Malware / security. Updated 2026-09-13. About 6 minutes to read.
Choose a VPN on evidence, meaning a recent independent audit of its no-logs claim, not on the size of its server list or a review site's ranking.
A VPN moves trust from your internet provider and the local network to a VPN company. That is useful in some situations and pointless in others. Before you compare features or prices, be clear about which problem you are trying to solve, because a VPN does nothing about the most common ways people actually get hurt online: phishing, reused passwords and data breaches.
This guide explains what to check when you compare providers: independent audits of no-logs claims, ownership, protocols, leak protection and how the company makes money. We do not rank specific brands here, and prices change often, so always check the current price and terms on the provider's own site. Some links on this page are affiliate links, and we may earn a commission at no extra cost to you.
A VPN creates an encrypted tunnel between your device and the VPN company's server. Websites see the VPN server's IP address instead of yours, and your internet provider or the café Wi-Fi operator sees that you are connected to a VPN but not which sites you visit. The VPN company can now see that information instead. The Electronic Frontier Foundation's advice is blunt: a VPN does not make you anonymous, it changes who you have to trust.
Some VPN adverts claim a VPN stops hackers or identity theft. It does not. If your main worry is account takeover, unique passwords and two-factor authentication do far more than any VPN.
Most web traffic is now encrypted with HTTPS, so the content of your banking session or email is already protected on public Wi-Fi. The EFF notes that this is why many people no longer need a VPN just for coffee shop browsing. HTTPS still leaves some metadata visible, such as the site names you connect to, so a VPN adds a smaller layer than many adverts suggest.
You probably do not need to pay for one if you mostly browse at home, use apps from your bank and other big companies, and have no reason to hide which sites you visit from your internet provider. A VPN makes more sense if you often use untrusted networks, want to keep your browsing away from your provider, travel to places where sites are blocked, or need a different region for a service you pay for, where that service's terms allow it.
Almost every VPN says it keeps no logs. The claim costs nothing to make, so look for evidence that someone outside the company has tested it.
Running a VPN network costs real money. If you are not paying, ask how the company is paid. Some free VPNs show adverts, some collect and sell browsing data, and some have been caught doing both. The EFF warns that some free VPNs sell your data, which defeats the point of using one.
There are honest free tiers from paid providers, such as Proton VPN's free plan, which the company funds through paid subscriptions. Expect fewer server locations and slower speeds. Be careful with browser extensions labelled VPN: many only route traffic from that one browser and leave every other app on your device exposed.
No. The VPN company can see your traffic, and websites still identify you through logins, cookies and browser fingerprinting. If you need strong anonymity for safety reasons, the Tor Browser is designed for that, and it has its own trade-offs.
Some are and many are not. A free VPN that is not a limited version of a paid product usually makes money from adverts or your data. If you use a free VPN, pick a free tier from an audited paid provider.
Usually a little, because your traffic travels via an extra server and is encrypted. WireGuard connections to a nearby server are often only slightly slower. Distant servers and busy free services are much slower.
Yes in the US, UK, Australia, Canada and most other countries. Some countries restrict or ban VPNs, including China. Using a VPN does not make an illegal activity legal, and some streaming services ban VPN use in their terms.
For most people, a password manager first. Account takeover through reused or leaked passwords is far more common than someone snooping on your Wi-Fi. Add a VPN later if you have a specific need for one.