VPN Basics: Protection against data traces on the Internet

Service providers, state institutions and criminals can theoretically track any Internet access, including the pages visited and the data they have sent. A Virtual Private Network effectively disguises these connections, both on the computer and on a smartphone or tablet. Anyone who uses the Internet with a mobile device inevitably leaves digital traces. eachInternet-enabled device receives a unique identifier in the form of the IP address, which assigns all outgoing and incoming data packets to a specific port. Traffic passes through numerous intermediate stations on the way to the target server, creating potential intercept points.

How data traffic is monitored: IP address and intermediate stations

At these nodes, third parties can analyze the traffic: You can see which website was streamed at what time and for how long, which videos are streamed, which data apps send and which texts are entered into online forms. Even with activated transport encryption – recognizable by the address line with “https” – the content remains protected, but theThe user’s IP address and the called domain are still visible. This allows conclusions to be drawn about the surfing behavior without knowing the actual content.

Internet provider role: full access to connection data

Not only external attackers have insight. The own Internet provider has extensive knowledge: It logs the complete surfing behavior and can assign IP addresses exactly to the connection owner with the name, address and contract data. When surfing the mobile network, this is the provider of the SIM card. WLAN use is the respective telephone orcable network operator. This data sovereignty allows for a complete tracking of all online activities.

How a Virtual Private Network works: Encrypted Tunnel

A Virtual Private Network provides a viable solution to protect connection data. The data stream is divided into two separate sections. The first section from the end device to the VPN server is secured with strong encryption, so that nobody can read the content from outside. The second section from the VPN server to the actual destination carries the IP address of the server assender. This keeps the original user anonymous. Only the VPN server knows both ends of the connection, which is why security depends largely on the trustworthiness of the provider.

Important Restrictions: No protection for personal data

A VPN does not protect against information given by itself. Whoever enters your own name, address or other identifiers in forms or logins remains identifiable. Therefore, sensitive data should only be entered on HTTPS-secured pages to encrypt the second connection section as well. This is the only way to protect the transferred onescontent.

Sources of supply for VPN: From companies to self-construction

A Virtual Private Network can be provided by the employer for the corporate network or the university for the campus. Alternatively, numerous commercial providers offer their servers. The market includes a variety of services of varying quality and price model. Free variants usually reduce the speed considerably. Owner of a modern Fritzboxcan set up your own VPN server and route traffic on the go. This approach does not require an external provider and increases control.

Protection in public WLAN: particularly effective use

VPN services reliably protect against eavesdropping in unsafe networks. Public WLANs in cafes, hotels or train stations are often unencrypted and allow easy recording of foreign data traffic. An active VPN completely prevents this. However, the IP address of the own VPN tunnel remains to be assigned to the Internet provider, which limits full anonymization.

Anonymity limits: The VPN provider as a vulnerability

VPN services do not offer absolute anonymity. The own Internet provider only sees the VPN connection, but not the goals contained therein. The VPN provider gets full insight and logs the surfing behavior. Authorities may confiscate this data depending on the location of the servers. Not every provider meets high standards. Some have data in the pastManipulated, for example to exchange advertising and generate additional income. Careful selection of the provider is therefore essential.

Tracking remains: cookies and website operators

A VPN does not protect against tracking by websites and their partners. Browser cookies store identifiers that allow recognition when you visit a page again. An example: After buying a shoe in the online shop, a cookie remains saved that identifies the user the next time they are called up. Such methods are included in the term tracking and function independently ofVPN. Website operators and advertising networks can thus continue to create profiles and switch personalized content.