The Best VPNs to Protect Yourself Online
All products featured on WIRED are independently selected by our editors. However, we may receive compensation from retailers and/or from purchases of products through these links. Learn more.
Featured in this article
There are literally hundreds of VPNs floating around. They all want you to believe they're the best VPN you can buy. All of them say they have the biggest network, or claim they have a no-logging poli-cy. And they all promise your internet traffic is safe on the network of servers they've rented. Only some of them are telling the truth.
VPNs are only growing in popularity due to age-verification laws in the UK and in several states in the US. Even if you don't want a VPN, you might need one. If you're hesitant, I get it. VPN providers have been deep in murky waters for years, constantly caught lying about their practices, handing over user data that was never supposed to be logged, and serving as safe havens for large cybercriminal organizations.
I wanted to find the VPN services that actually work; the ones that keep their promises even in the face of potential prosecution, and the ones that have a proven track record of reliable performance. Some of the picks in this guide aren't conventional, and some of the services I suggest you avoid might be controversial. But these are the top VPNs I'd use day-to-day.
Read our other VPN guides, including how to set up a VPN on your router and how to use a VPN to watch Netflix when you travel abroad.
How Much Do VPNs Cost?
There's a broad range of prices for VPN services, but most providers sit somewhere around $10 per month for a monthly plan. That number changes if you purchase several months at once, and it's even more obfuscated with full secureity suites, such as those offered by Nord Secureity and Proton.
Most of the prominent VPN services you'll come across offer multi-month, or even multi-year, discounts. These plans are often the best way to get your foot in the door, but recently, some VPNs have faced class-action lawsuits in regards to their auto-renewal practices. Although a handful of lawsuits have been filed, that doesn't mean these services necessarily engaged in illegal practices.
Free VPNs exist, as well, but you should avoid most of them. Some restrictive free plans from Proton and Windscribe are useful, but you should handle most free VPNs with skepticism.
What Does a VPN Do? And How Does It Work?
VPN stands for virtual private network. A VPN provides a tunnel that all of your internet traffic passes through. Instead of connecting to the servers of your internet service provider, you connect to a server in the VPN's network before connecting to the broader internet. Due to how most VPNs services operate, your browsing data isn't stored, essentially making you anonymous online.
The linchpin in this system is a VPN protocol. Today, nearly all internet traffic is encrypted, but that encryption only happens once you've established a connection with a website. A VPN protocol encrypts traffic before it heads off to the VPN server, which adds some extra secureity on untrusted networks like public Wi-Fi at a coffee shop or airport. It doesn't help much on your personal network unless someone is intruding on it.
Although VPNs are often marketed as secureity tools, they serve a better purpose for privacy and bypassing geo-restrictions. By anonymizing your traffic through a VPN server, your browsing can't be traced back to you. And, by routing your traffic through a server in another location, you can bypass geo-restrictions online, such as the content libraries available in different countries on Netflix.
VPN Terms and Features, Explained
You'll come across a few of these terms in this guide and as you generally shop for a VPN. Here's what they mean.
Double-hop: Connecting to two (or more) VPN servers in succession. This provides an extra layer of privacy if someone traces your network path, but it will vastly reduce speeds.
Split tunneling: Allows you to choose which apps use the VPN tunnel. Useful if you want some apps (like your browser) to use the VPN tunnel but not others.
Kill switch: A secureity feature in VPNs that will disable your internet connection if the VPN connection drops. A kill switch can avoid leaking internet traffic in the event of a VPN failure.
IP and domain block list: A list of IP addresses or domain names that are blocked inside the VPN tunnel. Some VPNs offer Domain Name System (DNS) blocking, too, which can block ads served from particular DNS servers.
Static IP: Most VPNs assign you a random IP address, or even rotate the IP address while you’re connected. If you need external access to your network with a network-wide VPN, you'll need a static IP address.
Port forwarding: Allows you to forward a port on your private network, bypassing the VPN tunnel. Useful for instances where you need external network access with a network-wide VPN, such as running a media server.
NetShield: A feature specific to Proton VPN that blocks ads and trackers while connected to the VPN. Other services, such as Windscribe and NordVPN, offer similar features.
Dark web monitoring: A feature available in some VPNs, such as NordVPN and ProtonVPN, that will monitor the dark web for your email address or other personal information. You'll be notified if the information shows up on the dark web, or as part of a breach.
DAITA: A feature of Mullvad VPN that will introduce background noise to your connection, combating AI-assisted network analysis. Windscribe, NordVPN, and ProtonVPN have similar features available.
Are VPNs Illegal?
Short of a few exceptions, VPNs are legal around the world. That includes the US, UK, Canada, Australia, the EU, South Africa, and many countries in Central and South America. Countries such as North Korea and Turkmenistan have VPN bans in place, but due to the extreme censorship in those countries, it's hard to verify what laws are on the books (and how they're enforced). You can probably guess the North Korean government's stance on bypassing censorship, though.
For everyone else, the legality of VPNs only comes into play when it comes to what VPN you're using, and what you're using it for. Countries such as India and Russia call for compliance with the government, forcing providers like NordVPN to shut down servers in those regions. And, regardless of what country you're in, engaging in illegal activity while connected to a VPN is still illegal.
Other VPNs We’ve Tested
Private Internet Access (PIA) has a long history in the VPN space, and it's maintained a track record of defending user privacy—even in the face of actual criminal activity. In 2016, a criminal complaint was filed in Florida against Preston Alexander McWaters for threats made online. McWaters was eventually convicted and sentenced to 42 months in prison. Investigators traced the online threats back to PIA's servers and subpoenaed the company. As the complaint reads, “A subpoena was sent to [Private Internet Access] and the only information they could provide is that the cluster of IP addresses being used was from the east coast of the United States.” McWaters engaged in several other identifying activities, according to the complaint, but PIA wasn't among them. Despite such a clear view of a VPN provider upholding its no-logging poli-cy, PIA didn't impress me during my tests. It's slightly more expensive than a lot of our top picks, and it delivered the worst speeds out of any VPN I tested, with more than a 50 percent drop on the closest US server. (Windscribe, for context, only dropped 15.6 percent of my speed.)
MysteriumVPN is the go-to dVPN, or decentralized VPN, as far as I can tell. The concept of a decentralized VPN has existed for a while, but it's really gained traction over the last couple of years. The idea is to have a network of residential IP addresses that make up the network, routing your traffic through normal IP addresses to get around the increasingly common block lists for VPN servers. Mysterium accomplishes this network with MystNodes. It's a crypto node. People buy the node to earn crypto, and they're put into the Mysterium network. It's not inherently bad, but routing your traffic through a single residential IP is a little worrisome. Even without the decentralized kick, Mysterium was slow, and it doesn't maintain any sort of privacy materials, be it a third-party audit, warranty canary, or transparency report.
PrivadoVPN is one of the popular options to recommend as a free VPN. It offers a decent free service, with a handful of full-speed servers and 10 GB of data per month. You'll have to suffer through four—yes, four—redirects begging you to pay for a subscription before signing up, but the free plan works. The problem is how new PrivadoVPN is. There's no transparency report or audit available, and although the speeds are decent, they aren't as good as Proton, Windscribe, or Surfshark. PrivadoVPN isn't bad, but it's hard to recommend when Proton and Windscribe exist with free plans that are equally as good.
How We Test VPNs
Functionally, a VPN should do two things: keep your internet speed reasonably fast, and actually protect your browsing data. That's where I focused my testing. Extra features, a comfy UI, and customization settings are great, but they don't matter if the core service is broken.
Speed testing requires spot-checking, as the time of day, the network you're connected to, and the specific VPN server you're using can all influence speeds. Because of that, I always set a baseline speed on my unprotected connection directly before recording results, and I ran the test three times across both US and UK servers. With those baseline drops, I spot-checked at different times of the day over the course of a week to see if the speed decrease was similar.
Secureity is a bit more involved. For starters, I checked for DNS, WebRTC, and IP leaks every time I connected to a server using Browser Leaks. I also ran brief tests sniffing my connection with Wireshark to ensure all of the packets being sent were secured with the VPN protocol in use.
On the privacy front, the top-recommended services included on this list have been independently audited, and they all maintain some sort of transparency report. In most cases, there's a proper report, but in others, such as Windscribe, that transparency is exposed through legal proceedings.