Google One VPN is a simple VPN that comes bundled with the tech giant's premium subscription service, Google One. When we say simple, we really, really mean it. There are barely any options, settings, or features. You can't even choose a location. Hit the Enable button and the app automatically connects to a server in your country, then goes to work encrypting your internet traffic.

Google has expanded its app range since launch and the VPN now works on Windows and Mac, as well as Android and iOS. There's no way to manually set it up on anything else but with no real features, there's not much reason to do that.

If you're hoping to unblock US Netflix or anything else, get connected in VPN-unfriendly countries, set up the VPN on a router, or anything even faintly advanced, then we can say absolutely, definitively, and without question, Google One VPN isn't the service for you.

If you're going to buy Google One anyway and you could use a lightweight service to protect your internet activities on public Wi-Fi, then it might be a different story. In this review, we'll look more closely at what Google One VPN offers, what it doesn't have, and find out whether this could be a smart choice for you. We're only reviewing the VPN element here. If you want details on the full package, you can check out our Google One review. 

What is Google One VPN?

Although it's more basic than just about anything from the big VPN names, Google One VPN is a real virtual private network (VPN) that delivers the same fundamental security benefits. 

Turn it on, and the app directs all your device traffic through a secure encrypted tunnel. Snoopers aren't able to access your data on even the most insecure of public Wi-Fi hotspots, and with your real IP address replaced by Google One VPN's server, it's more difficult for companies to track you online.

The big omission is Google One VPN doesn't allow you to choose a new virtual location (pretend to be in the US when you're actually in Australia, for instance). As a result, it can't help you access US-exclusive Netflix shows, say, or any other content that isn't normally available in your country.

Although that's a major downside, it also looks like web companies won't spend as much time and effort trying to detect and block Google One VPN connections. We'll get more into this later.

What are the apps like?

Google One VPN's Windows and Mac apps are just about as simple as you'll see. An opening dashboard lists two or three reasons you might use a VPN  such as reducing tracking, staying safe on public Wi-Fi, and browsing securely. There's an On/ Off button, an option to launch when your devices start, and that's it.

Google's Android and iOS offerings look a little more complex, at least initially, because they include panels relating to Google One's various cloud storage features. Tap one to explore how your storage space is being used. A Sync option can back up your photos, videos, contacts or calendars, and a Clean up feature wipes junk files to free up more space. If you're not interested in any of that, though, just tap the iOS VPN panel and you've essentially got the same stripped-back interface as the desktop app. 

Android users get a touch more functionality. A split tunneling feature allows you to choose apps that won't use the VPN, handy for anything that isn't compatible. A Snooze feature pauses the VPN protection for five minutes, then automatically resumes it, and integration with Android's system-wide kill switch protects you by blocking your internet if the connection drops. That's all good news, but the app is still seriously underpowered by usual Android standards.

There is a positive side to having next to no features; you've next to nothing to learn so anyone can use it. There's no need to understand technical concepts like protocols or even encryption. Just flip the switch when you need protection.

Unfortunately, the lack of features might compromise your privacy in some situations. Our tests showed the Windows app didn't have a kill switch, for instance, and when we forcibly dropped the connection, our real IP was exposed. The app didn't even warn us or try to reconnect, so Windows users could browse for hours, thinking they're protected, when they're entirely exposed.

Does Google One VPN store any logs?

Connect to most VPNs, and your login and user traffic is sent through the same server. That single computer knows your identity and where you’re going online, allowing a malicious VPN (or anyone who can compromise the server) to log your activities and link them to your account.

Google One VPN is designed so that you log in using one server, but your browsing is routed through another. This way, the first computer knows who you are, but not what you’re doing; the second knows what you’re doing, but not who you are. Even Google can’t see which sites you’re visiting (which means it can’t log them, either).

The service does log some very general data about VPN use: how many connections you’ve made in the last 28 days, for instance, and how many connections your account has active right now. But that’s not unusual – most VPNs monitor the number of active connections to enforce ‘maximum device’ limits – and there’s nothing here that can link you to any action online.

Google doesn’t have the best of reputations for looking after user privacy, but fortunately you don’t have to take its VPN claims entirely on trust. The company has open-sourced some reference libraries for its apps, allowing anyone with technical expertise to take a look at how it works, and in 2021 the VPN was audited by NCC Group.

The conclusions were generally positive, with NCC Group finding that the VPN worked as promised, and explaining how Google had taken measures to prevent the system being compromised (malicious employees can’t simply install a backdoor on their own, for instance).

The report warned that the technical protections ‘did not categorically eliminate the opportunity for Google to violate its privacy claims’, but any audit of any VPN could make a similar point: things look great now, but it’s possible a provider could cheat the system later.

Overall, although the system design, open sourcing and audit report will never win over the biggest Google skeptics, the reality is Google One VPN has more support for its no-logging claim than most of the competition.

How much does Google One VPN cost?

The Google One VPN is available in the following countries for eligible Google One members: Austria, Australia, Belgium, Canada, Denmark, Finland, France, Germany, Iceland, Ireland, Italy, Japan, Mexico, Netherlands, Norway, South Korea, Spain, Sweden, Switzerland, Taiwan, United Kingdom, and United States

After signing up, you can travel to other countries and Google One VPN should still work, but it may not connect to a server in that country, which could lead to problems. If you use Google One VPN in Hungary, say, and it connects to a server in Germany, then websites may not serve you with the local content you expect.

The baseline Google One plan offers the VPN, 100GB of online storage, Google Photos editing features, and alerts if Google finds your personal details on the dark web. It's yours for a very low $1.99 billed monthly (regular VPNs ask $10-$13), dropping to $1.67 on the annual plan.

Higher plans add more storage and extra benefits, including premium Google Workspace features and up to 10% rewards on Google Play purchases. See our full Google One review for more details.

This could be good value in some situations. If you'll only use a VPN to protect yourself on public Wi-Fi when on holiday, for instance, giving an annual $4 to Google will cover you for a couple of trips. Bargain!

If you'd like to unblock content, get online in VPN-unfriendly countries, or do anything more complex, you can get a full-strength VPN for not much more. For example, Private Internet Access is just $3.33 a month on its annual plan. That's $2.03 over three years for a far more powerful VPN service.

How easy is Google One VPN to use?

The Google One app doesn’t even try to match regular VPNs for visual style. It’s really just a web page, with different sections on the VPN and Google One’s other features, and you browse it for whatever you need.

This still isn’t difficult to use: all you have to do is hit the Enable VPN button, then an Enable VPN switch, and typically you’re connected in around a second. Standard VPN apps usually require one tap rather than two, but that’s the only significant difference.

Android users can make life even easier by adding Google One VPN to their Quick Settings menu. After that, there’s no need to even launch the app. Connecting or disconnecting is then as easy as swiping down a couple of times and tapping the Google One VPN button.

What does Google One VPN unblock?

Most VPNs let you connect to servers in different countries. This allows you to appear as though you're in Manhattan when actually you're in Melbourne. This may allow you to access content that isn't normally available in your country.

Google One VPN's apps automatically choose your server, though, usually one based in your own country. So, as you can't change your region, you won't be able to unblock anything at all.

One issue with streaming sites in particular is they often look out for VPN connections and block access if they detect you're using one. We connected to the VPN and then tried to watch Netflix, Amazon Prime Video, Disney Plus, and BBC iPlayer. None of the sites complained about Google One and we streamed content as usual.

Using a VPN can cause hassles on non-streaming sites, too. You might see annoying 'click all the tiles containing a bicycle' type CAPTCHAs, for instance, and some sites may block you entirely.

To test how the VPN handles this, we connected and accessed twelve websites (including Google) that can detect VPN use. The results were a real surprise. Commonly used free VPNs might be spotted on up to ten of our twelve websites, most commercial VPNs are detected by six to eight, but Google One VPN was flagged by only one website.

Looks like Google One VPN's ‘we don't unblock anything' stance has at least one advantage: content providers don't have much incentive to spend time and money trying to detect its users, and that could mean you're far less likely to be blocked while legitimately accessing sites in your own country.

How fast is Google One VPN?

We tested Google One VPN's performance using several benchmarking sites and apps including SpeedTest, Measurement Lab, Cloudflare, and more. We did this from a US home with a 1Gbps fiber connection.

The results were a little below par, with Google managing average download speeds of 345Mbps. That's a very long way behind the market leaders - IPVanish, NordVPN, and Surfshark all beat 950Mbps in recent tests. Still, it's perfectly adequate for browsing, streaming, and most other internet tasks.

Final verdict: How good is Google One VPN?

Google One VPN is a very limited VPN which just won't work for most users. The inability to change location means it can't unblock anything. No desktop kill switch makes it poor for Windows or Mac privacy. It won't even try to get you connected in China or other countries that block VPNs. If you only need the VPN for occasional mobile use while accessing public Wi-Fi, and you'll make use of the 2TB online storage space and other Google One extras, then it might, just about, get the job done. Even there though, the likes of Private Internet Access offer a far more capable service for only a little extra cash.

• We've also highlighted the best VPN

It seems like all the big security companies offer a VPN these days, but Norton Secure VPN is better than most. It's easy to use, has more features than you might expect, and is still surprisingly affordable.

Norton's network is a little small, with only 29 countries available and no city-level selections. Most are in Europe and North America, although there are servers in Australia, Brazil, Hong Kong, Israel, Japan, Mexico, New Zealand, Singapore, and South Africa.

• Want to try Norton Secure VPN? Check out the website here

There are apps for Windows, Mac, Android and iOS. You can connect one, five, or 10 devices simultaneously, depending on your plan. Sounds reasonable, but beware, these have to be specific devices. If you buy a five-device plan and install the app on two laptops, two phones, and a tablet, you can't install it anywhere else until it's removed from one of your other devices.

P2P is supported, though not with all locations. Choose the ‘Torrent-Optimized Region' option in Norton's app and it'll connect to the nearest torrent-friendly location.

The service uses the speedy and secure WireGuard protocol but doesn't provide any way to get it working manually on other devices. 

Checking the Windows app Settings box reveals some welcome features including a kill switch that protects your connection if the VPN drops, split tunneling which enables you to choose which app traffic should be routed through the VPN and which uses your regular connection, and built-in ad, tracker, and malware blocking, too.

Plans and pricing

Norton Secure VPN prices start at just $4.99 billed monthly for a single device license. Most providers ask $10-$13 for monthly plans, so if you only need to protect that one device, Norton looks like a very good deal.

Norton's five-device plan starts cheap at $3.33 a month billed annually, although that doubles to $6.66 on renewal.

The 10-device plan is priced at $5 a month on the annual subscription, rising to $8.33 on renewal. That looks a little costly to us but when bought in a bundle it can be more cost effective.

Buy Norton Secure VPN as a bundle with Norton 360 Deluxe and you'll also get an excellent antivirus for up to five PCs, Macs, mobiles and tablets, a firewall for PC and Mac, parental controls, a password manager, 50GB cloud backup space, and more. It's only fractionally more expensive at $4.17 a month for the first year of the annual plan, and still reasonable at $9.58 on renewal ($114.99 a year). If you're in the market for a new antivirus or security suite, that could be the best option.

Whatever your product preferences, Norton protects you with a 14-day money-back guarantee for monthly-billed subscriptions and a generous 60-days with annual plans.

Privacy and logging

The website claims that “unlike some other VPNs, we don't track, log, or save your browsing activities.” Sounds promising, but there's no more detail on the front page.

A 'What is a no-log VPN?' blog post vaguely states that although “Norton Secure VPN does not log information about where you browse on the Internet”, it does collect “other limited data in accordance with the NortonLifeLock Global Privacy Statement and the Product Privacy Notice.”

The Norton Secure VPN privacy policy says the service collects or accesses your device name, type, and identifier, OS version (for mobile devices), license identifier, a running total of bandwidth used, usage data, and some very basic diagnostic information to help solve any issues (an error state code, for instance).

One unusual clause says “if suspicious behavior is detected or blocked” Norton might collect your IP address, license identifier, device identifier, and frequency of abuse of services for up to 7 days.

This leaves us with more questions than answers. What does Norton regard as suspicious behavior, for instance? Surely this must mean it's monitoring at least some user actions. In which case, will this data be shared with others? Norton's Global Privacy Statement does say that it will disclose personal data in response to a subpoena, warrant, discovery request, or a request with the purpose of identifying and/or preventing credit card fraud, identity theft, and other crimes.

This is all just too vague for us, and we'd like more detail on how the company handles your data. A Transparency Report giving some specifics on what Norton has disclosed to the authorities might be interesting. It's hard to see why a name as big as Norton can't join the likes ExpressVPN, NordVPN, and TunnelBear in putting itself through a public audit, to give potential customers real information on how it's looking after their privacy.

Apps

Norton Secure VPN's Windows app has a simple and straightforward interface which even the greenest of VPN newbies will figure out immediately.

Click the On button and the app connects to your nearest server. Alternatively, make your own choice from 29 countries in the location list. This is as basic as it gets – no ping times, server load stats, Favorites system, filters, or anything else.

Both the desktop and mobile apps have optional ad, tracker, and malware blocking. Many VPNs now offer some kind of content filtering, but can you be sure it's doing anything useful? To get an idea, we turned the feature on and tried a few tests.

Norton scored below 40% on our ad-blocking test (most VPNs average 70-90%.) It blocked a very respectable 69% of our test trackers, though, and (maybe unsurprisingly for a security company) protected us against 100% of our malicious test URLs.

The app doesn't include many settings, but what you get is worthwhile. These include settings to select whether to launch the app and automatically connect when Windows starts, enable the Kill Switch, and to set up split tunneling.

The main omission is any way to change protocol or customize how the VPN connects –  it's WireGuard-only. 

Oddly, the app doesn't provide any way to close it down entirely. There's no Exit, Quit, or similar button. Closing the app window simply minimizes it to an icon in the system tray and there's no right-click, Exit option there either.

We ran some extreme tests on the kill switch by ceasing Secure VPN's WireGuard processes and stopping its services. The connection dropped, but the app didn't warn us, the kill switch didn't block our internet, and our device used its regular unprotected internet connection as usual. Not good.

Maybe we were unlucky? We tried turning our router off and on to simulate a dropped network. A good kill switch should block everything apart from the VPN app until it can reconnect. Secure VPN didn't block our internet, didn't reconnect, and told us to try connecting again later.

Put this all together and it looks like the Windows kill switch is unreliable in the extreme. There's no way to be sure it will kick in and block your internet if the VPN drops, and that could mean your device traffic is unprotected for at least a few seconds, and possibly until you notice there's a problem. That may not matter much if you're just unblocking Netflix, but it's a disaster if you're doing anything more privacy-critical.

Keep in mind that this test was for the Windows kill switch only. It can't tell us what might happen with other apps. If you're only running Norton Secure VPN on Android, for instance, you won't be relying on Norton's app; you'll be using the very well-tested and reliable Android system kill switch.

Mac and mobile apps

The Mac app looks more appealing than Norton's Windows offering, with a colorful map highlighting your current location. It has the ad, malware, and tracker blocker, but is missing some of the more advanced features seen in the Windows app, namely WireGuard support, split tunneling, and the kill switch.

It's much the same with Secure VPN Android and iOS apps. Norton has tweaked the interface a little to suit portrait mode and smaller screens, but it follows the same minimalist approach. There is just the big ‘Connect' button, a plain location list, and a few tiny icons. Very simple and straightforward.

There are a handful of useful bonus features in the background. The iOS app has the ad blocker, and a ‘Wi-Fi Security' feature which can make the VPN automatically connect when you access an unsecured or compromised network.

Android has the ad blocker, split tunneling, and the kill switch, but its version of ‘Wi-Fi Security' is more basic.  It'll warn you when accessing an unsecured network, but won't automatically connect. You're left to do that yourself.

Overall, Norton Secure VPN's apps are easy to use, and the Windows app has a few useful features. The other apps are distinctly short on functionality, and the Windows kill switch looks unreliable in the extreme, so there's plenty of work for the company to do yet.

Netflix and streaming

Norton Secure VPN is mostly sold on its ability to protect your details from cybercriminals when you're using Wi-Fi, and the website doesn't make any big claims (or even small ones) about unblocking big-name streaming platforms.

Our unblocking tests found some notable successes, with Secure VPN getting us into US and Australian Netflix, but failing in the UK, Canada, and Japan.

It was a similar story with other US platforms, as Secure VPN unblocked Amazon Prime, but didn't get us access to the Disney Plus site.

The mixed picture continued in Australia, with Secure VPN getting us into 9Now but failing with 10 Play.

Norton finished strongly in the UK, though, unblocking BBC iPlayer, ITV and, Channel 4.

That's far from a perfect performance, but Secure VPN clearly has some unblocking skills, and there's a chance it'll help you access other platforms we didn't test.

If you're looking to unblock just about anything, ExpressVPN, NordVPN, Private Internet Access, ProtonVPN, PureVPN, and Surfshark each got us into every test site we tried in our latest reviews.

Performance

We measured Norton Secure VPN's performance by accessing its nearest server from a UK data center with a 1Gbps connection. We then checked download speeds using benchmarking sites and services including SpeedTest.net (website and the command line app), Measurement Lab, Cloudflare, and others. 

The results were amazing, with Norton Secure VPN reaching a median 950Mbps+ across its best sessions. That puts the service alongside big names like NordVPN and Surshark on the performance front.

If your internet connection or Wi-Fi barely reaches 95Mbps, let alone 950Mbps, this won't in itself bring you a lot of benefit. 16 out of our top 20 VPNs reach at least 500Mbps, and it's likely that any of those will have all the speed you'll be able to use.

However, the ability to reach such an exceptional peak performance does suggest Norton Secure VPN has capable servers with high-speed connections, which aren't overloaded by other users. That's good news for everyone, regardless of personal connection speeds.

Support

Run into problems with Norton Secure VPN and you could head off to the support site, but be prepared for disappointment. Although there’s plenty of content, most of it is on Norton’s core security products. There are a few FAQs, setup and usage guides, but nothing that begins to compete with the specialist VPN providers.

This makes sense for Norton’s core consumer market, and the site does a fair job of explaining the service basics to VPN newcomers. But there’s not much here for more technical users. We went searching for protocols, for instance, to see if we could find any advanced articles, but there were no hits for ‘WireGuard’, and ‘IKEv2’ had only three.

You can contact the support team direct via live chat and phone. We had quick responses to our test questions, the agents were friendly and helpful, and went above and beyond to help. When a previously lengthy chat couldn’t solve our issue, for instance, an agent remotely accessed our device (with permission) to try to fix the problem.

Overall, the support team doesn’t appear to have the level of specialist VPN knowledge we see with the top providers. But that’s no great surprise, considering it has to cover the full Norton range, not just Secure VPN. And the reality is if, like most people, you just want to ask a straightforward product question – what does this mean, where do I find that, is my local server down right now? – then Norton’s support should generally deliver what you need.

Norton Secure VPN review: Final verdict

Norton Secure VPN is simple and very fast, and if that's all you need – or, maybe, you're looking for a VPN and a security suite – then its back-to-basics approach might appeal. Experts will be frustrated by the lack of features, though, plus the Windows kill switch is a big concern, and there are many more capable and better value VPNs around.

• We've also highlighted the best VPN

Mozilla VPN began life as a simple Firefox browser extension but its now a full standalone service that can shield all your internet traffic on Windows, Mac, Android, iOS, and Linux.

The network has expanded recently and now offers 600+ servers across 73 locations in 43 countries.

• Want to try Mozilla VPN? Check out the website here

Mozilla VPN is powered by Mullvad's speedy and secure network. Some companies keep quiet about the fact that they're reselling someone else's service, not Mozilla. Click the 'see our full list of servers' link on the Mozilla VPN website, for instance, and it takes you to the server list on Mullvad's site. 

Features

Mozilla VPN's feature list has grown considerably since launch. Now, the service competes well with many big VPN names. The network is P2P-friendly, for instance (we torrented successfully on three test locations), support for the speedy WireGuard protocol optimizes performance, and there's a kill switch to protect you if the VPN drops. Multi-Hop VPN enables connecting to the VPN from one location and exiting from another, making it even more difficult for others to track your activities. There is also split tunneling support (called App Exclusions here) that allows you to decide which apps are protected by the VPN and which use your regular internet connection.

Other highlights include IPv6 support, and the ability to choose an ad or tracker-blocking DNS server, or to use your preferred DNS.

Firefox users get an unusual bonus in support for Multi-Account Containers. Each Firefox tab can be connected to a separate VPN location, so instead of forever connecting, changing location, and disconnecting, you can just switch to whatever tab you need. This Mozilla blog post has more details.

There are still weaknesses. Mozilla VPN only supports the WireGuard protocol, so if that won't connect on your network, you're out of luck. There's no support for manually setting up the service on routers or anything else. Additionally, you still can't set up the apps to automatically connect when you access public Wi-Fi, either.

There's no live chat support, but Mozilla does have a decent number of support articles. You can also send questions to the support team from the website if you're in serious trouble.

We spotted one potential annoyance. Although Mozilla VPN says it works with up to five devices, that means specific, registered devices. If you use the service on two mobiles, two laptops, and a tablet, for instance, you can't use it on a new device until you've signed out of one of the others.

• How does Mozilla VPN shape up with the best Firefox VPN extensions

Mozilla VPN pricing

Mozilla VPN is priced at a reasonable $9.99 for its monthly billed account, dropping to $4.99 on the https://vpn.mozilla.org/.

Although that's not expensive overall, keep in mind that you're paying for access to Mullvad's servers. Sign up for Mullvad instead and you'll pay a flat rate of €5 a month (around $5.50), whatever the length of your subscription.

Payments are accepted via card and PayPal only.

If you sign up and the service doesn't work for you, no problem, you're protected by a 30-day money-back guarantee. There are no sneaky catches or exclusions, as far as we can tell and we spent quite some time looking. If you're unhappy, just tell the company within the first 30 days, and you'll get a refund.

Privacy and logging

Mozilla sells its VPN partly on being from 'a name you can trust' and that's a major plus. Even if you think Mozilla's reputation comes largely from not being Google or Microsoft, it's still way ahead of many VPNs in the trustworthiness stakes, and its partner, Mullvad, is one of the most privacy-focused providers around.

The Mozilla VPN website makes its general approach very clear – ''Your privacy comes first'', ''We don't store your online activity logs on our servers'' – and the company provides more information in a brief Privacy Notice.

The firm collects your IP address when you sign up and use the service, along with technical information about the setup such as the app version, operating system, hardware configuration, and interaction data. Interaction data includes the time that you log in, when the app requests the server information, and other stuff. Mozilla says the IP is only held temporarily, although it doesn't explain how long 'temporary' might be.

If you're unhappy with this, you can disable some of it. Our Windows app installer asked us whether we wanted to send usage data to Mozilla, making it clear what was going on, and giving us a chance to say 'no, thanks'. If you don't notice the installer option, you can also turn this off later in the settings.

Mozilla points users to the Mullvad Privacy Policy for more detail and that explains there's no logging of traffic, DNS requests, IP addresses, session times, or bandwidth used.

Audit

Mozilla says all the right things about privacy, but users shouldn't be left to take any provider's words on trust. We like to see some independent evidence that a VPN is living up to its promises.

In August 2021, Mozilla provided just that by publishing the results of a second Cure53 audit into its service.

This didn't look at the servers, but Cure53 did have an in-depth look at the apps, including the source code.

Cure53's report was positive overall, saying that only a single medium scale vulnerability was uncovered, and that the apps had 'grown significantly in security' since its last review.

Overall, we think the audit is positive news in a number of ways. The scope was significant, covering all Mozilla's apps; the company shared its source code; the audit results were reasonable, and it published the report in full. We give Mozilla a lot of credit for putting itself under that level of scrutiny, something which most VPNs still haven't done.

Apps

Signing up with Mozilla VPN begins by providing your email address and age to create a Firefox account. Although most providers also ask you to register with your email address, Mullvad doesn't need any personal details at all, which could be another reason to just buy it from Mullvad directly.

With the account set up, we handed over our cash and the website directed us to the Downloads page. We grabbed a copy of the Windows app, which was downloaded and installed within seconds.

Mozilla VPN's Windows offering has a straightforward and very standard interface. A small console displays your default location, and you can click this to select another. A big On/Off switch connects and disconnects you as required, and icons plus a status display make it clear when you're protected, and when you're not.

The client doesn't have an 'Automatic' setting where it chooses the fastest server for you, and there's no Search box, filtering, or Favorites system to quickly find your most-used locations. Getting connected takes a little more scrolling and clicking than we'd like. There's some compensation in Mozilla's use of the ultra-speedy WireGuard protocol, which typically got us connected in 1-2 seconds.

The app didn't perform as well in our connection stress tests, where we see how a VPN can handle awkward network situations like no internet connection, when another VPN is connected, and so on. It occasionally hung on ‘Connecting' or ‘Disconnecting' screens for so long that we had to restart to recover.

If you're only ever accessing the same few very standard Wi-Fi hotspots, you might instantly connect each time, and this won't matter at all; however, if you're traveling more widely, you could find Mozilla VPN has the occasional connection issue. If you're signing up for the trial, use your time to test the service on as many different networks as you can to see how it works for you.

Settings

We started by looking at Mozilla VPN's Windows split tunneling system. This enables setting up specific apps to use your normal internet connection rather than the VPN, which can be handy to improve performance or fix problems like banking apps not running if you seem to be in another country.

A DNS Settings screen allows you to choose DNS servers that block ads, trackers, or both, and you can also enter a custom DNS server of your own.

A 'Privacy features' page allows selectively blocking ads, trackers, and malware. We turned everything on and tried accessing 156 common trackers. Mozilla VPN blocked a very acceptable 115, including all the most important such as Google and Facebook.

Switching to malware, we tried accessing 379 very new malicious websites and watched as Mozilla VPN blocked 99.2% (it missed only three.) Even ad blocking worked better than we expected, with our VPN-enabled connection scoring 90% protection in one test (that's better than uBlock Origin.)

A Notifications page includes an option to display an alert if you connect to an unsecured Wi-Fi network. That's useful, although more powerful apps can automatically connect to the VPN as required, too.

A handful of more technical features include the ability to use port 53 for connections, which might help you use the service in countries or on networks where a VPN is normally blocked. 

As we mentioned above, there's no option to change protocol but otherwise, there's a fair amount of configurability here and Mozilla VPN certainly outperforms many competitors.

Kill switch

While Mozilla's Windows client has a kill switch, there's no option to turn it on or off or tweak how it works. That's good for security, as there's no way you can accidentally disable it. Still, this could be bad news if the kill switch causes some problems on your device, as there's no way to try and fix that.

We ran a few tests and found the kill switch correctly blocked our internet if the VPN connection dropped.

We did notice problems in some extreme situations. If one of Mozilla's Windows services fails, for instance, protection is lost but the kill switch doesn't kick in. The app warns the user about the disconnection but there's a chance their identity and some traffic will be exposed.

Problems like this aren't common and while you may never encounter them in real-world use, they suggest Mozilla's Windows app isn't the best at handling unusual network conditions. We're left wondering what other issues might be lurking under the hood.

Mac app

Mozilla VPN's Mac app looks and feels almost identical to the Windows version and that's both good and bad. On the plus side, it's exceptionally consistent. Learn how the app works on one platform and you'll have no problem using it on the other. On the downside, it means the Mac inherits all the same Windows limitations. There's no 'Fastest server' option to automatically choose the best location, no Favorites system, and no choice of protocol, for instance. It's also missing Mozilla's 'App Exclusions' split tunneling feature.

The app does have a few interesting touches. It also includes Mozilla's effective ad, tracker, and malicious website blocking DNS. It can also give you notifications if you connect to unsecured Wi-Fi. Other apps go further – the best VPN software can automatically connect when you access untrusted networks – but these are still features worth having.

Put it all together, and although it's not exactly powerful, this is a decent Mac app. It's simple to use and worked well for us. It connected quickly and delivered decent performance all-round.

Mobile apps

The Mozilla Android and iOS apps are near clones of the desktop builds, easy to use but with few features.

Browsing the menus, we managed to spot some differences between the desktop clients. For example, the Android app supports the split tunneling feature which isn't supported on Mac, allowing you to choose specific apps that won't have their traffic routed through the VPN.

The iOS app doesn't have split tunneling (not Mozilla's fault, it's not supported on iOS), but you do still get ad, malware, and tracker blocking DNS and some basic notification settings.

Mozilla's mobile apps aren't exactly exciting then, but like the rest of the range, they're not bad either. They all do a reasonable job of the VPN essentials, and if that's all you need, they might be good enough.

Performance

Mozilla focuses more on security and privacy than website unblocking, and our tests reflected that. The service didn't get us access to BBC iPlayer, Amazon Prime Video, Disney Plus, or Netflix in the US, UK, Australia, Canada, or Japan.

There were one or two successes in particular countries. Mozilla got us into ITV and Channel 4 in the UK, for instance, as well as Australia's 9 Now.

Not a total disaster, then, but Mozilla is trailing far behind the best providers. ExpressVPN, NordVPN, Private Internet Access, ProtonVPN, PureVPN, and Surfshark all unblocked every one of our test platforms in their last reviews.

Our performance tests found Mozilla's WireGuard-powered download speeds peaked at 360Mbps. That's far behind the likes of NordVPN, Surfshark, and Windscribe. All these VPNs reached 950Mbps+ in their last tests. If your regular internet connections only ever reach a fraction of that speed, or you're using a VPN to protect normal browsing or streaming, Mozilla VPN is fast enough.

The company ended on a positive note in our final privacy checks, as multiple test sites found Mozilla VPN blocked all DNS and WebRTC leaks.

Mozilla VPN review: Final verdict

Mozilla VPN might appeal to fans of the company, and those who'd prefer a VPN from a well-known and trusted name. However, it can't match top providers like ExpressVPN and NordVPN in features, apps, locations, range of plans, or unblocking.  Demanding users will be happier elsewhere. 

• We've also highlighted the best VPN providers of 2023

VPNs can seem like a complicated technology, packed with geeky features that not everyone understands, but TunnelBear is a provider that does does their best to keep things simple.

The Canadian-based, McAfee-owned company doesn't drown you in jargon. The website has little talk of protocols, no mention of encryption types, and barely any technical terms at all. Instead, the company focuses on the fundamentals, such as clearly explaining why you might want to use a VPN in the first place.

This approach won't work for everyone. If you're an experienced user and want to get down to the technical details of the service, for instance, you're likely to be disappointed. Search for DNS on the ExpressVPN support site, for instance, and right now you'll get 56 hits. Search at TunnelBear and you'll get three.

• Want to try TunnelBear? Check out the website here

The service specs are fairly average. The network has a mid-sized 47 countries. There are apps for Windows, Mac, iOS, and Android, as well as extensions for Chrome and Firefox. But there’s little support for getting the service working on Linux, routers, game consoles, or other not-so-common devices.

TunnelBear does have a free plan, though, and it’s great to see the company finally lift its monthly allowance from a miserly 500MB to a more usable 2GB. Although, if that’s still not enough, PrivadoVPN and Windscribe offer 10GB, while Proton VPN has no data limit at all.

There’s more good news for paying customers. TunnelBear has dropped its ‘five simultaneous connections’ limit, and you can now install and use the service on as many devices as you like.

We noticed a surprising technical improvement in support for ECH (Encrypted Client Hello), a valuable feature that protects the initial key exchange between the app and VPN server to keep it safe from snoopers. That earns a big thumbs up from us. Many otherwise more technically advanced VPNs don't support ECH yet.

TunnelBear has been busily enhancing its apps, too. Recent welcome additions include a kill switch for iOS (something you won't often see elsewhere), more reliable split tunneling, and handy usability pluses such as a Search box for the location list.

TunnelBear pricing

TunnelBear's free account offers only 2GB of traffic a month. It’s better than it was, but only enough for very occasional use. This doesn't restrict the number of locations you can use, though, unlike most of the free competition. It's ideal if you're looking for a simple way to check out the apps before you buy.

Its monthly plan gives you unlimited data for a reasonable $9.99 a month. The price drops to an effective $4.99 a month on the annual plan, or $3.33 if you sign up for three years.

These are competitive prices that beat many providers, although there are some with cheaper deals. Private Internet Access asks $2.03 a month on the first term of its three-year plan, and opting for Ivacy's five-year plan cuts the cost to a supercheap $1. To put that in perspective, handing $59.88 to TunnelBear gets you one year of coverage. Hand $60 to Ivacy and you're protected for five.

If you do sign up for TunnelBear, keep in mind that there's no money-back guarantee. The small print says: "While all amounts paid are non-refundable, certain refund requests for subscriptions may be considered by TunnelBear on a case-by-case basis." Presumably, you might get a refund if you've had really bad service, but it's entirely up to the company to decide. Not quite as friendly as the cuddly cartoon bears suggest, then.

TunnelBear used to support Bitcoin payments for its annual plan, but no more. With no PayPal, either, it’s now strictly card-only.

Privacy and logging

TunnelBear's privacy policy is one of the most thorough we've seen from any VPN provider, with in-depth information on everything the service collects, and everything it doesn't. We do mean thorough, too – the details go right down to the names, purposes, and expiry dates of the cookies used by TunnelBear.com.

The logging policy is clearly described, with TunnelBear explaining that it does not collect IP addresses visiting their website, IP addresses upon service connection, DNS Queries while connected, or any information about the applications, services, or websites users use while connected to the Service. As a result, the company says, it can't link any of its users to an action carried out by a specific IP address. Sounds good to us.

The service does record 'operational data', updating this when you connect. That includes the OS version of your device, TunnelBear app version, whether you've been active this month, and the bandwidth you've used. Not quite zero logging, then, but it's far less than we've seen elsewhere, and there's nothing here that could link you to any online action.

These aren’t just words either, TunnelBear backs up its claims with ultra-comprehensive annual audits of its apps, browser extensions, service infrastructure, backend and frontend systems, and the public website. Auditors Cure53 spent 42 days drilling down into the detail, one of the largest projects we've seen.

Unfortunately, the results weren't great. Cure53 found 32 issues in total, including two critical and eight high-severity security vulnerabilities. Cure53 described this as worrisome, but it's better to discover these from an expert auditor than after you've been hacked. And unlike some VPNs, TunnelBear hasn't hidden its audit report from potential customers. Anyone interested can access it directly from the company's blog post.  

Overall, we must applaud TunnelBear for its level of transparency. Most VPNs have never had any form of security audit, and the providers who have actually made some movement in this direction typically have one-off audits with a far narrower scope. That's just not good enough, and it's great to see TunnelBear leading the way on this front. 

But we'd still like to see less unpleasant discoveries in next year's report, please.

• Save yourself a packet with our exclusive TunnelBear offer here

Torrents

TunnelBear doesn’t say much about torrenting on its website – in fact, it barely mentions the topic at all – but the support team explained that it’s available in all locations.

Some may be more reliable than others, apparently. The company recommended we try Canada, US, UK, Romania, Netherlands, Germany, or Sweden if we had problems elsewhere.

How likely is it that you might have problems elsewhere, then? To get an idea, we tried downloading torrents from three of the other locations: Greece, Portugal, and Brazil. Despite not being on TunnelBear's 'recommended' list, they all completed without any issues, suggesting that you really should be able to use torrents right across the network.

• Check out our exclusive TunnelBear offer here

Windows app

TunnelBear's Windows app opens with all its locations highlighted on a gray world map. This has one or two nice visual touches, with cartoon palm trees in tropical areas, and snow-covered Christmas trees if you head further north. But it’s also very basic, with little map detail, and not even a zoom option to help find the locations you need.

You can also select your server from a more conventional location list. That’s probably easier, but if anything, it’s even more basic, with no ping times, server load figures, or Favorites system to save your most commonly-used servers.

Once you've chosen a location, clicking 'On' gets you connected, and the app displays a 'connection' animation, panning the screen and plotting a line across the map to your destination. It’s a cute visual effect the first time of viewing, but it began to annoy us by the 100th (unfortunately, there’s no way to turn it off).

WireGuard connection times were a little disappointing at 3-4 seconds, even for our nearest server (the best VPNs take around a second). But this didn’t change much over distance – even connecting from the UK to New Zealand took only 5-6 seconds – and times were reasonable overall.

The app displays notifications when it connects or disconnects, too, ensuring you always know when you're protected, and when you're not.

The app doesn't have many settings, but the few you get are very useful. You can have it load when Windows starts, for instance, then automatically activate the VPN whenever you access an untrusted Wi-Fi network (everywhere but home and work, say).

The Obfsproxy-based GhostBear attempts to make your activities look more like regular internet traffic, perhaps helping you connect in countries like China which try to detect and block the use of VPNs.

A VigilantBear setting is essentially a kill switch, blocking all internet traffic if the VPN drops to prevent any identity leaks. We found this had some issues in extreme situations – the kill switch could fail if the app crashed and it was restarted, for instance, but it performed well in simpler tests.

It’s great to see WireGuard supported in the Windows app, as well as OpenVPN and IKEv2. By default the app selects the most appropriate protocol for your network, but you can now also choose your preferred option.

Overall, TunnelBear's Windows app is easy to use, and the arrival of WireGuard is a major plus. There’s clearly scope for improvement in every part of the app, though, and the basic feature list could disappoint experienced users.

• Benefit from our exclusive TunnelBear discount

Mac and mobile apps

TunnelBear's Mac and mobile offerings all feature essentially the same colorful map and location list as Windows, along with WireGuard, OpenVPN, and IKEv2 support. That's good news, but what's less welcome is they also have odd variations, which could be confusing if you use more than one platform.

The Mac app is relatively basic, for instance, with no VigilantBear kill switch, automatic connection when you access untrusted Wi-Fi, or GhostBear to bypass VPN blocking.

The Android app includes a kill switch, and SplitBear, which is TunnelBear's take on split tunneling. If an app can’t connect when the VPN is running or it's too slow and doesn't require extra security, SplitBear allows it to bypass the tunnel and use your regular unencrypted connection, instead.

The Android app did have an odd technical issue at review time. The ability to switch protocols wasn't available on our Android 12 test system. TunnelBear told us this had been removed from 'newer operating systems' temporarily, while it diagnosed some reported problems, but the feature will return soon.

Unlike the Mac app, the iOS app does support the VigilantBear kill switch. However, you don't get GhostBear, and although there's the SplitBear feature, it's for websites rather than apps. So, if LocalTV.com refuses to stream when you're using the VPN, for instance, you can use SplitBear to have it connect via your normal connection.

Overall, these are all decent apps and the mobile offerings in particular outperform many competitors. But we'd like them to be more consistent across platforms, where possible, with features like SplitBear available across all platforms.

Browser extensions

Installing TunnelBear's browser extensions can make the service easier to operate, by allowing you to choose a location, connect and disconnect from inside your browser. The extensions work as proxies and so only protect your browser traffic, but if that's all you need, the extra convenience could make them worth a try.

The Chrome extension added an icon to our address bar, and tapping this enabled choosing new locations from a drop-down list.

Hit the 'Connect' button and, as usual with proxies, you're connected instantly. A tiny map updates to show your location, similar to the regular apps.

There are no extra features, no WebRTC or tracker blocking or anything else. But the extension does have a small usability plus in its keyboard shortcut support. If you want to keep your hands off the mouse, pressing Ctrl+Shift+U connects you to the VPN, and pressing it again will toggle the connection off when you're done. (A separate Alt+Shift+N shortcut toggles the connection on and off in Incognito mode.)

We checked the Firefox extension to see if it had any more options, but no, it looked and worked much the same as the Chrome version.

The browser extensions follow a very similar pattern to the apps, then – they are short on features, but relatively simple, and fine for the target audience of casual users.

• Our exclusive TunnelBear offer represents a hefty saving

Performance

To check out TunnelBear's performance, we first connected to our nearest server from a UK data center and a US location, each with 1Gbps test connections.

We then measured our download speeds multiple times using several benchmarking services including SpeedTest's site and command line app, Cloudflare, and others. Then we repeated each test in an evening session.

TunnelBear’s US OpenVPN speeds were excellent at 270-310Mbps. That's two to three times as fast as some providers, although a handful have done better. Mullvad even beat 500Mbps in recent tests.

Switching to WireGuard accelerated our downloads to 500Mbps. That's far behind the likes of NordVPN, Surfshark, and Hide.me, all of which beat 950Mbps in our last checks. Still, TunnelBear delivers all the speed that most people need and are able to use.

Speed can sometimes be affected if a VPN uses virtual locations. For example, you want to connect to Malta and get a Maltese IP address, but the servers are physically located in another country.

We tested some of TunnelBear's locations to get a feel for how the service works. The Brazil, Mexico, Nigeria, Peru, and Slovenia servers all turned out to be in or very close to their advertised countries. There seemed to be a few virtual locations, but the host countries were never too far away (the Indonesia servers may be based in Singapore, for instance, while the Kenya location may be closer to South Africa.) If it's important that your VPN locations are close to their advertised countries, TunnelBear is a reasonable choice.

Netflix and streaming

One of the major selling points of a VPN is that it can make you appear to be visiting a website from another country, perhaps giving you access to content you wouldn't be able to view otherwise. Unfortunately, this doesn't always work, so we test all VPNs with Netflix and more to see if they can give us access to various streaming sites.

TunnelBear has a poor history in our unblocking tests, and this time was no different, as it failed with Netflix in the US, UK, Australia, Canada, and Japan.

There was some success elsewhere. TunnelBear failed with BBC iPlayer, but it got us into the UK's ITV and Channel 4. In Australia, the service was defeated by 10 play, but successfully unblocked 9Now. 

TunnelBear couldn’t really redeem itself with our last two tests. It failed with Amazon Prime, but we were able to view US content on Disney Plus.

There's a faint chance TunnelBear might unblock one or two smaller streaming platforms, but if accessing geo-blocked content is a priority,  ExpressVPN, NordVPN, Private Internet Access, ProtonVPN, PureVPN, and Surfshark all unblocked every one of our test streaming services in our latest round of reviews.

Support

TunnelBear support starts with its web-based help site. This is presented in a clear and simple way, with large icons pointing you to key areas (Getting Started, Troubleshooting, Accounts), and basic articles on the most common questions ('Why should I trust TunnelBear?', 'Why can't I access the content I want?', 'Does TunnelBear keep logs?').

Go searching for answers and you'll find TunnelBear's knowledgebase doesn't have a lot of content, but what you get is well presented and gives you a decent range of information. The Connection Issues page doesn't just offer generic 'reinstall'-type ideas, for instance. It links you to TunnelBear's Twitter page to look for service information, suggests trying out the service on another network, and points you to settings which might help.

Despite its beginner-oriented approach, there's also room for just a few more advanced tweaking ideas, with recommendations for ports which should be opened in some circumstances.

There's no live chat, but if you need more help, a Contact page allows you to send a message to the support team. We'd already noticed the Android app no longer had an option to change protocols, so fired off a question asking whether this was still supported. A reply arrived in less than an hour, and we quickly got into a conversation about the problem. 

“Tap this, then this, and the option is there.” The support agent recommended. “It's not,” we replied.

“Uninstall and reinstall,” said reply two. We tried and installed it on two more devices. It made no difference

“What device and version of Android are you using?” Asked the agent. 

We sent the details back immediately but had to wait a couple of hours before a reply finally explained that this was a known issue. It turned out that TunnelBear had removed the feature on later versions of Linux, and it wasn't available to anybody. All our troubleshooting efforts had been a complete waste of time.

There were some plus points to this exchange. The replies were quick, the agent was friendly, and he gave what would have been sensible advice (if the problem was on our system.) That's not unusual, TunnelBear's support has always generally delivered decent service.

This time, though, we're struggling to see how an issue as major as this, where a significant feature has been removed from an app in some situations, and support doesn't know about it. 

Hopefully, we were just unlucky, but this doesn’t look good.

TunnelBear review: Final verdict

It's not the largest, fastest, or most powerful of VPNs but TunnelBear's ease of use and strong focus on opening up its systems to scrutiny deserve a lot of credit. If you're looking for a gentle start to VPNs, or are tired of apps that are crammed with features you never, ever use, then TunnelBear could be a smart choice.

• We've also highlighted the other best VPNs around

VPNs can seem like a complicated technology, packed with geeky features that not everyone understands, but TunnelBear is a provider that does does their best to keep things simple.

The Canadian-based, McAfee-owned company doesn't drown you in jargon. The website has little talk of protocols, no mention of encryption types, and barely any technical terms at all. Instead, the company focuses on the fundamentals, such as clearly explaining why you might want to use a VPN in the first place.

This approach won't work for everyone. If you're an experienced user and want to get down to the technical details of the service, for instance, you're likely to be disappointed. Search for DNS on the ExpressVPN support site, for instance, and right now you'll get 56 hits. Search at TunnelBear and you'll get three.

• Want to try TunnelBear? Check out the website here

The service specs are fairly average. The network has a mid-sized 47 countries. There are apps for Windows, Mac, iOS, and Android, as well as extensions for Chrome and Firefox. But there’s little support for getting the service working on Linux, routers, game consoles, or other not-so-common devices.

TunnelBear does have a free plan, though, and it’s great to see the company finally lift its monthly allowance from a miserly 500MB to a more usable 2GB. Although, if that’s still not enough, PrivadoVPN and Windscribe offer 10GB, while Proton VPN has no data limit at all.

There’s more good news for paying customers. TunnelBear has dropped its ‘five simultaneous connections’ limit, and you can now install and use the service on as many devices as you like.

We noticed a surprising technical improvement in support for ECH (Encrypted Client Hello), a valuable feature that protects the initial key exchange between the app and VPN server to keep it safe from snoopers. That earns a big thumbs up from us. Many otherwise more technically advanced VPNs don't support ECH yet.

TunnelBear has been busily enhancing its apps, too. Recent welcome additions include a kill switch for iOS (something you won't often see elsewhere), more reliable split tunneling, and handy usability pluses such as a Search box for the location list.

TunnelBear pricing

TunnelBear's free account offers only 2GB of traffic a month. It’s better than it was, but only enough for very occasional use. This doesn't restrict the number of locations you can use, though, unlike most of the free competition. It's ideal if you're looking for a simple way to check out the apps before you buy.

Its monthly plan gives you unlimited data for a reasonable $9.99 a month. The price drops to an effective $4.99 a month on the annual plan, or $3.33 if you sign up for three years.

These are competitive prices that beat many providers, although there are some with cheaper deals. Private Internet Access asks $2.03 a month on the first term of its three-year plan, and opting for Ivacy's five-year plan cuts the cost to a supercheap $1. To put that in perspective, handing $59.88 to TunnelBear gets you one year of coverage. Hand $60 to Ivacy and you're protected for five.

If you do sign up for TunnelBear, keep in mind that there's no money-back guarantee. The small print says: "While all amounts paid are non-refundable, certain refund requests for subscriptions may be considered by TunnelBear on a case-by-case basis." Presumably, you might get a refund if you've had really bad service, but it's entirely up to the company to decide. Not quite as friendly as the cuddly cartoon bears suggest, then.

TunnelBear used to support Bitcoin payments for its annual plan, but no more. With no PayPal, either, it’s now strictly card-only.

Privacy and logging

TunnelBear's privacy policy is one of the most thorough we've seen from any VPN provider, with in-depth information on everything the service collects, and everything it doesn't. We do mean thorough, too – the details go right down to the names, purposes, and expiry dates of the cookies used by TunnelBear.com.

The logging policy is clearly described, with TunnelBear explaining that it does not collect IP addresses visiting their website, IP addresses upon service connection, DNS Queries while connected, or any information about the applications, services, or websites users use while connected to the Service. As a result, the company says, it can't link any of its users to an action carried out by a specific IP address. Sounds good to us.

The service does record 'operational data', updating this when you connect. That includes the OS version of your device, TunnelBear app version, whether you've been active this month, and the bandwidth you've used. Not quite zero logging, then, but it's far less than we've seen elsewhere, and there's nothing here that could link you to any online action.

These aren’t just words either, TunnelBear backs up its claims with ultra-comprehensive annual audits of its apps, browser extensions, service infrastructure, backend and frontend systems, and the public website. Auditors Cure53 spent 42 days drilling down into the detail, one of the largest projects we've seen.

Unfortunately, the results weren't great. Cure53 found 32 issues in total, including two critical and eight high-severity security vulnerabilities. Cure53 described this as worrisome, but it's better to discover these from an expert auditor than after you've been hacked. And unlike some VPNs, TunnelBear hasn't hidden its audit report from potential customers. Anyone interested can access it directly from the company's blog post.  

Overall, we must applaud TunnelBear for its level of transparency. Most VPNs have never had any form of security audit, and the providers who have actually made some movement in this direction typically have one-off audits with a far narrower scope. That's just not good enough, and it's great to see TunnelBear leading the way on this front. 

But we'd still like to see less unpleasant discoveries in next year's report, please.

• Save yourself a packet with our exclusive TunnelBear offer here

Torrents

TunnelBear doesn’t say much about torrenting on its website – in fact, it barely mentions the topic at all – but the support team explained that it’s available in all locations.

Some may be more reliable than others, apparently. The company recommended we try Canada, US, UK, Romania, Netherlands, Germany, or Sweden if we had problems elsewhere.

How likely is it that you might have problems elsewhere, then? To get an idea, we tried downloading torrents from three of the other locations: Greece, Portugal, and Brazil. Despite not being on TunnelBear's 'recommended' list, they all completed without any issues, suggesting that you really should be able to use torrents right across the network.

• Check out our exclusive TunnelBear offer here

Windows app

TunnelBear's Windows app opens with all its locations highlighted on a gray world map. This has one or two nice visual touches, with cartoon palm trees in tropical areas, and snow-covered Christmas trees if you head further north. But it’s also very basic, with little map detail, and not even a zoom option to help find the locations you need.

You can also select your server from a more conventional location list. That’s probably easier, but if anything, it’s even more basic, with no ping times, server load figures, or Favorites system to save your most commonly-used servers.

Once you've chosen a location, clicking 'On' gets you connected, and the app displays a 'connection' animation, panning the screen and plotting a line across the map to your destination. It’s a cute visual effect the first time of viewing, but it began to annoy us by the 100th (unfortunately, there’s no way to turn it off).

WireGuard connection times were a little disappointing at 3-4 seconds, even for our nearest server (the best VPNs take around a second). But this didn’t change much over distance – even connecting from the UK to New Zealand took only 5-6 seconds – and times were reasonable overall.

The app displays notifications when it connects or disconnects, too, ensuring you always know when you're protected, and when you're not.

The app doesn't have many settings, but the few you get are very useful. You can have it load when Windows starts, for instance, then automatically activate the VPN whenever you access an untrusted Wi-Fi network (everywhere but home and work, say).

The Obfsproxy-based GhostBear attempts to make your activities look more like regular internet traffic, perhaps helping you connect in countries like China which try to detect and block the use of VPNs.

A VigilantBear setting is essentially a kill switch, blocking all internet traffic if the VPN drops to prevent any identity leaks. We found this had some issues in extreme situations – the kill switch could fail if the app crashed and it was restarted, for instance, but it performed well in simpler tests.

It’s great to see WireGuard supported in the Windows app, as well as OpenVPN and IKEv2. By default the app selects the most appropriate protocol for your network, but you can now also choose your preferred option.

Overall, TunnelBear's Windows app is easy to use, and the arrival of WireGuard is a major plus. There’s clearly scope for improvement in every part of the app, though, and the basic feature list could disappoint experienced users.

• Benefit from our exclusive TunnelBear discount

Mac and mobile apps

TunnelBear's Mac and mobile offerings all feature essentially the same colorful map and location list as Windows, along with WireGuard, OpenVPN, and IKEv2 support. That's good news, but what's less welcome is they also have odd variations, which could be confusing if you use more than one platform.

The Mac app is relatively basic, for instance, with no VigilantBear kill switch, automatic connection when you access untrusted Wi-Fi, or GhostBear to bypass VPN blocking.

The Android app includes a kill switch, and SplitBear, which is TunnelBear's take on split tunneling. If an app can’t connect when the VPN is running or it's too slow and doesn't require extra security, SplitBear allows it to bypass the tunnel and use your regular unencrypted connection, instead.

The Android app did have an odd technical issue at review time. The ability to switch protocols wasn't available on our Android 12 test system. TunnelBear told us this had been removed from 'newer operating systems' temporarily, while it diagnosed some reported problems, but the feature will return soon.

Unlike the Mac app, the iOS app does support the VigilantBear kill switch. However, you don't get GhostBear, and although there's the SplitBear feature, it's for websites rather than apps. So, if LocalTV.com refuses to stream when you're using the VPN, for instance, you can use SplitBear to have it connect via your normal connection.

Overall, these are all decent apps and the mobile offerings in particular outperform many competitors. But we'd like them to be more consistent across platforms, where possible, with features like SplitBear available across all platforms.

Browser extensions

Installing TunnelBear's browser extensions can make the service easier to operate, by allowing you to choose a location, connect and disconnect from inside your browser. The extensions work as proxies and so only protect your browser traffic, but if that's all you need, the extra convenience could make them worth a try.

The Chrome extension added an icon to our address bar, and tapping this enabled choosing new locations from a drop-down list.

Hit the 'Connect' button and, as usual with proxies, you're connected instantly. A tiny map updates to show your location, similar to the regular apps.

There are no extra features, no WebRTC or tracker blocking or anything else. But the extension does have a small usability plus in its keyboard shortcut support. If you want to keep your hands off the mouse, pressing Ctrl+Shift+U connects you to the VPN, and pressing it again will toggle the connection off when you're done. (A separate Alt+Shift+N shortcut toggles the connection on and off in Incognito mode.)

We checked the Firefox extension to see if it had any more options, but no, it looked and worked much the same as the Chrome version.

The browser extensions follow a very similar pattern to the apps, then – they are short on features, but relatively simple, and fine for the target audience of casual users.

• Our exclusive TunnelBear offer represents a hefty saving

Performance

To check out TunnelBear's performance, we first connected to our nearest server from a UK data center and a US location, each with 1Gbps test connections.

We then measured our download speeds multiple times using several benchmarking services including SpeedTest's site and command line app, Cloudflare, and others. Then we repeated each test in an evening session.

TunnelBear’s US OpenVPN speeds were excellent at 270-310Mbps. That's two to three times as fast as some providers, although a handful have done better. Mullvad even beat 500Mbps in recent tests.

Switching to WireGuard accelerated our downloads to 500Mbps. That's far behind the likes of NordVPN, Surfshark, and Hide.me, all of which beat 950Mbps in our last checks. Still, TunnelBear delivers all the speed that most people need and are able to use.

Speed can sometimes be affected if a VPN uses virtual locations. For example, you want to connect to Malta and get a Maltese IP address, but the servers are physically located in another country.

We tested some of TunnelBear's locations to get a feel for how the service works. The Brazil, Mexico, Nigeria, Peru, and Slovenia servers all turned out to be in or very close to their advertised countries. There seemed to be a few virtual locations, but the host countries were never too far away (the Indonesia servers may be based in Singapore, for instance, while the Kenya location may be closer to South Africa.) If it's important that your VPN locations are close to their advertised countries, TunnelBear is a reasonable choice.

Netflix and streaming

One of the major selling points of a VPN is that it can make you appear to be visiting a website from another country, perhaps giving you access to content you wouldn't be able to view otherwise. Unfortunately, this doesn't always work, so we test all VPNs with Netflix and more to see if they can give us access to various streaming sites.

TunnelBear has a poor history in our unblocking tests, and this time was no different, as it failed with Netflix in the US, UK, Australia, Canada, and Japan.

There was some success elsewhere. TunnelBear failed with BBC iPlayer, but it got us into the UK's ITV and Channel 4. In Australia, the service was defeated by 10 play, but successfully unblocked 9Now. 

TunnelBear couldn’t really redeem itself with our last two tests. It failed with Amazon Prime, but we were able to view US content on Disney Plus.

There's a faint chance TunnelBear might unblock one or two smaller streaming platforms, but if accessing geo-blocked content is a priority,  ExpressVPN, NordVPN, Private Internet Access, ProtonVPN, PureVPN, and Surfshark all unblocked every one of our test streaming services in our latest round of reviews.

Support

TunnelBear support starts with its web-based help site. This is presented in a clear and simple way, with large icons pointing you to key areas (Getting Started, Troubleshooting, Accounts), and basic articles on the most common questions ('Why should I trust TunnelBear?', 'Why can't I access the content I want?', 'Does TunnelBear keep logs?').

Go searching for answers and you'll find TunnelBear's knowledgebase doesn't have a lot of content, but what you get is well presented and gives you a decent range of information. The Connection Issues page doesn't just offer generic 'reinstall'-type ideas, for instance. It links you to TunnelBear's Twitter page to look for service information, suggests trying out the service on another network, and points you to settings which might help.

Despite its beginner-oriented approach, there's also room for just a few more advanced tweaking ideas, with recommendations for ports which should be opened in some circumstances.

There's no live chat, but if you need more help, a Contact page allows you to send a message to the support team. We'd already noticed the Android app no longer had an option to change protocols, so fired off a question asking whether this was still supported. A reply arrived in less than an hour, and we quickly got into a conversation about the problem. 

“Tap this, then this, and the option is there.” The support agent recommended. “It's not,” we replied.

“Uninstall and reinstall,” said reply two. We tried and installed it on two more devices. It made no difference

“What device and version of Android are you using?” Asked the agent. 

We sent the details back immediately but had to wait a couple of hours before a reply finally explained that this was a known issue. It turned out that TunnelBear had removed the feature on later versions of Linux, and it wasn't available to anybody. All our troubleshooting efforts had been a complete waste of time.

There were some plus points to this exchange. The replies were quick, the agent was friendly, and he gave what would have been sensible advice (if the problem was on our system.) That's not unusual, TunnelBear's support has always generally delivered decent service.

This time, though, we're struggling to see how an issue as major as this, where a significant feature has been removed from an app in some situations, and support doesn't know about it. 

Hopefully, we were just unlucky, but this doesn’t look good.

TunnelBear review: Final verdict

It's not the largest, fastest, or most powerful of VPNs but TunnelBear's ease of use and strong focus on opening up its systems to scrutiny deserve a lot of credit. If you're looking for a gentle start to VPNs, or are tired of apps that are crammed with features you never, ever use, then TunnelBear could be a smart choice.

• We've also highlighted the other best VPNs around

EVenture Limited subsidiary Hide.me is a Malaysia-based company that has been making waves in the VPN business since 2011.

Hide.me's network includes 2,100 servers spread across 78 locations. That's not bad at all and enough for most people but if you need more, the likes of ExpressVPN (3,000+ servers across 94 countries) and CyberGhost (9,200 in 91) give you even more options.

The company piles on the features elsewhere, though. Wide protocol support includes WireGuard, OpenVPN, IKEv2, SoftEther, and SSTP. Plus, there's protection against DNS, IP, and even IPv6 leaks and port forwarding is available if you need it.

The service can be used on Windows, macOS, Android, iOS, Linux, routers, consoles, and smart TVs. You can connect up to 10 devices simultaneously, and there's 24/7 live chat support if you run into problems.

• Want to try Hide.me? Check out the website here

Advanced features include MultiHop VPN, allowing you to connect to one location and exit from another. This makes it even more difficult for anyone to trace back and identify you.

Hide.me claims to support P2P on most servers. We verified this by connecting to five different locations and had hassle-free torrenting in each case.

Furthermore, unlike some of the competition, Hide.me doesn't just make vague promises about its unblocking abilities. Its Unblock page lists the many sites it supports, including Netflix, BBC iPlayer, Hulu, Amazon Prime, Disney Plus, ShowTime, and more.

Recent improvements have been more about enhancing the service than delivering huge changes. But they're worthwhile enhancements, in particular the ongoing upgrade of servers from 1Gbps to 10Gbps. Plenty of providers claim to be doing the same but are shy about telling you how many locations they've upgraded. Hide.me is much more transparent and highlight 10Gbps servers in the apps.

Hide.me pricing

Hide.me's monthly plan is fairly priced at $9.95. Most providers charge somewhere in the $10-$13 range, although a few are significantly cheaper (Mullvad asks around $6).

The annual plan is available for an above-average $5.82 a month. Hide.me used to throw in 2TB of Internxt cloud storage, but no more. Now, it's the VPN only. Most providers are a little cheaper at around $4-5 for annual subscriptions, and a few cost even less (you'll pay a monthly $3.33 for Private Internet Access, $2.08 for FastestVPN).

The two-year plan offers the best value at $3.45, but even here, there's money to be saved elsewhere. Atlas VPN's three-year plan costs $2.08 a month, for instance. Looking at the totals, paying $89.95 to Hide.me gets you coverage for two years with two months free – but three years of protection (with three months free) at Atlas VPN costs $71.52. 

Whichever duration you choose, there is a wide range of payment options to purchase it. This includes cards, Bitcoin, PayPal, Google Pay, Amazon Pay, and perhaps other providers (the precise list depends on your location.)

If you hand over your cash and regret it later, no problem! You're protected by a no-questions-asked 30-day money-back guarantee. As long as you’ve never had a refund from Hide.me previously.

If you decide that you don’t want to pay anything, the free plan now supports eight countries (Canada, France, Germany, Netherlands, Singapore, Spain, United Kingdom, United States). The restrictions include no streaming support, port forwarding, or multihop VPN. 

The good news is there's P2P support everywhere, and absolutely no annoying data limits. You can use the service as much as you like. 

Privacy

Hide.me has a strict no logging policy. The company claims, "We do NOT keep logs of your VPN sessions, browsing behavior, websites you visit, or any activity related to your VPN connection. In addition, we NEVER store VPN connection logs and timestamps that match your incoming and outgoing IP address or session duration."

Hide.me does briefly record your randomly generated username and internally assigned (non-public) IP address when you connect, but this is only for troubleshooting purposes, and the company says even this troubleshooting log is securely wiped every few hours.

Hide.me says it will comply with court orders received by recognized legal authorities with jurisdiction over them. But again, that's to be expected, and if the logs don't show anything significant, that won't matter at all.

The company claims this is supported by a comprehensive audit, and that 'Hide.me has been certified as the most anonymous VPN service in the industry.'

It turns out that the audit dates from 2015, though. There's little information on the scope of the audit and no report you can read. Hide.me deserves real credit for realizing the importance of audits so long ago – some providers still don't get it, even today – but we think it's probably time to take another, something more thorough and transparent, where everyone can read the full results.

In the meantime, there's a simple metric we use to get a feel for how any provider is handling your privacy, and that’s how many trackers and third-party cookies are used on its website. The Blacklight privacy inspector gave us the answer; none at all. That's not unique - Mullvad, Proton VPN, Windscribe, and a handful of others are also tracker-free - but it's unusual, and suggests Hide.me is making a real effort to maintain your privacy. 

Apps

Hide.me's Windows app has a clear and straightforward interface. A large Enable button plugs you into the nearest server, the full location list (countries, expandable to cities in some cases) is just a click away, and a navigation bar has buttons for the streaming service, app settings, and more. 

The flexible location list can sort your options by name, or use ping time to show the fastest servers at the top. Begin typing a city or country name in the Search box and the list updates to display any matches (typing MIA cuts the list to just Miami, for instance.) A Favorites system enables grouping your most-used servers together for speedier access later.

A Streaming tab connects you to the best locations to unblock streaming platforms in a lengthy list of countries: Argentina, Australia, Austria, Brazil, Canada, Croatia, France, Germany, Italy, Japan, Norway, Poland, Portugal, Spain, Switzerland, Turkey, United Kingdom, and United States. That's nine countries added since our last review. Impressive!

Connection times were good in most cases, with WireGuard getting us online in 1-2 seconds. The app doesn't appear to have a connection timeout, though, and a couple of times we found it hung on its 'Initializing service connection...' animation for minutes.

Digging into the details, it looked like Hide.me's Windows service had failed, and the app wasn't able to restart it. That can happen, but the top providers do a better job of handling it. ExpressVPN's Windows app recognizes a service failure immediately, for instance, without leaving you waiting for minutes. Then, it either fixes the problem all on its own or tells you what to do next.

 Typically, though, connections ran smoothly, with the app making good use of notifications to keep you informed about what it's doing. Switch back to your other apps, and Hide.me will let you know when you’re protected, and when you’re not.

Hide.me's MultiHop feature gives you another option, good news when you need the best possible privacy. Choose an entry server of New York, say, and that's where you'll connect, but you'll be redirected through Hide.me's network to your pick of exit servers. Websites will think you're in the UK, and even if an attacker manages to compromise the London server, they won't be able to link the activity to your account as you've accessed it using the New York server, not your own IP.

Settings

There's real depth here. The app supports no less than five protocols (WireGuard, OpenVPN, IKEv2, SoftEther, SSTP), for instance, with a stack of configuration options including IKEv2 stealth mode, custom and random ports, tunnel via IPv4 or IPv6, and the option to enable Bolt (Hide.me's custom speedup technology). More on that, later.

That's just the start. While most VPN apps ignore IPv6 entirely, or at best give you an option to disable it, Hide.me offers complete support and control. You can have the app connect via IPv4 only, IPv6 only, prefer IPv4 but use IPv6 as a fallback, or prefer IPv6 but use IPv4 as a fallback. That'll probably get you better speeds if you can use IPv6 and Hide.me's ability to handle both protocols reduces the chance of data leaks.

The advanced features continue everywhere you look. For example, split tunneling support enables defining which apps use the VPN, and which will use your regular connection. Plus, the client doesn't just have a single on/off kill switch setting to define what happens if the connection drops. It can run customs scripts, too. You get it to close apps, run others, whatever you like. You can also define whether scripts are run as the current user or an administrator.

There's a lot to explore, and sometimes we couldn't remember where to find a particular setting. Fortunately, the app has a settings Search box. If you know you want to customize the Best Location feature, just type 'best' in the Search box, click the link, and the app will take you to the right page, and even highlight the option for you. A neat touch we've not seen with anyone else. 

Mac app

Hide.me's Mac app is a near clone of the Windows edition, with only the odd tiny visual detail and occasional caption changes to tell them apart.

Connection times were much faster than we saw on Windows, and we didn't have any connection failures. Real-world use was otherwise much the same. The app was easy to use, there were no unexpected drops, and everything worked more or less as we'd expect.

There's a decent set of advanced options, too. WireGuard, OpenVPN, and IKEv2 protocol support, a kill switch, auto-connect when you access untrusted networks, and split tunneling. If any of this technology doesn't quite deliver, you can even raise a ticket from within the app.

There are a lot of advanced Windows features which haven't made it to the Mac. There's no VPN-wide custom DNS option, no custom MTU, no way to tweak how Best Location is chosen, no IPv6 tunnel option, no IKEv2 configuration tweaks, and no real kill switch configurability beyond on or off.

If you're not interested in VPN technicalities then none of that is likely to matter very much, and this is still a quality Mac app. It's not difficult to use, performance is good, and it has far more features than most. 

iOS app

Most VPNs focus their development time on desktop apps, and iOS users in particular are expected to be grateful with whatever scraps are left. Fortunately, no one told Hide.me that this is the way things are supposed to be. Its own iOS offering is surprisingly powerful.

This isn't visible initially, because the app has the same simple and appealing interface as the rest of the range. It has the blue and white color scheme, big connect button, and not a whole lot else. Don’t let that fool you, we tapped a few buttons and quickly got a feel for just what the app can do.

The Location picker has all the features we saw on the desktop including the Favorites, the Streaming and Multihop lists, the search box, sorting, and more. You probably won't need all of that, but just the ability to bring favorite servers to the top of the list can make your VPN life so much easier.

IOS apps typically have almost no settings, but this one outperforms some of the Windows competition. There's support for IKEv2, OpenVPN UDP, OpenVPN TCP and WireGuard, for instance. The app can automatically connect when you use Wi-Fi or mobile networks. There's a kill switch. You can choose a custom DNS server. You even get to control whether the tunnel uses IPv4 or IPv6, assuming you've a reason to care and if you don't, no problem, the app has sensibly chosen defaults.

The feature list is still a little shorter than the desktop apps (no split tunneling, for instance), but that's inevitable, iOS just doesn't allow anything like the same level of system control. Despite that, this is a top-notch iOS app. It's easy to use and way more configurable than most of the competition.

Android app

Hide.me's Android app didn’t spoil the excellent record for cross-platform consistency. Hide.me has paid real attention to detail with app design, and essentially the Android edition has the same appealing interface and capable location list as the rest of the family.

A better-than-most feature list includes WireGuard, OpenVPN, and IKEv2 support, auto-connect for unsecured networks, and a custom DNS option.

The Android app beats iOS with split tunneling, where you're able to define which apps use the VPN tunnel, and which don't. But it does lack some functionality. For example, it doesn't allow you to decide whether to use IPv4 or IPv6.

Overall, this is an impressive mix of power and ease of use. You don't have to register to use Hide.me's free plan, or hand over any personal details – just install it from your app store, explore the various screens, and see how it works.

And if you don't understand something, or there's some other problem? You can even raise a ticket from within the app. Now that's what we call convenient.

Kill switch

We checked out the Windows app kill switch by manually closing WireGuard, OpenVPN and IKEv2 connections and everything worked as it should – our internet access was blocked right away, a notification warned us about the problem, and the app reconnected within seconds.

The kill switch didn’t always work when we switched locations, though. The app appears to close the first connection, then try to connect to the new server, and our device was sometimes able to use its regular internet connection until the tunnel was re-established.

This is unlikely to be a big issue for most users. If you’ve decided to switch locations, that’s a very strong indication that you’ve finished your torrenting, your online banking or whatever else you’re trying to protect, and a few seconds of unprotected internet access may not matter at all.

It is still a weakness, though, and one that could be a concern in the most privacy-critical situations.

Privacy tests

Hide.me's Windows apps boast plenty of protocols, but are they set up for maximum security? We can't see every detail of what's going on, but checking app configuration files and logs provides some useful information.

The results were broadly positive, with OpenVPN using AES-256-CBC encryption and SHA256 authentication. IKEv2 connections provided the same reliable AES-256 shield, while SoftEther appeared to use its standard (and very acceptable) default settings.

The app's WireGuard and OpenVPN files were more than a year old, which means they're missing plenty of patches and bug fixes. This is unlikely to have any real practical impact on your privacy, but we'd like to see Hide.me update these more often, just to keep any risks to a minimum.

We spotted a slightly dubious design decision with the app's OpenVPN connections, as it saved our username and password to disk in plain text. This also isn't that big a deal (if you've got malware reading files, Hide.me's logins are the least of your worries), but it's unnecessary, and most apps do a better job of concealing your credentials.

Once we got connected, Hide.me excelled on the privacy front, with IPleak.net, DNSleak.com, and DNSleaktest.com confirming that it correctly shielded our IP, allocated us a new address from our chosen country, and blocked DNS leaks at all times.

Virtual locations

Most VPNs have very long location lists, but their servers aren't always where you expect. If they're in a country that maybe has poor internet connectivity, then a provider will often host them elsewhere.

This can often be a good idea. If a VPN offers a Monaco location, and allocates you a Monaco IP address when you connect, but the servers are really in a super-fast French data center just a few miles away, should you care very much? We'd say no.

But what if you're in Cambodia, and you connect to a Cambodia location, but the server is really located in New York? That's likely to deliver a big and very unexpected performance hit.

We tested ten Hide.me locations to get a feel for what the company is doing. 

In most cases, Hide.me's servers turned out to be in the advertised locations and some appeared to be virtual locations but weren't far away. Still, we found a couple of notable exceptions. Hide.me's Mexico location appears to be hosted on the US east coast, and its Morocco servers are closer to Quebec or Ontario.

This may not be an issue for everyone. The servers correctly give you Mexican and Moroccan IP addresses, so they’ll work just as you expect, and if you're in North America, having servers closer by might improve performance.

Providers should be transparent about their use of virtual locations, though, in order that potential customers can make up their own minds. Hide.me doesn’t highlight which locations are virtual, or tell users where they really are (which ExpressVPN does), and we'd like to see that change.

Netflix and streaming

Most VPNs claim they can help you access geoblocked websites, and Hide.me is no exception, with the company promising that you'll 'avoid annoying censorship.'

And this turned out to be correct, as Hide.me got us access to Netflix in the US, UK, Australia, Canada and Japan.

It scored with our other test US platforms, too, working with both Amazon Prime Video and Disney Plus.

The good news kept coming, too. Not only did Hide.me unblock BBC iPlayer, ITV and Channel 4 in the UK, but it delivered with Australia’s 9Now and 10 play, too.

That’s a perfect 100% unblocking score, a great result. Hide.me did just as well in our last review, too, which suggests the company didn’t just get lucky – it’s working hard to unblock everything possible, and then make sure those services stay available long-term.

(If you plan on testing Hide.me for yourself, keep in mind that you only get this level of success from the paid product – the free plan doesn't support unblocking streaming sites.)

Performance

We assess VPN speeds by running multiple automated speed tests using several platforms including SpeedTest's website and command line app, Measurement Lab, and Cloudflare.

Hide.me’s data center results were pleasantly unexpected. WireGuard speeds reached a decent mid-range of 580Mbps and switching to regular OpenVPN got us an above average 260Mbps. Using OpenVPN with Hide.me's Bolt got us an amazing 950Mbps. 

That's a huge achievement, but there's an important point to keep in mind. Bolt is only available in the Windows app. If you're using Bolt on any other platform, performance is going to be more ordinary, though still very acceptable for most purposes. Would you really be upset if your VPN 'only' managed 580Mbps? Didn't think so.

Hide.me review: Final verdict

Hide.me is a speedy and highly configurable service, which unblocks almost everything and has an array of unusual and advanced features – in short, one of the best VPNs around for more experienced and demanding users. If you're looking for power then go check out the free version right now, see what it can do for you.