Secordit home
Contact

What is a virtual private network (VPN)?

A virtual private network, or VPN, is an encrypted network connection. In organisations, the NCSC describes it as a way to let remote users reach work services. It is also one way to protect data travelling across a network you do not control. The NCSC's detailed guidance is written for organisations, and does not cover households. 13

By Secordit. Last checked: 10 November 2026.

Go to the steps · All glossary terms

How it works

  1. Your device opens an encrypted connection to a VPN service, often one run by an employer. 13
  2. Work traffic can then travel across a network the organisation does not control, such as home or public Wi-Fi. 12
  3. If the VPN fails or is badly set up, it can block access to work systems. That is a reason to follow the employer's instructions. 1

How it can look

The NCSC's detailed VPN guidance is for organisations choosing and running a VPN. It says individuals typically use VPNs for different reasons and are not covered in that guidance. For everyday browsing, the NCSC points to HTTPS for email, banking and shopping traffic as it leaves the device. A work VPN may still be required by an employer. 12

Warning signs

  • You are using public Wi-Fi, or another network you do not control, and a work VPN your employer requires is not in use. 12
  • A work VPN is required, but it is not installed, or it keeps failing and blocking access to systems you need. 1
  • You are on public Wi-Fi and a site is not using HTTPS for a sign-in or a payment. 2

What to do now

  1. If your employer provides a work VPN, follow their instructions for using it. 1
  2. For everyday email, banking and shopping, look for HTTPS so that traffic is encrypted before it leaves the device. 2
  3. Prefer a private Wi-Fi network protected by WPA2 over typical public Wi-Fi when you can. 2

UK reporting and support

  • If you think an account has been taken over, follow the NCSC help for a hacked account. 4
  • For fraud or hacking in England, Wales or Northern Ireland, use Report Fraud. In Scotland, call Police Scotland on 101. 578
  • If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 6
  • If someone is in danger, call 999. 78

How to protect yourself

  • Prefer a private Wi-Fi network protected by WPA2 over typical public Wi-Fi in a cafe or hotel when you can. 2
  • Use HTTPS for email, banking and shopping, and type or open addresses you already trust. 2
  • Use a work VPN when your employer requires one for access to work systems. 1

Frequently asked questions

Do I need a VPN when I use cafe or hotel Wi-Fi?

A work VPN may be required by an employer. The NCSC's detailed VPN guidance does not cover individuals. A WPA2 private network is more secure than typical public Wi-Fi. 12

Does the NCSC's detailed VPN guidance tell households to buy a consumer VPN?

The NCSC's detailed guidance does not cover households. It says individuals typically use VPNs for different reasons, and so are not covered in that guidance. A failing or badly set up work VPN can also block access to work systems. 1

What should I use for everyday email, banking and shopping on a network I do not control?

The NCSC's KRACK guidance points to HTTPS as the protection for email, banking and shopping traffic as it leaves the device. A work VPN may still be required by an employer. 21

Matching kit

Account Lockdown Kit · £19 · Digital download.

A self-serve guide to securing email, phone and online accounts. It does not promise to stop every attack.

General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.

News Pulse

Account security, explained by email.

Read about News Pulse

Sources

  1. NCSC, Virtual Private Networks (VPNs) | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  2. NCSC, 'Krack' Wi-Fi guidance | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  3. NCSC, Cloud security principle 1: data in transit protection | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  4. NCSC, Help for individuals | National Cyber Security Centre. Accessed 10 November 2026 (Europe/London).
  5. Report Fraud, Report Fraud. Accessed 10 November 2026 (Europe/London).
  6. Stop Scams UK, 159 Phone number - Stop Scams UK. Accessed 10 November 2026 (Europe/London).
  7. Police Scotland, How to report a crime - Police Scotland. Accessed 10 November 2026 (Europe/London).
  8. Report Fraud, Reporting cyber crime and fraud or phishing attempts - Report Fraud. Accessed 10 November 2026 (Europe/London).