KotoVPN

Guides

What VPN guides does KotoVPN publish?

Twenty-six guides, covering what a VPN does and does not hide, how to test that yours works, why a connection fails, what VPN passthrough is, and where a VPN is the wrong tool entirely. Each exists because the question has a correct answer that most results get wrong, not because a keyword exists.

36 guides, each opening with a complete answer before any of the detail. If a guide’s answer would have been “it depends, here are our top five providers”, it is not a guide and it is not here.

How to check your VPN is actually working

How do I test whether my VPN is doing anything?

Four checks, in this order: confirm the address changed, confirm DNS lookups go to the provider’s resolver rather than your ISP’s, confirm no IPv6 address is exposed, and confirm traffic stops when the tunnel is killed. The last one is the one almost nobody runs and the one that matters most, because it tests the failure mode rather than the working state.

Why your VPN is slow, and what actually fixes it

Why is my internet slower with a VPN, and how do I speed it up?

Three things cost you speed: distance to the server, the protocol, and server load — roughly in that order. Switching to a nearer server and to WireGuard fixes most of it. Encryption overhead, the thing people blame, is almost never the bottleneck on modern hardware.

Do you actually need a VPN?

Is a VPN worth it, or is it security theatre?

A VPN moves what your network operator can see to what your VPN provider can see. That is a genuine improvement in a few specific situations and no improvement at all in others. If you cannot say which observer you are moving away from, you probably do not need one yet — and this page will cost us a sale by saying so.

VPN, proxy or Tor: which one is for your problem

What is the difference between a VPN, a proxy and Tor?

A proxy relays one application’s traffic with no encryption guarantee. A VPN encrypts everything from your device to one company you have chosen to trust. Tor routes through three relays run by different volunteers so no single one knows both ends. They solve different problems, and using the wrong one is common.

Which VPN protocol to use, and when

Should I use WireGuard, OpenVPN or IKEv2?

WireGuard by default. OpenVPN over TCP 443 when a network is blocking you. IKEv2 if you move constantly between mobile data and Wi-Fi and reconnection speed matters more than throughput. Anything else in the list is legacy and should not be a default.

How to read a VPN audit report

What does an "independently audited" VPN actually mean?

Read three things: who performed it, what they were allowed to examine, and when. A report covering a browser extension is not a report covering the no-logs claim, and providers cite one as though it were the other routinely. The date matters as much as the scope, because an audit is a snapshot of a system that can change the next day.

Red flags in a VPN privacy policy

How do I tell if a VPN privacy policy is hiding something?

Look for the gap between the marketing page and the policy. The common pattern is a headline saying "we keep no logs" and a policy several clicks away that describes connection timestamps, bandwidth records and source addresses retained for a stated period. Both statements coexist because "logs" is undefined.

Why most VPN reviews cannot be trusted

Why does every VPN site recommend the same providers?

Because commission rates in this category are unusually high, several apparently independent providers share a parent company, and some review sites are owned by that same parent. The result is a market where the ordering of recommendations correlates with payout more reliably than with quality. This page includes the ways our own site could be wrong.

Running a VPN on your router

Should I install a VPN on my router instead of on each device?

Do it if you need to cover devices that cannot run a VPN client — smart TVs, consoles, IoT hardware — or if you are out of connection slots. Do not do it as your primary setup: consumer router hardware is usually too slow to encrypt at line speed, and you lose per-device control entirely.

Setting up a VPN on Android and iPhone properly

How do I set up a VPN on my phone properly?

Use WireGuard, turn on the operating system’s always-on setting rather than relying only on the app, and be deliberate about split tunnelling. Battery cost on a modern protocol is small; the cost people notice usually comes from an old protocol reconnecting constantly as the network changes.

Paying for a VPN without undoing the point of it

How do I buy a VPN privately?

The account is rarely the weak link — the payment is. A random account number paired with a personal credit card still ties the subscription to you through the processor. If the payment trail matters to your threat model, the options are cash, certain cryptocurrencies, or a provider that never collects an identity in the first place.

Cancelling a VPN and getting the refund

How do I cancel a VPN subscription and actually get my money back?

Cancel through the channel you paid through, not through the provider’s app, and do it before the window closes rather than on the last day. If you subscribed through an app store, the provider cannot refund you at all — the store handles it, on the store’s terms, which are usually stricter.

What VPN passthrough is, and why your router probably no longer needs it

What is VPN passthrough?

VPN passthrough is a router setting that lets older VPN protocols — PPTP, native IPsec, and L2TP when it is wrapped in IPsec — cross a NAT router that would otherwise break them. It exists because those protocols predate home routers and do not survive address translation unaided. If you use WireGuard or OpenVPN, which almost everyone now does, passthrough is irrelevant and toggling it changes nothing.

How to bind qBittorrent to a VPN so it cannot leak

How do I bind qBittorrent to my VPN?

In qBittorrent, open Tools → Options → Advanced and set "Network interface" to your VPN adapter rather than Any interface. The client then refuses to send or receive on any other adapter, so if the tunnel drops, torrents stall instead of falling back to your real connection. This is more reliable than a kill switch, because nothing has to detect the failure for it to work.

What your ISP and your Wi-Fi owner can still see when you use a VPN

Can my internet provider see my history if I use a VPN?

Not the pages. With a VPN connected, your ISP sees encrypted traffic to one address, plus how much and when. It cannot see which sites you visited or what you did there, and the same applies to whoever runs the Wi-Fi. What remains visible is that you are using a VPN, which provider, the timing and volume of traffic, and anything that escapes the tunnel.

How to turn a VPN off properly on every platform

How do I turn off my VPN?

Disconnect in the app first, then check three things that commonly survive it: an always-on or kill-switch setting still blocking traffic, a leftover DNS entry pointing at the provider’s resolver, and a system VPN profile still installed. On Windows and macOS, a disconnected VPN that left its kill switch armed looks exactly like a broken internet connection.

Does a VPN change your MAC address? No — and here is what does

Does a VPN change my MAC address?

No. A VPN changes the IP address that remote servers see. Your MAC address is a hardware identifier used only on your local network segment and it never leaves it, so websites cannot see it with or without a VPN. The things that can see it are your router and other devices on the same Wi-Fi, and for those a VPN is the wrong tool.

A VPN and incognito mode do completely different things

Do I need a VPN in incognito mode?

They solve unrelated problems and neither replaces the other. Incognito mode stops your browser keeping history, cookies and form data on the device — local privacy. A VPN encrypts traffic so your network and ISP cannot see where it goes — network privacy. Incognito hides nothing from your ISP; a VPN hides nothing from the next person using your laptop.

Running your own VPN server, and when it is the wrong idea

Should I set up my own VPN?

It depends entirely on what you want. To reach your home network from elsewhere, self-hosting is the correct answer and no commercial VPN can do it. To be one of many users behind a shared address, self-hosting is actively worse: a server only you use gives you a dedicated address that identifies you perfectly, which is the opposite of what a privacy VPN provides.

Using a VPN to buy things cheaper, and what actually happens

Can I use a VPN to buy games or subscriptions cheaper?

A VPN changes the address a store sees, but on the platforms people usually mean it does not work and can cost you the account. Steam’s store country is an account setting, not something derived live from your connection, so a VPN alone does not reprice the store. Changing it requires a purchase with a payment method issued in that country, and the Steam Subscriber Agreement expressly forbids using IP proxying to do so. Some subscription services are more relaxed.

Why your VPN will not connect, in the order worth checking

Why is my VPN not connecting?

Work through it in this order: confirm the internet works with the VPN off, switch to a different server, switch protocol from WireGuard to OpenVPN over TCP 443, then temporarily disable any other security software. Most failures are one of four things — a blocked port, a captive portal you never signed into, a stale credential after a password change, or a second VPN-like tool already holding the network adapter.

Finding, changing and removing VPN profiles on iPhone and Mac

How do I change or remove a VPN on my iPhone?

On iPhone, go to Settings → General → VPN & Device Management. Every VPN configuration on the device is listed there, including ones an app installed and ones an employer or school pushed. Tap the ⓘ beside an entry to delete it. On Mac the paths are different and split: VPN configurations live in System Settings → VPN, and management profiles in System Settings → General → Device Management.

Built-in VPNs in Windows, Firefox, Opera and Chrome — what they actually are

Does Firefox or Windows have a built-in VPN?

Not in the way the question implies. Windows ships a VPN client, not a VPN service — it connects to a server you supply — though it also ships Edge, whose Secure Network is a free Cloudflare-backed proxy. Firefox sells Mozilla VPN as a separate paid subscription. Opera bundles a free proxy covering only Opera traffic. Chrome has no VPN but now ships IP Protection in Incognito. Not one of these is a device-wide VPN service.

Does a VPN help with gaming? Mostly no, with three real exceptions

How does a VPN help in gaming?

For most players it does not, and it makes things slightly worse: routing through an extra server adds latency, and latency is what matters in games. There are three cases where it genuinely helps — protection from DDoS attacks if you are being targeted, reaching game servers in a region your account cannot normally use, and getting past a network that blocks gaming traffic entirely.

What "VPN bypass" means — it describes two opposite things

What does VPN bypass mean?

It is used for two opposite things, which is why searching it is confusing. It can mean routing chosen traffic around your VPN so it uses your normal connection — that is split tunnelling, a feature. Or it can mean getting past something that blocks VPNs, such as a streaming service or a national firewall — that is obfuscation, a different feature entirely.

Using a VPN with TikTok, and the two ways it goes wrong

Can I use TikTok with a VPN?

Yes, and it works for reaching TikTok on a network that blocks it. What it does not reliably do is change the content you see, because TikTok determines your region primarily from the account and the SIM rather than from your address. Two things commonly go wrong: the app detecting a mismatch and demanding verification, and losing access to an account created in a different region.

Does a VPN hide your IP and change location?

Does a VPN actually hide my IP address and change my location?

Yes. A VPN replaces the IP address websites see with the server’s, so your apparent location changes to where that server sits. It does not make you anonymous: services still identify you through your account, cookies, browser fingerprint and payment country, and anything you log into knows exactly who you are.

The VPN kill switch and why internet drops

Why do I lose internet when I connect to my VPN?

Most often this is the kill switch working as intended: it blocks all traffic when the tunnel drops, so a shaky connection looks like no connection. Disconnect the VPN fully — if the internet returns, the switch was doing its job, not failing. DNS and unhandled IPv6 cause the rest.

What a VPN actually protects you from

What does a VPN actually protect you from?

A VPN hides your browsing from your ISP and whoever runs the network you are on, and changes the location an IP address reveals. It does nothing against malware, phishing, cookies, fingerprinting, or any account you log into. It relocates who can watch you rather than removing the watcher.

Can you be tracked while using a VPN?

Can you still be tracked while using a VPN?

Yes. A VPN changes the IP address a website sees, but it does almost nothing against the tracking that actually follows people. Browser fingerprinting, cookies, logged-in accounts and ad identifiers all work above the network layer, so a VPN relocates who can watch you rather than making you anonymous.

How to use Proton VPN, free plan included

How do I use Proton VPN, and what does the free plan actually give me?

Install the app, sign in, press Quick Connect — that is the whole of it. The free plan has no data cap, but no P2P servers and no port forwarding. Both of those are paid features, which is why torrenting on free Proton VPN works badly rather than not at all.

Do you need a VPN for torrenting?

Do I need a VPN for torrenting?

If you use public torrents, yes — because BitTorrent publishes your IP address to every peer in the swarm by design. Monitoring firms join swarms and log those addresses, which is how an ISP notice reaches you. A VPN puts the provider’s address in that list instead. It does not make infringement lawful.

Is a free VPN safe, and what does it cost you?

Is a free VPN safe, and what am I paying with instead of money?

A VPN has a hard per-user cost in bandwidth and servers, so the question is never whether it is free but who is paying for it. Proton VPN’s free tier is funded by its paying subscribers and audited by Securitum five years running. Where you cannot name the payer, it is advertising, data sale, or an owner you cannot identify.

VPN on Fire Stick, Roku and smart TVs

How do I use a VPN on a Fire Stick, Roku, smart TV or console?

Fire Stick and Android TV run Android, so they install a real VPN app from their own store. Apple TV takes a native app from NordVPN, Proton VPN or PureVPN — not FastestVPN. Roku, PlayStation, Xbox, Samsung and LG sets cannot run a VPN at all, and a router is the only honest route.

Does a VPN work on Netflix and Prime Video?

Does a VPN work on Netflix, Prime Video and Disney+?

Sometimes, and never reliably for long. Streaming services block by address: they buy or build lists of datacentre and known-VPN ranges and refuse them. Providers rotate to fresh ranges, the services catalogue those too, and the cycle repeats in weeks. This site ranks streaming on native TV app coverage and claims no provider works with any named service.

When Double VPN and Onion over VPN are worth it

Is Double VPN or Onion over VPN worth using?

Double VPN and Onion over VPN are not worth it for most people: a second hop costs throughput and defends one narrow threat. It stops one of the two servers being compromised or compelled from exposing you, and does nothing about accounts you sign into, fingerprinting, or an adversary watching both ends.