Security Awareness
What is a VPN?
A plain-English explanation of what a VPN does, why your business uses one, and when you should be using it.
The Basics
What is a VPN?
VPN stands for Virtual Private Network. In plain English, it’s a secure, encrypted tunnel between your device and the internet — or your company’s network — that prevents anyone from snooping on what you’re doing online.
Think of it like an armored truck for your data. Without a VPN, your internet traffic travels in the open — like sending a postcard that anyone can read along the way. With a VPN, that same information travels inside a locked, sealed envelope that only you and the destination can open.
The Simple Version
A VPN hides your internet activity and protects your data from hackers, your internet provider, and anyone else on the same network as you. It also lets you securely access your company’s internal systems from anywhere.
Why It Matters
Why does your business use a VPN?
Your company’s VPN serves two main purposes:
1. Secure Remote Access
It lets you connect to your company’s internal systems — file servers, software, printers — from home or on the road, as securely as if you were sitting in the office.
2. Traffic Protection
It encrypts everything you send and receive so that hackers, public Wi-Fi snoops, or your internet provider cannot read your business communications or steal your credentials.
Real-World Scenarios
When should you use the VPN?
A good rule of thumb: if you’re working outside the office, use the VPN. Here are the most common situations:
Working from home — Always connect to the VPN before accessing company files, email systems, or internal tools. Your home internet is not automatically secure.
Using public Wi-Fi — Coffee shops, hotels, airports, and any other public networks are prime hunting grounds for hackers. Never conduct business on public Wi-Fi without the VPN connected first.
Accessing sensitive company data remotely — Financial records, client information, HR data — anything confidential should only be accessed over the VPN.
Traveling for work — Hotel networks are frequently compromised. Treat any network that isn’t your home or office as untrusted, and connect to the VPN immediately.
Common Mistake
Many people assume their home Wi-Fi is automatically safe for work. It’s more secure than a coffee shop, but your home network can still be compromised — especially if your router firmware hasn’t been updated or your password is weak. The VPN adds a critical second layer of protection.
What a VPN Does Not Do
Things a VPN won’t protect you from
A VPN is a powerful tool, but it’s not a magic shield. It’s important to understand its limits:
Phishing attacks — A VPN won’t stop you from clicking a malicious link or entering your password on a fake website.
Malware you’ve already downloaded — If malware is on your device, the VPN doesn’t remove it or prevent it from running.
Weak passwords — Encrypted traffic is useless if your account password is easy to guess or has been reused from another site.
Complete anonymity — Your employer’s VPN is not a privacy tool. IT can still see your activity on the company network, which is normal and expected.
Best Practices
How to use the VPN properly
Connect to the VPN before opening work apps, email, or accessing any company resources — not after.
Keep the VPN client updated. Outdated VPN software can have security vulnerabilities just like any other program.
Don’t share your VPN credentials with anyone — not even a coworker or an IT impersonator calling you on the phone.
If the VPN disconnects unexpectedly, stop work and reconnect before continuing — don’t assume you’re still protected.
If you have trouble connecting, contact IT — don’t bypass the VPN and work without it.
Not Sure If You’re Connected?
Your VPN client will show a “Connected” status when active. If you’re unsure, check the app before you start work. When in doubt, disconnect and reconnect to confirm. It only takes a few seconds and keeps your data safe.
KB-SEC-003 · Security Awareness