Everything your device sends goes into that tunnel first. To your Wi-Fi network and your internet provider it looks like a single stream of encrypted data to one server; they can see that you're using a VPN, but not which sites you visit or what you send.

Your IP address#

The server takes your requests out of the tunnel and forwards them to the internet. Websites therefore see the server's IP address and approximate location, not yours. This is why choosing a server in another country changes the location websites think you're in.

What each party can see#

WhoWithout a VPNWith Pivien
Your Wi-Fi networkThe sites you visit and any unencrypted trafficOnly that you're connected to a VPN server
Your internet providerEvery site you visit and whenOnly encrypted traffic to the VPN server
Websites you visitYour real IP address and approximate locationThe server's IP address and location
A VPN changes who can observe your connection. It doesn't stop websites from recognising you if you sign in or accept tracking cookies. See security best practices.

Something unclear? Write to support@pivien.example