How to Use a VPN Safely for Remote Work

A VPN (virtual private network) creates an encrypted tunnel between your device and another server. That helps when you are on hotel Wi-Fi in Abuja or a shared network at a co-working space in Yaba. It doesn't make you anonymous, it doesn't make a "US only" job open to you, and a badly chosen free app can leak more data than it protects.

This guide covers the difference between company and personal VPNs, the settings you should leave alone, how to choose a personal VPN, whether VPNs are legal in Nigeria and how to keep a tunnel stable on MiFi and inverter power.

Quick answer

To use a VPN safely for remote work, connect through your employer's approved VPN client whenever their rules say to, and don't change its settings. Turn on multi-factor authentication and keep the client updated. If you add a personal VPN for public Wi-Fi, pick a paid provider you have researched, check its permissions and data sharing, and set it to your real country. Never use any VPN to hide your location from an employer, client or platform.

Company VPN or personal VPN: two different tools

People say "VPN" for two products that do different jobs. Mixing them up causes most of the confusion.

A company VPN (also called a remote access VPN) connects your laptop to your employer's private network so you can reach internal systems such as file servers, admin dashboards, staging environments or customer databases. Your employer controls it, logs it and decides who can use it. Common clients include Cisco Secure Client, Palo Alto GlobalProtect, FortiClient and WireGuard-based tools, but the right one is whatever your IT team installs.

A personal VPN (also called a consumer VPN) sends your internet traffic through a server run by a VPN company. You pay for it and choose the server. Its main job is to stop the local network you're on, such as public Wi-Fi, from reading or tampering with your traffic.

Plenty of remote companies don't run a company VPN at all. Many work entirely through cloud tools such as Google Workspace, Slack, GitHub and Notion, protected by single sign-on and two-factor authentication. If nobody has given you a VPN, you probably don't need one for your daily work. Ask before you install anything on a company laptop.

What a VPN protects and what it does not

A VPN protects your traffic in transit between your device and the VPN server. In its guidance on VPN apps, the US Federal Trade Commission (FTC) describes VPNs as tools that can help shield personal information on free public Wi-Fi, which is often insecure.

A VPN does not:

• Stop phishing. If you type your Microsoft 365 password into a fake login page, the VPN carries it to the attacker safely. Our planned guide on spotting phishing while working remotely covers this.
• Clean an infected laptop. Malware on your device still sees everything before it enters the tunnel.
• Hide your activity from your employer. On a company VPN, your employer can see that you connected, when and from which IP address. That is the point of it.
• Make you anonymous. A personal VPN shifts trust from the café's network to the VPN company. Any website you log into still knows who you are.
• Replace two-factor authentication, updates or a secure home router. Those come first. See setting up two-factor authentication on work accounts and keeping your home office network secure.

Think of a VPN as one lock on one door, not as a security system for the whole house.

How to use your employer's VPN safely

If your employer gives you a VPN, your job is mainly not to break it. These steps follow the logic of guidance from the UK National Cyber Security Centre (NCSC) and the US Cybersecurity and Infrastructure Security Agency (CISA), adapted for a remote worker rather than an IT administrator.

1. Install the client only from your employer's instructions. Use the download link or device management portal your IT team provides, not a search result. Fake VPN installers are a common way to deliver malware.
2. Turn on multi-factor authentication when asked. Use the authenticator app or hardware key your employer chooses. Never approve a login prompt you didn't start.
3. Connect before you start work, if your company's policy says so. Some firms require the VPN for everything. Others only need it for certain systems. Follow the written policy and ask if it isn't clear.
4. Never share your VPN login. Don't share it with a sibling helping on a task or a "partner" doing part of your work. VPN access is personal, and shared credentials are a quick route to dismissal.
5. Install updates when IT pushes them. Don't postpone them for weeks (more on this below).
6. Report problems instead of working around them. If the VPN blocks something you need, tell IT. Don't switch it off and carry on.

Leave split tunnelling and always-on settings alone

Two settings cause arguments with IT more than any others.

Split tunnelling sends some traffic through the VPN and the rest straight to the internet. It can make video calls faster, which is why people want it on. The NCSC's VPN guidance recommends against it because it increases the risk that sensitive data is exposed to an unprotected network, and because an attacker could use the device to reach internal resources. If your employer has turned split tunnelling off, that is a security choice, not a mistake.

Always-on or forced VPNs connect automatically and block traffic that tries to leave outside the tunnel. The NCSC advises organisations to use automatic VPNs and recommends forced ones, because optional VPNs let users bypass monitoring. If your laptop won't reach the internet without the VPN, that setting is working as designed.

Keep the VPN client and laptop patched

VPN systems are a favourite target for attackers because they sit at the edge of a company's network. A joint CISA and NSA alert from September 2021 warns that exploiting vulnerable VPNs can lead to credential harvesting, remote code execution on the VPN device and hijacking of encrypted traffic. Most of the patching happens on your employer's servers, but your side matters too: install client updates and operating system updates promptly, and restart when asked.

Don't stack a personal VPN on a work laptop

Running NordVPN or Proton VPN on top of your employer's VPN, or instead of it, is a bad idea on a company device. It can break the corporate connection, trigger security alerts and look like you're hiding something. Many employers forbid it in their acceptable use policy. If you think you need extra protection on the company laptop, ask IT. Some employers pay for a personal VPN for staff who travel.

When a personal VPN makes sense

On your own devices, a personal VPN is reasonable in situations like these:

• You work from hotel, airport, café or co-working Wi-Fi where you don't control the router.
• You are on a shared network you can't vouch for, such as a relative's house, a university hostel or an estate-wide Wi-Fi.
• You handle client files as a freelancer and the client has no VPN of their own.

It adds little when you are at home on your own router with a strong Wi-Fi password, or on your own mobile data. Most work tools already use HTTPS encryption, so a VPN on top mostly costs you speed and data.

How to choose a personal VPN: the FTC's four checks

The FTC suggests four checks before you trust a VPN app. They are still a sensible filter:

1. Research the provider before downloading. Look for a company with a real address, a clear owner, a published privacy policy and independent security audits. Be wary of apps whose only web presence is an app store listing.
2. Review the app's permissions. A VPN doesn't need your contacts, SMS or photos. If it asks, don't install it.
3. Confirm it encrypts your traffic. Look for modern protocols such as WireGuard, IKEv2/IPsec or OpenVPN. Avoid old protocols such as PPTP.
4. Check whether it shares data with third parties. Read the privacy policy for advertising, analytics or "partners". A no-logs claim means more if it has been independently audited.

Also look for a kill switch, which blocks your internet if the tunnel drops so your traffic doesn't fall back to the open network without you noticing.

Why free VPN apps are risky for work

Running a VPN service costs money. A free app that isn't paid for by subscriptions has to make money somehow, often through ads or by collecting data about what you do. That is the opposite of what you want when you are handling a client's documents.

If you can't pay yet, a free tier from a provider that also sells paid plans (and publishes how it handles data) is safer than an unknown "unlimited free VPN" app. Better still, avoid public Wi-Fi for sensitive work and tether to your own phone instead.

Never use a VPN to fake your location

This is the section that matters most for Nigerian readers, and the one VPN adverts skip.

A VPN can make your traffic look as if it comes from London or New York. It cannot change where you live, where you are taxed, what your contract says or which countries your employer can legally hire from. Using a VPN to hide your location from an employer, client or platform is misrepresentation. It can end your job, your account or both.

Why "US only" jobs stay US only

When a job ad says "Remote (US only)" or "must be based in the UK", the restriction usually comes from payroll, tax, employment law, data protection or client contracts, not from the hiring manager's preference. A VPN does nothing about any of those. Our planned guides on what US-only and Canada-only restrictions mean and why some remote jobs are not open to Nigerians explain the reasons.

Even if a VPN gets you past an application form, the truth comes out later. It shows up in identity checks, tax forms, bank details, equipment shipping addresses, device management software and the IP logs on company systems. Being found out after you've been hired is far worse than being rejected at the start.

The honest alternative: search for roles that state Nigeria, Africa, EMEA or worldwide eligibility, and confirm it on the live ad. Our planned guide on checking whether a remote job accepts Nigerian residents walks through how.

Freelance platforms, payment apps and banks

Freelance marketplaces, payment providers and banks watch for logins from unexpected countries. A login from a VPN server abroad, especially one that changes country often, can trigger extra verification, a payment hold or an account review. Some platforms publish help pages on VPN use. Read your platform's own help centre before connecting through one.

Safe habits:

• Keep the country on your profile accurate.
• Turn the personal VPN off, or set it to a Nigerian server, before logging into Upwork, Fiverr, Payoneer, Grey, your Nigerian bank app or similar services.
• Don't let anyone else log into your freelance or payment accounts from abroad "to help". To the platform, that looks exactly like account takeover or location fraud.

For how to get paid without these problems, see receiving dollar payments in Nigeria.

Example (hypothetical): two ways to use the same VPN

Tunde is a Lagos-based QA contractor working for a German software company. He is spending a week at a hotel in Port Harcourt. In the evening he connects to the hotel Wi-Fi, completes the login page, then switches on his company's VPN and tests a staging build. That is exactly what the VPN is for.

His friend Ada sees a "US only" customer support role paying more than her current job. She turns on a free VPN set to New York, edits her LinkedIn location and applies. She gets an interview. Then the offer comes through a US payroll provider asking for a Social Security number and a US address for equipment. She has to withdraw, and the recruiter flags her application. Same technology, opposite outcomes.

Is it legal to use a VPN in Nigeria?

As of October 2026, we found no Nigerian law that makes ordinary VPN use a crime, and Nigerians use VPNs widely for work and privacy. This is general information, not legal advice. What you do through a VPN is still covered by Nigerian law, including fraud and cybercrime offences.

The question came up publicly in June 2021, when the federal government suspended access to Twitter and many Nigerians switched to VPNs. The Digital Forensic Research Lab (DFRLab) at the Atlantic Council reported that the then Attorney General ordered the prosecution of people who broke the ban. DFRLab noted that official statements referred to suspending access, not to criminalising use, and argued that a prosecution would need an existing Act of the National Assembly as its basis.

For remote workers, two practical points follow:

• Your employer's rules and your contract matter more day to day than national VPN law. Breaking a company VPN policy can cost you the job even where the VPN itself is legal.
• If you travel for work, check the destination country's rules. Some countries restrict VPNs heavily, and a company laptop that auto-connects on arrival can cause problems at a border or hotel. Ask your employer before you travel. Our digital nomad visa guides cover the legal side of working from another country.

Keeping a VPN stable on Nigerian power and internet

Most VPN complaints from Nigerian remote workers aren't about security. They're about the tunnel dropping mid-call. A few habits help.

Switching between MiFi, hotspot and fibre

Each time your connection changes (fibre goes down, you switch to the MiFi, the MiFi dies, you tether to your phone), your IP address changes and the VPN has to reconnect. Some clients do this automatically. Others hang until you disconnect and reconnect by hand.

• Learn what a clean reconnect looks like for your client, so you don't spend ten minutes thinking the whole internet is down.
• If you switch connections often, tell IT. They may be able to adjust the client's reconnection behaviour.
• If you tether your laptop to your phone, the NCSC notes that a full-device VPN on the phone can affect tethered traffic. Run the work VPN on the laptop, not the phone, unless IT says otherwise.

For choosing primary and backup connections, see our planned guides on internet options for working remotely in Nigeria and improving your connection for remote work.

Hotel and co-working Wi-Fi with login pages

Wi-Fi networks that make you accept terms or enter a code on a web page are called captive portals. A forced company VPN may block that page, so you can't get online. The NCSC acknowledges this conflict and prefers using the operating system's own captive portal assistant. In practice: connect to the Wi-Fi, complete the login page, then start the VPN. If your forced VPN won't allow that, ask IT for the approved method rather than finding your own workaround.

Power cuts and the inverter

When grid power goes and the router has no backup, your laptop falls back to another connection or drops offline, and the VPN session dies with it. Put your router and modem on the inverter, solar or a UPS (uninterruptible power supply), not just your laptop. A small router-only UPS is often enough to ride out the gap while the generator starts.

Data costs

VPN encryption adds some overhead, and an always-on tunnel carries all your traffic, including large OS updates and cloud backups. If you work on metered mobile data, keep an eye on usage in the first week and schedule big downloads for when you're on unlimited fibre.

A daily VPN routine for remote workers

Use this as a quick checklist:

1. Connect to a network you trust (home fibre, your own MiFi or your phone's hotspot) wherever possible.
2. On a hotel or co-working network, complete the Wi-Fi login page first.
3. Start the company VPN and approve the MFA prompt you started yourself.
4. Check that internal tools load before your first meeting, not during it.
5. If the tunnel drops, reconnect before reopening sensitive files.
6. Install updates when prompted and restart when you finish work if asked.
7. Disconnect from the company VPN when you're done, unless it's set to always on.
8. On personal devices, keep any personal VPN set to your real country, and turn it off before logging into freelance, payment or banking accounts.

Common VPN mistakes to avoid

• Using a VPN to apply for location-restricted jobs. It wastes your time and can get you blacklisted by a recruiter or platform.
• Installing a free VPN on the work laptop. It can break the corporate VPN and break company policy.
• Turning off the company VPN because it's slow. Report the slowness. A disabled VPN can expose data and may show up in security logs.
• Assuming a VPN makes you safe from scams. Fake recruiters don't care whether you use a VPN. See our guide to spotting remote job scams in Nigeria.
• Sharing VPN credentials or approving unknown MFA prompts. Both give a stranger a direct route into your employer's network.
• Ignoring updates. Unpatched VPN software is a known target.
• Letting a personal VPN hop between countries. Rapid location changes look suspicious to banks and platforms.

Frequently asked questions

Do I need a VPN to work remotely from Nigeria?

Only if your employer requires one or you often work on networks you don't trust. Many remote companies run on cloud tools protected by single sign-on and two-factor authentication, with no VPN. If you're given one, use it as instructed. If not, a personal VPN is optional extra protection for public Wi-Fi.

Can I use a VPN to apply for US-only or UK-only remote jobs?

No. A VPN changes how your traffic looks, not your legal location. Location rules usually come from payroll, tax and employment law, so you would be found out at the offer, onboarding or payment stage. Focus on roles that state Nigeria, Africa, EMEA or worldwide eligibility.

Can my employer see what I do on the company VPN?

Yes, to a large extent. Your employer can see when you connected, from which IP address, and often which internal and external sites your traffic reached, depending on how the VPN and the laptop are configured. Treat a company VPN and a company laptop as monitored, and keep personal browsing on your own devices.

Are free VPNs safe for remote work?

Usually not for work data. A free VPN has to make money somehow, and some do it through ads or by collecting usage data. If you need a personal VPN, choose a provider with a clear privacy policy, minimal app permissions, modern encryption and ideally an independent audit, following the FTC's four checks.

Is it legal to use a VPN in Nigeria?

As of October 2026, we found no Nigerian law that criminalises ordinary VPN use. During the 2021 Twitter suspension the then Attorney General threatened prosecution, but analysts noted there was no clear legal basis. Anything illegal you do through a VPN is still illegal, and your employer's VPN policy still applies.

Why does my work VPN keep disconnecting?

Most often because your connection changed: fibre dropped, you switched to a MiFi or hotspot, or the router lost power. Each change gives you a new IP address and forces a reconnect. Put your router on backup power, avoid switching networks mid-call where you can, and report repeated drops to IT with times and the connection you were using.

Should I use a personal VPN with Upwork, Payoneer or my bank app?

Generally, turn it off or set it to your real country. Logins from unexpected foreign locations can trigger verification checks, payment holds or account reviews. Read each platform's own help pages for its VPN policy, and keep your profile location accurate.

Will a VPN protect me from remote job scams?

No. Scams work by persuading you to pay money, share documents or install software, and a VPN doesn't stop any of that. Verify employers, never pay to get a job, and be careful about who you send your passport, NIN or BVN details to.

Key takeaways

• A company VPN gives you access to your employer's systems. A personal VPN protects you on untrusted networks. Don't confuse or combine them on a work laptop.
• Follow your employer's VPN settings. The NCSC advises against split tunnelling and recommends automatic, forced VPNs, so a strict setup is deliberate.
• Keep VPN clients and laptops patched. CISA warns that vulnerable VPNs are actively exploited.
• Choose a personal VPN with the FTC's four checks: research, permissions, encryption and data sharing.
• Never use a VPN to fake your location for jobs, freelance platforms or payment apps. It doesn't change your eligibility and can cost you the job or the account.
• Put your router on backup power and plan for reconnecting when you switch between fibre, MiFi and hotspot.

Next steps

If a VPN is part of a role you're applying for, you're probably looking at technical or support work. Our IT support specialist career guide explains the tools employers expect, and the cybersecurity analyst guide covers the security side. For the legal setup behind a foreign contract, read contractor or employee when a foreign company hires you. When you're ready to apply, browse remote roles open to applicants living in Nigeria. Each listing shows where applicants may live, so you don't need a VPN trick to find jobs you can actually take.

Sources

• FTC provides tips for using VPN apps, US Federal Trade Commission (22 February 2018)
• CISA and NSA release guidance on selecting and hardening VPNs, Cybersecurity and Infrastructure Security Agency (28 September 2021)
• Virtual Private Networks, UK National Cyber Security Centre device security guidance
• Nigerian Twitter users flock to VPNs amid dubious legal threats, DFRLab, Atlantic Council (24 June 2021)