VPNs are a tool for everyone. Why? When you switch on a VPN, it sends your web traffic through an encrypted tunnel to a server controlled by the VPN company. From there, your traffic exits onto the web as normal. If you make sure to only connect to websites secured with HTTPS, your data will continue to be encrypted, even after leaving the VPN. This sounds simple, and maybe superfluous, but it can profoundly affect your privacy.
Think of it like this: If your car pulls out of your driveway, someone can follow you and see where you're going, how long you're at your destination, and when you come back. They might even be able to peek inside your car and learn more about you. With a VPN, it's like driving from your house into an underground tunnel, into a closed parking garage, switching to a different car, and driving out. No one who was following you can know where you went.
With your VPN on, no one snooping around your network can see what you're up to. This is true even if the snooper controls the network. Public Wi-Fi networks, which are ubiquitous and convenient, are unfortunately also extremely convenient for attackers. How do you know, for example, that "starbucks_wifi-real" is actually the Wi-Fi network for the coffee shop? In fact, a popular security researcher prank is to create a network with the same name as a free, popular service and see how many devices will automatically connect.
Even if you're inclined to trust your fellow humans, you might not want to trust your internet service provider (ISP). In the US, your ISP has enormous insight into your online activities. To make matters worse, Congress has decided your ISP is allowed to sell your anonymized browsing history. Considering you are already paying for the service, selling your data just seems egregious. A VPN prevents even your ISP from keeping tabs on you.
The Best VPN Deals This Week*
*Deals are selected by our commerce team
- NordVPN (Opens in a new window) — $78.96 for 2-Year Plan + Free Anti-Malware Protection (List Price $198.96)
- Surfshark VPN (Opens in a new window) — $59.76 for 2-Year Plan + 2-Months Free (List Price $336.70)
- IPVanish VPN (Opens in a new window) — $47.89 for 1-Year Plan (List Price $89.99)
- Private Internet Access VPN (Opens in a new window) — $56.94 for 2-Year Plan + 2-Months Free (List Price $311.74)
- ExpressVPN (Opens in a new window) — $99.95 for 1-Year Plan + 3-Months Free (List Price $155.40)
- Norton Secure VPN (Opens in a new window) — $39.99 Per Year for 5-Devices (List Price $79.99)
Another VPN benefit is that your true IP address is hidden behind the IP address of the VPN server. This makes it harder for advertisers and others to track your movements across the web. Even a dedicated observer would have a hard time telling whose traffic is whose, because your data is mixed in with everyone else using the same VPN server.
Note that VPNs are not the same thing as proxies, with which they are sometimes confused. To learn more, you can read our explainer, VPNs vs. Proxies: What's the Difference?
What Are the Limitations of VPNs?
VPN services, while tremendously helpful, don't protect against every threat. Using a VPN can't help if you unwisely download ransomware or if you are tricked into giving up your data to a phishing attack. We strongly recommend readers use local antivirus software, enable multi-factor authentication wherever available, and use a password manager to create and store unique, complex passwords for each site and service you use.
There are also limitations to how anonymous you can be with a VPN. Advertisers have many tactics at their disposal to gather data on you and track your movements. This ranges from online trackers to browser fingerprinting. We recommend taking advantage of anti-tracking features in your browser, and installing dedicated tracker blockers like the EFF's Privacy Badger(Opens in a new window).
Many VPN services also provide their own DNS resolution system. Think of DNS as a phone book that turns a text-based URL like "pcmag.com" into a numeric IP address computers can understand. Savvy snoops can monitor DNS requests and track your movements online. Greedy attackers can also use DNS poisoning to direct you to bogus phishing pages designed to steal your data. When you use a VPN's DNS system, it's another layer of protection. Secure DNS is improving privacy already, but a VPN goes a step beyond.
There's some debate among security experts about the efficacy of VPNs. Since most sites now support secure HTTPS connections, much of your online experience is already encrypted. Secure DNS products like Cloudflare 1.1.1.1 exist precisely because some feel VPNs are overkill. Still, a VPN covers the information not already protected by HTTPS, places an important buffer between you and the people controlling internet infrastructure, and makes online tracking more difficult.
VPNs are useful for improving individual privacy, but there are also people for whom a VPN is essential for personal and professional safety. Some journalists and political activists rely on VPN services to circumvent government censorship and safely communicate with the outside world. Check the local laws before using a VPN in China, Russia, or any country with repressive internet policies. Another place people might want to use a VPN is in a war zone such as Ukraine, where hiding your location might well be a matter of life and death.
For comprehensive anonymization of your traffic, you'll want to access the free Tor network. While a VPN tunnels your web traffic to a VPN server, Tor bounces around your traffic through several volunteer nodes which makes it much harder to track. Using Tor also grants access to hidden Dark Web sites, which a VPN simply cannot do. That said, some services, such as NordVPN and ProtonVPN, offer Tor access on specific servers. Note that Tor will slow down your connection even more than a VPN.
A determined adversary will almost always breach your defenses in one way or another. What a VPN does is protect you against mass data collection and the casual criminal vacuuming up user data for later use.
How to Choose a VPN
The VPN market has exploded in the past few years, growing from a niche industry to an all-out melee. Many providers are capitalizing on the general population's growing concerns about surveillance and cybercrime, which means it's getting hard to tell when a company is providing a useful service and when it's selling snake oil. In fact, there have even been fake VPNs(Opens in a new window) popping up, so be careful.
When looking for a VPN, don't just focus on speed, since that's the factor you and the VPN company have the least control over. Since nearly all VPN companies offer some mixture of the same technologies, consider value instead. How can you get the most for the least? Look for extra features like split tunneling, multi-hop connections, and so on. You may not need these all the time, but they're useful when you do.
Nearly every VPN service provides its own app with a full graphical user interface for managing connections and settings, and we recommend using it. You might dismiss such things as mere chrome, prefering to manage your VPN connections manually. This works, but doing so is tedious, requires manual updating, and won't give you access to the additional privacy tools many VPNs provide. When looking at a VPN, decide whether you can stand looking at it.
Evaluating a VPNs trustworthiness is a tricky thing. It's not made any easier by the VPN industry itself being a cesspool of backstabbing and phony claims. We've found that, despite some missteps, most major VPN players aren't bad actors, but there's always room for improvement. The best VPN services will be up front and honest about their strengths and weaknesses, have a readable privacy policy, and either release third-party audits, a transparency report, or both.
The best way to know if a VPN will work for you is to try it out in your own home. See if you can access all the sites and services you need. Find out if the interface is usable, and if the speeds in your area are acceptable. Some VPN services provide a free trial, so take advantage of it. Make sure you are happy with what you signed up for, and take advantage of money-back guarantees if you're not.
This is why we also recommend starting with a short-term subscription—a week or a month—to really make sure you are happy. Yes, you may get a discount by signing up for a year, but that's more money at stake should you decide the service doesn't meet your performance needs.
Sometimes, a VPN will be tacked on to another service as a sweetener. These are tricky to compare since they often have a completely different set of features than the average VPN. The VPN included with Google One lacks many of the tools we expect with a VPN, but also comes with 2TB of cloud storage—unmatched by any VPN service we've seen. In cases like this it's best to consider what you want to use a VPN for and whether a tacked-on VPN meets those needs.
Which Is the Best Free VPN?
Not all VPN services require you to pay. There are, in fact, many excellent free VPNs. But all the free VPNs we've tested have limitations. Some limit you to just a few simultaneous connections or devices on an account. Others restrict your data or limit you to a handful of servers. Still others do all of the above.
Finding the best free VPN is an exercise in balancing those restrictions. TunnelBear, for example, lets you use any server on its network but limits you to 500MB-1GB per month. Hotspot Shield also places no limits on the number of devices, but it restricts you to 500MB per day and only US-based servers. Kaspersky Secure Connection doesn't limit your devices but doesn't let you choose a VPN server—the app does it automatically.
Editors' Choice winner ProtonVPN has the unique distinction of placing no data restrictions on free users. You can browse as much as you want, as long as you want. You will be limited to just one device on the service at a time and can only choose between three server locations, but the unlimited data makes up for all that. It doesn't hurt that ProtonVPN, from the same people that bring you super-secure ProtonMail email, is very concerned about security and customer privacy.
As far as what our readers are willing to spend, that's a different story. A poll of PCMag readers found that 65 percent of respondents expect VPNs to be free, whereas only 10 percent expect them to cost $10 or more. For those of you who are at least willing to put down some cash, we also have a roundup of the best cheap VPNs.
Can You Trust Your VPN?
If you're using a service to route all your internet traffic through its servers, you have to be able to trust that service. It's easier to trust companies that have been around longer, simply because their reputation is likely to be known. The trouble is, the VPN industry is very young, and some VPN companies have been playing dirty. In this environment, figuring out who to trust is very difficult.
At PCMag, we give special attention to the privacy practices of VPN companies and not just the technology they provide. In our testing, we read through the privacy policies and discuss company practices with VPN company representatives. We look for a commitment to protecting user information, and practices that gather and retain as little user information as possible.
As part of our research, we also make sure to find out where the company is based and under what legal framework it operates. Some countries don't have data-retention laws, making it easier to keep a promise of "We don't keep any logs." It's also useful to know under what circumstances a VPN company will hand over information to law enforcement and what information it would have to provide if were to happen.
The best VPN services have a privacy policy clearly spelling out what the service does, what information it collects, and what it does to protect said information. Some companies explain that they collect some information but don't inform you about how they intend to use that information. Others are more transparent.
It emerged in late 2019 that NordVPN, TorGuard, and VikingVPN servers had been breached the previous year. No user data appears to have been compromised in the attacks. However, NordVPN acknowledged its TLS keys had been exposed, but TorGuard said this was not the case for its keys. This was a comparably small incident—affecting just one of NordVPN's servers, for example—but it has served as a wake-up call to the industry and customers. Since then, NordVPN and much of the VPN industry have made significant efforts to improve privacy practices and harden their infrastructure.
Can I Use a VPN for Streaming and Banking?
The web and internet-connected devices are generally not designed for VPNs, which creates some unfortunate interactions. Some security-conscious companies like banks may be confused by your VPN. If your bank sees you logging in from what appears to be another US state or even another country, it can raise red flags. Expect to see captchas and more frequent multi-factor requests when your VPN is on.
Netflix and other streaming services often block access by VPN, since a VPN can be used to access region-locked content. Many companies, and especially Netflix, aggressively adjust their tactics to block VPNs. That means a service that works today may be blocked tomorrow, and vice versa. That could be an issue for many readers, because while the preponderance of you appear to use VPNs to protect yourselves, nearly a quarter use VPNs primarily for streaming.
In general, we found that VPNs have improved their ability to access far-flung streaming content. In previous years, it was extremely unusual to find a VPN that could stream Netflix content from outside the US. Keep in mind that accessing region-locked streaming content can breach terms of service, and PCMag cannot supply legal advice for such situations.
Lastly, because a VPN encrypts your data as it's transmitted from your device, it's often impossible to access local devices on the same network. A great example is Chromecast. If you've got a VPN running, you won't be able to use Chromecast. You may as well be on a different Wi-Fi network. Some VPNs allow for split-tunneling, where you can designate applications and sites that can travel outside the VPN connection. Others include an option to make traffic visible to LAN devices.
VPNs by the Numbers
Some important things to look for when shopping for a VPN include the number of simultaneous connections the VPN service allows, the number of servers available, and the number of locations in which the company has servers.
Most VPN services allow you to connect up to five devices with a single account. Any service offering fewer connections is outside the mainstream. Keep in mind you'll need to connect every device you wish to protect to the VPN service, so just two or three licenses will barely be enough for even just one person.
This paradigm may be changing, however. Many services now offer far more than five simultaneous connections. Some have even done away with this restriction entirely. Avira Phantom VPN, Encrypt.me VPN, Ghostery Midnight, IPVanish VPN, Editors' Choice winner Surfshark VPN, and Windscribe VPN place no limit on the number of simultaneous connections.
Of course, there are more than just phones and computers in a home. Game systems, tablets (including Chromebooks), and smart home devices such as light bulbs and fridges all need to connect to the internet. Many of these things can't run VPN software on their own. Some VPN companies provide instructions on how to configure a router to use a VPN, which would protect all the devices on the network. There's some debate on whether this will cause even more unforeseen complications. We don't recommend this solution to anyone other than an experienced and patient tinkerer.
The distribution of VPN servers is a key consideration. The more server locations a VPN has to offer, the more options you have to spoof your location! More importantly, having numerous servers in diverse locales means that, no matter where you travel, you'll be able to find a nearby VPN server. The closer the VPN server, the better the speed and reliability of the connection it can offer you. Remember, you don't need to connect to a far-flung VPN server to gain security benefits. Depending on where you live, a server down the street is as safe as one across the globe.
We also look at how many virtual servers and virtual locations VPN companies use. A virtual server is just what it sounds like—a software-defined server running on server hardware that might have several virtual servers onboard. A virtual location is a server configured to appear somewhere other than where it is physically located. While neither is inherently problematic, it's a bit worrisome to choose one location and discover you're connected somewhere else entirely. Some VPN companies take a smart view to virtual servers, using them to provide VPN support for regions where it might be too risky to physically house a server. When VPNs use these technologies, we prefer they be transparent about it.
What's the Fastest VPN?
When a VPN is active, your web traffic is taking a more circuitous route than usual, often resulting in sluggish download and upload speeds as well as increased latency. The good news is, using a VPN probably isn't going to remind you of the dial-up days of yore.
Most services provide perfectly adequate internet speed when in use, and they can even handle streaming HD video. However, 4K video and other data-intensive tasks like gaming over a VPN are another story. Speaking of gaming, it's important to understand how a VPN can help protect gamers. It won't shut down the trolls, and it might slow you down just enough to get you fragged.
When we test VPNs, we use the Ookla speed test(Opens in a new window) tool. This test provides metrics for latency, download speeds, and upload speeds. Any one of these can be an important measurement depending on your needs, but we tend to view the download speed as the most important. After all, we live in an age of digital consumption.
(Editors' Note: Note that Ookla is owned by PCMag's publisher, Ziff Davis.)
To evaluate VPNs, we first run several speed tests without the VPN. Then, we compare those results to speed tests taken with the VPN active and find a percent change. Our speed tests stress comparison and reproducibility. That means we stand by our work, but your individual results may vary. After all, perhaps you live on top of a VPN server, or just happen to have a super-high bandwidth connection. Please read our feature, conveniently named How We Test VPNs, for the full details.
In the past, we tested all our products back-to-back. Now, we test products throughout the year and present the data as soon as we have it. This change was also necessitated by the limited access we have to the PCMag Labs due to the ongoing COVID-19 pandemic. For an update that talks about the how the pandemic has affected our tests, you can read COVID-19 Upended How We Test VPN Speeds. The chart below shows our most recent speed test results, and we have an entire piece dedicated just to the fastest VPNs we've tested.
Get Yourself a VPN
Using a VPN is an easy way to protect your privacy online, and it can be a tool for circumventing unwanted internet restrictions, too. None of the services list here are perfect, and there will surely be times when it won't make sense to use a VPN. But it's a valuable tool to have in your personal security toolbox.
Click through the review links of the best VPN services below for detailed analysis and performance results, and feel free to weigh in on the comments section below them. Once you've picked, be sure to read our feature on how to set up and use a VPN to get the most from your chosen service.
(Editors’ Note: While they may not appear in this story, IPVanish, and StrongVPN are owned by Ziff Davis, PCMag's parent company.)
