How ISPs Track You Online (And How a VPN Stops It)

Last Updated on September 28, 2026 by Editorial

Understanding how ISPs track you online starts with one simple fact: your internet service provider handles your connection to the internet, so it can observe certain information about the traffic passing through its network.

That can include your IP address, DNS requests, connection times, traffic volume, and, depending on the circumstances, the domains you connect to.

However, your ISP cannot automatically see everything you do online. You can use a VPN to secure your connections and today we cover how you can do that.

What Is an ISP?

An internet service provider (ISP) is the company that connects your home, phone, or other device to the internet.

Every time you browse a website, stream a video, send a message, or use an online service, your traffic passes through a network operated by your ISP.

That position gives the ISP visibility into certain aspects of your connection. Exactly what it can see depends on factors such as HTTPS encryption, DNS configuration, the protocols being used, and whether you are connected to a VPN.

How ISPs Track You Online

ISPs don’t need to install tracking software on your device to monitor network activity. They can obtain information from the connections your devices make through their network.

They can achieve this through the following methods:

DNS Requests

DNS (Domain Name System) translates domain names such as example.com into IP addresses.

With traditional, unencrypted DNS, the DNS requests associated with your connection may be visible to your ISP. This can reveal which domains your device is trying to access.

Encrypted DNS technologies such as DNS over HTTPS (DoH) and DNS over TLS (DoT) can reduce this exposure. A VPN typically goes further by routing DNS requests through its encrypted tunnel.

IP Addresses

Your ISP knows the IP address associated with your internet connection. It can also observe destination IP addresses associated with network traffic.

An IP address does not always correspond to one specific website because many websites can share servers, CDNs, or cloud infrastructure. Still, IP information can provide useful context about where traffic is going.

Connection Metadata

Even when traffic is encrypted, an ISP can generally observe some metadata, including:

• When a connection starts and ends
• How much data is transferred
• Which IP addresses are involved
• Patterns in network traffic

Metadata doesn’t reveal the actual contents of an encrypted conversation, but it can still provide information about how a connection is being used.

Unencrypted HTTP Traffic

HTTPS is now standard across most major websites, but some traffic may still use unencrypted HTTP.

With HTTP, information traveling between your device and the website isn’t protected by encryption. An ISP or another party able to observe the connection may therefore be able to see substantially more than it could with HTTPS.

For HTTPS connections, the ISP generally cannot read the contents of the connection, such as passwords, messages, or form submissions.

What Can Your ISP See?

The easiest way to understand ISP visibility is to separate metadata from content.

The exact information available to an ISP varies according to your connection and the encryption technologies being used.

Can Your ISP See Your Browsing History?

Not in the same way your browser does.

Your browser may store a detailed history of the pages you visit. Your ISP doesn’t normally have access to that local browser database.

Instead, it can observe network activity associated with your connection. That may allow it to determine or infer which domains you connect to, along with other connection metadata.

HTTPS limits what your ISP can see. For example, if you visit an HTTPS website, the provider generally cannot read the specific article you open or the information you submit on that page.

It may still have visibility into the connection and associated domain or IP information.

Can My ISP See My Google Searches?

Generally, your ISP can see that you connected to Google, but HTTPS normally prevents it from seeing the exact search terms you entered.

Google is a separate matter. Google can associate searches with your account or other identifiers depending on your settings and how you use its services.

Does Incognito Mode Hide Your Activity From Your ISP?

No.

Incognito or private browsing primarily controls what your browser saves locally. It doesn’t encrypt your connection or route your traffic through a different network.

So you can use Incognito mode and still have your ISP observe network information associated with your connection.

This is why Incognito and a VPN shouldn’t be treated as interchangeable privacy tools.

How Does a VPN Stop ISP Tracking?

A VPN changes the connection between your device and the internet.

Without a VPN:

Your device → ISP → Website

With a VPN:

Your device → ISP → VPN server → Website

The VPN encrypts traffic between your device and the VPN server. Your ISP still carries that traffic, but it generally can’t see the websites and services contained inside the encrypted tunnel.

The VPN also normally handles DNS requests through the tunnel, preventing your ISP from simply observing your DNS lookups.

This is the key difference between using a VPN and browsing normally.

What Your ISP Sees With a VPN

Your ISP can generally still see:

It generally cannot see:

So, does a VPN hide your browsing history from your ISP? It can prevent the ISP from seeing the websites you access through the VPN connection, but it doesn’t erase the browsing history stored on your device or the records held by websites and online services.

Can Your ISP See That You’re Using a VPN?

Yes, usually.

A VPN connection still has to travel through your ISP’s network. The provider can generally see an encrypted connection between your device and a VPN server.

What it cannot normally see is the specific web traffic contained inside that encrypted connection.

Some VPN services offer obfuscation features designed to make VPN traffic less recognizable. These can be useful on networks where VPN connections are restricted, but they aren’t necessary for every user.

What Can Break VPN Privacy?

A VPN is only useful for ISP privacy if traffic actually stays inside the VPN tunnel. The following can negatively impact VPN privacy.

DNS Leaks

A DNS leak occurs when DNS requests bypass the VPN and are sent through another connection, potentially exposing the domains you’re looking up.

Look for VPN software that provides DNS leak protection.

IPv6 Leaks

If your VPN doesn’t properly handle IPv6 traffic, some connections could bypass the VPN tunnel. If IPv6 is enabled on your network, check that your VPN supports it correctly.

VPN Disconnects

If the VPN disconnects unexpectedly, your device may revert to its normal internet connection. A kill switch can block internet traffic until the VPN reconnects, reducing the chance of accidental exposure.

Split Tunneling

Split tunneling allows certain apps or websites to bypass the VPN. That’s useful for some situations, but remember that traffic excluded from the VPN can remain visible to your ISP in the normal way.

Does a VPN Completely Stop ISP Tracking?

No. A VPN limits what your ISP can see; it doesn’t make your connection invisible.

Your ISP can still see that you’re communicating with a VPN server, as well as certain connection metadata.

There’s also an important privacy tradeoff: you’re shifting some trust from your ISP to the VPN provider.

The VPN provider operates the server through which your traffic travels, so its privacy practices matter. Before choosing one, look at its logging policy, ownership, security practices, and any independent audits.

The FTC has previously reported that major U.S. ISPs collected substantial amounts of customer information and, in some cases, used browsing and app usage data for advertising and profiling.

That FTC report examined six major U.S. ISPs in 2021 and shouldn’t be interpreted as a description of every ISP today.

VPN vs Incognito Mode

These tools address different privacy concerns.

If your concern is how ISPs track you online, Incognito mode isn’t enough because it doesn’t change your network connection.

VPN vs Encrypted DNS vs Tor

These technologies also solve different problems.

Encrypted DNS protects DNS queries from being easily observed by the network. It doesn’t encrypt all internet traffic or hide your public IP address.

A VPN encrypts your connection to a VPN serve with AES-256 and routes your traffic through that server. This makes it particularly useful when your goal is to prevent your ISP from seeing the websites you access.

Tor routes traffic through multiple relays and provides a different anonymity model. It can be useful when stronger anonymity is the priority, although it generally isn’t as convenient or fast as a conventional VPN.

How to Stop Your ISP From Tracking Your Online Activity

If you want to reduce what your ISP can see, focus on these practical measures:

Remember that a VPN addresses ISP-level visibility. It doesn’t stop every form of online tracking. Cookies, account-based tracking, advertising systems, and browser fingerprinting are separate issues.

The Bottom Line

Figuring out how ISPs track you online is ultimately about network visibility. Your ISP handles your internet connection, so it can observe certain information about your traffic even when the contents are encrypted.

HTTPS protects the contents of modern web connections. A VPN adds another layer by encrypting traffic between your device and a VPN server, while normally keeping your DNS requests inside that tunnel.

If your primary concern is preventing your ISP from seeing which websites you visit, a reputable VPN with DNS leak protection, IPv6 protection, and a kill switch can substantially reduce that visibility.

Just remember that privacy isn’t the same as anonymity. A VPN changes who can see your traffic; it doesn’t make the rest of the internet unable to track you.

FAQ