Anonymous From Whom?

Someone asks which VPN they should buy roughly once a week. It is the wrong first question, and answering it politely does more harm than refusing to. Before any tool, one question decides everything downstream: anonymous from whom?

"Everyone" is not an answer. Hiding from an advertiser and hiding from a government are different problems with different solutions, and the tool that solves one can be irrelevant — occasionally worse than irrelevant — for the other. So the first thing worth writing down is not a product name. It is a threat modelThreat modelFour honest answers: what you are protecting, from whom, what happens if it fails, and how much trouble you will go to., and it is four sentences long.

The four sentences

What do you want to keep private? Who wants it? What happens if they get it? And how much trouble will you actually go to? That is the whole exercise. It costs nothing, takes ten minutes, and almost nobody does it before spending money.

I want to be private
  -> buy the VPN with the best advert
  -> install nine browser extensions
  -> feel safer
  -> change nothing that mattered

Protecting:  my home address
From:        one specific person
If it fails: physical danger
Effort:      high, this matters
  -> audit shared accounts and devices
  -> strip metadata before sending photos
  -> separate identity for public posting

Adversaries, in order of what they can actually do

It helps to have the list in front of you, because the differences are not differences of degree. They are differences of kind — of what the adversary can compel, what they already know, and whether they have ever had your laptop in their hands.

1Advertisers and data brokers   -> want a profile, buy data, never target you personally
2A stalker or abusive ex        -> knows you, may have had physical access to your devices
3Your employer or school        -> controls the network and often the laptop
4Local law enforcement          -> can compel a company to hand over records
5A nation state                 -> can do essentially all of the above, and more

The mismatch that costs people the most

Here is the case we see constantly. Someone is worried that an ex-partner is tracking their location. They buy a VPN. The VPN does almost nothing for them, because the threat was never on the network: it is a shared phone plan, a family-sharing account, a tracker in a bag, a password the ex already knows.

Encrypting traffic to a server in another country does not touch any of that. Worse, the purchase can end the search — it feels like the problem has been handled, so the audit of shared accounts and devices never happens. A tool bought against the wrong adversary is not neutral. It is a way of stopping.

What a VPN actually does, in two sentences

Since the question was about VPNs: a VPNVPNA tunnel that moves your traffic’s exit point. It shifts trust from your ISP to the VPN company — it does not make you anonymous. moves your exit point, so the site sees the VPN's addressIP addressThe number that identifies where your traffic comes from on the internet — roughly, which door it should be delivered back to. instead of yours, and it hides your destinations from your ISPISPYour internet service provider — the company whose wire or signal you use to reach the internet, and which can see every site you connect to. and the local network. That is the entire product. Everything else in the advert is a consequence of those two things, or it is not true.

Which means it is genuinely excellent when your adversary sits on the network — a café, a hotel, an ISP that logs destinations, a country blocking sites. Move the exit point past them and you have won. And it does nothing at all about a service you log into, a browser fingerprintBrowser fingerprintA near-unique profile of your device built from the small ways your browser differs from everyone else's — no cookies required. that identifies you regardless of address, a DNSDNSThe internet's phone book: it turns a name you type, like example.com, into the numeric address a computer connects to. lookup that leaks outside the tunnel, or a person who already knows who you are.

Start here instead

Write the four sentences. Then pick the one row of the list that is really yours — not the most frightening one, the real one — and ask what would actually help against it. For an advertiser: a decent tracker blocker and a browser that looks like everyone else's. For a stalker: shared accounts, shared devices, and the location data in your photos, in that order. For an employer: the knowledge that their network and often their laptop are theirs, and that "incognito" changes neither.

None of those are purchases. That is the uncomfortable part of the honest answer, and it is why the question gets skipped: "anonymous from whom" has no checkout button at the end of it.

If you want to work through this properly, the free Anonymity & OpSec course starts exactly here and ends with an exam you can sit for a credential anyone can verify.