How to choose a VPN (and when you do not need one)
A plain checklist for picking a trustworthy VPN, the red flags to avoid, and a neutral look at three well-known services. Most people need the basics first; a VPN is an extra layer, not a shield.
Affiliate disclosure: some links on this page are affiliate links. If you buy through them we may earn a commission, at no extra cost to you. It never changes what we recommend.
Do you actually need a VPN?
A VPN moves your trust from your internet provider (or the café Wi-Fi) to the VPN company. It hides your browsing from the local network and your provider, and it changes the IP address websites see. It does not stop phishing, malware, weak passwords or tracking by sites you log into. See public Wi-Fi and VPNs for the full picture.
A VPN is worth it if you often use public or hotel Wi-Fi, travel, want to keep browsing private from your provider, or need a different region for a service you pay for (check that service's terms). If none of those apply, spend your effort on a password manager and two-factor authentication first.
The checklist
| What to check | Why it matters | Good sign |
|---|---|---|
| Independent no-logs audit | Anyone can claim "no logs" | A named audit firm, a recent date and a public report |
| Company and jurisdiction | Decides which laws apply to your data | Clear ownership, real address, transparency reports |
| Protocols | Old protocols are slower or weaker | WireGuard (or the provider's WireGuard-based protocol), IKEv2/IPsec, OpenVPN |
| Kill switch | Stops traffic leaking if the VPN drops | On by default, or one tap to enable |
| Apps on all your devices | A VPN you only have on one device protects one device | Windows, Mac, iPhone, Android, browser extensions |
| Breach history and response | How a company handled a problem tells you a lot | Disclosed publicly, explained and fixed |
| Refund window | Lets you test speed on your own connection | 30 days or similar, easy to claim |
Red flags
- Unknown free VPN apps. Servers cost money; some free apps have been caught selling data, injecting ads or carrying malware.
- "Lifetime" deals from companies you have never heard of.
- Military-grade, unhackable, 100% anonymous. No VPN makes you anonymous, and honest providers do not say so.
- No audit, no address, no named owners.
Three well-known options, compared neutrally
These are examples that meet most of the checklist, not a ranking. Plans, prices and features change often, so confirm everything on the provider's own site.
| Service | Company base | Free tier | Notes |
|---|---|---|---|
| Proton VPN | Switzerland | Yes, limited servers and features | Open-source apps; from the makers of Proton Mail; publishes independent no-logs audits |
| Mullvad | Sweden | No | One flat monthly price; sign-up with a random account number, no email needed; publishes audits |
| NordVPN | Panama | No (refund window instead) | Large server network; NordLynx protocol built on WireGuard; no-logs policy audited several times by an outside firm; disclosed a 2018 breach of one rented server in 2019 |
How to test a VPN in your first week
- Install it on every device you use on public Wi-Fi and turn on the kill switch.
- Run a speed test with the VPN off and on, at home and on mobile data.
- Visit an IP and DNS leak test page with the VPN on and check the location shown is the VPN's.
- Check that your banking, streaming and work apps still work. If something important breaks, use the refund window.
Your router and devices matter more than any VPN. Keep them updated, change default passwords and see home Wi-Fi and router security.
