US-based IPVanish is an appealing VPN provider with a long list of features, including several that you won't often see elsewhere.

IPVanish has a decent-sized network with 40,000+ shared IPs, and 2,000+ servers in 75+ locations. 

The company says all servers are P2P-friendly (with a SOCKS5 proxy to boost speeds), and sure enough, we were able to download torrents from all five of our test locations.

• Want to try IPVanish? Check out the website here

There are apps for Windows, Mac, Android, iOS, and even Amazon Fire TV. Plus, a host of setup guides for routers, Linux, Chromebooks, and other platforms.

You can install, configure, and set up as many devices as you like – IPVanish has no fixed limits on the number of simultaneous connections you can make. We guess the company might get in touch if you reach 50 and are still going, but that's still a major benefit over the 5-device limit you'll get with some providers.

Protocol support includes turbocharged WireGuard, OpenVPN, and IKEv2. If you're trying to get online via a network or country which blocks VPNs, an OpenVPN Scramble feature conceals your traffic and might help you connect.

The company has been busy since our last review. Changes since then include a redesigned home screen on the desktop apps, enhanced streaming support (Netflix Japan in particular), several new payment types (Google Pay, Amazon Pay, S€PA, and Apple Pay), and a free 7-day trial for first-time mobile users.

If you need help without waiting, it's good to know that 24/7 live chat is available, and even here, IPVanish delivers a little more than we expected. There's phone support during the working week (Monday to Friday, 9 am – 5 pm CT, that's UTC -6), with numbers in the US, UK, Australia, Mexico, Spain, and Brazil.

IPVanish pricing

IPVanish pricing for its VPN service starts with monthly billing at $11.99.

The annual plan looks fair value at $4.50 per month. But beware, this is a special introductory deal. Prices jump to $7.50 on renewal.

The two-year plan is a bargain at $3.33 a month for the first term. But it renews at the same $7.50 a month as the annual deal (no discount for the longer term.)

These are reasonable prices for what you're getting. They're a little cheaper than NordVPN and ExpressVPN, but still more expensive than other options. While IPVanish costs $89.99 a year after the first term, the Private Internet Access 3-year plan gives you 39 months of protection for an upfront cost of $79. Plus, there's no built-in price hike at the time of renewal.

If you decide to sign up, IPVanish accepts payments via card and PayPal. There's support for paying via Google Pay, Amazon Pay, S€PA, and Apple Pay, but Bitcoin still isn't available.

IPVanish offers a 30-day money-back guarantee but be sure to check the small print as it's for yearly plans only. Monthly-billed plans aren't eligible.

Privacy

Most IPVanish apps come with a range of privacy-protecting tools. The Windows build includes a kill switch, DNS, and even IPv6 leak protection to reduce the chance that your traffic or identity is exposed online.

Privacy pluses elsewhere include the iOS app's ability to automatically connect when you access public Wi-Fi networks but ignore others that you feel are safe (home, work, whatever they might be). You can then mostly leave the VPN to turn itself on and off as required, maintaining your privacy at all times.

To confirm that the service really does preserve your anonymity, we used IP and DNS leak tests and a number of leak-detecting sites. None of the tests revealed any issues. The apps always protected our identity and traffic.

A useful indicator of a provider's attitude to privacy is the trackers used on its website. We pointed the Blacklight privacy inspector at IPVanish's site, and it reported five trackers and ten tracking cookies (mostly Google, Facebook, and Microsoft.) There's nothing out of the ordinary, but IPVanish does use more than most. A few providers including Hide.me, Mullvad, and Proton VPN use no trackers at all.  

• Get a good chunk off IPVanish with our exclusive offer here

Logging

IPVanish's privacy policy begins with a clear and reassuring statement: 'IPVanish is a zero-logs VPN service provider, which means that we do not keep a record of any connection, traffic, or activity data in regards to our Services.'

The document lists the data IPVanish collects via the website, its registration and payment procedures. There's nothing harmful or out of the ordinary, and we only saw the details we expected: cookies, website analytics, email address and so on.

IPVanish doesn't just have reassuring words, either. In April 2022 it backed them up with a blog post announcing that Leviathan Security Group had 'audited our technology and independently verified that our no-log VPN service complies with our Privacy Policy. '

The audit was unusually detailed, and included interviews with staff, a range of technical tests, and examination of a production server, documentation, system configurations and more. (The full report is linked from IPVanish blog post, if you're interested.)

It's great to see a provider with the courage to put itself through this level of scrutiny, and we hope it'll encourage other providers to do the same.

We still have one minor but long-standing IPVanish privacy issue. Like many providers, the apps collect and send back anonymous usage data. There’s no reason to believe this contains anything harmful, but our concern is that IPVanish has previously done this by default, and without explaining it to users. (We much prefer ExpressVPN’s approach, where the apps don’t send this data at all unless users specifically allow it).

The good news is this may be changing, at last. The iOS app now opts users out of data collection by default, and it’s up to you if you’d like to opt in. That’s the most privacy-focused approach, and we hope to see the same change on other platforms soon.

Performance

We measure VPN performance by running several benchmarking services including SpeedTest's website and command line app, Cloudflare, and Measurement Lab. We run the tests from both a UK data center and a US residential location. Both locations have 1Gbps connections. We run each test five times with OpenVPN, five times using WireGuard, and we do it all over again several hours later (that's a minimum of 120 tests), then analyze the data to see what's going on.

Most providers reach 100-200 Mbps with OpenVPN, and IPVanish managed an average of 180-190 Mbps. That's far behind the 280-480 Mbps OpenVPN speeds we saw from Mullvad, but still above average and fine for browsing and even the highest resolution streams. 

We managed to play with the settings and get even better results. IPVanish apps use WireGuard by default. After we switched protocols, we saw speeds soar to 950Mbps+. Your experience may be very different as you probably don't have data center levels of connectivity, but it does suggest IPVanish's servers aren't overloaded.

• Save yourself a packet with our exclusive IPVanish offer here

Netflix and streaming

IPVanish claims to offer "secure access to all of your favorite streaming sites." That's not always been our experience in previous reviews, but we were keen to see how the service performed this time around.

The VPN provider scored well with US Netflix, getting us access to US-exclusive Netflix content from all three of our test locations. 

It was a mixed bag with other libraries. IPVanish unblocked Netflix in the UK and Japan but failed in Australia, and we couldn't even access the Netflix Canada site.

We found a similar uncertain picture in the US, as the service got us access to Amazon Prime Video but couldn't unblock Disney Plus.

IPVanish ended on a relatively high note with our country-level tests. Sure, it failed with Australia's 10Play, but it made up for that by unblocking 9Now, and managed to bypass the VPN defenses for the UK's BBC iPlayer, ITV, and Channel 4.

Eight out of twelve platform tests passed is a decent score. It could be that IPVanish can access all the platforms you care about, but if not, ExpressVPN, NordVPN, Private Internet Access, ProtonVPN, PureVPN, and Surfshark all unblocked every one of our test sites in their most recent reviews.

Windows app

IPVanish's revamped Windows app opens with a feature-packed new home screen. There's the current location, a Connect/ Disconnect button, a panel listing assorted details about your connection (IP, protocol, data uploaded and downloaded, more), a zoomable world map including pins for all IPVanish locations, and a sidebar with buttons pointing to other areas of the app.

If you think that sounds cluttered, you'd be right, but there is a partial fix. You can opt to hide either the Connection Details panel, or the map, and that does make a difference. We chose to keep the map, simplifying the screen and leaving the app looking much like the previous edition.

Connecting to the nearest location is as easy as hitting the large green Connect button. Alternately, you can pan around the map just like any other (left-click, hold and drag to pan, or spin the mouse wheel to zoom), and double-click any location pin to launch a connection.

The app has an excellent location list. It's crammed with every feature and detail you can imagine. You're able to choose locations by country, city, or even individual servers. Every location displays its ping time and server load, helping you make the best choice. Start typing a city or country name into the search box and the list immediately updates with any hits, or you can use the Favorites system to group commonly-used servers for speedy reconnections later.

• Grab our exclusive IPVanish deal which offers a big saving

Settings

The Settings box has a decent bunch of options. You can switch protocols between WireGuard, IKEv2, and OpenVPN TCP and UDP. You're also able to choose port 1194 or 443 for OpenVPN, which might help you bypass small-scale VPN blocking. We're talking about local Wi-Fi hotspots rather than China. You can define which server IPVanish uses when the client starts, repair the IPVanish OpenVPN driver if it's affected by another VPN, and view the OpenVPN logs within the interface to troubleshoot problems. There's also both DNS and IPv6 leak protection. 

Auto-connect settings can make your app connect when it launches, or when you connect to an untrusted network. By default, the app trusts ethernet and cellular networks but you can turn that off if you're the cautious type, and auto-connect by default almost everywhere.

The client's kill switch isn't enabled by default, so we turned it on and ran a few tests. The results were excellent in every area. Whatever tricks we pulled to break the connection on whatever protocol we used, the client warned us immediately with a desktop notification and reconnected if we'd enabled that option in Settings, without ever revealing our real IP.

There is one catch, though – this is the absolute kind of kill switch, where once you've turned it on, you can't access the internet at all unless you're connected to the VPN. This is certainly secure, but it's not always convenient. 

IPVanish has tried to address this by adding a Kill Switch button to the app home screen. If the VPN won't connect or you really need to use your regular connection, you can disable the kill switch with a click, just temporarily, and restore it when you're done.

While we could live with this as a compromise, we'd like the option to have a kill switch that doesn't cut off the internet when you disconnect from the VPN

Mac app

The IPVanish Mac app is due to get the same dual-pane 'map plus connection details' home screen as the Windows edition. This wasn't completed at the time of review; however, we did get the chance to use the beta version. The beta had exactly the same issues as the Windows App. It's a little too cluttered, but the option to hide one pane or the other makes it a little better.

The current, soon-to-be-replaced, Mac app has a decent set of core features including support for WireGuard, OpenVPN, IKEv2, IPSec, and L2TP, the ability to automatically connect or disconnect when you access untrusted Wi-Fi and Ethernet networks, and a kill switch just in case it all goes horribly wrong.

There are plenty of quirks too. The Mac map looks and works very differently compared with the Windows version and some stuff isn't where you'd expect it to be.

Hopefully, the design issues will be addressed in the upcoming release. Still, right now, this is a capable app. Fast and with way more functionality than some of the Mac competition.

Android app

The IPVanish Android app opens with the current location highlighted on a very stylish map and provides a Connect button to speedily get you online. We love the gorgeous 'Connecting...' animation too, an all-electric green light rippling across the globe.

The navigation bar can't compete for visual appeal, but it's functional and allows you to switch directly to the Locations, Settings, or Help screens.

The mobile app doesn't support choosing locations from the map, but a tap on the Locations button takes you to a straightforward server list. By default, this shows countries but you can switch to cities with a tap. There are no latency figures to help you choose, unlike the desktop app, but you are able to save your most commonly-used locations as Favorites for easy recall later.

Connection times are fast at around a couple of seconds. The latest app only displays your new IP address and the time since you connected. It’s the bare minimum but that's enough, and on balance, we prefer the simpler look.

If you ever need a bit of help, you're now able to open a live chat support session directly from the Help screen.

The app has more settings and options than most of the competition and supports WireGuard, IKEv2, and OpenVPN connections. You can opt for OpenVPN UDP or TCP connections to choose between speed and reliability. There's also the choice to use port 8443 for connecting to servers.

A Scramble option makes it more difficult for VPN connections to be detected and Split Tunneling allows you to select apps for which you don't want to use IPVanish. This is great news if some don't work with VPNs. Although the app doesn't have a kill switch of its own, there is help for setting up the system-level kill switch on Android.

There are some omissions. While the IPVanish Mac and iOS apps (and apps from many other providers) can automatically connect whenever you access an insecure Wi-Fi network, IPVanish doesn't offer that ability on Android. The app more than covers the basics, and overall, it works reasonably well.

• Get a big discount with our exclusive IPVanish offer

iOS app

The redesigned IPVanish iOS app looks almost identical to its Android cousin. It sports a straightforward interface and stylish map screen, and you can connect to your nearest server with a tap, or browse for another with the very configurable location list.

The only significant differences are in the Settings pane. There's no OpenVPN support, which is a little disappointing (although you do get WireGuard, IKEv2, and IPSec), and none of the low-level tweaks Android offers such as a choice of ports, UDP/TCP, or the Scramble feature.

The iOS app has an amazing On Demand option. This protects you by connecting automatically whenever you access an untrusted network. You can also configure allow-lists and deny-lists, so IPVanish knows which connections to protect, and which are safe. You can even compile a list of domains that you'd like IPVanish to automatically protect. For example, you can have the VPN kick in whenever you visit Netflix's website.

The IPVanish iOS app may not have quite as many low-level tweaks as some, but it scores in the areas that matter most; ease of use, a flexible location list, and it is smart enough to know when it should connect (very handy if you forget). Well worth a try.

Support

If the VPN isn't working as it should be, the IPVanish Help Center aims to point you in the right direction. A System Status area warns you of any big company-wide problems, support articles are intelligently organized into key categories (Setup, Troubleshooting, Billing, more), and you can search the web knowledgebase for specific keywords.

Although at first, it looks like there are lots of articles, many are saying more or less the same thing. IPVanish has 80 How to guides, for instance, but 14 are basically the same ‘How to use Split Tunneling to view'. The only differences between the articles are the services or platforms involved. Eight are ‘How to find diagnostics' on various platforms. The articles you get aren't quite as polished or detailed as you'll typically see with NordVPN or ExpressVPN, and we noticed they didn't all use screenshots from the latest apps, which may be confusing.

Still, there's plenty of useful content to explore. For example, you don't just get one or two generic setup guides. There are tutorials for Windows, Android, iOS, macOS, and Linux, as well as guidance on using the system with Chrome OS and various routers. There’s also advice for Roku, Chromecast, and Kodi.

If you can't find an answer in the knowledgebase, live chat is available on the website.

We posted a test question, asking which of IPVanish's supported protocols we should use. A friendly agent replied within a couple of minutes, got straight to the point (no messing around requesting account details or anything else), asked relevant questions, and provided useful and accurate information very quickly.

That's a great performance and a significant improvement on the 'send an email and wait' approach of some other services. If you'd rather wait for a response and send an email, IPVanish supports that too.

• Our exclusive IPVanish deal represents a hefty saving

IPVanish review: Final verdict

IPVanish boasts superior WireGuard performance, highly configurable apps, and speedy live chat support to help keep everything running smoothly. However, issues with usability and a scattering of smaller glitches mean IPVanish can't quite match the best VPN providers. 

All VPN providers claim to be security experts, but few can match Swiss-based Proton’s experience and track record. The company has run popular end-to-end encrypted email service Proton Mail since 2014, and its other products include a secure calendar and encrypted cloud storage.

Proton VPN's network offers 1,700+ servers across 64 countries. Most servers are in Europe and North America, but there are also locations in Australia, Brazil, Columbia, Hong Kong, Japan, Malaysia, New Zealand, South Africa, South Korea and more.

Proton VPN owns and manages its own servers, too, and they're connected to the internet using the company's own network. Apart from giving Proton VPN great control over how the service is set up and managed, it's clear this isn't some shell company making profits from reselling other people's kit: there are real resources and expertise here.

• Want to try ProtonVPN? Check out the website here

You can see benefits of that control in Proton VPN's Secure Core, a smart technology which routes traffic through multiple servers before it leaves the network (meaning that even high-tech snoopers monitoring an exit server won't be able to trace individual users).

A lengthy feature list ensures the service scores just about everywhere. Proton VPN is P2P-friendly, supports up to 10 simultaneous connections, has a kill switch, DNS leak protection and built-in Tor support for accessing Onion sites. A versatile split tunneling system allows you to route specific app or destination IP traffic outside of the VPN, and WireGuard support aims to get you the best possible performance.

Elsewhere, the DNS-based NetShield web filter blocks malware, ads and trackers.  There are now native apps for Windows, Android, Mac and iOS to enable using ProtonVPN on almost anything. Oh, and they're open source and audited, too.

The most obvious change since our last look at the service is Proton’s big rebrand. There’s a mildly new name (Proton VPN, rather than ProtonVPN), and a visual overhaul for the apps, with a glossy new look and feel. 

The most important technical addition is the arrival of Stealth, a brand new protocol which aims to bypass VPN blocks and get you online in even the most privacy-unfriendly countries. Some providers claim to have a similar feature, but usually it's just a tweaked version of a standard protocol (typically OpenVPN.) Proton VPN says Stealth is 'designed from the ground up' to outperform the existing solutions, and claims that 'with Stealth enabled, your Proton VPN connection will be almost completely undetectable.' 

It's too early to tell how Stealth compares in real-world use, but if you're heading off to China or anywhere else that blocks VPNs, you can test it with Proton VPN's free Mac, Android and iOS apps (Windows support is on the way.)

Elsewhere, the Windows app now includes port forwarding, improving P2P speeds. The underpowered Proton Basic plan has been dropped, and you can now opt to buy the VPN and all Proton’s other services in a new security suite.

Proton VPN pricing

The Proton VPN Plus plan delivers all the features we've described above, covers 10 devices, and can be yours for $9.99 billed monthly, $5.99 on the annual plan, or $4.99 over two years. That's a little above average, and you can get very capable VPNs for less (Private Internet Access is just $3.33 a month on its annual plan, Atlas VPN charges just $1.99 a month over three years).

A new Proton Unlimited plan gets you all Proton’s services in a single subscription. That’s the full VPN, 500GB of Proton Drive’s secure storage, 15 secure Proton Mail email addresses, and end-to-end encrypted scheduling of your day with Proton Calendar.

Proton Unlimited looks reasonably priced at $11.99 billed monthly, $9.99 on the annual plan, or $7.99 over two years. If we take the last plan, that’s only an extra $3 a month for access to Proton’s other services. That’s a fair price, even if you’ll only use the storage. (Microsoft's OneDrive Standalone costs $1.66 billed annually for less features and only 100GB.)

Proton VPN will take payment via card, PayPal, Bitcoin, even cash if you're looking for extreme anonymity.

Any payments are (sort of) protected by a 30-day money-back guarantee. The potential catch here is that you'll only get a refund for any unused subscription time. If you sign up for a month and ask for a refund after 15 days, for instance, the company only returns 50% of your subscription fee.

Fortunately, Proton VPN also offers a free plan, giving you unlimited time to sample the service before you part with any cash.

This has some significant limits. It covers just one device, supports 'medium speeds' only, and gives you access to 100+ servers in just three countries (US, Netherlands, Japan).

But the crucial advantage is it has no paltry data limits: you can use Proton VPN Free as much as you like. That's a big deal, and makes Proton VPN interesting all on its own.

• We’ve also rounded up the best free VPN services

Privacy

Proton VPN's Swiss home gives it an immediate privacy advantage over most of the competition. The country has very strong privacy laws, is outside of US and EU jurisdiction, and not a member of the '14 eyes' surveillance network.

The company states its logging policy very clearly on the website: "ProtonVPN is a no logs VPN service. We do not track or record your internet activity, and therefore, we are unable to disclose this information to third parties."

Session logging is almost non-existent. The company stores the timestamp of the last successful login attempt, but that's it. This is overwritten when you next log in, so the most Proton VPN will know about your account use is the start time of your last session.

Proton VPN associates your account with an email address when you sign up, but this address can be whatever you like. The company suggests using ProtonMail if you'd prefer to remain completely anonymous.

Sign up for the free plan and you’re not asked for payment details. Choose something else and you can opt to pay by Bitcoin. Or for real anonymity, you can just send the company some cash. Not exactly convenient, but you'll know you're not leaving any electronic audit trail.

There was more good news in January 2020 when Proton VPN released the generally positive results of SEC Consult’s independent audit on its apps. We'd like to see another (three years is a long time in the VPN business), but we can wait just a little longer (and even one app audit is one more than you'll get with most providers.)

Put it all together and Proton VPN deserves huge credit for exposing itself to this level of scrutiny. There's scope to go further, so for example TunnelBear's audits don't just cover its apps; they look at its infrastructure, backend and frontend systems, even the website, and the company has re-run the audit over several years. But Proton VPN still tramples all over most of the competition, who don't have the courage to put themselves through any audit at all.

Privacy tests

Reading Proton VPN’s privacy promises and other people’s investigations is interesting, but we also like to dig into the detail, and ran some low-level tests of our own.

Proton VPN claims to have DNS leak protection, for instance, but is this really effective? We pointed the desktop and mobile apps to DNSLeakTest.com and other sites, but couldn’t discover a single leak.

Some lesser VPNs don’t set up their Windows OpenVPN connections with the most secure settings, so we dug a little deeper to see what Proton VPN was doing. The results were positive, with rock-solid AES-256-GCM encryption and HMAC-384 for authentication.

Proton VPN’s Netshield aims to block malware, ads and trackers. We don’t have a comprehensive test for it yet, but ran a quick check on its abilities by trying to access 150 common trackers. Netshield blocked 138, an excellent result.

We completed our tests with an in-depth look at the Windows app’s kill switch, and found it performed very well. The client didn't leave us exposed during normal operations, such as switching to a new server while connected to another. And if we simulated a major problem by manually closing a TCP connection or terminating a VPN process, the client instantly displayed an alert and blocked all traffic until we reconnected.

That's good news, and not just for the kill switch. The ability to cope with extreme and unexpected situations is a measure of code quality, and Proton VPN scores much better here than most of the competition.

Windows app

Signing up with Proton VPN was easy, and within a few seconds we were looking at our account dashboard. It's a handy web portal with a bunch of tools to help the user get started: login credentials, download links, an OpenVPN configuration file generator, and pointers to instructions for setting up Mac, Linux, iOS and Android devices.

We grabbed a copy of the Windows app. It downloaded and installed in seconds with no technical hassles.

The app opens with a large world map displaying Proton VPN's various locations. We don't feel map interfaces are ever as easy to use as a good location list, but Proton VPN's is better than most. The map is large, you can resize the window to get a better view, then spin the mouse wheel to zoom in and out; left-click, hold and drag to pan around; hover the mouse over a server icon to see its location, and click to get connected.

If you really don't like map interfaces, no problem, you can collapse the app down to a standard list of locations. Icons highlight servers which support P2P (17 at the time of writing) or Tor (just seven: France, Germany, Hong Kong, Iceland, Sweden, Switzerland, and the US). Expanding any location lists all its available servers, with a color indicator of load (green being low, red high), and you can connect with a click.

A left-hand sidebar allows you to enable, disable, or just see the status of three valuable privacy features: the kill switch, NetShield (Proton VPN's ad, tracker and malware blocker) and Secure Core, which routes your traffic through Proton VPN's 'safest servers in privacy-friendly countries' for extra anonymity.

We found the Windows app could take more than 10 seconds to connect with WireGuard, significantly slower than usual (most VPNs connect in 1-2 seconds on the same system). This might have been some local issue, though, because the Mac and mobile apps typically connected in a couple of seconds.

Once Proton VPN connected, the service was dependable, with no connection drops during testing.

Proton VPN seems to deliver on its P2P promises. We tried accessing torrents from five of the specialist torrent servers, and downloaded them all without any issues.

City selection

Proton VPN's apps support choosing cities within many countries, but the location list makes this procedure more difficult than we'd like.

Rather than displaying a simple alphabetical list of cities (Denver, Miami, New York…), it displays every single server in that country, sorted by region or the server number. As the list isn’t in alphabetical order, you might have to scroll through hundreds of US servers to find the city you need.

Typing a city name into the Search box quickly displays any matches (entering ‘Dal’ is enough to find all the Dallas servers, for instance. But they’re sorted by server number, rather than load, so it’s not easy to find the fastest option.

A better way to go is to use the Profiles feature, which is something like a smart Favorites system. You could use this to create profiles which, say, connect you to New York or Colorado servers, but that’s just the start. You can connect to the fastest server in a country or a location, maybe choose a random server to reduce the opportunity for tracking, select the best P2P or Tor-friendly server, and even choose your preferred protocol (WireGuard, or OpenVPN TCP/UDP).

Settings

The Settings dialog allows you to enable or disable key features, configure what the Quick Connect action does (connect to the fastest location, a random server, or a specific server of your choice) and set up the split tunneling system.

The app supports WireGuard, along with OpenVPN TCP and UDP. By default, the app chooses the best protocol for your situation, but you can select your favorite manually, if you prefer.

A 'VPN Accelerator' option, turned on by default, uses various low-level tricks (threading, network optimizations) to improve performance. It also has an interesting and related option in the Settings box. 'Auto Reconnection' looks out for speed issues with your current server, and connects you to a faster one nearby when necessary. A smart idea, and not one we've seen anywhere else.

Mac and mobile apps

Proton VPN's Mac and mobile apps have very similar interfaces to the Windows edition, with much the same map, location list and Favorites-like Profiles system. They performed even better in some cases (connection times were often faster), and connections were stable during our review.

The Mac app supports all the best Proton VPN features: kill switch, Secure Core, Netshield ad-blocking, WireGuard and more. It doesn't give you split tunneling, but there's support for an extra protocol (IKEv2, as well as WireGuard and OpenVPN), and overall, the app still outperforms most of the Mac competition.

The Android app makes excellent use of screen space, portrait and landscape modes to do the best possible job of reproducing the desktop app interface. Its location list improves a little on the Windows app, sorting servers by city name rather than state. And it's powerful, too, with all the Mac features plus support for split tunneling.

Proton VPN's iOS app adds some neat visual touches to the interface. Out go the plain markers on the map, for instance, and in come colorful flags; much better. But like the desktop apps, it confusingly organizes servers by state rather than cities. This really should be consistent across the range (and we'd like it to be configurable, too).

Otherwise, though, the iOS app delivers all the Android features, plus simple iOS widgets to connect and disconnect, check battery usage or view the logs to diagnose any connection issues. If you're tired of VPNs that never quite get around to porting the best features to iOS, Proton VPN's offering will be a refreshing and power-packed change.

Performance

Our speed testing began by connecting to the fastest server from two locations (a UK data center and a US residential location, both with 1Gbps lines), then checking performance with benchmarking services including SpeedTest.net (via the website and the command line app), nPerf, SpeedOf.me and others. We repeated each test five times, ran the full set in both morning and evening sessions, then analyzed the data to compare median speeds.

WireGuard speeds were acceptable at 360-510Mbps in the UK, 460-480Mbps in the US. That’s a long way behind the speed leaders (Surfshark and TorGuard exceeded 950Mbps in recent tests), but it also beats some big names (Hotspot Shield managed 375Mbps last time), and we suspect it’s fast enough for most network setups and situations.

If you can’t use WireGuard for some reason, Proton VPN also supports the industry standard OpenVPN protocol. This isn’t anything like as speedy as WireGuard, but it still managed a very reasonable 180-210Mbps for us. 

Netflix and streaming

Proton VPN sells itself mostly on privacy and security, but it has some serious unblocking abilities, too.

BBC iPlayer has plenty of VPN defenses, for instance, but Proton VPN breezed past them all, and we were able to view its library from all three test servers.

We were just as successful with Netflix, getting access to exclusive content in the US, UK, Australia, Canada and Japan.

Proton VPN had a couple of small issues in our regional tests. In Australia, it unblocked 9Now, but failed with 10 play. In the UK, it got us into Channel 4 without difficulty, but ‘only’ unblocked ITV in two out of three tests.

The service didn’t quite score a 100% success, then, but it still finished on a very positive note, unblocking both US Amazon Prime Video and Disney Plus – a great result.

(Keep in mind that you need at least a Proton VPN Plus account to get this level of unblocking success. The free account won't do.)

Support

Proton VPN's support site has a lot of detailed articles and guides, but these aren't always organized and presented in the most helpful way.

When we searched the knowledgebase for the keyword 'speed' for instance, the first hit was titled 'How latency, bandwidth, and throughput impact Internet speed', and included the advice 'To calculate the maximum throughput on a TCP connection, you can use the Mathis formula and this online calculator.'

The second article had more relevant advice, but was complex in places. For instance, after suggesting we change servers to improve speeds, it went on: 'To be effective, you should switch to a server with an IP address from a different range. For example, instead of switching from 162.210.192.158 to 162.210.192.159, you should switch to 209.58.129.97.' It's good to see a provider which goes beyond basic FAQs, but newcomers probably won't appreciate this level of technical detail in the first documents they see.

Proton VPN also offers live chat support, though only during business hours: 9am to 5pm CET.

Our chat couldn't have gone much better. The agent was friendly, listened to our question and paid attention to our responses, asked sensible questions of their own, offered good advice, and pointed us to online resources where we could get more help.

They even offered to convert our chat into a support ticket, so that if those suggestions didn't help, we'd then be able to carry on the conversation later, without having to describe our problem all over again. Impressive.

But if live chat doesn't work for you, then you can still raise a ticket manually or send an email. Replies can take a while – we posted a simple product question at 11pm on a Saturday, and didn’t hear back until 10:25am the following Tuesday – but in our experience, responses are generally very helpful and did a good job of pointing us in the right direction.

Proton VPN review: Final verdict

Proton VPN unblocked almost everything we tried, its powerful apps are open source and independently audited, WireGuard speeds can be excellent and there's a free plan with no bandwidth limits. This is a great VPN, and it's getting better. Give it a try.

• We've also highlighted the best VPN

Private Internet Access (commonly known as PIA) is a capable VPN provider, now owned by Kape, which also owns CyberGhost, ZenMate and ExpressVPN.

The company's network has speedy 10Gbps servers spread across 84 countries, including many that are often forgotten by other providers: Bahamas, Bangladesh, Costa Rica, Qatar, Sri Lanka, UAE and more.

There’s support for using the service just about anywhere, with apps for Windows, Mac, Android, iOS and Linux, browser extensions for Chrome, Firefox and Opera, detailed setup tutorials for routers and other platforms, and smart DNS to unblock sites on games consoles and other devices which can’t run apps.

• Want to try Private Internet Access? Check out the website here

PIA supports connecting up to 10 devices simultaneously. That's twice the allowance you'll get with many VPNs, although Windscribe and Surfshark have no limits at all.

Extras range from the straightforward (built-in blocking of ads, trackers and known malicious websites) to the more low-level and technical: a SOCKS5 proxy for extra speed, port forwarding support, the ability to select your preferred encryption, authentication and handshaking methods, and more.

And if that sounds too complicated for you, no problem – there's 24/7 live chat support to talk you through any tricky bits.

Private Internet Access pricing

The Private Internet Access monthly plan is fair value at $11.95. The annual plan is cheaper than most at a low $3.33 a month, but opt for the three-year plan and this drops to just $2.03 ($2.19 on renewal). Putting that into perspective, Hotspot Shield’s Premium plan costs $95.99 for one year’s protection; PIA asks only $79 for your first three.

PIA offers dedicated IPs in Australia, Canada, Germany, Singapore, UK and US, and recently added Japan and Switzerland. These get you the same IP address every time you log on, and as no one shares it, you're less likely to find you're block-listed due to someone else's dodgy activities. But using the same IP also means you're more likely to be recognized by websites, so this isn't an ideal option for everyone.

Pricing for a dedicated IP is reasonable at $5 a month, $4.25 on the one-year plan, $3.75 over three years. NordVPN is a little more expensive at $5.83 a month on its annual plan, but Ivacy undercuts everyone at just $1.99 a month.

You can pay for PIA via Bitcoin if you're looking for extra privacy, or by card or PayPal, plus there are other methods depending on your region (Amazon Pay is supported in the US, for instance).

There's a free 7-day trial for mobile users, and you're also covered by a 30-day money-back guarantee.

PIA's Terms and Services has another surprise (and unusually for small print, it's a good one). Many VPNs say customers are only allowed one refund, ever. Private Internet Access says that if you purchase a new account more than three months after the last refund, you're eligible for another. Works for us.

Privacy and logging

Good VPN privacy starts with a strong set of core features, and Private Internet Access delivers more here than most.

PIA’s apps only use the latest and most secure protocols, for instance, in WireGuard and OpenVPN. There’s DNS leak protection, and a kill switch to disable your internet access if the connection drops. PIA’s MACE feature blocks ads, trackers, malware and more, and its Chrome extension adds a bunch of bonus privacy features (block location access, third-party cookies, website referrers and more).

The best providers show they respect your privacy, and PIA scores here, too. Many VPNs have an option to send anonymous connection data back to the company, to help improve the service. Some turn this on by default, with the VPN presumably hoping users never realize what’s happening. But with PIA, nothing gets sent unless you go into the Settings panel and turn on the feature yourself (it's the 'Help improve PIA' option in the Help area, if you're curious).

It’s important for a VPN to show transparency, to offer real evidence that it’s living up to its promises. Again, Private Internet Access has way more to boast about than many rivals.

The company’s apps are open source, allowing others to examine the source code, look for bugs, and see whether it's doing anything which might compromise the user's privacy.

To encourage experts to take a look, PIA recently announced a Bug Bounty program. If a researcher finds a genuine vulnerability and reports it to the company, they could receive up to $1,250. That's not exactly generous, because the company only pays cash for the very worst vulnerabilities (remote code execution, unlicensed access to VPN servers), and other providers offer considerably more (ExpressVPN has a $100,000 bounty for critical flaws in its TrustedServer technology.) But we're glad to see the bounty arrive: anything which encourages more experts to check the code is welcome.

PIA’s Android app is certified by the ioXt Alliance, verifying that it complies with standards in areas like cryptography, software verification and updates.

The company has a very clear logging policy, and states that the service does not ‘store or share… incoming and outgoing traffic information, including user and destination IP addresses, browsing history/ websites visited, amount of data transferred, the VPN servers used, DNS queries or files downloaded… [as well as] VPN session information, software used, connection date, and duration.’

You shouldn’t have to take the word of any VPN on trust, of course, but the big news since our last review is that’s no longer necessary.

PIA has had its no-logs policy independently audited. The company invited Deloitte to interview staff, inspect its VPN and other servers, evaluate its policies, procedures and more. Deloitte’s report found no evidence of privacy issues, and concluded that the policy was a fair description of how PIA sets up and manages its systems to prevent any logging.

That’s great news, and gives potential customers genuine reassurance that PIA really is looking after their privacy. There’s more to do – TunnelBear has its apps, servers, website, backend systems and more audited every year – but this is an excellent start, and we’ll be interested to see what PIA does next.

• Get a great deal on Private Internet Access with our exclusive offer

Performance

Every VPN promises a high-speed, ultra-reliable network, but the reality can be very different. That's why we look past the enthusiastic marketing, and put every VPN we review through our own intensive tests.

This starts by installing PIA's latest Windows app on systems in a UK data center and a US location, each with a 1Gbps connection. We connected to our nearest location, then measured download performance using several speed testing sites and services (SpeedTest's website and command line app, nPerf, SpeedOf.me and more). We ran the tests using WireGuard and OpenVPN connections, then did it all again in an evening session.

We’ve seen some disappointing results from PIA in the past, but not this time: WireGuard performance reached a solid 450-510Mbps, double what we saw in our last review. That’s still far behind the fastest VPNs (TorGuard and Surfshark hit 950Mbps+ in their last tests), but would most users really be upset if they ‘only’ got 500Mbps from their VPN? We suspect not.

WireGuard is enough for most users, but if you’re setting up PIA on a router or other device then you may have to use OpenVPN. We tested OpenVPN speeds, too, and they reached a better-than-average 180-260Mbps

Most people don’t have data center levels of connectivity or 1Gbps internet connections, so we also tested PIA’s performance from a UK home using a Three 5G broadband router. With PIA turned off, the router reached 240Mbps; with PIA turned on, it reached a relatively disappointing 83Mbps. That’s fine for browsing or streaming, but it’s also less than half of what we see from most top providers.

Netflix and streaming

Connecting to a VPN to use with Netflix or other streaming services can get you access to all kinds of geoblocked websites, hopefully avoiding those annoying 'not available in your region' error messages.

To test the unblocking abilities of Private Internet Access, we attempted to access US and other Netflix libraries, Amazon Prime, BBC iPlayer, Disney Plus, UK’s ITV and Channel 4, and Australia’s 9Now and 10 play, from several test locations.

Accessing Netflix is a big test of website unblocking chops. PIA got us into US Netflix with one of our two test servers, and beat Netflix Canada’s defenses with one of our three locations. Not perfect, but one working location is enough, and PIA won extra credit by getting us into Netflix UK, Australia and Japan without any failures.

We saw a similar ‘that’ll do’ performance elsewhere in the US, with PIA unblocking Amazon Prime Video with one out of two test locations, but working with Disney Plus on both our tries.

Our Australian tests saw PIA finally defeated, failing to access 10 play from all three locations (although it did unblock 9Now each time).

Performance picked up in the UK, though, as PIA got us into BBC iPlayer, ITV and Channel 4.

That’s a very good result, but if you need the best possible unblocking, there are better options. ExpressVPN, Hide.me, NordVPN, PureVPN and Surfshark all unblocked every site in our most recent tests.

Torrents

Private Internet Access supports P2P, and we don't just mean on a couple of specialist servers hidden away somewhere. You can use torrents from any location, with no bandwidth or other limits to restrict your activities.

We verified this by connecting to three sample locations and successfully downloading torrents, with no connection or other issues.

There's an unusual bonus in support for port forwarding from PIA. This enables redirecting incoming connections to bypass a NAT firewall, and in some cases, may help improve P2P download speeds.

PIA’s website doesn’t offer much help with any of this. The knowledgebase does have a Torrent section, but it only has a single article on ‘How do I enable port forwarding?’, and that doesn’t even mention P2P.

Still, the company scores well on the fundamentals – large network, decent speeds, no logs, Bitcoin support – and on balance it makes a fair torrenting choice.

Client setup

Sign up for Private Internet Access and the website conveniently pointed us to download links for its many apps: Windows, macOS, Linux, Android and iOS apps, assorted browser extensions (Chrome, Firefox, Opera), even the raw Android file (handy for experts who need to manually install it somewhere).

There are some unusually thoughtful touches. Wondering why you should update, for instance? The site lists the changes for every new build. A recent update has broken the app? You can download previous versions, too. If only all providers were this helpful.

Windows app

The Private Internet Access app installs easily, and opens with a simple and very straightforward client window. Tap the big Connect button to hook up to your nearest server, tap it again to disconnect, and status areas tell you when you're connected, and display your original and new IP addresses.

The client's excellent and feature-packed location picker is just a click away. It lists countries and city-based locations, where available, and ping times indicate which is closest. You can sort the list by location name or ping time, and a search box plus Favorites system help you quickly find and access whatever server you need.

Looking for more functionality in the app? Clicking an arrow at the bottom of the UI displays a host of other panels you can add to its default display. A 'Quick Connect' section listed recently used servers; a Performance graph charts speeds; Usage figures listed how much data we'd uploaded and downloaded; a Subscription pane is supposed to display account information, although it was blank for us; a Connection panel displays details on your current connection (protocol, encryption algorithm and more); and finally a Snooze option enables turning off the VPN for a set number of minutes.

We thought the Quick Connect ('Recently Used') and Quick Settings panels looked most useful, and added them to the standard app display in a couple of clicks. We could even rearrange the panel positions by dragging and dropping; easy.

Maybe you're looking for simplicity more than extra features? That's possible, too. If you only ever need to connect to the nearest location, you can remove the location list and have an app which displays a Connect button only.

If you're happy with the standard interface, this may not matter very much. But if you like to tune a VPN app to suit your needs, PIA gives you far more tweaks, options and customization possibilities than we've seen from anyone else.

Windows settings

PIA's Windows app Settings dialog gives you a lot of expert-level control over how the VPN works. Choose OpenVPN rather than WireGuard, for instance, and you're able to select UDP or TCP connection types and encryption (AES-128/256-GCM), as well as choosing a custom remote port (53, 1194, 8080, 9021), and defining how your MTU is set (potentially important for connection speed and reliability).

Some locations support port forwarding, which makes it easier to set up and accept incoming connections to your system.

The app includes split tunneling, a clever feature which allows you to decide which traffic goes through the VPN, and which uses your regular connection (handy for anything which doesn't work when the VPN is active.) This is easy to use at a basic level, but also includes some unusual expert-level features, including the ability to configure split tunneling by IP address and network subnet, and even (on Windows and Linux) direct some DNS traffic outside of the VPN.

Elsewhere, a kill switch disables internet access if the VPN disconnects, reducing the chance that your real IP will be leaked. You get the option to use Private Internet Access' DNS servers, your own, or any other custom servers you prefer. And the DNS-based MACE system to block domains used for ads, trackers and malware can be enabled or disabled with a click.

VPN kill switches don't always deliver (some are almost entirely useless), so we were keen to run some in-depth tests. But whether we gently closed a couple of TCP connections or just terminated PIA's entire OpenVPN-based connection manager, the client didn't care. Each time it displayed a desktop notification to warn us of the problem, then quickly reconnected, without ever exposing our real IP.

It was the same story with WireGuard connections. No matter how brutally we dropped our connection, from closing PIA's WireGuard Windows service to turning our router off and on again, the client successfully blocked our internet access, warned us with a notification and reconnected at speed.

Our final tests put the threat blocking MACE through its paces, again with positive results. We turned it on, then tried accessing 150 common trackers. MACE blocked 111, a decent score for a bonus feature you’re essentially getting for free.

PIA's Windows VPN client for PC might look a little basic initially, then, but spend a few minutes playing around and you'll find it easy to use, with some interesting, advanced features.

• Grab Private Internet Access with a big saving in our deal here

Command line use

PIA's desktop clients now include piactl, a simple command line tool which enables using the VPN from a script.

This allows you to do all kinds of clever things which simply aren't possible with other VPNs. What about setting up a scheduled task to automatically connect at a certain time of day, for instance? Or automatically connecting when your system boots, but only after it's performed some local network tasks first? Creating special shortcuts which connect to different locations, then open a website or app you’d like to use with that country?

Getting this working could be easier than you think. The command 'piactl connect' connects you to the current default connection, for instance, while 'piactl disconnect' closes the connection. You don't need to be a developer to recognize what 'piactl set region us-atlanta' does, and there are commands to get and set more options, and monitor the service state.

Mac app

PIA's Mac app has the same stylish and appealing interface as the Windows edition. It's so easy to operate that even total VPN newbies will quickly figure out the basics: tap the Connect button to use your nearest server, choose another from the Location list if you like, and you're ready to go.

'Simple' doesn't mean 'basic', though. We immediately noticed several usability plus points, including a sortable location list, ping times to help you spot the nearest servers, and the Favorites list for storing your most commonly-used choices.

That's just the start. The app interface can be customized just like the Windows build, with panels displaying 'recently connected' lists, speed charts, upload and download data transfer figures, a Snooze option to pause the VPN connection, and more.

The real surprise here is the Settings panel, which is absolutely crammed with useful features.

These start with the app basics. You might choose a light or dark theme, or select a protocol (WireGuard or OpenVPN), or specify to launch and connect to the VPN whenever your system starts.

But there's so much more, including just about all the advanced features available on Windows. Custom DNS settings; split tunneling; proxy support; Multi-Hop VPN; a sophisticated rules-based system to automatically connect (or disconnect) when you access particular networks; and more.

Some of these options assume a lot of technical knowledge, and there's not a lot of guidance to be found in the app. We would rather have these features available than not, though, and on balance, PIA's Mac app works well. It's easy enough for beginners to use right away, yet also has the power that even the most demanding experts need.

Android app

PIA's Android VPN app opens with a very conventional interface – featuring white space, a large On/Off button, plus your chosen region and IP address – but swipe up and you'll find a mass of other buttons, icons and status details.

There are quick settings links to toggle the kill switch on and off or launch PIA's Private Browser, for instance (which is not installed by default). Or you can flag icons to quickly access a number of countries, plus there are snooze options to disconnect the VPN and automatically reconnect in 5 or 15 minutes, or an hour. And connection status details cover everything from your preferred protocol and encryption method to the amount of data you've uploaded and downloaded.

This looks a little cluttered, but as with the Windows app, it's easily customizable. If you'll never hit the Snooze button and don't need to know you're using AES-128-GCM every time you connect, you're able to hide those panels in a tap or two.

Tapping the current region displays a list of other locations. Each one has a latency figure, giving you an idea of its distance, and a simple favorites system enables moving your most-used servers to the top of the list. It's all very easy to use.

The app is surprisingly configurable, with more options and settings than many desktop VPN clients. WireGuard and OpenVPN support, auto-connect when accessing Wi-Fi, a kill switch, split tunneling – it's all here. You can even have your handset vibrate to indicate when you're connected, far more convenient than the usual notifications.

As with the desktop builds, PIA's Android app is very well put together, and a nicely judged mix of power and ease of use. Recommended.

iOS app

PIA's iOS app looks and feels much the same as the Android version. It sports a stylish interface, capable location picker with server latencies and a Favorites system, and an array of customization options to make the console look exactly as you'd like.

There are a decent set of options and settings, especially for an iOS app. You get a wider choice of protocols than the desktop builds (WireGuard, OpenVPN, IKEv2), the ability to choose UDP or TCP connections, set a custom port, use your favorite DNS, or take fine-tuned control over encryption and enable a kill switch to protect you online.

An Automation pane makes it easy to set particular networks as trusted or untrusted, and instruct the app to automatically connect or disconnect whenever you access them.

There are a handful of useful iOS-specific features, too, including optional support for Siri shortcuts to connect or disconnect the VPN, and a Safari content blocker.

Overall, this is a quality app, easy to use and far more capable than most of the iOS competition. A must-see for more demanding Apple users.

Browser extensions

Using the Private Internet Access apps isn't difficult, but having to keep switching between your regular application and the VPN client can still be a hassle.

Like ExpressVPN and NordVPN, Private Internet Access now offers add-ons for Chrome, Firefox and Opera (there's no Edge coverage yet), enabling you to connect to the VPN directly from the browser interface. This only protects your browser traffic, but if that's not an issue, the extension makes Private Internet Access much easier to use.

The extension looks very similar to the apps, so there's almost no learning curve. A simple opening interface has a big Connect button to access the closest server. The location list reports latencies and has a Favorites system to help you find and save the best servers for later, and you turn the VPN on or off from your browser with a click.

(The location list only has around a third of the countries available in the app. We don’t know why, but just in case that matters to you, this is the current list: Austria, Australia, Brussels, Canada, Czech Republic, Denmark, Finland, France, Germany, Hungary, India, Ireland, Israel, Italy, Japan, Luxembourg, Netherlands, New Zealand, Norway, Poland, Romania, Singapore, Spain, Sweden, UAE, UK, USA.)

A split tunneling-type Bypass List enables specifying websites which you don't want to use the VPN. If they don't work as they should with the VPN on, add them to the Bypass List and their traffic will be rerouted through your regular connection.

Bonus privacy tools prevent websites accessing your location, camera or microphone. They're able to stop WebRTC leaks, and variously block or disable Flash, third-party cookies, website referrers, hyperlink auditing, address and credit card auto-filling, and more. Oh, and you can use PIA’s MACE to block ads, tracker and malware, too. We've seen dedicated privacy extensions which do less.

All this functionality means there are lots of settings to explore, but on balance the add-ons work very well. If you're looking for simplicity, you can just choose a location and click Connect, much like any other VPN extension. But more experienced users can head off to the Settings area, where they'll find more features and capabilities than just about any other VPN browser add-on we've seen.

Support

The Private Internet Access Support Center has a web knowledgebase with articles covering troubleshooting, account problems, technical complications and more. These don't always have the detail you'll see with ExpressVPN or NordVPN, but they're not just bland descriptions of app features, either.

For example, a ‘Security Best Practices’ article gives users some technical (but very accessible) background on encryption, authentication and handshaking methods, and more.

A Guides section has setup articles and tutorials for all supported platforms. Some of these are relatively basic, but there's still a lot to explore, with, for instance, 12 articles on Android alone.

Entering a keyword or two in the Search box gets you a list of helpful articles. This didn’t always work as expected, often displaying articles that weren’t in the current website language. But it’s improved since our last review, and you should find what you need with minimal effort.

A handy News page regularly alerts users to new servers, app updates, service issues and more. That could save you lots of hassle all on its own if you see your current problem is some known system outage, and that you don't have to spend time contacting support or trying to diagnose it yourself.

If you can't solve your issues online, PIA now offers support by live chat as well as email. We opened a chat session and asked a potentially tricky question about the old authentication and handshake options which were dropped in a previous update.

Would the agent know the product in that level of detail, especially with a change which had only just happened? Yes, pretty much – the agent didn't give us any real technical details, but explained they'd been dropped and pointed us to a support page where we could learn more. That's as good a reply as we'd expect from any provider.

Private Internet Access review: Final verdict

Private Internet Access speeds are relatively ordinary, but it excels everywhere else. PIA runs on almost anything, is easy to use, crammed with advanced features, unblocks Netflix and almost everything else we tried, and all for less than a quarter of the price of some of the top competition. Go take a look.

Surfshark is a powerful VPN which comes crammed with features, runs on almost anything, and has some of the best download speeds around.

The network has 3,200+ servers distributed across an impressive 160+ locations in 100 countries.

There are Windows, Mac, iOS, Android and Linux apps, plus Chrome, Firefox and even Edge extensions, and a website unblocking Smart DNS system for games consoles, smart TVs and more.

Whatever you're using, there's no need to worry about annoying 'simultaneous connection' limits – you can install and run Surfshark on as many devices as you like.

The service is excellent on the technical essentials, including strong AES-256-GCM encryption, WireGuard, OpenVPN and IKEv2 support, a no logs policy, and a kill switch to protect you if the VPN connection drops.

• Want to try Surfshark? Check out the website here

There's real depth here. Android apps can see through most VPNs by requesting your physical location, but not Surfshark – a GPS Spoofing feature enables it to return the coordinates of your chosen VPN server.

Oh, there’s also ad and malicious URL blocking, P2P support on most servers, VPN chaining (use two servers for one hop), split tunneling, the company's own zero-knowledge DNS servers, and 24/7 support via email and live chat if anything goes wrong.

Updates since our last review include a Pause VPN feature, which allows you to disable the VPN for a set amount of time (5, 30, 120 minutes), then automatically resume your protection. You could always disconnect manually, but then you must remember to reconnect – whereas if you use the Pause button, the app handles reconnection for you, so you can’t forget.

Linux users now have a VPN app with a full GUI, unlike most of the competition. (If other providers have Linux apps at all, they’re typically command line efforts.)

If you're using old hardware, beware: Surfshark is reducing support for legacy systems. Windows 7, 8 and 8.1 systems will no longer get the latest updates, for instance, and the company now offers full support for the last four MacOS and iOS releases only. Even if you can't update your device OS, that's not an immediate disaster, because you can still use the old apps or create manual VPN connections. But you won't get new features or security patches, and for the best service you should probably update or replace your device soon.

New support for manual WireGuard connections allows experts to precisely customize their Surfshark setup, or perhaps get the service running on a device which can’t use the regular apps.

Surfshark’s network is expanding, and the latest additions include many locations you’ll rarely see with other VPNs: Brunei, Bhutan, Sri Lanka, Bangladesh, Cambodia, Mongolia, Nepal and Laos. 

Surfshark pricing

As you'll see courtesy of our dedicated Surfshark price and deals guide, the service's monthly plan is more expensive than some at $12.95.

Paying for a year upfront cuts the cost to a cheaper-than-most $3.99 a month, but that's just for the first term. It rises to $4.98 on renewal.

Surfshark's 24 months plan offers the best value at $2.05 a month. Or to talk totals: signing up for one year costs an up-front $47.88, but two years is only marginally more expensive at $59.76. But again, this is only for the first term; on renewal you switch to the regular $4.98 a month annual plan.

That initial price beats most of the competition, but there are a few exceptions. Private Internet Access' three-year plan is priced at only $2.03 a month for the first term, for instance, and has a simple on-demand antivirus thrown in.

The Surfshark One plan gives you all the same VPN features, and adds Avira-powered antivirus, data breach monitoring and privacy-friendly internet search. You can activate it for an extra $1.99 a month. Cheap? Well, it's a very basic setup. The antivirus has improved a lot recently, adding real-time scanning and even webcam hijacking protection to protect against hackers taking stealthy snaps. But you'll still get far more features and functionality from a specialist AV product.

Surfshark's 7-day free trial for Android, iOS and Mac gives you some time to sample the service for yourself. We'd like something for Windows users, too, but it seems unfair to complain when many providers have no trials at all.

Surfshark even delivers more than you'd expect with its range of payment methods, with support for credit cards, PayPal, cryptocurrencies, Amazon Pay and Google Pay.

But if, after all this, you sign up and find the company isn't for you, no problem – you're protected by a 30-day money-back guarantee.

Privacy and logging

Surfshark's privacy features start with the VPN basics: secure protocols (WireGuard, OpenVPN UDP and TCP), AES-256 encryption, and a kill switch to block internet access and prevent identity leaks if the VPN connection ever fails.

Surfshark's network has its own private DNS on each server to reduce the chance of others spying on your activities. And the ability to use a double VPN hop (connect to Paris, say, then leave the Surfshark network in New York) makes it even more difficult for anyone to follow your tracks.

Surfshark’s excellent privacy policy explains its no-logging status clearly, with in-depth details on the data it does (and doesn't) collect, and also brief summaries if you’d prefer not to read every word. 

The key points you need to know are that Surfshark’s servers collect only a tiny amount of data during a session: your user ID, and connection time. Even these are deleted within 15 minutes of you disconnecting, and otherwise the service doesn’t log your visited IP addresses, browsing history, session information, network traffic or anything else that could link you to an internet action.

Audits

Privacy policies are important, but we don't think customers should have to take a VPN provider's words on trust. And that's why we're happy to see that Surfshark has put two areas of its service through an independent security audit.

In November 2018, the Germany security company Cure53 [PDF] put Surfshark's browser extensions under a very high-powered security microscope. The company only found a couple of small issues, and concluded that it was 'highly satisfied to see such a strong security posture on the Surfshark VPN extensions.'

That was good news in 2018, but it's less interesting years later, especially when it only examined such a limited area of the service.

In May 2021 Surfshark went further, though, reporting on a second Cure53 audit of its servers.

This audit had a much wider scope: 'To thoroughly examine and evaluate the security posture exposed by the Surfshark server, VPN configuration, as well as the related infrastructure.'

The auditors found only four security-related general issues, with a maximum severity of 'Medium.' If you're not used to reading Cure53 audits, that's not bad at all (they're exceptionally thorough and always find something).

The report concluded 'the overall outcome should be regarded as good' and Surfshark had a clear understanding of the challenges presented by VPN security.

Surfshark could have taken the audit a little further. It didn't verify Surfshark's no logging credentials, which feels like a missed opportunity. And the company has only published a summary of the report. ExpressVPN and a few others generally make their full audit reports available, and we'd like to see Surfshark do the same.

Still, we're glad to see Surfshark underwent this audit, and the conclusions look good to us.

Windows app

Surfshark's Windows app looks a little more complex than most – sporting tabs, icons, lists, and more – but it works much like any other VPN. There's a Connect button to access your nearest server, a location list showing other servers, plus a Settings icon which leads to some useful extras.

WireGuard connections are quick, and happen in just a couple of seconds, with OpenVPN taking a more mid-range 8-10 seconds. But the app keeps you informed, with desktop notifications letting you know exactly when you're protected (and when you're not).

The well-designed location picker simplifies your server browsing by displaying countries and cities in the same list. That means no switching tabs or expanding countries to view individual cities – just scroll down, and every location is visible at a glance. Surfshark spoils the effect a little by not sorting the cities alphabetically, but apart from that it works well.

Locations don't display ping times by default, but a ‘Refresh speed metrics’ feature can find and show them with a click. A Search box allows you to find specific locations with a few keypresses (typing 'atl' is enough to display Atlanta), and there's a Favorites system to save your top locations for later.

A Static IP list enables connecting to locations in Germany, Japan, Singapore, UK and the US, to receive a fixed IP from each one (that is, your IP will be from the country you choose, but it'll be the same every time you connect). That could be handy in some situations, but beware if you use it for security – perhaps to get access to an IP-restricted network. This is a static IP, but it's not a dedicated IP, just for you; any other Surfshark customer can be allocated the same IP address, so the IP alone isn't a guarantee of your identity.

A MultiHop tab passes your traffic through two VPN servers, ensuring that even if the exit server is compromised, an attacker still won't have your real IP. There are 12 routes available, where the first server is your initial connection (options include US, Canada, UK, Singapore, Germany, France, Netherlands and Australia), and the second is where you'll appear to be to the outside world (France, Germany, Hong Kong, Netherlands, Portugal, Singapore, Sweden, UK, US).

A Bypasser panel enables specifying applications, websites and IP addresses that bypass the VPN (an expanded version of the split tunneling feature you'll see with providers like ExpressVPN). If using Surfshark causes issues with a particular website or app, adding it to the allow list should solve the problem.

Alternatively, you're able to set the Bypasser to route only your chosen apps through the VPN. That may be more useful if you're only using Surfshark for one or two tasks, for example torrenting: set up your torrent client to connect via the VPN and everything else will use your regular connection.

There are plenty of configuration options, and they all worked well for us, plus it's great to see a VPN provider deliver this level of split tunneling support on the desktop. (Many VPNs have split tunneling-type systems on Windows – ExpressVPN, Hotspot Shield, NordVPN, Private Internet Access, ProtonVPN – but several reserve the feature for their mobile apps).

Surfshark's CleanWeb feature blocks ads, trackers and malicious links. We tested this with 100 sample tracker links, and CleanWeb blocked 54. We’ve seen better – Windscribe’s ROBERT feature blocked 98, ProtonVPN managed 87 – but that’s enough to be useful.

A NoBorders mode aims to help you get online in China and other countries where VPNs are commonly blocked. The app should turn NoBorders on automatically if it detects any network issues, but you can enable it manually, too.

More conventional features include options to launch the VPN along with Windows, or switch the protocol to WireGuard, OpenVPN UDP and TCP, or an Automatic option which allows the app to choose. (Surfshark recently dropped IKEv2 on the Windows app, as apparently hardly anyone used it, and WireGuard and OpenVPN are better choices, anyway.)

Surfshark kill switch

A kill switch is on hand to block your internet connection if the VPN drops. This has recently been updated to make it more configurable.

Previously, when you turned on the kill switch, you couldn't access the internet at all, ever, without being connected to Surfshark. That’s highly secure, but it’s not always convenient.

Now, you can also opt for a ‘Soft’ kill switch. This kicks in if the VPN drops by accident, but doesn’t activate if you manually disconnect. That’s not quite as secure, but does mean you can choose whether you need to be connected or not.

Most providers support one kill switch type or the other, so it’s good to see Surfshark give users the choice. (Even if you think you know which option you prefer now, there’s always the chance that might change later.)

The kill switch handled our main tests well. When we tried any conventional way to close the VPN connection, the app displayed a notification to warn us, our internet was blocked, and our traffic was never exposed.

We also run more extreme tests, though. In the worst case, we found that if Surfshark’s Windows service closed, the VPN dropped, and the app didn’t notice. It continued to display a ‘Protected’ message. You could carry on using your device for hours and think you were safe, when in fact the VPN had failed and you weren’t protected at all.

It's important to keep this in perspective. We use our more extreme tests to see just how bulletproof a kill switch is, but they're not a situation you're likely to see in real life. You might use Surfshark for years without ever experiencing a service failure.

Still, this is an unnecessary issue with the app, and one which could be at least partly addressed with smarter development. ExpressVPN sets its Windows services to automatically restart if they fail, for instance, giving it a chance of recovery in even worst-case situations. Surfshark doesn’t use this standard restart feature, and that’s a problem.

Overall, Surfshark's kill switch is effective and will protect you from all the issues you're likely to encounter. But it's not quite as robust as some of the competition, and we think there's room for improvement.

Mac app

Surfshark's Mac app looks much like the Windows version, but with a few small differences. The app window isn't resizable, for instance. The app doesn’t display your kill switch status on the main Connect window, which is a shame. But it fixes one of our minor Windows app annoyances, sensibly displaying city locations in alphabetical order.

We didn't spot any significant app differences in real-world use. Connection times were speedy, and the VPN didn't drop at any point.

Mac users miss out on one or two Surfshark features. In particular, there's no Bypasser to enable choosing any apps or websites you don't want to pass through the VPN.

There's still plenty of functionality here, though: static IPs, Multi-Hop VPN, WireGuard and OpenVPN support, the kill switch, along with CleanWeb's ad and malware blocking. 

The app even has a handy feature which isn’t available on Windows, in the ability to auto-connect to the VPN whenever you access untrusted networks.

That's a much better spec than we often see elsewhere, and on balance, Surfshark's Mac offering is a well-balanced mix of power and ease of use.

Mobile apps

Mobile VPN apps can be far more basic than their desktop cousins, but Surfshark's Android version is surprisingly similar. Sure, it rearranges the interface a little to work better on smaller screens, but otherwise it has the same protocol support, kill switch, static IP, Multi-Hop and other features that we saw on the desktop.

The Android app outperforms the desktop editions in some areas, as it includes both the 'auto-connect on accessing untrusted networks' feature (not available on Windows), and the split tunneling Bypasser system (not available on Mac).

You get a couple of new mobile-specific features, one of which is an 'Override GPS location' to match your device's GPS location with your connected VPN server, making it more difficult for apps to see where you really are. And a 'use small packets' option may improve performance with some mobile networks.

If any of this doesn't work as it should, you can send bug reports, and raise (or browse) tickets from within the app (no need to open your browser and waste time hunting for the right area of the support site).

It's much the same story with Surfshark's iOS VPN app: the look and feel are very similar, and you still get the kill switch, the choice of protocols (OpenVPN, IKEv2, WireGuard) and more.

Small but welcome recent additions include widgets to simplify getting connected, and the ability to report bugs from within the app.

It's a surprisingly capable setup, as software for Apple’s mobile OS is often short-changed for features in comparison to other platforms.

Put it all together and these are impressive apps, well implemented, straightforward to use, and a refreshing change for anyone tired of losing VPN functionality on mobile devices.

Performance

We measured Surfshark performance from a US location and a UK data center with a 1Gbps connection, giving us plenty of scope to see just what the service could do.

We installed the latest Surfshark app on our test systems, connected to our nearest location, and checked download speeds using performance testing sites including SpeedTest (the website and command line app), nPerf and SpeedOfMe. We collected at least five results from each site using WireGuard, repeated each test again with OpenVPN, and ran the full test set in both morning and evening sessions.

Surfshark’s WireGuard speeds were spectacular at 950Mbps+, all we could expect from our 1Gbps test connection. That puts Surfshark equal first in our speed tests along with Norton and TorGuard.

Surfshark uses WireGuard by default and the chances are you’ll never need anything else. But if it can’t connect, or you’re setting the service up on a router or some other device, you might need to use OpenVPN. We found Surfshark’s OpenVPN connections reached 120-190Mbps in the US, a little below average, but enough for most online tasks.

Netflix and streaming

If you're tired of VPNs which vaguely hint about their unblocking abilities, but never make any real commitment, you'll love Surfshark. The company not only promises to unblock Netflix, it also names a bunch of other services it supports: ‘Prime Video, Disney Plus, BBC iPlayer, HBO Max, Hulu, Hotstar, YLE Areena, AbemaTV, and many others.’

This wasn't just overblown marketing-oriented confidence, either. We were able to access Netflix in the US, UK, Australia, Canada and Japan without the slightest hassle.

The good news continued in the UK, with Surfshark getting us into BBC iPlayer, ITV and Channel 4. It allowed us to stream Australia’s 9Now and 10 play from the UK just as easily. And final success with both US Amazon Prime and Disney Plus gave Surfshark a perfect 100% record in our unblocking tests.

That's a great result which puts Surfshark right up there with the very best unblocking VPNs. At the moment, that includes ExpressVPN, Hide.me, NordVPN and PureVPN, all of which have got us into every one of our test streaming sites.

Support

If Surfshark doesn't work for you, the support site has setup and installation tutorials, troubleshooting guides, FAQs and other resources to point you in the right direction.

The content is well-organized. Clicking 'Get Started' takes you to a Tutorials page with articles on setting up the apps, getting the service working on other platforms and using its various features.

These aren't the horribly basic 'download and run the installer' guides you'll get from lesser VPNs, either. For example, the 'How To Set Up Surfshark on Windows' article includes a video guide, step-by-step installation advice with screenshots, plus first steps guidance on choosing locations and getting connected, and basic explanations of all the main features.

If this isn't enough, Surfshark's support is available 24/7 via live chat. We tried this while attempting to diagnose a connection issue, and had a friendly reply in under 60 seconds. So, if you're struggling to find something on the website, it might be worth opening a chat session – the problem could be sorted out quicker than you might think.

Surfshark review: Final verdict

We have some small issues with the apps and Windows kill switch, but Surfshark excels everywhere else, providing market-leading speeds, top-notch unblocking and an array of advanced features for a very fair price. Great value and an absolute must for your VPN shortlist.