VPN Jargon, Decoded

Every VPN feature comes wrapped in a term designed to sound impressive. Here's what they actually mean, in plain English — and which ones matter versus which are marketing.

By the VPN Insider editorial desk · A plain-English reference. June 2026.

VPN marketing runs on jargon: "military-grade encryption," "RAM-only servers," "Double VPN." Some of these describe genuinely useful features; some are dressed-up basics every provider has. This glossary translates the vocabulary so you can read a spec sheet and tell the difference.

The basics

VPN (Virtual Private Network)

A service that routes your internet traffic through an encrypted tunnel to a server it runs, so websites see that server's address instead of yours and your network provider can't read your traffic.

IP address

The numeric label that identifies your device on the internet and roughly reveals your location. Hiding it behind the VPN's IP is the core thing a VPN does.

Encryption

Scrambling data so only the intended party can read it. "Military-grade" and "bank-grade" are marketing for AES-256, the standard nearly every VPN uses — so it's not a differentiator.

Protocol

The set of rules that builds the encrypted tunnel. The modern, fast one is WireGuard; OpenVPN is the older, battle-tested standard; IKEv2 is common on mobile. Providers often rebrand WireGuard (NordLynx, etc.).

Server / server network

The computers a VPN runs in various countries. Bigger isn't automatically better — what matters is whether the servers near you are fast and, for streaming, un-blocked.

Privacy & trust terms

No-logs policy

A promise that the provider doesn't record what you do or your real IP. Only meaningful if independently audited or proven under legal pressure — the words alone are free.

Jurisdiction

The country whose laws the provider answers to. Matters because it determines who can legally compel data. A "Panama-based" service may still run operations elsewhere — check the parent company.

Five / Nine / Fourteen Eyes

Intelligence-sharing alliances (the US, UK, Canada, Australia, NZ and others). A VPN based in one can, in theory, be compelled to share data with all — which is why privacy buyers prefer providers outside them.

RAM-only (diskless) servers

Servers that store everything in volatile memory, so a reboot wipes all data and a seized server holds nothing. A genuinely useful design, now common among serious providers.

Warrant canary

A regularly updated public statement that the provider has not received a secret legal order. If it disappears, that's the signal — a workaround for gag orders.

Audit

An independent firm's review of either the no-logs claim or the code/infrastructure. Useful but point-in-time and usually provider-commissioned — see our audit tracker.

Features that actually do something

Kill switch

Blocks all internet traffic if the VPN drops, so your real IP never leaks during a reconnect. A must-have; test that it works.

DNS leak protection

Ensures your "what's this website's address" lookups go through the VPN, not your ISP. Without it, your provider can still see every site you visit. Test for leaks here.

Split tunneling

Lets you route some apps through the VPN and others directly — handy for, say, streaming local content while your browser stays protected.

Obfuscation / stealth

Disguises VPN traffic as ordinary HTTPS so censors (or networks that block VPNs) can't detect and block it. Essential in places like China or Iran.

Multi-hop / Double VPN

Routes your traffic through two VPN servers for extra layering. Useful for high-threat users; overkill (and slower) for most.

Port forwarding

Opens a port through the VPN so incoming connections can reach you — mainly relevant for efficient P2P/torrenting. Many privacy VPNs have removed it.

Dedicated IP

A static address only you use, sold as an add-on. Reduces "you're a robot" captchas and IP bans, but is slightly less private than a shared IP.

Threats & related tech

DNS leak

When your address lookups escape the tunnel and reach your ISP, exposing your browsing even with the VPN on.

WebRTC leak

A browser feature that can reveal your real IP to a web page despite a VPN. Fixable in browser settings — test for it.

DPI (Deep Packet Inspection)

A network technique that examines traffic to identify and block VPNs. The reason obfuscation exists.

Tor

A free, volunteer-run anonymity network that routes traffic through three relays. More anonymous than a VPN, much slower; the two solve overlapping but different problems.

Proxy

Reroutes one app's traffic (often without encryption). Lighter than a VPN and far less private — not a substitute.

ISP throttling

When your internet provider deliberately slows certain traffic (e.g. streaming). A VPN can sometimes prevent it by hiding what you're doing.

Browser fingerprinting

Identifying you by your browser's unique configuration. A VPN does not stop this — a common misconception.

VPNInsider.org · Reference · updated monthly · June 2026.