IP addresses and VPNs
Traffic sent to the internet through a consumer VPN usually uses its exit IP. Other traffic may still use the original connection, even while the VPN is connected. A VPN does not erase IP addresses; it changes which IP address is visible to the destination.
The IP address websites see changes 🌐
A consumer VPN commonly translates source addresses at its internet exit, so websites see that exit IP. A VPN does not inherently require address translation. With split tunneling, only selected destinations may use the tunnel while ordinary web traffic uses the original connection.
How it looks
- No VPN: the IP from your home, mobile, office, or public Wi-Fi network is visible.
- Traffic using a VPN internet exit with address translation exposes the exit IP. Traffic outside the tunnel can use the original connection.
- The destination service generally logs that exit IP as the source of the request.
Location follows the exit IP estimate
IP-based location tools look up the VPN exit IP in registration data and GeoIP databases. The displayed country or city may change, but the estimated location need not match the physical location of the exit server.
Common effects
- Connecting to an overseas VPN server can make access appear to come from that country.
- Even with a domestic VPN, the city may be the provider’s data center, not your actual municipality.
- Streaming, banking, and other services may restrict IP ranges that look like VPNs.
A VPN replaces the visible IP; it does not remove IPs
An IP address is still involved. Whether the visible IP changes depends on the route and address translation settings.
Common misconceptions
- Websites still see an IP address: the VPN exit IP.
- Depending on design and logging policy, the VPN provider or company administrator may know the original connection and usage.
- If you are logged in, the service can identify you by your account regardless of the VPN IP.
Other signals can still identify you 🔎
Changing the visible IP does not remove every other signal a website may use.
Signals that may remain
- Logged-in accounts and email addresses.
- Cookies, advertising IDs, and browser or device fingerprints.
- GPS or Wi-Fi-based location if you grant browser location permission.
- DNS or WebRTC leaks when settings route some information outside the VPN.
VPN vs proxy vs Tor vs company VPN
All of these route traffic through another system, but their goals and protections differ.
Quick comparison
| Type | Main purpose | IP websites see |
|---|---|---|
| Personal VPN | Protect the path, change visible region, add privacy support | VPN provider exit IP |
| Proxy | Relay configured app traffic; encryption depends on the protocol | Usually proxy IP; HTTP headers may also convey the original IP |
| Tor | Relay supported app traffic through multiple relays | Exit IP for ordinary websites; onion services do not use exit relays |
| Company VPN | Access an internal network from outside | Depends on the route for external web traffic; internal destinations may see a tunnel address |
Short takeaway
- A connected VPN does not mean every flow uses it. Check IPv4, IPv6, and application routing.
- Location may change, but account-based identification and tracking do not disappear automatically.
- Think of VPNs as path protection and routing control, not complete anonymity.
Specifications and related guides
Microsoft: VPN routing / RFC 7239: Forwarded / Tor Project / VPN traffic visibility