Improving your online privacy can be daunting, but using one of the best VPN services is an excellent place to start. By changing your IP address – and even your virtual location – you can distance yourself from your activity, and browse what you want without the fear of someone looking over your shoulder.
There are tons of VPNs out there, though, so how do you know which one to go for? Well, at Tom's Guide, my team and I spend every day writing about and reviewing VPNs, as well as testing them hands-on in real-world situations.
We focus on privacy first and foremost, but we also take into account other important areas like the ability to unblock streaming sites, ease of use, and, of course, value for money. I've laid out the specs of each of my shortlisted providers on this page so you can gauge for yourself which one will suit you the best.
If you just want to check out the three best VPN services of 2024, simply pick from NordVPN, ExpressVPN, and Surfshark below – I rate them as the very best products available. However, If you want more in-depth info, keep scrolling for my rundown of the 10 top VPNs available today, and details on how I test VPNs at the bottom of the page.
The 3 best VPNs at a glance
The best VPNs in 2024
NordVPN: the best VPN overall
✔️ You want the very best VPN service on the market. NordVPN is quite simply the best VPN we've ever tested – it covers all the bases.
✔️ Netflix access is a priority. As my #1 ranked VPN for Netflix, NordVPN unblocks more locations than any other provider.
✔️ You want more than just a VPN. NordVPN also offers malware detection and ad-blocking on a standard plan, with even more features available on higher tiers.
❌ You like simple apps. Compared to the likes of ExpressVPN, Nord's map interface can be quite busy.
❌ You torrent often. Only some of Nord's servers are configured for P2P, and due to this I've found it can be somewhat slow to download torrented files.
NordVPN offers everything you could realistically want from a VPN: privacy, speed, streaming service unblocking and very reasonable prices. Those looking for very simple apps might want to consider ExpressVPN or Surfshark, but overall, Nord leads the pack. There's a 30-day money-back guarantee so you can test it out before committing.
NordVPN is undoubtedly the biggest name in the VPN industry, and in my full NordVPN review I found that it has absolutely earned that reputation – it's quite simply the very best VPN you can buy.
With over 6,400 servers in 111 countries, NordVPN practically guarantees a speedy server wherever you are. In fact, Nord has very recently upped the number of countries it's present in, which has addressed one of my few complaints about the service – it's now on par with its biggest rivals ExpressVPN and Surfshark in this area.
You'll likely be connecting to those servers with Nord's own NordLynx protocol, which is a reworked version of WireGuard. In short, it's modern, stable, and delivered searing connection speeds of over 950 Mbps – one of the fastest VPNs in my testing.
You'll get split tunneling, an effective kill switch, AES-256 encryption, and you'll even get some unusual options like Onion over VPN and Double VPN which are designed to keep you even safer when browsing the web. These are probably overkill for most people, but if you know you'll need them, they're there waiting to be used.
> NordVPN is my #1 VPN – get it from $3.39 a month
Nord's apps are powerful and pleasant to use, but while the map-based interface works well on larger screen such as PCs and tablets, on smartphones it can be more of a hindrance than a benefit – simpler interfaces like ExpressVPN's tend to work better here – but this is, of course, subjective.
Despite that, though, the apps are very capable, and you'll be able to install them on a huge range of devices.
One of Nord's most interesting features is Meshnet. This allows users to link devices anywhere around the world via encrypted NordVPN connections, creating its own secure network. This is perfect if you're looking to share files remotely with friends, family, or just between your own devices.
It can also route traffic from all your devices through just one, meaning you can, for example, use your home IP address when out and about on your smartphone. There's serious power here, and it's a big development unlike anything any other VPN offers. What's more, it's free to use, even if you don't have a NordVPN subscription.
When it comes to streaming, NordVPN really impresses. You'll be able to unblock tons of Netflix locations, iPlayer, Disney+, Amazon Prime, and more – and in recent months Nord and the related Surfshark have proved to be the most reliable streaming VPNs available.
On the basic plan you'll get unlimited access to the VPN, Threat Protection Lite – which blocks malware and phishing links – as well as Meshnet.
Sign up to higher tiers, though, and you'll get access to a password manager, data breach scanning, the upgraded Threat Protection Pro, encrypted cloud storage and even cyber insurance.
Of course, I wish these were included in the base plan, but seeing as Nord starts at such a reasonable price, it's nice to be able to configure what you pay for rather than paying over the odds and never using half the features available
With a 30-day money-back guarantee and some attractive deals running throughout the year, NordVPN is an elite service that has well and truly earned itself the top spot on this guide. It's not perfect, but it's closer than any of its rivals.
ExpressVPN: the best VPN for ease of use
✔️ You're looking for a simple, streamlined experience. ExpressVPN is powerful, but has a super simple interface that makes getting protected a breeze for beginners and experts alike.
✔️ You want to stream global content. From Netflix to Amazon Prime Video and BBC iPlayer, ExpressVPN is super reliable.
✔️ You value your privacy. Whether you're in the US, Europe, or even China, ExpressVPN's countless audits and history of protecting its users should inspire confidence.
❌ You're on a strict budget. ExpressVPN certainly isn't the cheapest on the market. Those looking for a better price may want to consider NordVPN or Surfshark.
❌ You want a fuller suite of software. Despite the introduction of the password manager Keys, other VPNs like NordVPN offer a wider range of additional features.
All things considered, ExpressVPN is one of the very best VPN I've tested. Its privacy features are excellent, it delivers good speeds, unblocks a whole host of global streaming sites, and is very accessible in terms of design and device support. If you're looking for a simpler alternative to NordVPN, it's your best choice – and you can try it out with its 30-day money-back guarantee.
ExpressVPN puts up a very good fight against NordVPN, and impresses with its easy-to-use apps that take the complexity out of setting up a VPN, leaving the difficult stuff to the experts. My ExpressVPN review showed that it unblocked anything and everything I threw at it with ease, and its privacy features are rock-solid.
On paper, the numbers are reassuring: over 3,000 servers in 160 locations spread across 105 countries around the world, a kill switch, split tunneling, and obfuscated servers. While some providers like Proton VPN have more servers in total, very few have such a wide spread – meaning that wherever you're based, you'll get swift, reliable connections. It has an especially impressive range in Asia, which is often neglected by other providers.
All apps use AES-256 encryption, which is the industry standard, paired with OpenVPN and Lightway protocols. Lightway is the standout here, and the in-house, open-source protocol delivers good speeds of around 410 Mbps – although this is an area where Express is outdone by Surfshark and NordVPN. However, unless you're using an ultra-fast connection you won't notice a difference.
ExpressVPN also uses its own TrustedServer technology, which ensures its RAM-only DNS servers retain no information about you or your activity. In short, ExpressVPN is fast and secure – and a recent update has added a well-needed kill switch to iOS.
> Tom's Guide readers get 3 months of ExpressVPN FREE
Its apps are pleasant to use and are very consistent across the board – once you've used one on any device, you've used them all – and the range of supported systems is huge. Not only can you cover your PC, Mac, iPhone, or Android, but your router, Chromebook, Linux PC, Fire TV Stick, and a ton more can also enjoy the same protection.
Thanks to an update in 2023, ExpressVPN can be used on 8 devices at once, up from the previous 5. This is great for those who have tons of devices, and definitely adds a little more value for money – although cheaper rivals Surfshark and PIA offer unlimited connections on a single plan.
One of the most common reasons to download a VPN is to access geo-blocked streaming content, and ExpressVPN is a great choice for this. In my testing, it reliably unblocked a number of Netflix locations, BBC iPlayer, Disney+, Amazon Prime, and works impeccably for regional TV channels around the world. Only a few other providers like NordVPN and Surfshark can match this.
Of course, improvements can be made with any service, and the same is true here. For example, if you need a dedicated IP or port forwarding, a provider like PIA might be a better fit.
ExpressVPN also doesn't have quite the breadth of additional privacy tools compared to rivals like NordVPN. ExpressVPN's free password manager Keys is a nice addition, but when you consider NordVPN offers things like Meshnet, Threat Protection Pro – better than ExpressVPN's own Threat Manager – a data breach scanner and even cyber insurance, Express looks a little limited. That said, there are no extra charges for what you do get from Express.
Finally, a word on customer support. If anything doesn't work as it should – perhaps you're having issues unblocking UK Netflix from the US, for example – the 24/7 live chat support is always on hand. In my experience, they have been quick and knowledgeable and in general much better than most other VPN providers' live chat teams. Plus, the on-site help articles are excellent, too.
When everything is tallied up, it all comes together to make an excellent package that's well suited to experts and newbies alike – and I think that premium price is well worth what you get.
Surfshark: the best cheap VPN
✔️ You're looking for quality on a budget. Surfshark is an absolute bargain, and I'm consistently amazed that it can offer such a good product for the price.
✔️ You have a need for speed. Surfshark is as quick as NordVPN, topping out at 950 Mbps.
✔️ You have tons of devices. Surfshark's unlimited simultaneous connections policy means you can use one plans on as many devices as you like.
❌ You truly rely on your kill switch. While it's very unlikely to happen in real life, my testing was able break Surfshark's kill switch. This didn't happen to ExpressVPN or NordVPN.
❌ You're a hardcore torrenter. Surfshark is more than capable of torrenting effectively, but if your main use case is sharing P2P, try ExpressVPN or PIA.
Surfshark is one of those rare examples of a product combining genuinely premium features with an incredibly low price. While it's not quite as powerful as the leading two providers, it's super secure, can be installed on unlimited devices, and also offers a 30-day refund period.
If you're looking for a cheap VPN that outperforms products twice its price, look no further than Surfshark. The services in this guide are ranked by quality, not price, so to see a VPN that's so affordable sitting at #3 is seriously impressive.
In my Surfshark review, I found its apps great to use, and offer all the privacy and security essentials such as AES-256 encryption, a kill switch, split tunneling, and the super-fast WireGuard protocol.
In my most recent testing, connection speeds rose considerably, and on our 1 Gbps connection, it maxed out at a staggering 950 Mbps. That makes Surfshark one of the fastest providers I've ever tested – beating out the likes of ExpressVPN, PIA, and CyberGhost. Plus, it's currently proving to be very reliable for streaming. I've had some issues before, but almost every provider has at some point.
However, when we put Surfshark's kill switch through my rigorous testing procedure, we did manage to catch it out and get it to reveal our true IP address briefly. However, the situation that caused this is unlikely to happen in the real world.
Surfshark has been hard at work on extra features like MultiHop, and Nexus. According to the company, "connecting to Nexus means that your traffic gets routed through a whole network of servers rather than a single VPN tunnel." Decentralizing your connection is a very interesting innovation, and it's great that Surfshark is exploring new ways to improve VPNs as a whole.
Currently, Nexus offers an IP Rotator – your IP address will be changed every 15 minutes or so – and an IP Randomizer feature is coming soon. This will change your IP address every time you visit a new website
If you're a hardware hoarder, Surfshark's unlimited simultaneous connections policy may put it above my #1 and #2 picks. You can install one plan on any number of devices – great for complete protection, or even sharing with those in your home. And, as a Linux VPN, Surfshark is one of the few providers to offer a full GUI – most others are limited to the command line. Very impressive for a VPN that costs well under $2.50 a month.
One of Surfshark's most interesting new developments is its Alternative ID feature. Built in to the apps, it can create spoof email addresses that will forward mail to your real address, and can be deleted at any time. This is great for signing up to newsletters for discounts, or even listing online when selling a product. It can also create spoof identities, which make it easy to autofill fake details when signing up to websites.
A fresh addition to Alternative ID is Alternative Number, which allows you to create a spoof phone number to protect your own from spam. This is perfect for using when advertising online, and while there are still a few limitations with it, it's an excellent addition that's not available from any other VPN.
Overall, Surfshark is an excellent budget option, and when you consider its price, what small sacrifices you may need to make seem really quite insignificant.
The best VPN for torrenting
✔️ You're a Linux user. PIA is an excellent VPN for Linux users, and is one of the few providers to offer a native GUI (Surfshark being another).
✔️ You want proof of a no-logs policy. PIA has had its claim of no logging proven in court twice. That's just about as reliable proof as you're going to get.
✔️ You want a server in every US state. This is perfect for getting around things like sporting blackouts and shopping restrictions, or doing research on medical procedures banned in your state.
❌ You prioritize connection speed. With peak speeds of around 360 Mbps in my testing, PIA certainly isn't slow – but there are much faster out there.
❌ You value simplicity. PIA definitely presents as more of an 'expert' option, meaning that newbies could be intimidated by the additional functionality and settings.
Private Internet Access is an excellent VPN that offers deep customization, rock-solid privacy, as well as a proven zero-logging policy. It slightly lags behind the top three in terms of streaming and connection speeds – but some users will definitely find value here, especially due to the bargain price.
Private Internet Access has been around for a long, long time, but unlike other dinosaurs of the VPN game, it's stayed on an upward trajectory rather than falling to the new guard.
In fact, it's risen another place to #4 since my last Private Internet Access review.
While PIA doesn't disclose its server network size, I believe it to sit at around 20,000 servers, which makes it by far the most server-rich provider on the market. Combine that with over 90 available countries and you've got yourself quite the spread.
Its proxy browser extensions are also very good, with updated tech that allows for faster browsing. For newbies and those looking for a simpler experience, though, this could very well be a little annoying or intimidating.
It's great for streaming, with access to Netflix, Disney+, Amazon Prime, and BBC iPlayer. We've expanded my streaming testing even further this time round, and as an improvement on last time, PIA was able to unblock every single service.
PIA really stands out when you get under the surface a little. It has all the basics like a kill switch and split tunneling, but there's are some genuinely valuable extras that experts will love. For example, for those looking for the best VPN for torrenting, PIA's port forwarding ability gives you a ton of flexibility when it comes to setting up how your device routes your traffic.
Other more expert features include adjusting your MTU size, the MACE ad blocker, a powerful automation system, variable encryption levels and VPN obfuscation. Admittedly, for the vast majority of people much of that will go unused, but if you're a proper techie who likes to get stuck into the settings, PIA is a dream.
Similar to Surfshark, Private Internet Access also offers all subscribers unlimited simultaneous connections. This means that you can keep as many devices as you like protected – and potentially share your details with your family and friends if you're feeling generous. For some, this might not be a huge selling point, but for gadget obsessives, it's a must-have feature.
In April 2024, Private Internet Access passed an independent audit of its server network, and this confirms that it aligns with all the company's claims. Combined with its audited privacy policy and proven no-logs policy, PIA has some clout when it comes to privacy.
PIA certainly isn't perfect, though. If you're a beginner just looking for simple, accessible applications to help protect you online, PIA probably isn't the best choice. The amount of customisation is great for those who'll use it, but quite simply a bit much for those who won't.
Connections speeds are also a little behind the pack. Topping out at around 320 Mbps in my testing, it's certainly not slow, but it's nothing like the 950+ Mbps I've seen from NordVPN, Surfshark, and even Mullvad.
For those looking for a highly featured, reliable service that's keenly priced, I'd recommend giving PIA a go – it has a 30-day money-back guarantee so you can test it out risk-free. But, if you're after simplicity, Surfshark or ExpressVPN will likely be better for you.
Other quality VPNs I've tested
I think that one of either NordVPN, ExpressVPN, Surfshark, or Private Internet Access will be the best VPN for the vast majority of users. They all deliver excellent speeds, provide class-leading privacy and security features, are effective at unblocking tons of content around the world and are super simple use.
They also cover a range of price points, ranging from the premium-priced ExpressVPN to the absolute bargains that are Surfshark and PIA.
However, if you have a very particular feature you're looking for, there are plenty of other trusted providers to choose from. Below I'll run down a number of other VPNs I'm comfortable recommending – and while they're not quite as versatile and well-rounded as my top picks, they could still be worth considering if it provides a niche feature you're looking for.
✔️ You're looking for a decent free plan. While Proton's free service can't match up to its paid plan, it's still very useful for emergencies.
✔️ You want a provider that advocates for internet freedom. Proton as a company has demonstrated its commitment to internet freedom by offering, among other things, free servers dedicated to accessing Deutsche Welle's unbiased reporting.
❌ You're looking for a bargain. Proton is fairly pricey when compared to the likes of PIA and Surfshark – although Tom's Guide readers get an extra discount.
❌ You want comprehensive support. Proton VPN has excellent articles on-site, but finding them can be complex, and live chat isn't 24/7
Proton VPN has made a lot of improvements in the last few years, growing from a pretty techy and complex option to an accessible VPN that's remarkably good for streaming. Its free plan is great, and for those who need features like Secure Core, this may well be the best option.
Swiss-based privacy provider Proton is best known for Proton Mail, but in our Proton VPN review, we found that it's right up there with the very best.
Since my last review, Proton VPN has supercharged its connection speeds up to an eye-watering 950 Mbps when using WireGuard. This matches the likes of NordVPN and Surfshark, and addresses one my key issues with the provider in my last review.
What's more, when using the old faithful OpenVPN (essential for Stealth Mode), you'll see speeds of up to 400 Mbps. That's faster than almost every other VPN out there when configured the same way, outpaced only by Mullvad and Surfshark in my testing. Very impressive.
You'll also get a comprehensive zero-logging policy and strong encryption, and Proton VPN will certainly appeal to those looking to use their VPN for absolute online privacy. In July 2024, it passed a third no-logs audit, and it's great to see this consistent commitment to protecting its users.
What's more, Proton VPN also offers its Secure Core servers, which are located in physically secure locations in privacy-friendly countries. You can choose to use these, and then route to a destination of your choice for added anonymity. Proton Unlimited also adds the entire privacy suite of Proton Mail, Proton Drive, and Proton Calendar for a fairly reasonable price.
However, it's not all work and no play for Proton – in m y streaming testing it proved to be a real standout when it comes to unblocking Netflix, reliably accessing a number of useful locations, as well as BBC iPlayer, Disney+ and Amazon Prime.
However, Proton VPN really stands out thanks to its commitment to helping users around the world access a free and uncensored internet. One such example of this is its partnership with news company Deutsche Welle. Even free users can connect to a dedicated server and access unbiased news anywhere in the world.
For example, this is a godsend for those in countries like China and Russia who prefer not to consume state-controlled news.
It's getting trickier by the day to pick faults with Proton, but there are still a couple of sticking points. Firstly, while some servers do support P2P traffic, there are relatively few compared to the competition – although if Proton detects P2P activity, it'll seamlessly redirect you to a compatible server.
Prices have recently dropped across the board, but it's still not cheap. However, sign up for 2 years and you'll get a decent deal, with a generous 10 simultaneous connections to boot.
Overall, Proton VPN is very much on the up, and it's evident the developers are putting in some hard work rather than resting on their laurels. Thanks to that, Proton VPN is a service we can wholeheartedly recommend.
✔️ You're looking for a bargain. Often almost hitting the $2-a-month barrier, CyberGhost is very affordable
✔️ You want a long refund period. CyberGhost gives you 45 days to make up your mind, rather than the industry-standard 30.
✔️ You like easy-to-use apps. Clean and clear, CyberGhost's apps are super intuitive.
❌ You want to use lots of devices. Instead of allowing you to log in and out to make the most of your simultaneous connections, CyberGhost only allows 7 installations. To use another device, you'll have to remove it completely.
❌ You need top-tier support. CyberGhost's support is decent, but nothing like the quality of ExpressVPN or NordVPN.
CyberGhost is an established provider that's trusted by an incredible 36 million users. It's private and secure, and its apps are great to use. However, it falls a little behind the pack when it comes to streaming, and its device limit is quite restrictive, especially if you're sharing within your household.
CyberGhost is another long-standing name in the world of the best VPNs, and in that time it's developed a reputation for privacy, streaming performance, and torrent-friendly servers.
With over 11,000 servers, CyberGhost has one of the largest server networks in the industry, and with a spread of 100 countries, there's plenty of variety when it comes to picking which to connect to.
In my expert CyberGhost VPN review, the Romanian provider delivered great connection speeds of up to 760 Mbps, and while few users will have base connections capable of such heady heights, it's still quite an accolade.
CyberGhost's apps had an overhaul in 2021, and with the introduction of Version 8, the experience is much more modern and sleek.
However, you'll only be able to install CyberGhost on 7 devices – and after that, you'll need to unregister a device to use another, rather than simply logging out on one device like almost all other providers allow.
This can be a real pain if you're right on the edge of how many devices you're active on. We'd implore CyberGhost to change this silly feature – why not go unlimited like fellow Kape Technologies-owned provider PIA?
Back to positives, CyberGhost's apps offer some very useful dedicated streaming features like Netflix and iPlayer-optimized servers. It's fairly capable when it comes to unblocking, and in my last testing I saw it unblock some Netflix libraries, iPlayer, and Amazon Prime Video.
Some smaller streaming sites like the Australian site 10Play were unavailable, however, and the likes of ExpressVPN, NordVPN and Surfshark are better providers for streaming.
One of my biggest issues with CyberGhost in my last review was that it hadn't undertaken a security audit of any kind. This time round it's still not perfect, but it has had its no-log policy audited by Deloitte. Let's hope a full server and app audit is in the works.
Overall, CyberGhost is a cheap, effective VPN provider that impresses when it comes to torrenting and general privacy. However, it's honestly quite outclassed by the providers above.
✔️ You're after a quality Chrome extension. Windscribe offers the best standalone proxy Chrome extension available, which is great for quickly accessing blocked sites and changing location.
✔️ You want the best ad- and tracker-blocker. Windscribe's blocking tech is some of the best I've tested.
❌ You want a premium plan. While the free plan is excellent, if you're willing to pay, there are much better options.
❌ You want an audited VPN. While Windscribe is open-source, it's fallen behind the competition in terms of independent auditing.
Windscribe absolutely shines when it come to the things it gives you for free. You'll get a generous amount of servers, and a great proxy extension that I use day-to-day at Tom's Guide. However, paid plans are expensive and complicated, and the vast majority of users will want to look elsewhere when parting with their cash.
Our expert Windscribe review found the provider's free VPN that gives users 10GB of data a month very useful, but it also offers a fairly-priced paid service that delivers unlimited data and lets you connect as many devices at once as you like. Most other VPN services permit only five to 10 at a time.
Windscribe is compatible with many platforms – including routers and Amazon Fire and Kodi TV set-top boxes. The service offers a great variety of connection options, has a wide geographic reach with hundreds of servers, and presents an appealing, if minimal, user interface.
It's also good for watching overseas Netflix, and has dedicated 'Windflix servers' to enable this. One failure I did notice, however, was unblocking amazon Prime Video.
The service's Chrome VPN extension is a standout feature. As one of the best on the market, it offers tons of features and can be used without installing the desktop client – great for work computers of other devices you can't install software on.
For those that do install the desktop client, you'll notice the brand-spanking Windscribe 2.0 software has tidied up the interface and offers a ton of nifty features – although newbies may be overwhelmed. One such feature is Decoy Mode on Android which, although very niche, could be invaluable to dissidents in truly extreme situations.
Once of my previous complaints was that Windscribe simply wasn't very fast compared to others, but since then it's upped the ante, topping out at an excellent 950 Mbps.
This matches up to the very fastest providers on the market, and it's great to see Windscribe pushing more established [players like this.
You can pay for a Windscribe subscription with Bitcoin, you don't even have to provide an email address, and the service is based in Canada, which may appeal to users wary of US authorities.
✔️ You want unlimited connections. A single IPVanish plan can be used on unlimited devices.
✔️ You're a fan of in-depth interfaces. IPVanish has slightly toned down its techiness, but it still shows tons of data in the app.
❌ You want to pay the same price forever. Be aware that if you don't cancel and resubscribe at the end of your plan, prices go through the roof.
❌ You're a Netflix addict. IPVanish is a decent VPN when it comes to streaming, but it can't unblock some niche locations like Japan Netflix.
IPVanish has been around for a long time, and is pretty good across the board. It's fast, decent for streaming, and offers plenty of customization. However, compared to the leading providers, it hasn't quite kept up with the pack.
IPVanish is a US VPN that's been in the game for a long time, and it's widely regarded as a safe, reliable, and trustworthy provider. It's designed for the more techy user, it boasts a bunch of useful additions and powerful apps that display all the data you could wish for.
In my testing for the IPVanish review, I saw the provider deliver good speeds of around 770 Mbps when using WireGuard, which is respectable, but down a little since my last test.
Its OpenVPN speeds are good but nothing special, at around 230 Mbps in my testing, but most users will be using WireGuard anyway.
'Scramble' is an interesting feature that allows VPN use in countries like China, and while it's not quite as robust as other specialized China VPN services, it's still very useful.
When it comes to streaming, it's also a mixed bag. I got access to US Netflix, BBC iPlayer, Disney+ and Prime (which is an improvement from last time we checked), but unlike providers further up this list, we couldn't tap into Netflix Australia.
One of my biggest criticisms in my last review was that IPVanish rarely updated its apps – and it looks like the devs were listening.
The brand new interface looks great, retains many of the in-depth features I loved, while integrating a Favorites function as well as in-app support.
However, on the flip side, it's a shame that some niche features have been removed, rather than tucked away more neatly.
Overall, though, while it's lost a little ground on the top services, IPVanish is still well worth considering, especially if you're a fan of in-depth, techy software.
✔️ Privacy is your #1 concern. Mullvad doesn't require you to submit any identifying info. That means no email address, no name, no nothing.
✔️ You want to pay with cold, hard cash. Mullvad is one of the only VPNs that accepts posted cash as a payment system.
❌ You want to stream content. Mullvad isn't set up for streaming, nor is this a priority for the provider. Go for ExpressVPN, Nord, or Surfshark if this is a deal-breaker.
❌ You're after a cheap choice. No matter how long you sign up for, you'll be paying $6/€5 a month. No discounts or deals here.
Mullvad is well-known and widely recommended online for its privacy features, and I can't disagree. For those looking for a very private VPN service, it's a good choice, but in terms of streaming, speed, app features and general usability, it can't compete with the top three.
In my expert Mullvad review, I found that the Swedish provider eschews 'gimmicks' for true privacy performance. However, while this certainly endears Mullvad with techies and old-school VPN veterans, the crowd-pleasing likes of ExpressVPN and NordVPN arguably offer a better proposition for the casual user.
With no tricks and a very transparent website, Mullvad's one of the few providers that avoids making disputable claims of "unblocking anything" or
"guaranteed anonymity".
Rather, it leads by example by never taking any personal details, accepting cash payments sent through snail mail, and offering simple, effective and open-source apps. New additions include the ability to purchase account numbers through Amazon – an anonymity plus point – and a fresh DNS server audit.
It also avoids the incredible complexity of other 'expert' VPNs, and while a very small selection of users will want to tweak countless DNS settings, many will simply appreciate the no-nonsense approach to online privacy.
As I said, though, Mullvad does lack in some important areas that many users won't want to compromise on. While connection speeds are very impressive, in line with IPVanish, CyberGhost, and the like, it's not able to unblock any streaming services – and likely never will.
On that connection speed note, though, in my last testing it topped out at a very impressive 950 Mbps – just as fast as the highest flyers.
What's more, though, is that when using OpenVPN, Mullvad outpaced every other provider I tested except for Surfshark, topping out at a heady 410 Mbps. If you'll be using OpenVPN and don't care about streaming, it could be a great choice.
The apps also lack some fairly commonplace usability features like automatic selection of the nearest/fastest location, and no favorites list. Plus, if you run into any issues you'll have to rely on email support or the bare-bones support site rather than live chat.
Overall, though, if you're looking for a transparent, privacy-focused VPN, you could do a lot worse than Mullvad.
✔️ You want to delve deep into your settings. Hide.me offers almost unparalleled customization of its settings.
✔️ You need cloud storage. The bundled Internxt cloud storage is a bonus – if you'll use it.
❌ You're a beginner. Hide.me's customization is a double-edged sword – if you don't really know what you're doing, you're better off with a simpler provider like ExpressVPN or Surfshark.
❌ You're a Mac user. Hide.me's Mac offering doesn't quite match up with its other platforms.
If you're looking for powerful, customizable VPN solution, then Hide.me might be well up your alley. However, when compared to the elite providers like ExpressVPN, PIA, and NordVPN, there's little it does better, and it's just not as nice to use.
Hide.me has been around since 2011, and in that time it's developed quite a following and has made quite an impression on the VPN industry.
With around 2,000 servers in 75 locations, it's in the mid-pack when it comes to network size – outstripped by PIA, CyberGhost, NordVPN, and others – but in practice this is more than enough for just about any user. Connections are lightning-fast too, topping out at a mega 950 Mbps in my last round of testing.
Hide.me's Windows VPN apps are powerful and configurable, with plenty of protocol choices, DNS protection, torrenting support, and more. It's evidently aimed at the advanced user, and those with the knowledge and inclination to trawl through the settings will be greatly rewarded.
However, for many, it's quite possible that it'll all be too much and won't deliver such a seamless experience as more welcoming providers like ExpressVPN – and its Mac offerings are much weaker than the competition.
It's also worth noting that I experienced some minor technical issues with the apps, including an issue with the kill switch which could potentially compromise users when changing server.
In my streaming testing, Hide.me impressed. It's able to access a number of Netflix locations alongside BBC iPlayer, Showtime, Amazon Prime Video, Disney+, and more.
Finally, Hide.me also has some excellent privacy credentials – although it hasn't undertaken any kind of audit since 2015, and even then there's very little detail. But, overall, it's a great choice, especially if you like to tinker with your software – and the new free 2TB cloud storage plan courtesy of Internxt isn't to be sniffed at.
What is a VPN?
If you're wondering "what is a VPN?" In short, it's an application installed on your device that redirects your internet connection through its own servers around the world. This allows you to virtually change your location online, making you more anonymous and tricking sites like Netflix into showing you content that's blocked in your country.
A VPN also encrypts your traffic, which means that if it's intercepted, your activity can't be seen. That goes for hackers, your government, and even your internet service provider – a VPN lets you browse in total secrecy.
This in turn allows you to access sites that might be banned by your ISP – perhaps that's YouTube or TikTok at school, or Western news and social media if you're in Russia or China.
While VPNs might sound techy, nowadays they're super simple to use. They almost all offer simple, attractive apps for many different devices, and you can get connected in a single click. So, don't be intimidated – if you managed to install Facebook on your smartphone, you can install a VPN as well.
In short, the best VPN makes the internet a freer place, and allows you to do what you want, when you want to do it – and with the current VPN deals on offer, there's never been a better time to sign up.
Complete industry standings
How to choose the right VPN
The competition between the best VPNs becomes stiffer every time I re-review all the different providers – and with new features and usability tweaks coming regularly from the developers, change is always on the horizon.
When choosing the right VPN for you, it's worth considering what you'll be using it for. Will you be wanting to stream tons of global Netflix libraries? If so, in my testing NordVPN proved slightly more effective than ExpressVPN with Netflix. If you're a beginner, though, ExpressVPN's beautifully streamlined interface will likely appeal more.
Linux users will want a GUI, so Private Internet Access will look appealing, while those with tons of devices will appreciate Surfshark's unlimited simultaneous connections policy.
In short, make note of your must-haves from your VPN. Then read through my complete list, perhaps delving into my expert reviews, and then sign up to the one that ticks the most boxes.
How we test the best VPN services
When it comes to recommending a product that users will entrust with quite possibly every byte of their online life, I have to be absolutely sure that my choices are correct, and thoroughly tested.
For a comprehensive rundown, check out out our full methodology of how we test VPNs. For the time-poor, though, here are the crib notes.
Unlike some sites, I don't simply reel off a spec sheet and declare the provider with most impressive claims the winner. Instead, I work with our dedicated in-house team that gets hands-on with all the providers listed (and more).
Every 6 months, after scouring the website for new claimed features or changes in policy, we sign up to a plan and install it on a range of devices. The Windows app sees the most rigorous testing, and it's here that we'll try to break the kill switch, ensure any leak protection is working correctly, and measure connection speeds.
The other apps, including the Mac VPN, iPhone VPN, and Android VPN also see comprehensive testing, and we'll check every available setting in every app to make sure it's functioning as promised by the provider.
As we use the apps, if anything appears to be behaving strangely we'll investigate that. We might dig into the source code, or view the contents of its RAM. This general usage stage is also how we make decisions on aesthetics and ease of use – although these are admittedly more subjective.
Then comes the streaming testing. We'll test each VPN with all the big streaming sites from a number of locations to ensure it's working as claimed. As Netflix is still hugely popular and somewhat troublesome when it comes to VPNs, we test the biggest providers every month to make sure my recommendations are still relevant.
The experts that test VPNs at Tom's Guide
These are the experts who have tested, reviewed, and ranked the best VPNs in this guide:
What's the fastest VPN?
Good connection speeds are incredibly important to VPN users – if a VPN slows your internet to a crawl it's unlikely to be used regularly, leaving more devices unprotected. And, now that one of the most common uses for VPNs is streaming, being able to load HD and 4K content without buffering is more important than ever.
In my review process, I test every VPN service on a 1 Gbps line. I measure the speeds with a number of tools, including the Ookla SpeedTest website and CLI, nPerf, Netflix's Fast, and others. I then take the average (median) of each tool's results to generate an accurate range of speeds. I repeat these tests morning and evening to ensure accuracy.
In my most recent testing, Surfshark and NordVPN proved to be the fastest providers, just about maxing out my 1 Gbps connection at 950+ Mbps.
Which VPNs work with Netflix?
Netflix is still the most popular online streaming service, and it also turns out it's now one of the most problematic for VPNs.
Netflix shows different content in different countries, so US subscribers will be able to watch different shows to those in the UK, Japan, or Germany. By using a VPN, though, you can virtually change your location, but recent updates by the streamer means that its VPN detection and blocking tech is more effective than ever.
I test the top providers every month (at a minimum) to make sure my recommendations are up to date. Below, I'll outline which locations the best VPN services can currently unblock.
- ExpressVPN: UK, US, Australia, Canada, Japan
- Proton VPN: UK, US, Australia, Canada, Japan
- Surfshark: US, UK, Australia, Canada, Japan
- NordVPN: US, UK, Australia, Canada, Japan
- IPVanish: US, UK, Japan
- Hotspot Shield: US, UK, Canada, Japan
- CyberGhost: US, UK, Canada, Japan
Best VPN FAQs
How do I choose the best VPN service?
Choosing the best VPN for can be a tricky process – that's why I've put together this comprehensive guide. However, for most people, I'd recommend my #1 VPN NordVPN as the best choice.
It works great as a VPN for Netflix, a torrenting VPN, and even an iPlayer VPN, so whatever you need your VPN to do, it's got you covered – all the while keeping you protected with its rock-solid encryption.
For beginners, ExpressVPN will be a better choice. It's just as powerful and secure, but the apps are streamlined in a way that makes it incredibly easy to use and simply set and forget.
If you're after a cheap service, I'd also recommend bargain VPN Surfshark as a great option. It's not as fully-featured as Nord, but it's usually available for around $2.49 a month.
Is it illegal to have a VPN?
Short answer – no.
Using a VPN is not illegal, and it's perfectly legitimate to want to protect your data and activity. Having one on your computer and using it regularly in pursuit of watertight web security and location spoofing is in no way unlawful.
However, using a VPN to hide illegal activity doesn't make you above the law, so downloading copyrighted material is still illegal even with a VPN. Similarly, using a VPN goes slap bang against Netflix's Ts&Cs, and the provider has the right to terminate your subscription if they catch you – although that's never actually happened.
Countries like China and the UAE have made laws against VPN use, but due to their use in business it's impossible to outlaw VPNs outright. However, in those cases it's well worth reading up on what you may or may not be permitted to use a VPN for, and consider if the very small risk is worth taking.
What makes a great VPN?
The most basic qualities you should look for are speed, privacy and ease of use. These might seem like basic attributes, but in reality few providers have found a happy medium.
Connection speed relies on having a wide range of well-maintained servers. This allows the VPN to provide excellent speed and bandwidth to everyone using its servers.
Having excellent security is a fairly basic requirement, but hard to get right. If you're concerned about that, make sure your VPN has an airtight privacy policy, and a no-logging policy is even better. Some services like ExpressVPN and NordVPN have also been independently audited to prove their claims.
Finally, although many users might be au fait with tech, more and more newbies are looking to start using VPNs. If that's you, it's definitely worth making sure that your provider has well-designed apps on all the devices you expect to use with the service.
Are no-fee VPNs any good?
Naturally, free services are very popular products because everyone likes to save their money. And, they can be handy bits of software if you're not somebody that's likely to keep their VPN turned on all the time and just want it for occasional use for staying safe on public Wi-Fi. Oh, and if you don't mind ads...
For most people, though, free services provide a false economy. They tend to have limited servers in just a handful of locations, often restrict you to a single device and almost always have a limit on the amount data you can use per day or month.
Those data limits rule out using your VPN for streaming or torrenting, and if you want to keep your VPN running 24/7 for a permanent privacy layer, a no-fee VPN just isn't going to work.
What VPN protocols are there?
There are several different VPN protocols, not all of which are used by all of the VPN services I have reviewed. Most operating systems have built-in support for at least one of these protocols, which means you can use that protocol – and a willing VPN service – without client software. The full-fledged VPN services have online instructions for how to do this, as well as how to set up routers to connect directly to the services.
OpenVPN: OpenVPN is very secure, open-source and widely used. Most VPN services support it, but except for Chrome OS and Linux, few operating systems do. This protocol can be used in either TCP (web) or UDP (streaming) mode; the latter is sloppier but faster. You'll need either the VPN service's client software or one of the many free alternatives. Either way, you'll still need to pay for the VPN service.
L2TP/IPsec (Layer 2 Tunneling Protocol with Internet Protocol Security): L2TP is not secure itself, so it's generally paired with the IPsec secure-networking standard. The combination of the two was once thought to be very secure when properly implemented, but some VPN services suggest that you use OpenVPN instead. L2TP/IPsec has native support in Windows, OS X/macOS, Android, Chrome OS and iOS. Most VPN services support it.
IKEv2 (Internet Key Exchange version 2, generally with IPsec): This is a new-ish standard that is very secure when properly implemented. It has native support in Windows, iOS and recent versions of OS X/macOS.
SSTP (Secure Socket Tunneling Protocol): SSTP is a Microsoft protocol with native support on Windows Vista and later versions. It's thought to be quite secure, but only Microsoft knows for sure.
PPTP (Point-to-Point Tunneling Protocol): This standard is largely obsolete, with many known security flaws, but it's fast. It has native support built into Windows, Android and older versions of Mac OS X and iOS; Apple dropped support with macOS Sierra and iOS 10. Use PPTP only for streaming content, as it won't protect your data.
WireGuard: The newest of these protocols, WireGuard combines reportedly excellent security with great speeds. Developed from the ground up, it uses far less code than its predecessors, meaning a better, simpler user experience. However, it's not yet supported by many VPN services, although as it gains traction more and more are beginning to implement it. Some, like Mozilla VPN, solely use WireGuard.
