A VPN and an antivirus protect different things and neither replaces the other. A VPN encrypts your traffic and hides your address from the network you are on and from your ISP; it does nothing about a malicious file you download or a fake site you type your password into. An antivirus watches files and programs on the device; it does nothing about who sees your traffic. Whether you need both depends on the device: on phones and modern computers the built-in protection already covers most of what a third-party antivirus does, while nothing built in covers what a VPN does.

What a VPN protects

  • Your traffic on shared and public networks: the café, the hotel, the office.
  • The list of sites you visit, from your ISP and the local network.
  • Your IP address from websites and from the other party in direct connections.
  • Your accounts when abroad, by making logins look like they come from home.

What it does not: it carries whatever you send. A phishing page is just as fake through a VPN, and a trojan downloads just as well. The full picture is in what is a VPN.

What an antivirus protects

  • Files: it scans downloads, attachments and installers for known malware and suspicious behavior.
  • Running programs: it stops software that tries to encrypt your files, log keystrokes or spread on the network.
  • Sometimes web pages: many suites block known phishing and malware domains in the browser.

What it does not: your traffic is as visible to the network as ever, and your address is your own. An antivirus with a "VPN" bundled is two products in one box, not one product doing both jobs.

Where they overlap

Both may block known malicious domains: an antivirus in the browser, a VPN through DNS filtering. Both may warn about dangerous networks. That is the extent of it. Everything else is separate.

Is built-in protection enough?

Windows. Microsoft Defender is a competent antivirus, on by default, updated automatically. For most home users it is enough; a third-party suite adds features, not necessarily protection.

macOS. XProtect and Gatekeeper check downloaded apps and known malware; the system is locked down more tightly than Windows. A third-party antivirus is rarely necessary for ordinary use.

iOS. Apps run in sandboxes and cannot scan each other; "antivirus" apps on iPhone are mostly web filters. The real protection is keeping iOS updated and installing from the App Store.

Android. Google Play Protect scans installed apps. The main risk is APKs from outside the store; avoid those and Play Protect covers the rest.

On every platform, the two things that matter most are updates and not installing what you do not trust. An antivirus is a safety net under those, not a substitute.

When you want both

  • A Windows PC used by several people, or one that downloads a lot: Defender or a third-party antivirus, plus a VPN for networks outside the house.
  • A laptop that travels: the VPN is the more important of the two, because the threats on hotel Wi-Fi are network threats. See is public Wi-Fi safe.
  • A phone: built-in protection plus a VPN. Third-party antivirus adds little.

Running both without conflicts

Some security suites inspect traffic and can block a VPN's connection, or a VPN app can stop the suite's web filter from seeing anything (which is expected: the traffic is encrypted). If the VPN fails to connect after installing a suite, add the VPN app to the suite's exceptions. If the suite complains it cannot scan web traffic while the VPN is on, that is the VPN working; rely on the suite's file scanning instead. The troubleshooting order is in VPN not working on Wi-Fi.

What actually reduces risk most

  1. Updates, on every device, automatically.
  2. Unique passwords in a manager, with 2FA on email; see password managers.
  3. Installing only from official stores and sites.
  4. A VPN on networks you do not control.
  5. Built-in antivirus on, a third-party one only if you have a reason.

A VPN and an antivirus sit at different layers. The question is not which one, but whether each layer is covered.

404 VPN covers the network layer: VLESS or WireGuard tunnel, DNS inside it, a kill switch, and apps for every platform. Details on the security page; get started here.