The Truth About VPNs

Whether you’re shopping online or working from home, you want to know that your information stays private—and so does your employer. However, when using open networks, there is a risk of data tracking by Internet Service Providers (ISPs) and other third parties who can collect and monetize your browsing history.

ISPs, companies that provide internet access and other related services, can see everywhere you visit on the Internet and have been known to sell personal browsing data to third parties. Even more alarming, cybercriminals can use this information for fraudulent activities and obtain private information if you browse websites and online content that isn’t encrypted.

What is a Virtual Private Network (VPN)?

One effective way to mitigate these risks is to use a Virtual Private Network (VPN). A VPN conceals your IP address and encrypts your online traffic, making it more difficult for ISPs and others to access your information. VPNs will greatly benefit individuals who frequently use public Wi-Fi, work remotely, or handle sensitive information. Keep in mind that VPNs can also be used on smartphones or tablet devices (especially useful when accessing company emails on these devices).

Tips on Navigating VPNs

There are two ways to utilize VPNs.

(1) Access the Internet with a personal VPN: A personal VPN is a software that you can download on your device to protect your private information, such as credit card data, access to personal banking, and other identity-linked data. Some personal VPNs can be shared across multiple devices, making them ideal for international travelers and casual Internet users.

(2) Use a corporate VPN to connect: A corporate VPN, on the other hand, connects all of a company’s users as if they were on the same network. It allows employees to access internal data and files while protecting against unauthorized users.

Using a personal or corporate VPN requires three steps.

1. Install the VPN software on your device.
2. Connect to the VPN client.
3. Verify your online credentials each time you use the VPN.

Note: Multifactor authentication (MFA) should also be used with your VPN whenever possible to add another layer of defense, protecting you against credential theft and allowing you to control all of your devices. At IT Solutions, we provide DUO Security for MFA when using an internal corporate VPN.

Using a VPN in a Public Location

Employees working remotely and casual Internet browsers will often rely on public Wi-Fi even though it’s more likely that sensitive information will be compromised.

Public Wi-Fi elevates cybersecurity threats by opening the door to a ‘man-in-the-middle’ attack. For instance, if a user is sitting at Starbucks and uses their public Wi-Fi, it’s too easy for a hacker to use a program such as Wireshark to ‘sniff’ the free Wi-Fi network, capture your traffic, and store all of the data. Fortunately, VPNs can help mitigate this risk by encrypting your online traffic when using public Wi-Fi.

It’s essential to keep in mind that while some public Wi-Fi networks require a password, they still lack the protection that VPNs offer. For example, some public shops have their Wi-Fi password posted on the premises. However, this is not a replacement for a VPN. Public Wi-Fi, even when it requires a password to sign on, takes you directly to the Internet without data protection—your browsing history and information are accessible to anyone on the public network.

Be Mindful of VPN Limitations

Using a VPN provides an added layer of security by encrypting your online traffic and hiding your IP address. Still, it is not a foolproof method to ensure 100% protection and privacy. There are several limitations to using a VPN that can impact the level of protection it provides.

• Provider Discretion: When selecting a VPN, free vs. paid is hardly a concern; instead, review the VPN providers’ policies and practices to ensure they don’t store and sell your data. For instance, ProtonVPN (which offers a free VPN) is a robust choice with a “strict no-data logging policy,” so even if data is requested, they have nothing to provide.
• Legal Jurisdiction: Data privacy regulations & laws vary by country. A VPN provider may be based in a jurisdiction with more relaxed privacy laws, which can impact the level of protection offered.
• Technical Vulnerabilities: VPNs rely on software and technology and, like anything else, can have vulnerabilities from time to time.

Encouraging User Adoption

Company executives and IT departments love the added protection that VPNs provide. However, ensuring that every employee understands and uses VPNs can be challenging. To promote user adoption and enhance the security of confidential corporate information, it may be helpful to provide employees with educational training reviewing “how to use a VPN” and the benefits.

VPNs play a crucial role in protecting personal and sensitive information. By concealing your IP address and encrypting your online traffic, VPNs can help mitigate the risk of data tracking and cyberattacks. Whether you are a remote worker or an individual who frequently uses public Wi-Fi, considering a VPN is a wise decision.

We understand how to promote user adoption, which is crucial to protect confidential corporate data and internal applications. If you need help setting up a corporate VPN or convincing your employees to use it, call us today at 866.PICK.ITS or visit our contact page.