This is crazy. Lawmakers in several US states are contemplating banning VPNs, because…think of the children!
As of this writing, Wisconsin lawmakers are escalating their war on privacy by targeting VPNs in the name of “protecting children” in A.B. 105/S.B. 130. It’s an age verification bill that requires all websites distributing material that could conceivably be deemed “sexual content” to both implement an age verification system and also to block the access of users connected via VPN. The bill seeks to broadly expand the definition of materials that are “harmful to minors” beyond the type of speech that states can prohibit minors from accessing potentially encompassing things like depictions and discussions of human anatomy, sexuality, and reproduction.
The EFF link explains why this is a terrible idea.
Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from hundreds of Zendesk corporate customers simultaneously.
Zendesk is an automated help desk service designed to make it simple for people to contact companies for customer support issues. Earlier this week, KrebsOnSecurity started receiving thousands of ticket creation notification messages through Zendesk in rapid succession, each bearing the name of different Zendesk customers, such as CapCom, CompTIA, Discord, GMAC, NordVPN, The Washington Post, and Tinder.
The abusive missives sent via Zendesk’s platform can include any subject line chosen by the abusers. In my case, the messages variously warned about a supposed law enforcement investigation involving KrebsOnSecurity.com, or else contained personal insults.
Moreover, the automated messages that are sent out from this type of abuse all come from customer domain names — not from Zendesk. In the example below, replying to any of the junk customer support responses from The Washington Post’s Zendesk installation shows the reply-to address is help@washpost.com.
One of dozens of messages sent to me this week by The Washington Post.
Notified about the mass abuse of their platform, Zendesk said the emails were ticket creation notifications from customer accounts that configured their Zendesk instance to allow anyone to submit support requests — including anonymous users.
“These types of support tickets can be part of a customer’s workflow, where a prior verification is not required to allow them to engage and make use of the Support capabilities,” said Carolyn Camoens, communications director at Zendesk. “Although we recommend our customers to permit only verified users to submit tickets, some Zendesk customers prefer to use an anonymous environment to allow for tickets to be created due to various business reasons.”
Camoens said requests that can be submitted in an anonymous manner can also make use of an email address of the submitter’s choice.
“However, this method can also be used for spam requests to be created on behalf of third party email addresses,” Camoens said. “If an account has enabled the auto-responder trigger based on ticket creation, then this allows for the ticket notification email to be sent from our customer’s accounts to these third parties. The notification will also include the Subject added by the creator of these tickets.”
Zendesk claims it uses rate limits to prevent a high volume of requests from being created at once, but those limits did not stop Zendesk customers from flooding my inbox with thousands of messages in just a few hours.
“We recognize that our systems were leveraged against you in a distributed, many-against-one manner,” Camoens said. “We are actively investigating additional preventive measures. We are also advising customers experiencing this type of activity to follow our general security best practices and configure an authenticated ticket creation workflow.”
In all of the cases above, the messaging abuse would not have been possible if Zendesk customers validated support request email addresses prior to sending responses. Failing to do so may make it easier for Zendesk clients to handle customer support requests, but it also allows ne’er-do-wells to sully the sender’s brand in service of disruptive and malicious email floods.
The Asia-Pacific (APAC) region is seeing a rapid surge in number of cyberattacks aimed at its enterprises', a new report suggests. According to Barracuda's SOC Threat Radar report, threat actors are intensifying their efforts against vulnerable VPN infrastructure and Microsoft 365 accounts, and using Python scripts to launch attacks stealthily. The Akira ransomware group, in particular, has accelerated its growth, exploiting outdated or improperly patched systems with speed and precision.
Akira Exploits SonicWall VPN Vulnerability
The Akira group is reportedly leveraging a known vulnerability, CVE-2024-40766, in SonicWall VPN devices. Though this security flaw was patched months ago, many organizations have failed to apply the update or reset credentials for post-patching. This oversight is proving costly.In several incidents, attackers have used stolen credentials (likely harvested before patches were applied) to intercept one-time passwords (OTPs), enabling them to bypass multi-factor authentication (MFA), even on patched systems. The attackers generate valid login tokens, which allow them to sidestep MFA protections entirely.Barracuda first issued a security advisory regarding this threat in August 2020. Despite awareness, attacks continue at a steady pace, particularly in Australia and other APAC nations. Researchers stress that Akira can quickly escalate from initial infection to file encryption. They have also observed Akira using legitimate remote monitoring and management (RMM) tools to disable security software and backup systems, effectively sabotaging recovery efforts.
Conditions That Increase Risk
Organizations are particularly vulnerable if they:
Use high-access service accounts with non-rotated credentials
Recommended countermeasures include:
Running vulnerability scans to detect unpatched VPNs
Upgrading to SonicOS 7.3.0 or later
Resetting all VPN-related credentials
Removing unused or legacy accounts
Restricting VPN access by IP address
Monitoring for unusual login activity, particularly from unfamiliar countries or service providers
“If you think there is any chance that your credentials or OTPs have been exposed, act fast,” the report warns. “Reset all passwords, switch to phishing-resistant MFA like FIDO2 security keys, and check VPN logs for irregular access patterns.”
Malicious Python Scripts Evade Detection
Another worrying trend highlighted in the report is the growing use of Python scripts to deploy hacking tools under the radar. Barracuda's security operations center (SOC) analysts have seen attackers automate credential stuffing, use Mimikatz (a tool to steal passwords), and abuse PowerShell, all orchestrated via Python programs.The use of Python allows threat actors to:
Automate attacks, increasing their speed and efficiency
Disguise malicious processes as legitimate activity
Execute multiple operations simultaneously, such as data exfiltration while scanning for vulnerabilities
This level of automation reduces the need for manual execution, making it harder for conventional security tools to detect malicious actions in time.
Recommendations to Mitigate Script-Based Attacks
Organizations are urged to:
Deploy endpoint protection tools capable of detecting Python-based threats
Regularly update software and operating systems
Enforce strict password policies and consistent MFA usage
Provide ongoing cybersecurity awareness training to staff
Microsoft 365 Accounts Targeted
A third major concern identified is the spike in unusual login activity targeting Microsoft 365 accounts, particularly in Australia, where nearly 150,000 organizations use the platform. These suspicious logins typically originate from unexpected locations, devices, or time zones, clear indicators of compromised credentials.The appeal of Microsoft 365 lies in its widespread use and deep integration into business workflows. Once attackers gain access to a user account, they can:
Sell credentials to other cybercriminals (e.g., initial access brokers)
Move laterally within the organization’s network
Steal sensitive data such as emails, files, and communications
Send malicious emails from compromised accounts to carry out further attacks
A VPN, or virtual private network, is one of the best tools you can use to boost your online privacy and security. But in the vast ocean of available services, it can be exhausting trying to find the best VPN for your needs. Thankfully, we here at PCWorld are VPN experts and we’re sharing decades of our expert knowledge to aid you in your search.
When looking for the best VPN, you’ll want to consider a few things: First and foremost, does it have a good privacy record; how are its average connection speeds; is it able to effectively and consistently unblock streaming services; and finally, does it have a large enough server network for your location needs? All of my curated picks below deliver these essentials and more.
PROMOTION
ExpressVPN | Powerful VPN privacy. New low price.
The #1 premium VPN, now available from just $3.49/mo! Stay private, safe, and fast on all your devices. Get industry-leading encryption in 1-click. Enjoy 24/7 live support. Get the VPN that just works and save more today.
Why you should trust PCWorld for VPN reviews and buying advice: Here at PCWorld we’ve been testing computer hardware, software, and services since the 1980s. As reviewers and users of PC hardware and software, we put every product through its paces using rigorous benchmarking and hands-on evaluation. We’d never recommend something we wouldn’t want for ourselves.
NordVPN – Best VPN overall
Pros
Loaded with tons of VPN configuration options
Outstanding speeds
Multiple independent no-logs audits
Included antivirus and password manager
Cons
Expensive
Price When Reviewed:
Basic plan from $3.09 a month for two years. Usually $12.99.
It’s difficult to select the best overall VPN. For many years we chose the best VPN based purely on privacy, but VPNs have evolved to be more than just tools to browse online anonymously. Privacy is still important, to be sure, but so are speeds, extra features, server network size, and ease of use. NordVPN has it all, and that’s why it’s my top choice for VPNs and a truly solid option for everyone.
Nord is the most full-featured service on the market with tools that will appeal to power users as well as an easy-to-use app that is intuitive and straightforward even for beginners. The service also carries out regular independent audits and uses RAM-only diskless servers for increased security, so the privacy-conscious user can rest assured their data will remain anonymous.
For those who deem speed a priority, NordVPN will impress as well. Speeds in my testing averaged 72 percent of the base internet speed across all servers — making it the fastest VPN I’ve ever tested.
NordVPN: Further considerations
NordVPN’s desktop app is very easy to use and offers a ton of different features including access to the TOR network over VPN, multi-hop connections, Meshnet file sharing network, a security suite complete with ad- and malware-blocking, and Nord’s latest password manager and link-checker safety tool. Also, there will be no problems accessing any streaming service while using NordVPN and it has an extensive server network to connect to all over the world.
The only real downside is that NordVPN’s pricing can be more expensive than many other VPN services. Even with the discounts offered by long-term plans, it can still seem pricey. Still, you get what you pay for and in this case, it’s more than worth it.
Just like my other top pick, I think ExpressVPN is a great option for everyone. VPN novices will find that they can easily download the software, choose their server location, and connect — it’s as simple as that. But more advanced users will be able to choose from features such as split-tunneling, protocol optimization, kill switch, and more.
Plus, ExpressVPN has one of the most expansive device support networks I’ve ever seen. So the VPN can be used across practically any and all platforms no matter what device you’re trying to protect — with up to eight simultaneous device connections.
The only reason I placed it second is due to the slight edge NordVPN has in regards to features and speed. Still, you can’t go wrong if you decide to go with ExpressVPN as your VPN of choice.
ExpressVPN: Further considerations
ExpressVPN has wide device support, as well as a smart DNS feature for set-top boxes, consoles, and more. It’s even begun branching out to take a more holistic approach to security for users, adding ad- and tracker-blocking and, most recently, a password manager to the service, as well.
It’s not the cheapest VPN out there, but you do get excellent value for your money. Plus, ExpressVPN recently just revamped its membership model offering multiple subscription tiers so you can pick the plan that works best for your price range. The service is also regularly bringing in third-party auditors to validate its privacy credentials. ExpressVPN even uses diskless servers, running everything in RAM so no data is ever stored long-term. Plus, it has proven time and time again to have a sterling user privacy record.
Surfshark is one of those VPNs that does everything well. It has blazing-fast speeds, a robust feature set (second only to NordVPN), and excellent privacy credentials thanks to its no-log policy and multiple independent audits. A subscription comes with all of your standard VPN features, plus infinitely customizable dynamic multi-hop connections, identity protection alerts, and antivirus/malware protection.
But the best thing about Surfshark is the price. Taking advantage of its 2-year plan offer will net you comprehensive protection for just over $2 per month. That’s basically unheard of for a premium VPN service—especially with the feature set it offers. Surfshark is a great all-around VPN option for most people. That being said, those who don’t want to pay an arm and a leg for their VPN will find that Surfshark easily meets their needs without breaking the bank. If you want to save some money and get one of the best VPNs on the market, look no further.
Surfshark: Further considerations
While the price for a monthly subscription to Surfshark might seem exorbitant, the long-term plans are much more affordable. Committing to long-term VPN plans should be weighed against each user’s needs, but Surfshark’s very affordable price means you won’t regret it even if you don’t use the full term.
The only other thing that potential users should be aware of is that Surfshark is based out of the Netherlands. The country itself has strong personal privacy laws, but it’s a member nation of the 14 Eyes Data Sharing Alliance, meaning the government could require Surfshark to share user data if asked. It shouldn’t matter due to the company’s independently verified no-logs policy, but it’s still something privacy-conscious users should be aware of before committing.
Private Internet Access (PIA) has been around for awhile and has demonstrated that it can continue to innovate and improve with each passing year. The latest version of PIA is no different. By putting itself through yet another independent audit of its no-logs policy it keeps proving that user privacy is its top priority.
I think it can be a great VPN for all users. However, where PIA really shines is in its price and extensive customizable feature set. It has one of the least expensive subscription plans of any top VPN, both monthly and long-term. Plus, power users and those who like their apps to be customized to their individual needs will especially love all of the tweaking that this app allows you to do.
Private Internet Access: Further considerations
PIA also provides generous unlimited device connections and an absolutely insane server network that claims to have over 35,000 available servers, but with fewer country locations than other top competitors on this list.
The service does have a rather outdated interface and I found a few awkward interface issues. It’s also not the fastest service I’ve ever tested, with speeds well below the fastest I’ve seen. But neither of these issues should take away too much from the great value PIA offers.
Whether you opt for the free or paid version, Proton VPN is a good option for anyone. The free version specifically will appeal to those on a tight budget, or those who just need a VPN to do the occasional online task safely and securely online.
Many free VPNs come with either ridiculous limitations or annoying ads. Mercifully, Proton VPN has no ads and the restrictions are fairly tame compared to other services. For the low, low cost of nothing, you’ll get a one-device connection limit and access to five servers located in Japan, the Netherlands, Poland, Romania, and the U.S. In my testing I also found that speeds were very good even with the free version, ranking in the top 10 of all VPNs, paid or free. And since there are no monthly data limits on Proton’s free VPN servers, it’s also an excellent option if you want to stream videos while using a VPN — just be aware, the free servers don’t promise to work with Netflix like some of Proton’s paid servers do.
Overall, you get a lot for paying nothing and this easily makes it our favorite free VPN.
Proton VPN: Further considerations
The VPN is from the same company behind Proton Mail, a privacy-focused email service, so it’s very easy to integrate the VPN into the whole Proton ecosystem if you so wish.
The company has undergone multiple independent audits confirming its no-logs policy — including the free VPN, as well. The monthly price for the premium version does come in at the expensive side though, so I would recommend trying out the free version first before you upgrade.
Mullvad is the undisputed king of privacy and anonymity. I’ve never seen another VPN that actively resists knowing who you are the way Mullvad does. Mullvad doesn’t ask for your email address, name, or anything else. Instead it assigns a random account number that acts as your identifier and login. The service accepts payments using standard methods such as credit cards and PayPal, but you can also mail your payment in cash to remain as private as possible. Mullvad has a no-logging policy and doesn’t collect any identifying metadata from your usage.
The name of the game with Mullvad is privacy. Don’t get me wrong, it’s a more than capable VPN for any user. But the ultra-privacy conscious will find the most to like in its anonymized payment system, commitment to not collecting metadata, and strong privacy promises.
Mullvad: Further considerations
Mullvad is also fast, ranking among our top five for speeds, and offers a standardized fee across all plan lengths. While this makes it very affordable month-to-month, it does lose value compared to other top VPNs that significantly reduce their prices in the long-term.
I also found some hiccups when trying to access streaming services, so users who want their VPN to bypass location-restricted content may want to take that into consideration before subscribing.
Hotspot Shield is for those looking to maintain the fastest connection possible with the minimum loss of base speed. While other top picks on this list boast above-average speeds, Hotspot Shield is on another level. No other service (beyond NordVPN) comes close to hitting the speeds I’ve seen with Hotspot Shield. This isn’t just a one-off occurrence either; Hotspot Shield has consistently been at the top with speeds that are 12 to 15 percentage points above the competition. In my tests, Hotspot Shield maintained around 66 percent of the base speed. That’s substantially faster than you’ll see with most VPN services — with the obvious caveat that your experience may vary on a number of outside factors.
Regardless, it is still one of the best around if connection speed is your main concern. I also found that it can access location-restricted content on most major streaming services. This, combined with its excellent speeds, makes it a good option if you mainly use a VPN to access streaming content.
Hotspot Shield: Further considerations
Hotspot Shield comes with a smaller feature set that some of the other top VPNs and its privacy policy may not sit well with some. It has also unfortunately never undergone an independent audit so those who are concerned with privacy, may want to look elsewhere.
Also, while Hotspot Shield in the past was far and away the fastest VPN on the market, in recent years other services have been catching up. It’s worth it to weigh how much speed means to you before committing to the service. If you’re unsure then I recommend trying out the free version to take it for a spin.
If you travel frequently then you want variety and wide coverage in the server locations from your VPN. CyberGhost provides both by offering a staggering 9,000+ servers for users to connect to, which is more than twice as many as most other VPNs on this list. Unlike some competitors, these servers aren’t all concentrated in the U.S. or Europe, either. The server spread totals 120+ countries all across the world. The service even recommends optimized servers to users for various needs such as gaming, streaming, and torrenting.
Due to its plethora of servers and locations, CyberGhost is one of the best options for finding a server no matter where you are in the world. For those who travel a lot or just need access to a diverse and vast server spread, CyberGhost is definitely worth consideration.
CyberGhost: Further considerations
CyberGhost also has a well-designed Windows app that is intuitive and easy to use, even when tweaking settings. It lacks some of the power-user features that other VPNs on this list provide such as multi-hop and IP rotation, but that shouldn’t be a deal breaker for the average user.
In my testing I found that some of the servers were faster than others, with servers located in Europe having excellent speeds and servers in Asia not fairing as well. But overall, the speeds are good enough to do most of what you want to do with a VPN — web browsing, streaming, etc.
While we believe that the above VPNs are currently the best money can buy, there are a few other noteworthy services that deserve attention: PrivadoVPN is a strong overall service, but the free version of the VPN really stands out and is second only to Proton VPN. Windscribe Pro offers great security, with both a Windows client and browser extension that work in tandem to block ads while keeping your browsing private and its free version is a good option for everyday activities. Hide.me is a well-rounded service that ticks almost every box and the fantastic array of configurable settings make it a power-user’s dream. U.S.-based IPVanish nails all of the basics: decent speeds, a large global server network, and privacy promises backed up with independent audits. TunnelBear is an undeniably charming VPN that is extremely easy to use, and doesn’t overwhelm with too many features or country options, which makes it ideal for VPN novices or those who aren’t the most tech-savvy.
I’m continuously evaluating new VPNs and reevaluating services I’ve already tested on a regular basis, so be sure to come back for more recommendations and to see what else we’ve put through their paces.
Can I get a better VPN deal?
Here at PCWorld, we are regularly hunting down the best VPN deals to help you get the most bang for your buck. VPN services are frequently running deals throughout the year, so you should have a few chances to snag your favorite VPN on a steep discount if you can time it right.
While the prices for all VPNs on this list are updated daily, they do not account for special deals or offers. It’s best to keep checking our deals article to see what new limited-time discounts are on offer each week. Additionally, sales events such as Amazon Prime Day in mid-July and Black Friday at the end of November provide excellent opportunities to find even cheaper VPN deals.
How we test VPNs
We judge VPNs on a variety of criteria including server network, connection speeds, privacy protections, ease-of-use, additional features, and cost. For a more detailed guide on our evaluation process, check out PCWorld’s comprehensive guide on how we test VPN services.
Speed tests are kept as simple as possible. We average the connections between different global locations for any given VPN and then compare them to our baseline internet speed to get a good picture of the overall connection speeds.
We thoroughly research and analyze the privacy policies and histories of each VPN and note any outstanding discrepancies or data collection issues. Experience and ease-of-use are subjective, but we try our best to give an accurate representation of how it feels to work with the VPN. And finally, we compare the value of the service based upon its price and additional features to the industry average to help you gain an accurate picture of what you’ll get for your money.
Who curated this article?
Sam Singleton is PCWorld’s VPN beat reporter and jack of all trades. When he’s not on the hunt for the best computer deals he’s covering VPNs, productivity software, laptops, and a wide gamut of consumer-grade hardware and software.
How to choose the best VPN
One of the first things you should look for when shopping around for a VPN is the number of servers and locations. It’s difficult to judge any VPN by just one feature, but a semi-reliable way to tell if a VPN is even worth your time is to look at the server network. Anything with 1,000 or more servers and 30 or more country locations will do.
Speed
The next thing to consider is a VPN’s speed. This may be tricky to do since you aren’t likely to be able to test connection speeds without paying to use the service. Reading reviews online will give you a general estimate. Look for reviews, like ours, that give you a relative average of connection speeds rather than direct Mbps speed comparisons, for a more accurate picture.
Privacy
You’ll also want to read up on a VPN’s privacy protections. Does it have a no-logs policy? Has it undergone any independent audits of its servers? Where is the VPN company located? All of these will give you an idea of whether or not a VPN is transparent with its data collection policies and if it’s subject to government data sharing requirements.
Price
As with all subscription services, you’ll want to review the price of a VPN service. Do you want a monthly or yearly subscription? Some top VPNs might be pricey month-to-month, but actually become quite affordable with long-term plans.
Additional features
Other factors you’ll want to take into consideration are the overall ease-of-use, user experience, and any additional features. Some of these features, such as split-tunneling and kill switches, can be extremely useful for certain purposes and might sway your subscription decision one way or the other.
Best VPN FAQ
1.
What is the best VPN?
NordVPN is our pick for the best VPN. Not only does it have the fastest speeds and a large server network, but it’s also the most full-featured VPN on the market. There is currently no other VPN on the market that provides as much value or as extensive a feature-set as NordVPN and that’s why it’s our top pick.
2.
What is the best cheap VPN?
Surfshark is our pick for the best cheap VPN. Not only does it provide great speeds, but it also comes with a robust feature and excellent privacy credentials. If you opt for a long-term plan, Surfshark offers all of this for pennies on the dollar compared to many other VPNs. In terms of budget-friendly services, Surfshark simply can’t be beat.
3.
What is a VPN?
VPNs create a secure tunnel between your PC and the internet. When you connect to a VPN your web traffic is routed through the chosen VPN server to make it appear as though you’re browsing from that server’s location, and not from your actual location. The VPN app will also encrypt your data so that any third parties such as your ISP can’t see your specific online activities. A VPN can be a great response to a variety of concerns, such as online privacy, anonymity, greater security on public Wi-Fi, and, of course, spoofing locations.
4.
Can I be tracked with a VPN?
While VPNs certainly offer you better privacy and security, they don’t make you completely anonymous nor keep you from being tracked entirely. A VPN will keep your ISP from seeing your traffic, but there are a mindboggling number of ways that other companies or sites track you across the internet. For example, when you sign into a website, your identity is still revealed to that website, VPN or not. Or when you log into your Gmail account while using a VPN, Google can now collect personalized cookies based on your browsing.
5.
Will a VPN protect me on public Wi-Fi?
Yes, a VPN can help protect you when using public Wi-Fi by encrypting your data and masking your IP address. This makes it much more difficult for hackers to hijack your online traffic and steal sensitive information like passwords or credit card details. Public Wi-Fi is often vulnerable to man-in-the-middle attacks, where hackers intercept your data en route to the server. A VPN can protect against this by encrypting the connection, thereby making your data unreadable and all but useless to any potential snooping third parties.
It’s worth noting however that VPNs can only protect you from certain threats and it won’t make your device or traffic completely secure. It’s always good practice to use strong passwords, enable extra layers of security such as two-factor authentication, and regularly update your apps and devices to patch any vulnerabilities.
6.
Will a VPN slow down my internet?
Most likely you will see a moderate speed decrease to your internet while using a VPN. This is mainly due to the process of your internet traffic being rerouted and encrypted through a VPN server before heading on to its destination. The amount of latency you will experience through this process is down to what country’s server you choose to route your traffic through. If you choose a server located on the other side of the world, then you will generally notice a much greater hit than if you were to connect to a server nearby in your same country.
Thankfully, most modern VPNs should have the infrastructure to maintain high-speed, secure data transfer rates. So it’s likely you can still browse and stream without much of a noticeable impact while using a reliable VPN like those on this list.
IPVanish provides unlimited device connections, wide app support, and a robust server network. While the long term plans are affordable, the monthly plan is a bit steep. Still, it’s a solid VPN with fast speeds and good privacy promises.
Price When Reviewed
This value will show the geolocated pricing text for product undefined
Cost: $12.99 per month, $33.99 for 1-year, or $52.56 for a 2-year subscription
Very few VPN services actually own their own server networks and that’s where IPVanish stands out. Instead of relying on commercial server farms, U.S.-based IPVanish prides itself on running its own hardware and servers. It’s not just this that helps it stand out though; IPVanish has a lot going for it and continues to improve upon itself with each passing year.
Recently, IPVanish has made a big push to add features and services that help it compete with the very best in the VPN market. In my latest testing, I took IPVanish for another spin to see if its worth your money.
Read on to learn more, then see our roundup of the best VPN services for comparison.
What are IPVanish’s features and services?
What’s new with IPVanish?
Since my last review, IPVanish has been busy implementing sweeping upgrades across nearly every facet of its service.
It has added 700 new servers and begun transitioning many of its servers to RAM-only servers. Currently, it has switched 500 of its servers—roughly one-sixth—to RAM-only and plans to continue this in the future.
Additionally, IPVanish has expanded its membership options by adding an “Advanced” tier with access to 1TB of cloud storage and its latest secure browser. IPVanish has also added double-hop (or multi-hop) connections for all members to its Windows, macOS, iOS, and Android apps.
The service has also gone through an additional independent no-log audit in February 2025 and has begun quarterly transparency reports.
IPVanish hands-on
IPVanish’s homescreen is easy to parse and provides valuable connection information.
Sam Singleton
At first blush, IPVanish has a clean, if rather dark interface—dark mode is enabled by default. The initial home screen you’re presented with is a split-screen dashboard showing a world map with server location pins to the right and connection info to the left.
The connection info box displays basic information about your connection including the server location, IP address, connection status, protocol used, and data up and down. While it may not have any fancy design flair, the interface is intuitive and easy to parse.
IPVanish continues to increase its already impressive global server spread year-by-year.
Sam Singleton
There is a toolbar on the left of the application’s interface with options for Locations, Secure Browser, Link Checker, Settings, Info, and Account. Under the Locations tab, you’re able to access more detailed information about each server including its ping, load (amount of server utilization from current user connections), and number of servers available in that location. It also has a helpful filtering mechanism that allows you to find the servers with the least ping or load. For those who want the optimum connection this is great info to have and I wish more VPNs would have the courage to display it.
IPVanish recently upgraded its network to now include over 3,100 servers all over the world to choose from on IPVanish—nearly a 30 percent increase from last year. It has added new server locations as well and the company has begun the process of switching its entire network to RAM-only servers. RAM-only servers enhance user privacy and security by erasing all data with each server reboot meaning there is no persistent data for malicious actors to retrieve.
In fact, IPVanish has continued to make great strides in recent years to update and optimize its services. From rolling out apps for more platforms to adding features such as a secure browser and double-hop; the service is obviously working hard to not only keep up with the rest of the market, but innovate as well.
Other notable improvements include broader kill-switch and split-tunneling support for all major platforms. Split tunneling is a useful feature that allows you to pick and choose which apps you wish to run through the encrypted VPN connection and which to exclude. This can allow you to optimize app connections for both speed (outside the VPN) and privacy (inside the VPN).
IPVanish also rolled out a browser extension for Chrome, Edge, Firefox, Opera, Brave, and Vivaldi in the last year—something that was sorely needed.
The VPN service now comes with the ability to establish double-hop (also known as multi-hop) connections. This allows you greater privacy by routing your connection through more than one VPN server thereby increasing obfuscation of your home IP address.
While more and more VPNs are offering this feature, not many allow you to pick and choose your entry and exit servers like IPVanish does. This flexibility is really nice to have, and I must admit they went above and beyond what I was expecting when I recommended that they add this feature in my last review.
IPVanish does come with an antivirus program called VIPRE which will block malware and other threats on your computer. While this is helpful, I personally recommend that you elect for standalone antivirus software instead as it will provide more comprehensive security and protection.
IPVanish is obviously working hard to not only keep up with the rest of the market, but innovate as well.
IPVanish now comes with a unique Secure Browser feature.
Sam Singleton
The recent release of IPVanish’s Secure Browser feature struck me a bit by surprise. Not that I don’t like it—the idea is actually really cool—I just didn’t expect that this type of thing would be produced by a VPN company.
The Secure Browser runs a browser in a sandbox environment in the cloud, enabling users to interact via a video feed. The benefit here is that it stops viruses, digital fingerprinting, and other forms of snooping as no data reaches your device. IPVanish states that all activity is deleted from its servers as soon as you close the session. While the latest successful independent audit would seemingly verify this claim, there is nothing that I could find specific in the audit that distinguishes the Secure Browser data from that of the rest of the VPN’s user data; so take from that what you will.
IPVanish is available Windows, macOS, iOS, Android, Linux, Amazon Fire TV, Apple TV, certain routers, and most major browsers.
How much does IPVanish cost?
IPVanish offers two membership tiers, Essential and Advanced, in monthly, 1-year, or 2-year plans. The month-to-month rate for the Essential tier is $12.99 per month and the Advanced Tier is $14.99 per month. This is undeniably on the high side and comparable to ExpressVPN and NordVPN, two of our favorite services here at PCWorld. Considering all of the extra features you get with these competitor services, it seems hard to justify paying for IPVanish based on its monthly rate.
The 1-year rate is a much more reasonable $39.99 ($2.79 per month) for Essential and $53.88 ($4.49 per month) for Advanced. It will then renew at $89.99 per year after that. The 2-year plan will run you an even cheaper $52.56 ($2.19 per month) for Essential and $78.96 ($3.29 per month) for Advanced. After the initial term for either the 1-year or 2-year plans, it will renew at $89.99 per year for Essential or $109.99 per year for Advanced.
Thankfully, the prices for these longer-term plans are much more reasonable and end up being cheaper than many competitors.
For Android and iOS users, IPVanish offers a 7-day free trial. This is unfortunately not available for Windows users. However, it does offer a 30-day money back guarantee for those who opt for the yearly or 2-year plans no matter your operating system.
IPVanish accepts payments with credit card, PayPal, and Google Pay.
How is IPVanish’s performance?
In the past, IPVanish connections have been pretty fast, so how do they hold up in speed tests now? Pretty well, actually. Comparing speeds across different countries’ VPN server connections all over the world, IPVanish scored an impressive average of 60 percent of the base download speed and 58 percent of the base upload speed. That might not make it the speed champ, but it still puts it firmly in the top 10 speediest VPNs I’ve tested.
Those relatively good download speeds should be plenty fast enough to stream all of the high-resolution video or do all of your gaming across most country connections. Please note, however, that this is a single experience on a limited number of machines, and your experience may vary depending upon your own situation.
As for streaming, IPVanish successfully unblocked most of the streaming services that I tested including Netflix, Disney+, HBO Max, and Amazon Prime. While in the past I found blocking issues with certain IPVanish servers that is seemingly no longer the case and streaming should work just fine with all connections.
Overall, it’s a good VPN for streaming, but if it’s your main use case for a VPN then you may consider any of the other options on my list of best VPNs for Netflix.
How is IPVanish’s security and privacy?
While using its service, everything is encrypted with AES 256-bit encryption and the Windows client comes with IPv6 and DNS leak protection. My testing verified this to be true with no DNS or WebRTC leaks to be found anywhere.
Sam Singleton
IPVanish supports a number of protocols such as WireGuard, IKEv2, and OpenVPN (UDP and TCP). It offers the additional option to customize the port options for OpenVPN connections allowing you to further tweak and optimize your connection setup. Currently, IPVanish does not have post-quantum encryption support for any protocols—something that other top VPNs are implementing. This isn’t a deal-breaker by any means, but it would be nice to have.
Being based in the U.S., IPVanish could potentially lead to privacy problems as certain domestic laws require VPN companies to log and store client information in the event that law enforcement needs it. But IPVanish promises to keep your data totally private by not logging or sharing client information at all.
IPVanish’s privacy policy is transparent and easy to understand.
IPVanish
This is clearly stated in the company’s no-logs policy which has now been validated via independent audit multiple times. The latest audit was conducted in February 2025 by Schellman Compliance, LLC. and confirmed the claims that IPVanish does not keep logs of client data whatsoever.
These audits go a long way toward establishing and maintaining user trust. So, despite the U.S.-based operations, no-logs means there is nothing for IPVanish to provide the government even if requested.
Is IPVanish worth it?
IPVanish is a very appealing VPN based in the United States. The service is bolstered by solid overall speeds and a respectable global server network. The desktop app is easy enough to use and recent updates have made it even better. Plus, another third-party security audit is a reassuring sign that the service is committed to user privacy and willing to prove it.
The monthly pricing is admittedly expensive for what you get, but at just a little over $30 for a yearly subscription the longer-term pricing becomes hard to beat. IPVanish has solid speeds, a large server network, and nice extra features, but some competitors may edge it out in one (or more) of these categories. Still, while many people might seek out other VPN providers with more name recognition and larger marketing budgets, IPVanish shouldn’t be overlooked. It already does the basics well and at the rate it’s adding new features, IPVanish is becoming a force to be reckoned with.
Editor’s note: Because online services are often iterative, gaining new features and performance improvements over time, this review is subject to change in order to accurately reflect the current state of the service. Any changes to text or our final review verdict will be noted at the top of this article.
There’s a reason so many small businesses are running consumer-grade security software: it’s cheap. But it’s not adequate for safeguarding your business’ devices, data, finances and reputation. Skrimp now and it may well cost you more in the long run.
We get it: you’re trying to turn a profit, not blow your budget on business-level security software and an IT team to manage it. Norton Small Business is a competitively priced security suite for small businesses with up to 10 employees, and right now there is a 30% discount on the first year, making it phenomenal value for money and a no-brainer for any small business owner who is serious about their company’s digital security.
Save 30% on Norton Small Business with code PCWNSBP
Norton Small Business comes with real-time antivirus, a firewall, and business support ready to assist you with virus removal. But it does so much more than helping protect your business devices from malware.
Norton Small Business can help you protect your business from financial fraud with Financial Monitoring, preventing the loss of your data due to ransomware, PC theft or hard drive failures with Cloud Backup for Windows, empower your employees to work more securely from anywhere, and enables increased productivity with a suite of Windows PC optimisation tools.
You don’t need to be tech savvy or hire an IT team to manage Norton Small Business–it’s easy to set up and runs in the background, so you can get on with operating your business with peace of mind over its digital security.
Do you need small business cybersecurity?
Yes. It doesn’t matter how tech savvy or up to date with the latest security news you are, the latest digital threats are pretty scary, and could be tricky to avoid, with AI making them smarter and more sophisticated than ever. If you’re running a small business don’t put a target on your back by underestimating the importance of proper protection for your business devices, data and employees’ online activities or thinking cybercriminals only target large companies.
Plus, let’s face it, employees can do a lot of silly things without even realising it, like using devices with outdated software posing the risk of security holes cybercriminals could exploit; using their birthdays as passwords; not securing their connection when working remotely and connecting to insecure Wi-Fi, etc. Someone here needs to be the grown-up in the room.
Take responsibility for digital security
Norton Small Business costs £54.99 for up to three employees, £69.99 for up to five employees, and £99.99 for up to 10 employees. Step up to Norton Small Business Premium to enjoy 24/7 Business Tech Support to assist with common IT issues, Secure VPN, Financial and Social Media Monitoring, Driver Updater and 500GB of secure Cloud Backup online storage for Windows PCs; it costs £149.99 for up to five employees, and £199.99 for up to 10 employees. All prices are for the first year.
Right now, PCWorld readers can take advantage of a rare 30% discount, unlocking Norton Small Business from just £38.50/first year, and Norton Small Business Premium from just £105/first year.
Save 30% on Norton Small Business with code PCWNSBP
Security researchers are warning Android users to delete a fake VPN and streaming app that can let criminals take over their phones and drain their bank accounts.
The app, Mobdro Pro IP TV + VPN, was discovered by researchers at Cleafy to be a malicious sideloaded app, not a legitimate VPN. Their analysis found it installs Klopatra, a new Android banking Trojan and remote-access tool with no links to known malware families.
Klopatra targets banking customers and gives attackers full remote control of infected devices, allowing them to steal credentials and carry out fraudulent transactions.
The researchers found that:
“Klopatra’s effectiveness lies in a carefully orchestrated infection chain, which begins with social engineering and culminates in the complete takeover of the victim’s device. Each stage is designed to overcome the defenses of the user and the Android operating system.”
The lure works by pretending to be an IPTV app that offers free, high-quality TV channels. Because pirated streaming apps are so common, users often expect to install them from unofficial websites (sideloading), unintentionally bypassing the protections of the Google Play Store.
Klopatra is an extreme example of a fake virtual private network (VPN) used to spread malware, but it’s not the only reason to be cautious. Even genuine VPNs on Google Play can have hidden risks, from vague ownership to weak privacy protections.
Even genuine VPNs can be risky
VPNs are often promoted as essential tools for privacy, circumventing geo-blocks, or bypassing age verification controls. For hundreds of millions of users, VPN connections are the solution to hide the user’s IP address and location, and to encrypt web traffic so it’s useless when intercepted.
But picking a VPN you can trust is not always easy. Even if you get one from the official Play Store.
A recent study, the VPN Transparency Report 2025 by the Open Technology Fund, revealed alarming shortcomings among some of the world’s most-downloaded VPN apps. The researchers examined the ownership, operation, and development of 32 commercial VPNs, collectively used by more than a billion people.
Among the apps flagged as “concerning” are very popular solutions like Turbo VPN, VPN Proxy Master, XY VPN, and 3X VPN – Smooth Browsing, each of which has been downloaded at least 100 million times from the Google Play Store.
Some of these solutions even provide a false sense of privacy by using technologies that weren’t designed for privacy at all, the study claims. They found that several:
“providers use the Shadowsocks tunneling protocol [which is not designed for confidentiality] to build the VPN tunnel, and claim their users’ connections are secure.”
The report emphasizes how important it is to gather information before installing a VPN: it’s worth learning who runs it, how it’s built, and what it does with your data. This is key for users to make informed decisions.
Practical tips on how to protect yourself
Stick to trusted sources. Download apps—especially VPNs and streaming services—only from Google Play, Apple’s App Store, or the official provider. Never install something just because a link in a forum or message promises a shortcut.
Check an app’s permissions. If an app asks for control over your device, your settings, Accessibility Services, or wants to install other apps, stop and ask yourself why. Does it really need those permissions to do what you expect it to do?
Use layered, up-to-date protection.Installreal-time anti-malware protection on your Android that scans for new downloads and suspicious activity. Keep both your security software and your device system updated—patches fix vulnerabilities that attackers can exploit.
Stay informed. Follow trustworthy cybersecurity news and share important warnings with friends and family.
If you think you’ve been affected:
Delete any suspicious VPN or IPTV apps, run a trusted security scan, and reset your banking credentials if you suspect your device has ever been compromised. For your peace of mind and your wallet’s safety, choose your VPN wisely.
We don’t just report on privacy—we offer you the option to use it.
Privacy risks should never spread beyond a headline. Keep your online privacy yours by using Malwarebytes Privacy VPN.
It’s relatively easy to sign up to a virtual private network, or VPN. More and more people are taking the plunge to secure their identity online — but their motivations vary and there’s a lot of confusion about what VPNs can actually do. Here I highlight six of the most common myths about VPNs to cut through the misinformation and deliver you the truth.
1. VPNs are only for illegal activity
This is a very popular myth that I often come across. While it’s true that VPNs can be used for illegal activities like hacking and torrenting, that’s not what they were intended for. Protecting your privacy is the main intention and a VPN can do that by masking your IP address and encrypting your internet traffic.
With a VPN in place you can go ahead and do the things you need to do online without your ISP, the sites you visit, and the government keeping tabs on your activities. That’s crucial in countries where digital censorship is rife and personal freedoms are limited. But even in countries that have a high level of personal freedom, VPNs provide a safer way to enjoy those freedoms with more anonymity.
2. VPNs are only for unblocking streaming sites
Streaming is a big selling point of VPNs that you’ll often hear touted even more than the privacy features. And it’s true that VPNs are extremely useful for that. For instance, you might want to use one to skirt around geofences and watch Netflix overseas or else access the BBC iPlayer or Hulu. However, it’s not the only way you can use a VPN. You might also use one to do any of the following:
Access your banking app when you’re overseas.
Stay secure when on public Wi-Fi and prevent hackers intercepting your data.
Spoof your location to check out sales in different regions of the world.
3. VPNs lead to unstable internet connections
VPNs work to encrypt your data by sending it through servers before it reaches its destination. For that reason, you will experience a slight slowdown in your internet connection as it takes extra time to encrypt your data, but it won’t cause an unstable internet connection.
If you’re paying for a fast VPN plan in your own region, chances are you won’t even notice the slowdown, it’ll be so minor it’ll be undetectable. In some cases, using a VPN could actually speed up your internet connection, like if your ISP is throttling your connection because you’re streaming, gaming, or torrenting. So, take these claims with a grain of salt. See also PCWorld’s recommendations for the fastest VPNs.
4. You don’t need to pay for a VPN
Unfortunately, the saying “You get what you pay for” applies to virtual private networks too. It’s true that some free VPNs aren’t as trustworthy as paid services and will leak your information to third parties to make money. Others just can’t compete with the speeds of fully paid services, and then some will bombard you with ads to make up for the lack of payment of their services.
If you don’t want to compromise on quality and speed you should really choose a quality paid option like the ones we review and recommend at PCWorld. You’ll notice a world of difference after a while.
Pexels: Dan Nelson
5. VPNs make you completely anonymous online
VPNs aren’t completely foolproof and while they can improve your digital security, they can’t guarantee complete anonymity.
Even if you’re assigned a new IP address every time you connect to the internet, some websites you visit will still know where you’re located. Furthermore, via social media trackers, cookies, and ads they can build up a very comprehensive profile of your web browsing activities. If you sign into a website or service, it’ll know who you are, regardless of whether you’re using a VPN.
You also need to be wary of what information you personally share online, because even with a masked IP address, that information can be linked back to you. Sharing information is up to you and not something a VPN can help you with.
6. A no-logs policy means the VPN keeps no logs
Despite what they say, most VPNs will keep some logs in order to improve their services. These will typically be aggregated or anonymized logs that have information about how long you’ve connected to a server and which server you’re using etc., but not logs of your IP or device. This difference is usually hidden with some creative wording in the privacy policy, which is where all the confusion arises.
There have also been reports of some VPNs claiming to have no-logs policies and while technically true, they let third-party advertisers keep logs, which is a little misleading. So be sure to read the fine print of the privacy policy before you sign up to any plan.
Many people’s daily browsing is now done on their mobile devices. So it’s more important than ever to have a great VPN that works well on your phone. While some services work best on Windows, others particularly shine when used on Android devices, and I’ve curated a list of my favorites to help you find the best choice for your smartphones and tablets.
When determining what makes for a good VPN for Android, I consider several criteria on top of standard VPN essentials. It’s crucial that it has full functionality on the Android OS. Also, since Wi-Fi can be inconsistent at times, I test these apps over multiple days to look at speed and consistency of service. I then take into consideration the Android app itself and its ease of use, as well as other things such as pricing and the number of simultaneous devices allowed per account. All of these factors help make the VPNs on this list my top picks.
Price comparison from over 24,000 stores worldwide
Product
Price
Price comparison from Backmarket
Who should use NordVPN?
The best overall VPN for Android needs to come with all of the tools needed to browse online anonymously. Privacy is important, to be sure, but so are speeds, extra features, server network size, and ease of use. NordVPN has it all, and that’s why it’s my top choice for VPNs and a truly solid option for any smartphone or tablet user.
Nord has the most features of any VPN on the market, with tools that will appeal to power users as well as an easy-to-use Android app that is intuitive and straightforward even for beginners. The service also carries out regular independent audits and uses RAM-only diskless servers for increased security, so the privacy-conscious user can rest assured their data will remain anonymous.
If speed is a priority, NordVPN won’t let you down either. Speeds in my testing averaged 72 percent of the base internet speed across all servers, which makes it the fastest VPN I’ve ever tested.
NordVPN: Further considerations
NordVPN’s Android app is very easy to use and offers a ton of different features including access to the TOR network over VPN, multi-hop connections, Meshnet file sharing network, a security suite complete with ad- and malware-blocking, and Nord’s latest password manager and link-checker safety tool. Also, there will be no problems accessing any streaming service while using NordVPN and it has an extensive server network to connect to all over the world.
The main downside is that NordVPN’s pricing is a bit expensive compared to many other VPN services. Even with the discounts offered by long-term plans, it can still seem expensive. Still, you get what you pay for and in this case, it’s a heck of a lot.
Price comparison from over 24,000 stores worldwide
Product
Price
Price comparison from Backmarket
Who should use ExpressVPN?
ExpressVPN is another great option for any Android user. VPN novices will find that they can easily download the software, choose their server location, connect, and be on their way. But more advanced users will be able to choose from features such as split-tunneling, protocol optimization, kill switch, and more.
Plus, ExpressVPN has one of the most expansive device support networks I’ve ever seen. So the VPN can not only be used for Android or Windows, but across practically any and all platforms no matter what device you’re trying to protect — with up to eight simultaneous device connections.
The only reason it placed a close second is due to NordVPN providing a few more features and slightly edging it out on speed. Still, you can’t go wrong if you decide to go with ExpressVPN as your VPN of choice.
ExpressVPN: Further considerations
ExpressVPN takes privacy and security seriously with all diskless, RAM-only servers, meaning no data is ever stored long-term. Plus, the service is regularly bringing in third-party auditors to validate its privacy credentials.
It also comes with a smart DNS feature for set-top boxes, consoles, and more. It’s even begun branching out to take a more holistic approach to security for users, adding ad- and tracker-blocking and, most recently, a password manager to the service, as well.
It’s not the cheapest VPN out there, but it recently revamped its membership structure providing more flexibility for users to determine what features they are willing to pay for. No matter the membership tier you’ll still get excellent value for your money.
Price comparison from over 24,000 stores worldwide
Product
Price
Price comparison from Backmarket
Who should use Mullvad?
It should come as no surprise that Mullvad is our pick for Best Android VPN for Privacy. I’ve never seen another VPN that actively resists knowing who you are the way Mullvad does. Mullvad doesn’t ask for anything when you sign up, not your email address, name, or other contact info. Instead it assigns a random account number that acts as your identifier and login. The service accepts payments using standard methods such as credit cards and PayPal, but you can also mail your payment in cash to remain as private as possible. Mullvad has a no-logging policy and doesn’t collect any identifying metadata from your usage.
Mullvad is all about maximizing privacy. Don’t get me wrong, it’s a more than capable VPN for any user. But the ultra-privacy conscious Android user will find the most to like in its anonymized payment system, commitment to not collecting user data of any kind, and strong internal privacy practices.
Mullvad: Further considerations
Beyond just privacy, Mullvad is also fast, ranking among our top five for speeds. Additionally, it offers a standardized fee across all plan lengths. While this makes it very affordable month-to-month, it does lose value in the long run compared to other top VPNs that offer significantly reduced prices with longer plan lengths.
I also found that it doesn’t always unblock streaming services, so users who want their VPN to access location-restricted content may want to take that into consideration before subscribing.
Price comparison from over 24,000 stores worldwide
Product
Price
Price comparison from Backmarket
Who should use Proton VPN?
Whether you opt for the free or paid version, Proton VPN is a good choice for any Android user. The free version will of course appeal to those on a tight budget, but it’s also a great option for those who just need a VPN to do quick online tasks safely and securely.
Many free VPNs, especially free smartphone VPNs, have either unreasonable limitations or they’re loaded with annoying ads. Thankfully, Proton VPN serves no ads and the restrictions are fairly light compared to other services. For no cost at all, you’ll get a one-device connection limit and access to five servers located around the world. In my testing I also found that speeds were very good even with the free version, ranking in the top 10 of all VPNs—paid or free. And since there are no monthly data limits on Proton’s free VPN version, it’s also a great option to stream content while using a VPN — just be aware, the free servers don’t promise to work with Netflix like some of Proton’s paid servers do.
Overall, you get a lot for paying nothing and this easily makes it our favorite free VPN for Android.
Proton VPN: Further considerations
The VPN is from the same company behind Proton Mail, a privacy-focused email service, so it’s very easy to integrate the VPN into the whole Proton ecosystem if you so wish.
The company also has an excellent privacy track record and takes transparency very seriously. Both the premium and free versions have undergone multiple independent audits confirming the company’s no-logs policy. The monthly price for the premium version does come in at the expensive side though, so I would recommend trying out the free version first before you upgrade.
Price comparison from over 24,000 stores worldwide
Product
Price
Price comparison from Backmarket
Who should use CyberGhost?
Using a VPN while travelling mean that you want variety and wide coverage in the server locations across the world. CyberGhost provides both by offering a staggering 9,000+ servers for users to connect to, which is more than twice as many as most other VPNs on this list. Plus, unlike some competitors, these servers aren’t all concentrated in the U.S. or Europe, either. Not only does it provide a huge server count, but the server spread is vast as well totaling 120+ countries all across the world. The service even recommends optimized servers to users for various needs such as gaming, streaming, and torrenting.
Due to its wealth of servers and locations, CyberGhost is one of the best options for finding a server no matter where you are in the world. For those who travel a lot or just need access to a diverse and vast server spread, CyberGhost should be high on your list.
CyberGhost: Further considerations
CyberGhost also has a well-designed Android app that is intuitive and easy to use, even when tweaking settings. It lacks some of the power-user features that other VPNs on this list provide such as multi-hop and IP rotation, but the average user won’t bother with these anyways.
In my testing I found that some of the servers were faster than others, with servers located in Europe having excellent speeds and servers in Asia not fairing as well. But overall, the speeds are good enough to do everyday web browsing, streaming, etc.
While we believe that the above Android VPNs are the most worthy of your money, there are a few other notable services that deserve attention: PrivadoVPN is a strong overall service, but the free version of the VPN really stands out and is second only to Proton VPN. Windscribe Pro offers great security, with excellent ad- and tracker-blocking features and its free version is a good option for everyday activities. Hide.me is a well-rounded service that ticks almost every box and the fantastic array of configurable settings make it a power-user’s dream. U.S.-based IPVanish nails all of the basics: good speeds, a large server network, and privacy promises backed up with independent audits. TunnelBear is an undeniably charming VPN that is extremely easy to use, and doesn’t overwhelm with too many features or country options, which makes it ideal for VPN novices or those who aren’t the most tech-savvy.
I’m continuously evaluating new VPNs and reevaluating services I’ve already tested on a regular basis, so be sure to come back for more recommendations and to see what else we’ve put through their paces.
Can you get a better VPN deal?
Here at PCWorld, we are regularly hunting down the best VPN deals to help you get the most bang for your buck. VPN services are frequently running deals throughout the year, so you should be able to snag your favorite VPN at a steep discount if you can time it right.
While the prices for all VPNs on this list are updated daily, they do not account for special deals or offers. It’s best to keep checking our deals article to see what new limited-time discounts are on offer each week. Additionally, sales events such as Amazon Prime Day in mid-July and Black Friday at the end of November provide excellent opportunities to find even cheaper VPN deals.
How we test VPNs
We judge VPNs on a variety of criteria including server network, connection speeds, privacy protections, ease-of-use, additional features, and cost. For a more detailed guide on our evaluation process, check out PCWorld’s comprehensive guide on how we test VPN services.
Speed tests are kept as simple as possible. We average the connections between different global locations for any given VPN and then compare them to our baseline internet speed to get a good picture of the overall connection speeds.
We thoroughly research and analyze the privacy policies and histories of each VPN and note any outstanding discrepancies or data collection issues. Experience and ease-of-use are subjective, but we try our best to give an accurate representation of how it feels to work with the VPN. And finally, we compare the value of the service based upon its price and additional features to the industry average to help you gain an accurate picture of what you’ll get for your money.
Why you should trust PCWorld for VPN reviews and buying advice
Here at PCWorld we’ve been testing computer hardware, software, and services since the 1980s. As reviewers and users of PC hardware and software, we put every product through its paces using rigorous benchmarking and hands-on evaluation. We’d never recommend something we wouldn’t want for ourselves.
Who curated this article?
Sam Singleton is PCWorld’s VPN beat reporter and jack of all trades. When he’s not on the hunt for the best computer deals he’s covering VPNs, productivity software, laptops, and a wide gamut of consumer-grade hardware and software.
How to choose the best VPN for Android
One of the first things you should look for when shopping around for any VPN is the number of servers and locations. It’s difficult to judge a VPN by just one feature, but a semi-reliable way to tell if a VPN is even worth your time is to look at the server network. Anything with 1,000 or more servers and 30 or more country locations will do.
Speed
The next thing to consider is a VPN’s speed. This may be tricky to do since you aren’t likely to be able to test connection speeds without paying to use the service. Reading reviews online will give you a general estimate. Look for reviews, like ours, that give you a relative average of connection speeds rather than direct Mbps speed comparisons, for a more accurate picture.
Privacy
You’ll also want to read up on a VPN’s privacy protections. Does it have a no-logs policy? Has it undergone any independent audits of its servers? Where is the VPN company located? All of these will give you an idea of whether or not a VPN is transparent with its data collection policies and if it’s subject to government data sharing requirements.
Price
As with all subscription services, you’ll want to review the price of a VPN service. Do you want a monthly or yearly subscription? Some top VPNs might be pricey month-to-month, but actually become quite affordable with long-term plans.
Additional features
Other factors you’ll want to take into consideration are the overall ease-of-use, user experience, and any additional features. Some of these features, such as split-tunneling and kill switches, can be extremely useful for certain purposes and might sway your subscription decision one way or the other. Kill switches in general have historically been an issue with phone app versions of VPNs, so it’s always a good idea to read up on any known issues before committing.
FAQ
1.
What is the best VPN for Android?
NordVPN is our pick for the best VPN for Android. Not only does it have the fastest speeds and most extensive feature set, but it also comes with a large server network and can unblock streaming sites with ease. There is currently no other VPN on the market that provides as much value as NordVPN and that’s why it’s our top pick.
2.
What is the best free VPN for Android?
Proton VPN is our pick for the best free VPN for Android thanks to its unlimited data, unrestricted speeds, and privacy track record. It is one of the only free VPNs that doesn’t impose usage limits or compromise your privacy.
3.
What is a VPN?
VPNs create a secure tunnel between your PC and the internet. When you connect to a VPN your web traffic is routed through the chosen VPN server to make it appear as though you’re browsing from that server’s location, and not from your actual location. The VPN app will also encrypt your data so that any third parties such as your ISP can’t see your specific online activities. A VPN can be a great response to a variety of concerns, such as online privacy, anonymity, greater security on public Wi-Fi, and, of course, spoofing locations.
4.
Do I really need a VPN on my Android phone?
While you don’t absolutely need a VPN for your smartphone, Android or otherwise, it is highly recommended. VPNs enhance your online security and privacy, especially on public Wi-Fi networks. They also allow you to access geographically restricted content such as on streaming sites and bypass censorship by governments or other third parties.
5.
Does Android have a built-in VPN?
No, Android devices do not have a built-in VPN. There is built-in VPN support, but to gain the full benefits of a VPN you’ll need to use a separate service. The easiest way to use a VPN on Android is to subscribe to a VPN service such as those on this list and download the provider’s native Android app onto your device.
6.
Will a VPN protect me on public Wi-Fi?
Yes, a VPN can help protect you when using public Wi-Fi by encrypting your data and masking your IP address. This makes it much more difficult for hackers to hijack your online traffic and steal sensitive information like passwords or credit card details. Public Wi-Fi is often vulnerable to man-in-the-middle attacks, where hackers intercept your data en route to the server. A VPN can protect against this by encrypting the connection, thereby making your data unreadable and all but useless to any potential snooping third parties.
Beginning on Friday, September 26 of this year, residents in Arizona will lose access to the adult site Pornhub. Earlier this year the Arizona State legislature passed HB2112, which requires “A commercial entity that knowingly and intentionally publishes or distributes material… of which more than one-third is sexual material that is harmful to minors shall use reasonable age verification methods to verify that an individual who attempts to access the material is eighteen years of age or older”—and porn sites (obviously) stand to be affected the most.
In anticipation of the law taking affect, Pornhub’s parent company Aylo has already stated that it will begin restricting access to its adult sites for residents in Arizona in protest. Aylo and other privacy advocates claim that these laws not only violate free speech, but will infringe on personal privacy protections. By forcing individuals to hand over personally identifiable information to third parties, it creates the potential for government overreach and data misuse.
This is following a trend that has seen more than 23 other states lose access to the incredibly popular NSFW site. Similar bans occurred throughout last year for residents in Texas and Florida, among others. Just this year, residents in Wyoming, Georgia, South Dakota, and North Dakota also lost access due to similar laws in each state.
For legal-age Arizonans looking to access the site, this is disruptive to say the least. Fortunately, there’s an easy workaround: using a VPN. Simply download and install your preferred VPN, connect to a server in a state that isn’t blocked, and enjoy the content.
Below are my top picks for VPNs to access Pornhub (or other Aylo-owned adult content) if you’re in Arizona where access is blocked.
NordVPN is my overall top pick for VPNs. It comes with a heap of great features including Double VPN, ad- and tracker-blocking, Dark Web monitoring, plus plenty of domestic U.S. and international servers—with coverage in most states.
It also has the fastest connection speeds, meaning you won’t need to stream in a resolution that makes it look like the important bits are blurred on purpose. NordVPN has one of the widest platform support networks as well, so you’ll be able to view unrestricted content on all of your devices.
ExpressVPN is a close second to NordVPN, only losing out due to slightly slower speeds and a few less extra features. These are minor issues, though, and ExpressVPN is an absolute class option for all VPN users. In fact, as a result of all of these age-verification laws, ExpressVPN completed a massive U.S. network expansion to include servers in every U.S. state. So you can rest assured you’ll find access to your favorite adult sites as long as there is at least one state without these restrictions.
It also consistently has great speeds, meaning you can stream in HD to your heart’s content. Plus, it works with every device and comes with one of the best user-privacy records around.
Depending on how seriously you take your privacy, Mullvad might actually be the best VPN option. The service is not only among the top five fastest VPNs, but it’s also the best for privacy hands-down.
Mullvad goes out of its way to know as little about you as possible. The service doesn’t ask for an email address or name and you can even mail in a cash payment if you prefer to keep your credit card off record. Plus, it costs a mere $5 per month regardless of the plan you choose.
While I don’t usually recommend that anyone use a free VPN due to their proven security and privacy risks, Proton VPN is one of the few exceptions. This service from the well-known Swiss-based Proton brand has a spotless track record for user privacy. And incredibly it’s also ad-free.
Just like all free VPNs, there are limitations, but thankfully Proton VPN keeps them relatively benign. For no cost whatsoever you’ll get a one-device connection limit and access to five servers located in different countries around the world (including the U.S.). There are no speed or data limitations on these free servers either—something that’s not common with other free VPNs.
Just know that with servers in the U.S. you’ll only have access to the server location closest to you and some of these might be in States with age verification laws in place. Still, you have nothing to lose by trying out the free service, and if you like it enough you can always upgrade to the paid version with access to all 11,000+ server locations and top-notch feature set.
Whether you’re looking for something that will give you the privacy you need or access to location-restricted streaming content, we’ve got you covered with the very best VPN deals currently available. But not all deals are worth it, so we only highlight those offered by reputable providers that we’ve personally reviewed and recommend.
We’ve also included some helpful answers to common questions about VPN shopping at the bottom of this article. Before you decide on a new VPN, be sure to check out our roundup of the best VPNs to help you choose the right service for your needs.
Note: Tech deals come and go quickly, so it’s possible some of these VPN discounts will have expired before this article’s next update.
Best VPN deals
PROMOTION
Don’t leave your online life exposed
Every click and login can be tracked. Hackers and strangers on public Wi-Fi can exploit your data. Surfshark VPN hides your activity, shields your privacy, and helps keep you safe whenever you’re connected. Get it now with an exclusive deal: $1.99/mo + 3 extra months!
PrivadoVPN, now $1.48 per month for 24 months + 3 free months (87% off at Privado VPN)
IPVanish VPN, now $2.19 per month for 24 months (70% off at IPVanish)
CyberGhost, now $2.19 per month for 24 months + 2 free months (83% off on CyberGhost)
Our Editors’ Choice and top overall VPN pick, NordVPN is offering a great deal on its long-term 2-year plan for only $3.99 per month (73 percent off). Upon sign-up they even include an extra three months of service at no charge. Not only is Nord the most feature-rich VPN on the market, but it is also the fastest we’ve ever tested—you can’t really go wrong here.
Surfshark is another of our top picks here at PCWorld, and this VPN is going for just $2.49 per month for two years (86 percent off). Included are an additional three extra months for free when you sign up. Alternatively, you could opt for the ExpressVPN deal that’s currently $4.99 per month for two years (61 percent off). Both services come with a stacked line-up of privacy and security features. Personally, at the moment I’d go with the Surfshark deal because you’ll get a similar feature set for a cheaper overall price.
FAQ
1.
What is the best VPN deal?
Right now, the 2-year plan for NordVPN‘s Plus tier is the best deal. For only $3.99 per month you’ll get access to the best VPN with the fastest speeds, excellent streaming compatibility, and top-notch privacy and security features. Included in the deal are a bonus three extra months of service for free as well.
2.
When’s the best time to shop for a VPN?
Typically you’ll want to time your VPN shopping around a prominent sales period. The biggest sales periods are Black Friday/Cyber Monday in late November . The best sales often occur leading up to and during these two events and they are great times to snag a VPN subscription for cheap. Many VPN providers have even begun extending these deals past Cyber Monday and through to the end of the year.
3.
What should I look for in a VPN deal?
There are a few things you should keep in mind when shopping for a good VPN deal.
The first thing to consider is, of course, your budget. How much are you willing to spend each month? How much can you afford to drop on a longer-term plan with an upfront payment? You’ll also need to determine how long you intend to use the VPN. Do you just need it for a short trip? A few months? Or forever? The very best VPN deals are generally on longer-term plans for two or three years.
After you decide on your budget and how long you’ll use the VPN, next you can start comparing features. Look at the number of servers and locations for each VPN. A good starting point is to look for services that have at least 1,000 servers and 30 or more country locations.
The next thing to consider is VPN speed. This may be tricky to do since you aren’t likely to be able to test connection speeds without first paying to use the service. Reading reviews online will give you a general estimate. Look for reviews, like ours, that give you a relative average of connection speeds rather than direct Mbps speed comparisons for a more accurate picture.
Finally, compare each VPN’s privacy protections. Does it have a no-logs policy? Has it undergone any independent audits of its servers? Where is the VPN company located? All of these are critical and you’ll want to go with a VPN that has clear and transparent data collection policies.
4.
What is a VPN?
A VPN creates a secure tunnel between your PC and the internet. You connect to a VPN server, which can be located in the United States or a foreign country (like France or Japan). Your web traffic then goes through that server to make it appear as though you’re browsing from that server’s location and not from your actual location.
When you’re using a VPN, it’s difficult for others to snoop on your web-browsing activity. Only you, the VPN service, and the website you’re visiting will know what you’re up to.
A VPN can be a great solution to a variety of concerns, such as online privacy, anonymity, greater security on public Wi-Fi, and, of course, spoofing locations.
People use VPNs for different security and privacy reasons, to access content anonymously, or to bypass content controls and age verification by pretending to be in different places. But not all VPNs are created equal. A recent report has revealed that many of them might allow others to sniff your data—and they’re not being honest about who’s behind them.
The report, called Hidden Links: Analyzing Secret Families of VPN Apps, comes from researchers at the University of Toronto’s Citizen Lab, and Arizona State University. It warns that several Android VPN apps for sale via the Google Play Store have security flaws that allow others to snoop on their traffic. They’re also deceiving users about their ownership, warns the report:
“The providers appear to be owned and operated by a Chinese company and have gone to great lengths to hide this fact from their 700+ million combined user bases.”
The researchers looked at the 100 most-downloaded VPNs and took the half of them that were not US-based. Then they scanned websites, business filings, and the VPN apps’ source code to try and find links between them. Using a combination of data points found in these resources, they found common software libraries, technical infrastructure, and business details that allowed them to group the VPN apps into three families.
Family A contained eight VPN applications linked to providers Innovative Connecting, Autumn Breeze, and Lemon Clove. These apps all shared some common security flaws. These included a hard-coded key used to create a password for Shadowsocks, a service designed to circumnavigate the Chinese government’s digital censorship system. This flaw enables anyone to decrypt communications sent using these apps.
From the report:
“On many of the VPNs we analyzed, a network eavesdropper between the VPN client and VPN server can use the hard-coded Shadowsocks password to decrypt all communications for all clients using the apps.”
Just as worrying is the undisclosed collection of user location data by these apps, even though the providers’ privacy policies claim that they don’t do this. They request the zip code of the user’s public IP from ip-api.com and upload it to a database, the researchers said.
The Tech Transparency Project has previously connected three providers responsible for these apps with Chinese cybersecurity firm Qihoo 360, which the US has sanctioned for its connections to the Peoples’ Liberation Army.
Family B consisted of six providers, who between them are responsible for apps including Global VPN, XY VPN, and Super Z VPN, all of which use the same VPN servers. They had hard-coded passwords for Shadowsocks, too. In general, the researchers warn against using apps that rely on Shadowsocks for anonymity. It was designed for getting around China’s censorship system, not maintaining anonymity, they said:
“It was counterintuitive to find deprecated ciphers and hard-coded passwords in these apps, given that they are security-sensitive apps and many of their providers are owned by Qihoo 360, a major chinese cybersecurity firm.”
Family C’s two providers were responsible for VPNs such as Fast Potato VPN and X-VPN, which also had security issues. This family, like the others, was also susceptible to other attacks, including what’s known as a blind in/on-path attack. This lets people manipulate traffic from a device using the app if they’re on the same network.
Why might companies seek to operate multiple VPNs and then hide the fact? The researchers muse that they might be trying to avoid reputational damage if something happens to one VPN. They share code because it’s simply more cost-effective to do so, the report added.
The takeaway here is that plenty of VPNs are not what they seem. That’s worrying, given that the people running the servers that the apps connect to can read all of the traffic—as can others who just reverse-engineer the passwords from the apps. So why doesn’t Google stop it?
One of the big problems is that the relationships between the different app providers are time-intensive to figure out. That makes it hard for the app store operators to automate at scale, the researchers point out. On the other hand, Google make $28.19bn in net profit for Q2 2025 alone, so maybe it could find some spare change down the back of the couch and put some manual investigators on it.
“Google is potentially exposing its brand to reputational damage by hosting and profiting from deceptive and insecure apps like the ones we investigated.”
It’s hard to know which providers to trust online. We suggest you research any security product carefully, and go for a trusted company with a solid reputation. Malwarebytes offers a VPN of our own here.
Login
