Sign in with
Sign up | Sign in

How a Virtual Private Network Can Boost Your Security

By - Source: Tom's Guide US | B 4 comments

Ask any security professional about strengthening your computer's security, and he or she will advise setting up a VPN. It's right in your PC's settings, you'll be told.

That's great advice — if you're a security professional, or are otherwise pretty computer-savvy. But what about the rest of us who don't have a clue what VPN even stands for, let alone how it works?

"VPN stands for 'virtual private network,'" said David Gorodyansky, chief executive office of AnchorFree, a Mountain View, Calif., company that makes Hotspot Shield, VPN software for the average user. "It is a connection between a secure server and your computer, through which you can access the Internet."

A VPN lets you secure your Web session, transmitted data, financial transactions and personal information online, no matter where you are.

Security experts warn against using public Wi-Fi hotspots , such as in a coffee shop, airport or hotel lobby, due to the risk of your connection being hijacked or snooped upon. A VPN eliminates those risks.

MORE: 10 Pros and Cons of Jailbreaking Your iPhone or iPad 

A VPN also helps to protect you from identity theft; hides your IP address, making it harder for third parties to track you; accesses all content privately without censorship; and bypasses firewalls.

Send a check, not cash

"Think of it along the lines of sending a payment to a company," said Brian Monkman, technology programs manager at ICSA Labs, a network-security testing and product-assurance company based in Mechanicsburg, Pa. "You could put cash in an envelope and send it — which, assuming no one got to the envelope prior to its arriving at its destination, would work.

"Or you could write a check and send it," Monkman explained. "That simple step increases security. VPN strengthens security by making it harder for eavesdropping or interception of your connection. And if your connection is intercepted, it makes it difficult to actually decipher what is being transmitted."

To put it simply, a VPN is essential for anyone who regularly uses a laptop from outside the office to connect with the company computer network. If you think your company doesn't need one, think again.

"People seem to be largely unaware of the risks of browsing the Internet unprotected, or mistakenly believe that their anti-virus [software] protects them while browsing," Gorodyansky said. "We need to raise awareness of Internet security concerns, and make sure that people connect with a VPN, ensuring their protection."

If a VPN is set up properly, said Scottie Cole, a server engineer with Gulf Breeze, Fla.-based online-security provider AppRiver, it's as if all the network users, whether on site or in a remote location, are in the same building.

"Client VPNs allow individual users to connect to a central location via their mobile device or computer," Cole said. "Once authenticated, they then have access to the main location's infrastructure. Remote offices use VPN so that they connect to their main location securely by encrypting all the traffic through a VPN tunnel."

MORE: How HTTPS Safeguards Your Browsing

VPN technology has been available for regular PCs for almost two decades, and during that time, it's been diversified.

"It is useful to know that there isn't just one type of VPN," Monkman said. "There are SSL [secure socket layer] VPNs, IPSec [Internet Protocol security] VPNs, hybrid VPNs. All have characteristics unique to the implementation, and some have very specific purpose-built uses."

Not just for laptops anymore

Now the use of mobile VPN technology on devices such as smartphones and tablets is becoming increasingly common. With the rollout of mobile banking apps, and with corporate email and authentication programs such as RSA's SecurID tokens being pushed to mobile devices, secure communication is even more important than ever before.

Many of us use our smartphones and tablets to conduct sensitive transactions, but rarely think about whether or not the information is secure. For that reason, Monkman pointed out, everyone should have the VPN capabilities on their mobile device activated.

How you activate a VPN client will depend on the device, the mobile network-access provider and the application developer.

For example, the current versions of Android OS, BlackBerry OS and Apple's iOS all have VPN capability built in. On an Android device, for instance, the VPN settings are found under the Wireless and Networks menu. On an Apple mobile device, it's under Settings --> General --> Network.

Older versions of these operating systems may not have the same functionality, and might require third-party applications to be installed.

"Connecting to a VPN concentrator with a client VPN is usually done with a username/password, a security certificate, or two-factor authentication like a token and username/password," Cole said. "Connecting VPN clients depends on how the authentication is setup on the VPN concentrator."

But the average user doesn't need to know all that. Several different VPN clients — the end-user software — are available in Apple's iTunes App Store, and there are dozens in Android's Google Play store.

For laptops and desktop computers, all modern operating systems have VPN capabilities, and there are countless VPN applications, both free and paid.

Follow us @tomsguide, on Facebook and on Google+.

Discuss
Display all 4 comments.
This thread is closed for comments
  • 1 Hide
    WyomingKnott , September 12, 2013 6:40 AM
    You haven't read the recent articles about the NSA having the ability to break SSL and VPNs? While the VPN will increase security, and in my personal opinion should be used whenever accessing a public hotspot, your timing is awful.
  • 0 Hide
    wopr11 , September 12, 2013 7:43 AM
    Not only that but knowing that even the hardware we have purchased over the last 12 years has been tampered with to allow back doors and other intrusions by crybercriminals (pseudolegalized or not) makes you realize that your best option is to have a device for internet communications only and keep your business, personal and private information in a system not connected to the internet at all.
  • 0 Hide
    mace200200 , September 12, 2013 5:53 PM
    I just started school for IT network security at CDM Depual, (partly because networking is an area I don't know anything about), I've always wanted to do a VPN and I'm sure it'll be covered at some point but for the time being I don't what paid or free ones are any good. Right here seems like as good a place as any to ask, what VPNs do you guys like? free or paid?
  • 0 Hide
    alifaizan123 , January 29, 2014 12:34 AM
    Quote:
    You haven't read the recent articles about the NSA having the ability to break SSL and VPNs? While the VPN will increase security, and in my personal opinion should be used whenever accessing a public hotspot, your timing is awful.
    Quote:
    You haven't read the recent articles about the NSA having the ability to break SSL and VPNs? While the VPN will increase security, and in my personal opinion should be used whenever accessing a public hotspot, your timing is awful.
    True but Snowden himself uses VPNs and Proxies to hide his chats. Source: http://www.bestvpnservice.com/blog/snowden-hiding-his-online-chats-behind-proxy-ips-and-vpns/
Tom’s guide in the world
  • Germany
  • France
  • Italy
  • Ireland
  • UK
Follow Tom’s guide
Subscribe to our newsletter