For millions of people, working remotely is among the most new norm — which makes remote VPN entry more essential than ever with regard to protecting your security and personal privacy online. But as the marketplace for commercial VPNs continues in order to expand exponentially, it can become tricky to sort through the choices to find the best VPN to satisfy your specific needs.
That’s where this VPN manual comes in. After researching plus testing a multitude of VPN services, we’ve rounded up the particular fastest and most reliable choices. In our current testing plus ranking system, we assessed a lot more than 20 factors, including cost, security, ease of remote entry, bandwidth caps, number of machine locations, logging, dedicated and powerful IP, client software and customer care. Below, we’ve listed your greatest VPN options, including such well-known names as ExpressVPN, Surfshark, IPVanish, NordVPN and more.
We’re keeping a close vision on how each VPN service provider stands compared with its rivals, as well as any brand new VPN services that may strike the market. We’ve catalogued the most popular VPN services to date — and listed some less practical options, too, based on our own testing. We’ll be updating this particular directory periodically as new choices become available.
That said, the VPN landscape can be confusing plus mystifying. Here are some fast tips, each of which hyperlink to a more in-depth dialogue of the topic in query.
Don’t use free VPN services: You’ll only find paid choices below because they’re the just ones we are able to recommend.
Look for a no-logs VPN, yet understand the caveats: The greatest VPNs keep as few records as possible and make all of them as anonymous as possible, therefore there’s little data to supply should authorities come knocking. But even “no-logs” VPNs aren’t 100% anonymous.
VPN transparency can be important, but warrant canaries are usually only the beginning: Many services use “warrant canaries” in an effort to passively note to the open public about whether or not they are yet to been subpoenaed by an authorities entity, as many investigations through national security agencies can’t become actively disclosed by law. But — like the no-logging concern — warrant canaries aren’t constantly as straightforward as they appear. You should spend more period investigating whether your prospective VPN has cooperated with authorities within the past — and exactly how plus when they’ve disclosed that truth.
Think twice about using a US-based VPN: The Patriot Act is still the law of the land in the US, and that means that any VPNs in the United States have little recourse if and when the feds show up with subpoenas or national security letters in hand, demanding access to servers, user accounts or any other data. Yes, they may have little data to access if the service has a strong no-logs policy, but why not do a good end-run on the feds and just choose a service that’s based outside Uncle Sam’s jurisdiction? (You’ll want to avoid those countries that the US has intelligence-sharing agreements with, too.)
The best VPN right now
Let’s look at each of our VPN vendors below in more depth. Keep in mind that this is an evolving list: It was originally published earlier and is constantly updated. We’re actively working on more VPN testing and research, so expect this guide to change throughout the year as our virtual private network use continues and we put each VPN option through its paces.
The list below presents our favorites in an overall ranking; if you want to see each top VPN judged by more specific criteria, check out the links below.
- Best VPNs for Mac
- Best Android VPN
- Best VPNs for iPhone
You’ll mostly find the same names you see here, but we’ll call out when and where specific traits make for a better choice in a more narrow evaluation.
Editor’s Choice for best VPN: Blazing speeds, proven privacy
- Number of IP addresses: 30,000
- Number of servers: 3,000-plus in 160 locations
- Number of simultaneous connections: 5
- Country/jurisdiction: British Virgin Islands
- 94-plus countries
- 3 months free with 1-year plan
ExpressVPN tells us its network is powered by TrustedServer technology, which ExpressVPN built to ensure that there are never any logs of users’ online activities. In the privacy world, ExpressVPN has a strong track record, having experienced a server seizure by authorities which proved their zero-log policy true at the time. We also like the quality of the VPN’s setup guides, and the detailed information in its FAQ.
While its speeds consistently compete with heavy-hitting competitors, our 2020 speed tests saw ExpressVPN produce a 52% overall loss of our normal internet speeds, representing a significant slowdown compared to its 2019 score of 2% speed loss.
Like the rest of the top five VPN services we’ve reviewed, ExpressVPN offers a useful kill switch feature, which prevents network data from leaking outside of its secure VPN tunnel in the event the VPN connection fails. Unlike the others, though, ExpressVPN gained points from us for its support of bitcoin as a payment method — something not all of our favorites offer, but which adds an additional layer of privacy during checkout.
The company has been in business since 2009, and ExpressVPN has a substantial network of fast VPN servers spread across 94 countries. Its best plan is priced at less than $7 a month for an annual package, which includes three months free.
Read more: ExpressVPN review: A VPN speed leader with a secure reputation
A speed leader, packed with features
- Number of servers: 3,200-plus
- Number of server locations: 65
- Jurisdiction: British Virgin Islands
- $2.49 a month (81% discount) for a two-year plan
While Surfshark’s network is smaller than some, the VPN service makes it up on features and speed. Let’s start off with the biggest win it offers: unlimited device support. If you want to run your entire home or office on Surfshark’s VPN, you don’t have to worry about how many devices you have on or connected. It also offers antimalware, ad-blocking and tracker-blocking as part of its software.
And it’s fast. With more than 3,200 servers in 65 countries, we lost less than 17% of average internet speeds during our most recent speed tests. That’s faster than the 27% speed loss we saw in previous tests, and pushes it ahead of ExpressVPN to be the current front-runner in our speed comparisons.
Surfshark received generally high marks when its Chrome and Firefox extensions were audited for privacy by German security firm Cure 53 (PDF link of full report) — though that audit was commissioned by Surfshark.
The company has a solid range of app support, running on Mac, Windows, iOS, Android, Fire TV and routers. Additional devices such as game consoles can be configured for Surfshark via DNS settings. We particularly like the feature that allows you to whitelist certain apps and websites to automatically bypass the VPN. For some business uses, this can be critically important.
Surfshark also offers three special modes designed for those who want to get around restrictions and more carefully hide their online footsteps. Camouflage Mode masks your VPN activity so your ISP doesn’t know you’re using a VPN. Multihop jumps your connection through multiple countries to hide your trail. Finally, NoBorders Mode “allows [you] to successfully use Surfshark in restrictive regions.” Just be careful. Doing any of these three things could be illegal in your country and could result in severe penalties. During our testing, we didn’t see a single IP address or DNS leak, and had no trouble accessing Netflix.
Unlike many of the other VPN providers, Surfshark doesn’t offer a one-year plan. Its best offer is $2.49 a month, for its two-year plan (you pay about $60 up front). A six-month plan is $6.49 a month (about $39 up front), and month-by-month plans are $12.95 a month. Definitely take advantage of its generous 30-day trial to decide if you like this service (and if you choose the two-year plan, maybe set a reminder in 23 months to see if you can talk it into a continued discount rate).
Read more: Surfshark VPN review: A feature-rich service with blazing speeds and a security focus
Best VPN for reliability and security
- Number of IP addresses: 5,000
- Number of servers: 5,200-plus servers
- Number of server locations: 62
- Country/jurisdiction: Panama
- 62 countries
- $3.71 a month (68% discount) for a 2-year plan
- NordVPN in-depth review and hands-on testing (ZDNet)
NordVPN is one of the most recognized brands in the VPN field. It offers a generous simultaneous connection count, with six simultaneous connections through its network, where nearly all other providers offer five or fewer. NordVPN also offers a dedicated IP option, for those looking for a different level of VPN connection. NordVPN offers a kill switch feature, and the ability to VPN into Tor. We detected no privacy leaks during our tests.
In our most recent speed tests, NordVPN’s performance was on par with many of its competitors, reducing our speeds by 53% on average (which is slower than the 32% loss measured in previous speed tests). We found NordVPN’s speeds were reliably fast. There were never any sudden dips or service interruptions, and where we expected the VPN to underperform, it proved itself up to the task.
The company’s two-year subscription plan costs $3.71 a month ($89 billed at once). That price is lower than most contenders, but creeps up for the six-month plan ($9 a month or $64 total) and the monthly plan ($11.95 a month). But it does have a full 30-day refund policy.
While NordVPN has lived on this list for a long time, we moved it to the penalty box in October 2019 to re-evaluate our recommendation after a report emerged that one of its rented servers was accessed without authorization in 2018. Nord’s actions following the discovery included — eventually — multiple security audits, a bug bounty program and heavier investments in server security.
While we’d have preferred that Nord self-disclosed the issue much earlier, the fact that the breach was limited in nature and involved no user-identifying information served to further verify that NordVPN keeps no logs of user activity. As a result, Nord remains on this list as a recommended vendor.
Read more: NordVPN review: Still the best value for security and speed
High security standards at high speeds
When we speed-tested ProtonVPN, we saw an impressively small 9.6% speed loss compared to average speeds clocked without a VPN. ProtonVPN’s base speeds sent it blazing past most of our roster of tested services and into second place behind ExpressVPN. Even more impressive is Proton’s ability to reach those speeds despite a relatively small fleet of 1,050 servers in 54 countries. Like ExpressVPN, Proton also costs more than most of the VPNs we’ve reviewed. Even so, ProtonVPN’s high security standards and legacy of transparency may make this VPN worth the price.
Along with its options to send your traffic through a secure bunker of private servers, we love ProtonVPN’s transparency policies: It’s completely open-source with routinely published audits, and includes a built-in route to VPN into Tor servers. We’re also confident recommending its mobile app since it has eliminated the use of some weaker security protocols, like PPTP and L2TP, which are nevertheless used by some other VPNs.
On price, we’d like to see ProtonVPN come down a bit. ProtonVPN’s standard package, called Plus, runs $8 per month ($96 charged yearly). That price is higher than our Editors’ Choice VPN, ExpressVPN, whose best plan is priced at $6.67 a month for an annual package. ProtonVPN also gets beat on price by NordVPN‘s two-year plan at $5 per month ($60 a year), and Surfshark’s current $6 monthly ($72 a year). While ProtonVPN offers a $4 per month package, that will package doesn’t come with enough valuable features to make it competitive against NordVPN.
Read more: ProtonVPN review: A secure service with a solid reputation that costs a pretty penny
Best VPN choice for beginners
- Number of IP addresses: 40,000-plus
- Number of servers: 1,300
- Number of server locations: 60
- Number of simultaneous connections: 10
- Country/jurisdiction: US
- $5.20 a month (57% discount) for a one-year plan
A big win for IPVanish is its fun, configurable interface, which makes it an ideal client for those who are interested within learning how to understand what a VPN does under the hood. Its multiplatform flexibility is also ideal for people focused on finding a Netflix-friendly VPN.
A unique feature of IPVanish, and one we’re intrigued by, is the VPN’s support of Kodi, the open-source media streaming app that was once known as XBMC. Any serious media fan has used or even built Kodi or XBMC into a media player, and the integrated IPVanish Kodi plugin provides entry to media worldwide.
At $10 a month or $62 a year, IPVanish is obviously trying to move you towards its yearly program. We’re a little disappointed that it only allows a seven-day trial, rather than a full 30 days, but it does offer a full money-back guarantee. That said, the company gets kudos for its recent increase from five to now 10 simultaneous connections. We also liked its connection kill switch feature, a must for anyone serious about remaining anonymous while surfing.
Read more: IPVanish review: Get under the hood with this zippy VPN
Other VPNs we’ve tested
Not every VPN can be a favorite. These are ones we reviewed, but they’re not full-throated recommendations for one reason or another, including limited features and concerns over adequately hiding your identity.
- Average speed loss: 63%
- Number of servers: 1,800 in 23 countries
- Jurisdiction: Canada, with US parent company
- Price: $3.33 per month, or $120, for a three-year plan
TunnelBear’s gotten a lot of hype in the last couple of years. But when we looked under its hood and compared it to its VPN competitors, our excitement waned.
TunnelBear’s speeds are reasonable. We lost nearly 63% of internet speeds overall when we used it, which is about average for a VPN. TunnelBear’s speeds have steadily improved over the years as measured by other review and testing sites, though, and the US scores we recorded saw a speed loss of only 54%.
On the plus side, TunnelBear is holding its own in the transparency competition among VPNs by publishing the results of its independent security audits and annual transparency reports. No IP address, DNS or other potentially user-identifying data leaks were detected during our testing, but in the past TunnelBear was observed to have been leaking WebRTC information. TunnelBear’s encryption is standard AES-256, and it supports Perfect Forward Secrecy.
However, it’s also a Canadian business owned by US-based McAfee, so if you’re looking for subpoena-proof international privacy, you’re playing with fire. It holds a paltry 23 server locations from which you can’t manually choose your VPN server or even a city. It doesn’t offer Tor-over-VPN, it only offers split tunneling on Android, and it can’t even unblock Netflix.
On a per-month breakdown, the least expensive TunnelBear plan is its $120, three-year plan. You can also go month to month for $10, or pay $60 upfront for a single year. Either way, TunnelBear accepts payment via credit card and Bitcoin. Unlike other VPNs, it doesn’t take PayPal. Also unlike other VPNs, it doesn’t support Amazon Fire Stick or Android TV.
Read more: TunnelBear VPN review: The overpriced ursine has trouble living up to the hype
See at TunnelBear
- Number of servers: Over 7,100 worldwide in 90-plus countries
- Number of server locations: 112
- Jurisdiction: Romania, with UK parent company
- Number of simultaneous connections: 5
- $2.25 a month for a 3-year plan, or $3.49 a month for 2-year plan
- CyberGhost in-depth review and hands-on testing
In ‘s previous coverage of virtual private networks, we’ve praised CyberGhost for its roster of competitive features. Our in-depth review of CyberGhost last year included speed testing, security verification and an analysis of its full suite of privacy tools. Since then, CyberGhost has increased its number of servers and is prepared to roll out new privacy tools, all while remaining one of the cheapest VPNs we’ve reviewed — at $2.25 per month for a three-year plan.
As we’ve bolstered our approach to VPN reviews in recent months, however, CyberGhost has raised some red flags. Its parent company’s history warrants skepticism; our previous tests have shown it to expose your VPN use to your ISP; its website and app trackers are more numerous than warranted; and its ad-blocker uses an untrustworthy method of traffic manipulation no VPN should even think about. Its low price previously made it worth considering if you needed to change the appearance of your location online, but not if you wanted best-in-class security.
While CyberGhost’s connection speed and security appear to be improving, I don’t currently recommend using CyberGhost if you’re in a country where VPNs are illegal. I also recommend anyone in the US reviews CyberGhost’s parent company before deciding whether to pay for a subscription.
On the plus side, however, CyberGhost is still faster than Norton Secure VPN and was less taxing on my device’s processing power during testing. It also offers split-tunneling in its Windows client and has its servers neatly organized into user-friendly categories: NoSpy servers, servers geared for torrenting, servers best for streaming and servers best for use with a static IP address. CyberGhost imposes no data caps and allows unlimited server switching.
Read more: CyberGhost VPN review: Promising improvements but its parent company concerns me
See all CyberGhost VPN plans
- Number of countries: 29
- Number of servers: 1,500 (1,200 virtual)
- Number of server locations: 200 in 73 cities
- Country/jurisdiction: US
- $40 for the first 12 months
LifeLock, long known for excellence in security products, has a relatively limited offering in its VPN product. Norton Secure VPN does not support P2P or BitTorrent, and it does not support Linux, routers or set top boxes. Its Netflix and streaming compatibility is somewhat limited. Even worse, during testing, we experienced privacy-compromising data leaks.
During ‘s testing, Norton Secure VPN speeds were comparable to other mid-tier VPNs but not particularly competitive. Although its VPN is only available on four platforms — Mac, iOS, Windows and Android — Norton gets points for its 24/7 live customer phone support and 60-day money back guarantee.
Read more: Norton Secure VPN review: More work is needed for this privacy product to shine
Other VPNs in the mix
Below you’ll find some additional VPNs. We’re in the process of re-evaluating them in the coming months.
- Number of IP addresses: 300,000
- Number of servers: 2000
- Number of server locations: 180
- Country/jurisdiction: Hong Kong
- $3.33 a month for a 1-year plan, $1.65 a month for a 5-year plan
PureVPN does not log connection information. The company joined the “no log” movement in 2018, which was recently verified via a third-party audit by Althius IT (albeit one commissioned and paid for by PureVPN).
We like that PureVPN offers a 31-day refund policy and supports Bitcoin payments, to further extend anonymous browsing. We also like that PureVPN has both Kodi and Chromebook solutions available. In addition, PureVPN was the first VPN service we noted to fully implement the GDPR.
- Number of IP addresses: 59,500
- Number of servers: 650-plus
- Number of server locations: 26 countries and 46 cities
- $5.83 a month (42% discount) for a 1-year plan
- StrongVPN in-depth review and hands-on testing
StrongVPN blasts onto our favorites list with excellent infrastructure and decent price performance. As with our other favorites, StrongVPN has a strong no-logging policy. Since VPN is all about protecting your privacy, that’s a place the savvy VPN providers can pick up points.
Strong also picks up kudos for its large base of IP addresses, which also helps protect your anonymity. It has a solid collection of servers and worldwide locations. For those of you who need a dedicated IP, you can get one from the company, but you’ll need to contact support to get help setting it up.
One of StrongVPN’s strongest strengths is the company’s network. It owns and operates its entire network infrastructure, which means it has no externally dictated limits on bandwidth or the type of internet traffic allowed on the network. This gives you the confidence that you’ll be able to power through your work.
StrongVPN’s regular monthly price of $10 is in the middle of the pack, but its yearly price of $70 is among the lowest of our contenders.
- Number of IP addresses: N/A
- Number of servers: 3,252
- Number of server locations: 37
- Country/jurisdiction: US
Speaking of price, if you want a solid VPN provider, Private Internet Access is the place to go.
The key to getting the most savings with this vendor is buying its two-year plan for $69.95. That works out to $2.69 a month. It also offers a one-year plan for $39.95 (which comes out to $3.33 a month), or a monthly plan for $9.95 a month.
The company does not release information on the number of IP addresses available, but at 3,252, its server count is more than any of our other picks.
These folks have been around since 2010, and don’t log anything. It provides a generous five connections, a connection kill switch feature, and some good online documentation and security guidance. Our one disappointment is that its refund policy is seven days instead of 30, but you can certainly get a feel for its excellent performance in the space of a week.
See all Private Internet Access plans
- Number of IP addresses: 50,000
- Number of servers: 3,200
- Number of server countries: 80-plus
- $2.99 a month for a 3-year plan
- Hotspot Shield in-depth review and hands-on testing
Hotspot Shield is a product that has had some ups and downs in terms of our editorial coverage. Back in 2016, it picked up some positive coverage based on founder David Gorodyansky’s comments about protecting user privacy. Then, in 2017, a privacy group accused the company of spying on user traffic, an accusation the company flatly denies. Finally, in 2018, ZDNet uncovered a flaw in the company’s software that exposed users. Fortunately, that was fixed immediately.
So what are we to make of Hotspot Shield? Frankly, the controversy caused us to drop it from our directory for a while. But it approached us, made a strong case for its ongoing dedication to privacy, and we decided to give it another chance.
Here’s the good news. It offers one of the best money-back guarantees we’ve seen for VPN services, a full 45 days. It supports Linux, Windows, Mac, iOS and Android, along with plugins for Chrome and Firefox. It also supports routers and media players. And, as a bonus, it has a connection kill switch feature.
The company does not support P2P or BitTorrent — and it also doesn’t support OpenVPN. Every other vendor does, but Hotspot Shield limits its VPN protocol support to L2TP/IPSec and something it calls Hydra, an enhancement of the transport protocol.
Overall, the company did impress us with its attention to privacy. It has a published privacy canary. It also told us, “We have built in malware, phishing and spam protection. Our commitment to our users is that Hotspot Shield will never store, log or share your true IP address.”
Since we’re living in a connected world, security and privacy are critical to ensure our personal safety from nefarious hacks. From online banking to communicating with coworkers on a daily basis, we’re now frequently transferring data on our computers and smartphones. It’s extremely important to find ways of securing our digital life and for this reason, VPNs have become increasingly common.
What is a VPN?
A virtual private network is a technology that allows you to create a secure connection over a less-secure network between your computer and the internet. It protects your privacy by allowing you to anonymously appear to be anywhere you choose.
A VPN is beneficial because it guarantees an appropriate level of security and privacy to the connected systems. This is extremely useful when the existing network infrastructure alone cannot support it.
When your computer is connected to a VPN, the computer acts as if it’s also on the same network as the VPN. All of your online traffic is transferred over a secure connection to the VPN. The computer will then behave as if it’s on that network, allowing you to securely gain entry to local network resources. Regardless of your location, you’ll be given permission to use the internet as if you were present at the VPN’s location. This can be extremely beneficial for individuals using the public Wi-Fi network or public Wi-Fi hotspots.
Therefore, when you browse the internet while on a VPN, your computer will contact the website through an encrypted connection. The VPN will then forward the request for you and forward the response from the website back through a secure connection.
VPNs are really easy to use, and they’re considered to be highly effective tools. They can be used to do a wide range of things. The most popular types of VPNs are remote-access VPNs and site-to-site VPNs.
Now playing: Watch this: Top 5 reasons to use a VPN
What is a remote-access VPN?
A remote-access VPN uses public infrastructure like the internet to provide remote users secure access to their network. This is particularly important for organizations and their corporate networks. It’s crucial when employees connect to a public hotspot and use the internet for sending work-related emails. A VPN client, in the user’s computer or mobile device connects to the VPN gateway on the company’s network. This gateway will typically require the device to authenticate its identity. It will then create a network link back to the device that allows it to reach internal network resources such as file servers, printers and intranets, as if it were on the same local network.
It usually relies on either Internet Protocol Security or Secure Sockets Layer to secure the connection. However, an SSL VPN can also be used to supply secure access to a single application, rather than an entire internal network. Some VPNs also provide Layer 2 access to the target network; these will require a tunneling protocol like Point-to-Point Tunneling Protocol or Layer 2 Tunneling Protocol running across the base IPsec connection.
What is a site-to-site VPN?
This is when the VPN technology uses a gateway device to connect to the entire network in one location to a network in another location. The majority of site-to-site VPNs that connect over the internet use IPsec. Rather than using the public internet, it is also normal to use career multiprotocol label switching clouds as the main transport for site-to-site VPNs.
VPNs are often defined between specific computers, and in most cases, they are servers in separate data centers. However, new hybrid-access situations have right now transformed the VPN gateway within the cloud, typically with the secure link from the cloud service provider into the internal system.