There is a particular kind of Nigerian buyer we meet in the security of a solar business: a professional who has a laptop bag with a phone charger and two cables in it, travels for site surveys, works from hotel rooms and airport lounges, and connects to whatever network is available without thinking about it. They are also the person most likely to be sold a VPN subscription by somebody at the airport who says it will make them anonymous. Two claims, one of which is broadly true, the other of which is not.

What a VPN actually does

A virtual private network takes the traffic from your device, encrypts it, sends it to a server the provider operates, and sends it on to the destination from there. Two things follow. Your internet service provider no longer sees which sites you are visiting, only that you are talking to the provider’s servers, and the sites you visit see the server’s address rather than yours. That is the whole mechanism, and the virtual private network reference covers the protocol detail.

Be precise about what “encrypted” means. The tunnel is created between your device and the provider’s server. From the server onward the connection is normally plain TLS, encrypted again by the destination’s own certificate. So the trust model is not “nobody can see this”, it is “the operator cannot see this, and we have decided to trust the operator”. That is a real improvement over an untrusted wireless network and a real transfer of trust away from your ISP, which the internet service provider article sets in context. It is not anonymity, and the marketing that claims otherwise is the first thing to be sceptical about.

What a VPN does not do

Four claims that we hear regularly, and none of them hold.

• It does not stop malware. The tunnel carries your traffic. It does not inspect what you download, and a malicious file you were persuaded to install runs exactly as it would have without one.
• It does not stop phishing. A fake bank page reached through the tunnel is still a fake bank page, and the padlock will be correct, because the attacker has one too.
• It does not make you anonymous. If you sign into your email, bank or social accounts, those services know exactly who you are regardless of how the bytes travelled. A phone signed into your accounts is not anonymised by anything that happens to the network.
• It does not protect the machine from itself. Malware already on the device can read your files and steal the credentials the tunnel was protecting.

That list is why this is a complement to password security and a sensible companion to public wifi security practice, never a substitute for either. Where it genuinely earns its place is narrow, and worth naming plainly.

When a VPN is genuinely warranted

There are four situations where the subscription is justified.

Untrusted networks where you must transact. A hotel, airport or café network where you genuinely have to reach a bank, an inbox or a hosting panel. This is the clearest case, and the reasoning is in our guide to staying safe on shared networks. On Nigerian fibre, a well-configured home router or a private mobile data connection, the marginal benefit is small.

Reducing what your provider can see. There are legitimate reasons to prefer that your ISP does not hold a list of the sites you visit. The tunnel moves that visibility from a provider subject to local law and able to log, to somebody else. That is a real reduction in exposure, provided you have read what they say they log and you believe them.

Reaching something that is blocked or filtered. Workplaces and school networks that block certain services, and countries that censor. Nigeria is not in the heavy-censorship category, so this is mostly a business-travel consideration.

Reducing what a shared network learns about you. Some shared wireless networks log the addresses their clients visit. A tunnel means the network only sees the exit server. It is a modest gain, and that is the honest size of it.

One practical note on where to install it. A tunnel on the phone protects the phone, not the laptop tethered to it, and a tunnel on a router covers the whole home but not a device that leaves the house. For somebody who works from a single laptop and travels with it, installing on the laptop is the simplest arrangement that actually does something. Turning the connection on automatically is worth doing, because a tunnel that is off because you forgot is not protection. And a kill switch, where available, which blocks traffic entirely if the tunnel drops, closes the gap where your traffic briefly reverts to the unprotected network. The gap is short and most people would never notice it, but on an untrusted network it is exactly the window that matters.

Free versus paid, and why free is a bad idea

A free service is not a charitable one. Somebody is paying for the servers, and the commonest ways are selling your data, serving advertising, bundling software you did not ask for, or harvesting browsing history. Some are transparent about it. The problem is that you cannot tell which until you read the terms, and reading the terms of something you installed in thirty seconds is not a habit most people have.

What to look at	Free service	Paid service	Why it matters
Who can see my traffic	Unknown until you read the terms	Named operator, published policy	You have moved trust, not removed it
Logging policy	Often broad, or absent entirely	Usually a published statement	A no-logs claim is a claim, not a guarantee
Extra software bundled	Common	Rarely	Bundled installers are a well-known malware route
Server selection	Often a handful of crowded locations	Wide choice	Needed if you need a specific country or a nearby server
Speed on Nigerian links	Frequently poor	Variable, test before committing	Latency to a far server is a poor trade for a long day
Device support	Often phone only	Phone, laptop, router	Some providers cover the whole home, which is convenient

A second risk is that many free mobile applications are clones of legitimate products, published under a similar name by an unrelated developer. Installing a lookalike app is installing software that will see everything you do, and the store badge means very little. Install from the operator’s own site and check the developer name.

How this differs from Tor

Tor routes traffic through a series of volunteer-run relays, so no single relay sees both ends of the journey. It is designed for anonymity and it is free. The Tor Project is explicit that combining the two without a clear model reduces protection, and its guidance on combining the two says so. The Tor network article sets out the routing model, and onion routing explains the layering.

The practical difference for an ordinary person is speed and reach. A VPN is fast, covers every application on the device, and hides your address from websites and your activity from your ISP. Tor is slow, covers only what you browse in the Tor browser, and is the tool when the requirement is that no single organisation can identify you. Our honest advice for most people: the tunnel is a sensible travel and shared-network tool, and Tor is a specialist tool that will make your working day unpleasant if you use it for everything.

Frequently asked questions

Do I need a VPN in Nigeria?

Usually not, and we would rather say so than sell you a subscription. On a private fixed line or a mobile data connection, with multifactor authentication on your important accounts, the extra protection a VPN adds is modest. It becomes worth having when you travel regularly, when you use hotel and airport networks for real work, or when you have a specific reason to prefer that your ISP is not the party holding the log.

Will a VPN protect me on hotel wifi?

It protects the tunnel to the provider’s server, which covers the commonest hotel-network risk of reading unencrypted traffic. It does not protect you from a fake access point that also blocks it, from a hostile captive portal, or from a phishing page. Read public wifi security for the parts a tunnel does not touch, and keep the router and account settings in router security and password security in order.

Can the provider see my bank details?

Yes. The operator can see the connection and, depending on the application, the contents. That is inherent in the model, not a flaw in a particular product. Choose on a published no-logs policy, a clear jurisdiction, and an operator you would be comfortable with. If the traffic matters enough to protect, treat the operator as a party with access to it.

Does a VPN slow the internet down?

It adds a detour, so yes, and the penalty grows with distance. A server in another continent on a congested Nigerian link can make video calls unusable. Pick a nearby server, and check speed before you commit to a long subscription. For online banking security specifically, stability and a trusted route matter more than raw speed.

Key Takeaways

• It encrypts traffic between your device and the operator’s server, hides your address from sites, and hides your browsing from your ISP.
• It moves trust from your provider to the VPN operator. It does not remove it, and a no-logs statement is a claim rather than a guarantee.
• It does not stop malware, it does not stop phishing, and it does not make you anonymous once you sign into an account.
• Free services are usually funded by your data, your attention or bundled software. If you use one, understand the terms first.
• Tor and this solve different problems. Tor is for anonymity and is slow; the tunnel is for privacy from the network and is fast.
• The clearest cases are untrusted networks where you must transact, and reducing what your provider is able to log.

The situations where a VPN helps most are the ones that happen on somebody else’s network, so public wifi security is the natural next read.

Sources: virtual private network, tunnel operation and the trust model; Tor network and how routing differs from a VPN; Tor Project guidance on combining a VPN with Tor; onion routing and the layering of encryption in the Tor network; internet service provider; mobile phone.