What a VPN actually does on your phone
Imagine you are sitting in a hotel lobby in Singapore. The free Wi‑Fi is convenient, but every device on the same network can see data packets that travel without encryption. A VPN app on your phone creates a secure tunnel to a VPN server - a computer run by the VPN provider, possibly in another country. Once the tunnel is up, your phone sends all its internet traffic through that tunnel. The hotel router only sees encrypted gibberish going to one address: the VPN server.
The VPN server then decrypts your traffic and sends it to the actual website you want. The website sees the request coming from the VPN server’s IP address, not your phone’s. When the website replies, the VPN server encrypts the response and sends it back through the tunnel to your phone.
What encryption covers: The tunnel protects the data travelling between your phone and the VPN server. This means someone on the hotel network cannot read your emails, messages, or login details. What it does not cover: The VPN operator itself can see which websites you visit (the destination IP addresses) and how much data you use. If you visit a site that uses HTTPS - the padlock icon in your browser - that site already encrypts your passwords and payment info, even without a VPN. A VPN adds a second layer of encryption only for the tunnel leg.
The difference between free and paid VPN services
Free VPN apps often appeal to travellers who want to avoid spending money. However, running servers and maintaining encryption costs money. A free provider must cover those costs somehow. Some show advertisements, some limit your data allowance, and some collect information about your browsing habits to sell or share. A paid VPN service charges a subscription fee instead. That fee pays for server infrastructure, customer support, and updates.
What to watch for in free options: Data caps are common; you might run out after a few hundred megabytes. Speeds may be slower because free servers have many users. Some free VPNs inject tracking code or ads into web pages. Others log your activity and hand it over if required by law.
What to watch for in paid options: A paid service should clearly explain its logging policy - what it records and for how long. No logging policy removes the provider’s administrative records, but it does not change the technical fact that the VPN server sees your destination IP addresses while you are connected. Read the privacy policy before you buy. A reputable provider will also warn you that no VPN can guarantee access to streaming services that actively block known VPN server addresses.
Is using a VPN legal for travellers?
The legality of a VPN depends on the country you are in and what you do with it. In most of the world, including Singapore, using a VPN is perfectly legal. Many businesses and travellers use VPNs to protect data on public Wi‑Fi. However, a handful of countries restrict or ban VPNs outright, or require them to be licensed. These rules change over time, and enforcement varies.
What to do before you travel: Check the current official government travel advice for your destination. The Singapore Ministry of Foreign Affairs and similar agencies in other countries publish travel advisories that mention internet restrictions. Do not rely on forum posts or old articles. If you are visiting a country that restricts VPNs, using one could put you at risk of fines or worse. The safest approach is to respect local laws.
What a VPN does not make legal: Downloading copyrighted material, accessing services in violation of their terms of use, or evading lawful government blocklists remains illegal whether you use a VPN or not. A VPN is a privacy tool, not a licence to break rules.
Ready to choose a VPN? What to look for
Start by deciding what you need the VPN for. If your main goal is encrypting hotel Wi‑Fi traffic, almost any reputable paid VPN will work. If you also want to access a streaming catalogue that is only available in another country, check whether that provider’s servers are regularly blocked by the streaming service - no provider can promise uninterrupted access.
Key factors to consider:
- Jurisdiction: A VPN company based in a country with strong privacy laws may be less likely to hand over logs, but legal rules can always change.
- Protocols offered: OpenVPN and WireGuard are common secure protocols. The app should let you switch between them in case one is blocked.
- Device support: Make sure the provider offers an app for your phone’s operating system, and that it allows more than one simultaneous connection if you share the account.
- Transparency: Look for an independent audit of the provider’s no-log claims. Without an audit, the claim relies on trust alone.
Do not rush. Many providers offer a short money-back period, so you can test the service on your own connection before committing. Remember that a VPN adds an extra hop for your data, which can slightly increase latency - useful to know if you plan to make voice or video calls.
