A VPN that keeps your IP and location
Want encrypted DNS and fewer blocked sites without changing your location? What a local VPN does, what it doesn't, and how it differs from a DNS app.
Searches like "VPN that doesn't change location" or "VPN without IP change" sound like a contradiction. Changing your IP is what most people think a VPN is for. But the question makes sense once you look at why people turn a VPN off again: the bank app asks for extra checks, the map shows the wrong city, the streaming app says a VPN was detected, and every search ends in a CAPTCHA. They wanted the protection, not the move.
This article is for that situation. If you are still deciding whether you need any VPN at all, start with Do I need a VPN? If you want the full side-by-side of the two VPN designs, see Local VPN vs remote VPN. Here the angle is narrower: how to keep the benefits that do not depend on moving, and stay exactly where you are. We make GreenTunnel, so keep that bias in mind as you read.
Why keeping your own IP is often what you want
Your IP address is a rough signal of where you are. Many services use it, and most of the time that works in your favour:
- Banking and payment apps. Banks watch for logins from unusual places. A sudden foreign IP, or an address known to belong to a VPN provider, can trigger extra verification or a blocked login. Staying on your normal connection avoids that friction.
- Streaming in your own country. Services license content by region. Netflix's help center, for example, has a page for the message "You seem to be using a VPN or proxy" and asks users to turn such services off. Keeping your real IP means the catalogue you pay for just works.
- Local search and maps. Google's help pages say it can estimate your general area from your IP address when you search. Moving your IP to another country moves your weather, shops and news with it.
- Fewer CAPTCHAs. Google's "unusual traffic" help page notes that the message can appear when other people on the same network, including VPN networks, send automated traffic. A shared VPN exit is exactly that kind of network.
- Work tools. Company sign-in systems and admin consoles often restrict logins by country or by known address ranges. A remote VPN can lock you out or raise a security alert.
What a local VPN does
On Android and iOS, "VPN" is the name of a system slot that lets one app see the device's network traffic. A remote VPN uses that slot to forward everything to a company's server. A local VPN like GreenTunnel uses it to handle traffic on the device itself, and then lets connections go straight to the website over your own Wi-Fi or mobile data. There is no relay server in between that we run.
What that gives you while your IP and location stay put:
- Encrypted DNS for every app. Name lookups go over DoH or DoT to Cloudflare, Google or Quad9, chosen under Settings → DNS, or Automatic to try them in turn. Your ISP can no longer read or fake those answers. Details in DoH and DoT explained.
- Help against name-based blocking. Some networks read the site name in the first packet of an HTTPS connection and cut it. GreenTunnel reshapes that first packet so simple filters miss the name. See how splitting works.
- A view of what your apps connect to. Requester lists connections per app, on your device.
- Your block list. Domains you add yourself are blocked across the whole device.
- A check before you guess. Inspect URL tells you whether a site is blocked by DNS, by name filtering or by IP address.
What a local VPN does not do
This part matters more than the list above, so we will be blunt:
- It does not hide your IP address. Websites see the same address as without the app.
- It is not anonymity. Your ISP still sees which IP addresses you connect to and how much data you use. It just cannot read or rewrite your DNS lookups.
- It does not change your country. Services that restrict content by region will treat you as before. That is the point of this article, but it also means a local VPN is the wrong tool if you want another region.
- It cannot beat IP blocking, shutdowns or allowlists. If a network drops traffic to a server's address, reshaping packets on your phone does not help.
- It is not public Wi-Fi armour. HTTPS already protects page content on any network. A local VPN adds encrypted DNS on top, but traffic still leaves through that Wi-Fi.
Not the same as a DNS changer or Private DNS
Two tools often come up in the same searches, and they do part of the job.
DNS changer apps
Many DNS changer apps on Android also use the VPN slot, but only to redirect DNS lookups to another server. That fixes DNS-based blocks, and some of them encrypt the lookups too. They usually stop there. A site that is blocked by reading its name in the HTTPS handshake will still fail, because the DNS answer was never the problem.
Android's Private DNS
Android 9 and later has a built-in Private DNS setting that encrypts lookups with DNS over TLS. It needs no app at all, which is a real advantage. It does nothing about name filtering in the HTTPS handshake, and DNS over TLS uses a dedicated port that some networks block. If you set a Private DNS hostname while GreenTunnel is on, Android can send lookups to that provider itself instead of through GreenTunnel. We compare the two in detail in Private DNS on Android vs a DoH app, and the conflict is covered in Site still blocked?
| Private DNS | DNS changer app | Local VPN (GreenTunnel) | Remote VPN | |
|---|---|---|---|---|
| Changes your IP and location | No | No | No | Yes |
| Encrypted DNS | Yes (DoT) | Depends on the app | Yes (DoH, DoT) | Usually, through the provider |
| Helps against name filtering | No | Usually no | Often, not always | Yes, unless the VPN itself is blocked |
| Helps against IP blocking | No | No | No | Yes |
| A third party sees your destinations | DNS provider sees names | DNS provider sees names | DNS provider sees names | VPN company sees everything |
When you do want another IP: your own server
Sometimes you genuinely need traffic to leave from somewhere else. Your company requires its proxy, or you rent a small server to reach a site that is blocked by IP address on your network. GreenTunnel's Smart Routing (Premium) covers that with Proxy Route and Tunnel Link. The important detail for this article: your IP changes only when you pick a proxy, Shadowsocks or WireGuard server of your own. GreenTunnel provides no servers. With Direct selected, nothing about your address changes.
You can also keep most traffic at home and send just a few sites through your server with routing rules. Do not use your own server to get around a service's region rules or terms of use.
Who this approach suits, and who it does not
- Good fit: you want encrypted DNS, you hit DNS or name-based blocks on your ISP or Wi-Fi, and you want your bank, maps and streaming apps to keep working as normal.
- Poor fit: you need to hide your IP from websites, hide your activity from your ISP, or appear in another country. A remote VPN, or a server of your own, is the right tool there. If your safety depends on anonymity, use tools built for that purpose.
GreenTunnel is free on Android and iPhone, with optional Premium for Smart Routing. Learn more on the home page.
FAQ
Is there a VPN that does not change my location?
Yes. A local VPN works on your device and sends traffic out over your own connection, so websites see your normal IP and location. It encrypts DNS and can help with some blocks, but it does not hide your IP.
Will my banking app still work with a local VPN on?
In most cases the bank sees the same IP as without it, so location checks behave as usual. Some apps react to any active VPN, whatever kind it is. If yours does, no VPN setting can hide that, so turn GreenTunnel off while you use that app.
Does a local VPN make me anonymous?
No. Websites see your real IP and your ISP still sees which addresses you connect to. A local VPN mainly protects DNS lookups and helps against name-based filtering.
Is this the same as Android's Private DNS?
No. Private DNS only encrypts DNS lookups. A local VPN also encrypts DNS, and adds help against name filtering, per-app connection lists and your own block list.
Sources
- Netflix Help Center, "You seem to be using a VPN or proxy", as read in November 2026.
- Google Search Help, Understand and manage your location when you search on Google (IP address as a location signal), as read in November 2026.
- Google Search Help, "Our systems have detected unusual traffic" (mentions VPN networks and reCAPTCHA), as read in November 2026.
- Android Developers Blog, DNS over TLS support in Android P (Private DNS).
- IETF, RFC 8484: DNS Queries over HTTPS.
