Do VPNs hide your search history, and what can still identify you?

Does a VPN hide your search history? Well, largely yes to your internet provider and the network you are on. But no to the website that you are logged into, and no VPN can change that.

The gap between the two is where most confusion lives. Your traffic gets sent through an encrypted tunnel to one of the VPN's servers, and the sites you visit will see the address of that server instead of the one your provider gives you. This is genuinely useful. It is, however, only one of the ways in which you can be recognised online. People who install a VPN to browse anonymously are usually surprised by how little of that recognition has anything to do with an address at all.

We’ve covered what your provider can see in detail on what your internet provider can and cannot see. This piece will cover everything after that: websites, cookies, fingerprinting, apps, work devices and the limits worth knowing before you rely on any of it.

What tracking actually means

Tracking is a loose word and covers several different activities. A VPN only touches upon some of these activities.

Can websites tell you are using a VPN?

Often, yes. There are plenty of ranges of IP addresses that belong to VPN providers, data centres and hosting networks. Data companies gather those ranges up and sell them on. A site that has bought one of those lists can check your address against it and make a reasonable guess.

When a website guesses that you are using a VPN, you might be presented with a CAPTCHA. You might be asked to complete an extra identity check. Your login might be flagged as unusual. You might be temporarily blocked from the website. You might even be asked to turn your VPN off.

Cookies survive a change of address

Cookies are the small files that a website stores on your browser. They will allow you to remain logged in, remember your preferences and maintain your basket. Websites and advertising networks can recognise your browser through these cookies on later visits.

A cookie is already on your device prior to changing your address, and changing your address will not delete it. Connect through a different country and the site still finds that cookie, and still knows it is you.

Our Safeweb filtering cuts down some of this. Requests to known unwanted and unsafe destinations are reduced before they can even reach the browser. This is a filtering layer, not a guarantee. Sites can deliver their own content in ways no filter sees.

Browser fingerprinting does not use your address at all

A site can look at your operating system, your browser version, your screen size, language, time zone, and even your installed fonts and graphics behaviour. All of those features tend to be distinctive enough to recognise one device from another without the use of a cookie or address.

A VPN will change the address that a site sees. It will not change your screen size or browser version. The implication of VPN advertising is far more than a VPN does. This is the single biggest gap between the two.

Signing in undoes most of it

This is the plainest limit of all. All you have to do is log into an email account, a social network, a shop or a streaming service. The company knows exactly which account is active. It may see your VPN address in the logs, but the account is you.

The same applies to anything you type in yourself. Your name, phone number, delivery address or card details will all reach the service in full. It makes no difference from which country you appear to be connected.

Some services do not need your real details at all. Both Anonymous Signup and Mask ID will cut down on how much you hand over at the beginning. However, they cannot make your account anonymous after it has already been tied to your real identity.

Apps can find your location without your address

Websites often guess a broad location from your address, and a VPN will change that. Your phone is a little different. An app can ask your operating system for your position, which comes from GPS, nearby wifi networks and the mobile mast you are connected to.

That's a permission you grant to the app, not your VPN. Your address can say you are in Germany and the mapping app knows exactly which street you are on. A VPN can hide IP location, which is only ever an estimate drawn from your address, and device location is a separate thing it does not reach.

Most VPNs let you spoof your IP and stop there, so the country your address suggests moves while the phone itself stays exactly where it is. Geo-Spoofing goes further than most. For Android devices, it changes the location that gets sent to supported apps, as well as the country that gets suggested for your connection, so that the two match each other. This is not universal, however. Some apps will detect when the device location has been changed and reject that. Banking and ride-hailing apps are the worst for this. The Chrome extension only works for browser traffic.

What happens the moment the tunnel drops

People usually picture clever fingerprinting when they think about being exposed. The most common cause, however, is far less clever. It's simply a connection that drops.

If the VPN should fail, your device can fall back to its ordinary connection. For those few seconds, the websites and apps will see your usual address. This can happen over and over on flaky wifi connections at hotels, airports and cafes.

A Kill Switch blocks traffic whenever the tunnel is not available. If the connection to the VPN server is lost, nothing will leave the device unprotected. Auto Connect brings the VPN back up when it detects one of the triggers it supports.

Sending some apps outside the tunnel on purpose

Some things simply behave badly through a VPN. Your bank app will ask for extra verification. Your delivery app will show the wrong area. Your work portal will reject your address as it belongs to a data centre. The usual reaction is to switch the VPN off and then forget to turn it back on again.

Bypasser, our split tunnelling control, is the better answer here. You can choose which apps and sites use the ordinary connection, while everything else remains inside the tunnel.

Shared address or your own?

Because many customers use the same shared VPN address at once, it's hard to isolate one customer out of the traffic on that address. The trade-off is that you'll inherit the reputation of the other people using that IP address, meaning you're more likely to encounter CAPTCHAs and blocks.

A Dedicated IP address is reserved for one VPN account only. It is purchased as an add-on to the VPN package. It gives you one address to use for logging in, which is well suited to business systems or any site that dislikes your IP address changing constantly. A Static IP sits in between: a consistent address through supported locations, included in eligible plans, but not reserved for you alone.

The privacy trade matters

Can the VPN provider see it instead?

A VPN does not eliminate the need for trust. It just changes where that trust goes. Your internet provider used to be the one who carried all of your data. With a VPN, the VPN company is the one who runs the servers that your data leaves from, so now you have to trust them instead.

Senton does not keep a record of the sites you visit. What any service does hold, and for how long it holds it, is a question that should be asked of every provider, including us. Ours is set out on our no logs policy page, including operational data.

A provider promising complete anonymity is telling you something that no provider can ever truly deliver.

Work devices and lawful requests

A personal VPN does not make your company laptop private. Any monitoring software placed onto the machine will see your activity before it even reaches the network. Additionally, a corporate VPN may itself be designed to record what passes through it. If the company owns the machine, assume they can see what you are doing on it.

Nor does a consumer VPN put anyone beyond the reach of a lawful investigation. Authorities have plenty of things to work with besides your connection. There are your account records. There are your payment trails. There is the evidence right on the device, and there is whatever the services you use have retained. A VPN will only protect your network route, so it will not erase any of that.

The honest summary: can a VPN hide browsing history?

A VPN can usually be detected. Being detected is not the same as being identified. Your provider can see that you are connected to a VPN without seeing what you did inside the VPN. A website may be able to see that you are using a VPN address but still recognise you perfectly well through a cookie, a fingerprint or a login.

So, can a VPN hide browsing history? From the network you are on and from your provider, yes, and it will hide your usual address from the sites that you visit as well. However, it will not hide you from anything you have signed in to. It will not hide you from anything that is storing a cookie on your device. It will not hide you from any app you have granted location to. It will not hide you from any device that somebody else has control over.

As one layer among several, it does real work. As a product promising invisibility online, it will always disappoint.