A virtual private network (VPN) is like a protective tunnel you can use to pass through a public network, protecting your data from outside eyes. Whether you're worried about hiding your browsing activity from your internet service provider so it doesn't sell your data to advertisers, or you want to stay safe on a public Wi-Fi hotspot to keep nearby digital snoops from capturing your passwords, a VPN can help protect you.
However, while a VPN will keep you safe at your local coffee shop, it comes with a cost. Using a VPN means your VPN provider will know everything about your browsing habits. This makes VPN providers a target for hackers. Be sure you even need one before you read on.
Picking the right VPN service is serious business. Most VPN providers say they keep no logs of their users' activity, but this is rarely verified. You're stuck taking companies at their word. For this reason, we've limited our testing to VPN providers independently audited by security firms and have published the results. We've tested dozens of VPNs; these are the best five we've tried.
Updated April 2024: We've removed the Google One VPN and added notes about its shutdown.
Special offer for Gear readers: Get WIRED for just $5 ($25 off). This includes unlimited access to WIRED.com, full Gear coverage, and subscriber-only newsletters. Subscriptions help fund the work we do every day.
Best for Most People
After years of testing VPNs for WIRED, Mullvad is the last provider I haven't lost faith in. I know that's not a ringing endorsement, but the world of VPNs is full of shady companies, so trusting any of them is a leap. Mullvad is the only one left.
Part of what I like about Mullvad is its down-to-earth approach that doesn't overhype with its marketing and helps users take additional steps to protect their privacy. For example, the company has an entire page showing how to disable WebRTC in your web browser. As long as WebRTC is enabled (and it is by default in most browsers), websites can view your actual IP address even when you use a VPN.
Another thing I like is Mullvad's system for accepting cash payments. If you prefer to remain anonymous, you can generate a random account number, write that number down on a slip of paper, and mail it, along with cash, to Sweden. In theory, no one will be able to connect you to that account. (The truly paranoid will don a tinfoil hat, wear gloves, print from a public printer, and mail from a remote mailbox.) I have not tested the cash option, but I did recently extend my Mullvad subscription using Bitcoin, and it worked without a hitch.
Mullvad offers apps for every major platform, as well as routers. The applications are all open source, and you can check the code on GitHub. The service has been independently audited as well. Advanced users can download configuration files and use them directly with OpenVPN or Wireguard.
In my testing, speeds were very good. I never encountered a situation where I couldn't get a fast connection. Over the years Mullvad remains the VPN I rely on day-to-day.
Mullvad VPN costs 5 euros (around $5) per month, cash or charge.
Best Free VPN
Proton VPN is part of a suite of privacy tools from Proton, which is most famous for its encrypted email service, ProtonMail. The company is based in Switzerland, which has no data retention laws, so Proton VPN can have a no-logs policy. It has been independently audited and maintains a warrant canary page. All the usual features of a good VPN are here, including support for multi-hop connections, a kill switch in the app, split tunneling support, pretty good geo evasion for making Netflix work, and support for torrents. There's also support for ad-blocking, custom DNS, and high-speed streaming.
One thing Proton VPN offers that others do not is a free plan that gets you full access to all the regular plan's features. However, it is limited to a single device, and there are only three server locations (Japan, Netherlands, and the US). If your needs are limited and you want to keep costs down, this is a good option.
Proton's pricing structure can be confusing since you can combine it with other services to lower the rates. For purposes of testing, I used a one-year Proton VPN Plus plan that's $6 per month. If you use other Proton services, Proton Unlimited pricing is a better deal ($10 per month gets you access to all five Proton services).
Proton's VPN app is open source and available for macOS, Linux, Windows, Android, and iOS. With the Plus plan, 10 devices can connect simultaneously. Proton VPN uses a mix of IKEv2, OpenVPN, and WireGuard for connections. By default, the app chooses for you, but you can make a selection in the settings. I also like the Permanent Kill Switch, which prevents your device from reconnecting to the internet without a VPN even after a reboot.
In my testing over the past few months, speeds on Proton VPN vary considerably by server and time of day. Overall, Proton VPN is very fast, dropping my speed by only around 7 to 8 percent versus unprotected speed. I also did not detect any DNS leaks through any of the servers I tried.
Best for Circumventing Geographic Restrictions
Surfshark wouldn't be my top pick if my life depended on my VPN, but for most of us, that's not the case. If you want a way to get around some geographical restrictions on content (aka access Netflix) and protect your traffic while using an open Wi-Fi hotspot, Surfshark is a good choice. It's secure, and it provides great value for the money if you pay for two years upfront.
In my testing over the years, Surfshark has consistently had some of the best speeds of any VPN I've used. Yes, it is slower than not using a VPN, but I have never had any problem streaming HD content through Surfshark. It's fast enough that you won't notice any speed degradation.
Surfshark offers a kill switch that automatically stops your traffic if your VPN connection fails, and it supports multi-hop VPN connects, which means your traffic goes from your machine to a VPN server to another VPN server, and then to the destination server. This provides an extra layer of protection should the VPN itself be compromised, though there is a corresponding speed hit when using a multi-hop connection. The company also recently added support for manual Wireguard configuration. Most people will be fine sticking with Surfshark's apps, but if you're trying to connect your entire network to Surfshark directly through a router, the manual configuration will be welcome news.
I have not had a chance to test it much yet, but Surfshark recently added support for dedicated IP addresses. Given that shared IPs are how some websites block VPNs, a dedicated IP could be handy. Surfshark has six dedicated IP locations, but the number of IPs is limited. A dedicated IP will set you back another $3.75 per month and only works with Surfshark's apps. I have not had a chance to test this enough to say whether it's worth it or not.
Surfshark is based in the British Virgin Islands, which, although technically a territory of Great Britain, is generally considered a safe haven and has no data-retention laws. What I don't like is that Surfshark is legally untested. The company has a zero-log policy, and you can (and should) opt out of the diagnostic crash reports in the app. The company's browser extensions have undergone an independent security audit that didn't turn up any significant problems, and in January 2023, the auditing firm Deloitte verified Surfshark's no-logs statement.
Surfshark recently merged with NordVPN. So far we have not noticed any changes for its customers, but we will be keeping an eye on it going forward.
Best for VPN Newcomers
Choosing a VPN can be overwhelming. If you're tired of security mumbo jumbo and lock icons, TunnelBear might be the VPN for you. Its cute bear animations help demystify what VPNs do, how they work, and what they can offer you. Sometimes the easiest way to make technology more approachable is to put a friendly face on it.
Don't worry though, TunnelBear isn't all cute bear animations. It has the same security features as other VPN providers, like a no-logging policy and a clear privacy policy, and it's been independently audited.
In my testing, speeds with TunnelBear were competitive with the other options listed here. One of my favorite parts of TunnelBear is the free trial option, which makes it easy to test-drive it and see what your speeds are like without committing. TunnelBear has fewer geographic server locations than some of our other options, but unless you're traveling abroad or need to get around a specific geo-restriction, that shouldn't matter for most users.
TunnelBear costs $3.33 per month if you buy one year upfront.
Best for High-Risk Use Cases
If you're in a situation where personal security is of the utmost importance, do not rely on a VPN. Use Tor (ideally through Tails) instead. Using the Tor network accomplishes some of the same things as a VPN, but it's different. Tor provides anonymity, meaning no one can figure out who you are, but not necessarily privacy. People still might be able to see what you're doing, they won't know it's you doing it. (VPNs provide privacy because no one can see what you're doing while you're going out of a VPN tunnel, but you don't have anonymity because the VPN provider knows who you are.)
Tor is simple to set up. All you need to do is download the Tor browser and it will connect you to the web. Once connected to the Tor network, you can browse the web normally. Except everything will be slower. When using Tor, your request for a website hops around the Tor network, bouncing between servers, before emerging and connecting to the site you want to visit. This makes Tor slow, sometimes incredibly slow, but that's necessary to protect your anonymity. And yes, you can combine a VPN with Tor, though that's somewhat beyond the scope of this guide.
Other VPNs We've Tried
- NordVPN: In the past, we have recommended NordVPN, but more recent experiences of WIRED staffers and readers who've emailed me have revealed serious lapses in NordVPN's customer service and VPN apps. Based on these experiences, we've dropped our recommendation. Security-wise I have no reason to doubt NordVPN, but customer service can be a hassle.
- ExpressVPN: We also used to recommend ExpressVPN, but we no longer do because it has a new parent company and we haven't been able to verify anything about it.
- Google One VPN: Google One VPN was part of Google One but is slated to be shut down. We never recommended it—let us not forget that Google has repeatedly been caught collecting data that it said it wasn't collecting, which is not what you want to hear from a VPN provider. Nor do we recommend the VPN that comes with Google Fi or the one available in Pixel phones. If you aren't paying for your VPN, two things will happen: It will either shut down, or you will be the thing being sold. Most of the VPNs we recommend are about $5 per month; real privacy is worth $5 a month.
There are a lot of VPNs out there, but most are not worth your money. If all you want to do is circumvent some Netflix geographic restrictions, then just about any of them will work (we still suggest sticking with our recommended options, but if you can't be stopped, then carry on). For anything more serious, like actually protecting your privacy and data, learn to use Tor. Yes, it's a little technical, but trust me, it's worth learning how to do if your life, family, and job are at stake.
How We Test VPNs
VPN providers like to claim they keep no logs, which means they know nothing about what you do using their services. There are a variety of reasons to be skeptical about this claim, namely because they have to have a user ID of some kind tied to a payment method, which means the potential exists to link your credit card number (and thus your identity) to your browsing activity.
For that reason, I mainly limited my testing to providers subpoenaed for user data in the US or Europe that failed to produce the logs or have at least undergone a third-party security audit. While these criteria can't guarantee the providers aren't saving log data, this method gives us a starting point for filtering through the hundreds of VPN providers. Unfortunately, other factors also come into play. VPNs that once made our list—like ExpressVPN—are sometimes sold to less reputable companies.
Using these criteria, I narrowed the field to the most popular, reputable VPN providers and began testing them over several networks (4G, 5G, cable, FiOS, and plenty of painfully slow coffee shop networks) over the years. To compare speeds consistently, before each update I run through each of our picks again, one after the other testing over a Starlink connection via a laptop, and a 4G Verizon connection on mobile. I also considered available payment methods, how often connections dropped, and any slowdowns I encountered. Lastly, I've tested DNS leaks using both BrowserLeaks and IPLeak.
All that gives me a baseline on which to evaluate the speed and security, but the results are still unique to that moment. These tests are a snapshot in time and can be affected by all sorts of variables ranging from your web browser to your ISP. As noted above, while we believe the recommended VPNs above are secure, fast, and of good value, in situations where sensitive data is involved, please use Tor.
Are There Any Good Free VPNs?
As noted above, ProtonVPN has a free version. It's limited to a single device and there are only three servers to connect to which means it can be slow. There are no logs, no ads, and no other limits. In my testing, it was slower than the paid account, but it does work.
Other than that, it's worth keeping in mind the adage, “If you're not paying for it, you are the product.” Do not trust a VPN that isn't taking your money (and don't trust many that are either). The good news is that all the picks above offer free trials, which allow you to evaluate how well each VPN will work in your unique situation and for your needs.
And remember that there is a way to browse more securely without spending a dime: use the Tor network. Do I sound like a broken record yet? Good. If you're short on cash, use Tor.
What Are the Limitations of VPNs and Do You Even Need One?
It's important to understand not just what a VPN can do, but also what it can't do. As noted above, VPNs act like a protective tunnel. A VPN shields you from people trying to snoop on your traffic while it's in transit between your computer and the website you're browsing or the service you're using.
Public networks that anyone can join—even if they have to use a password to connect—are easy hunting grounds for attackers who want to see your network data. If your data is being sent unencrypted—like if the website you're connecting to doesn't use the secure HTTPS method—the amount of information an attacker can gather from you can be disastrous. Web browsers used to show a green lock icon at the top of your screen next to the web address, but that's going away. Instead, browsers will warn you when a page isn't secure. These days, most websites connect using HTTPS, so you're probably fine most of the time, but on school, library, and small business websites, this may not always be the case. Unless you're using a VPN, which hides your activity, even on unencrypted websites. Just connecting to a VPN isn't enough. Be sure to check out our guide to using a VPN to make sure you have everything set up correctly.
A VPN also changes your IP address, which adds a layer of protection. By giving you a different IP address, a VPN can make it appear as though you're in a different physical location. So even if you're sitting in California, the website you're accessing will think you're in Canada, Hungary, Uruguay, or Thailand. Unfortunately, this method of obscuring your location is not airtight. Technology built into web browsers known as WebRTC can leak your true IP address even when you're using a VPN. If this is a concern, disable WebRTC in your browser before connecting to a VPN. Mullvad has instructions on how to disable WebRTC in most browsers.
It's debatable how much masking your IP address helps protect your privacy in the first place. Your IP address is only one of many, many bits of data websites collect about you. If privacy is your concern, you're better off using web browsers (and extensions) that offer additional tools to protect your privacy. Mozilla Firefox has several of these tools available. Or if you want to get serious about it, use the ultra-private Tor browser as noted above.
To add to the confusion around VPNs, providers—even some I've recommended here, unfortunately—often engage in misleading marketing. Nearly every VPN service website I visited had some kind of red banner claiming I was “not protected,” even when I was using a VPN at the time. The problem is that I wasn't using their VPN. More honest VPN providers, like Mullvad, tell you what's happening: “You're not protected by Mullvad.” Kudos to Mullvad for not using fear to sell subscriptions.
Either way, the important thing to remember is that using a VPN does not make you anonymous. While VPNs may not be able to do much to protect your privacy, they are an essential tool when it comes to protecting you from snoops trying to gather your unencrypted data sent over insecure networks.
