If you’re in a situation where personal security is of the utmost importance, do not rely on a VPN. Use Tor (ideally through Tails) instead.
Using the Tor network accomplishes some of the same things as a VPN, but it’s a little bit different. Tor provides anonymity, meaning no one can figure out who you are, but not necessarily privacy. People still might be able to see what you’re doing, they just won’t know it’s you doing it. (VPNs provide privacy because no one can see what you’re doing while you’re going out of a VPN tunnel, but you don’t have anonymity because the VPN provider knows who you are.)
Tor is simple to set up. All you need to do isdownload the Tor browser, and it will connect you to the web. Once you’re connected to the Tor network, you can browse the web as you normally would. Except everything will be slower. When using Tor, your request for a website hops around the Tor network, bouncing between servers, before emerging and connecting to the actual site you want to visit. This makes Tor slow, sometimes incredibly slow, but that’s necessary to protect your anonymity. And yes, you can combine a VPN with Tor, though that’s somewhat beyond the scope of this guide.
Other VPNs We’ve Tried
1.Google One VPN:Google One VPN, is part of Google One. It’s a traditional VPN, and judging from thewhite paper Google released about it, it isn’t tied to your Google account. In other words, it’s better than browsing in the clear over the coffee shop network. That said, let us not forget that Google has repeatedly been caughtcollecting data it said it wasn’t, and that it took a massive antitrust lawsuit by the US government just to getChrome to block third-party cookies(among others). That’s not to say Google’s VPN is logging your data, just that we don’t know for sure, you don’t know for sure, and Google’s track record isn’t the best.
2.NordVPN:In the past we have recommended NordVPN, but more recent experiences of both WIRED staffers and readers who’ve emailed me have revealed serious lapses in NordVPN’s customer service and VPN apps. Based on these experiences, we’ve dropped our recommendation. Security-wise I have no reason to doubt NordVPN, but customer service can be hassle.
3.ExpressVPN:We also used to recommend ExpressVPN, but we no longer do because it has a new parent company and we haven’t been able to verify anything about it.
4.The 100s of Others: There are a lot of VPNs out there, but most of them are not worth your money. If all you want to do is circumvent some Netflix geographic restriction, then just about any of them will work (we still suggest sticking with our recommended options, but if you can’t be stopped, then carry on). For anything more serious, like actually protecting your privacy and data, learn to use Tor. Yes, it’s a little technical, but trust me, it’s worth learning how to do if your life, family, job, etc, are at stake.
How We Test VPNs
VPN providers like to claim they keep no logs, which means they know nothing about what you do using their services. There are a variety of reasons to be skeptical about this claim, namely because they have to have a user ID of some kind tied to a payment method, which means the potential exists to link your credit card number (and thus your identity) to your browsing activity.
For that reason, I mainly limited my testing to providers that have been subpoenaed for user data in the US or Europe and failed to produce the logs, or have at least undergone a third-party security audit. While these criteria can’t guarantee the providers aren’t saving log data, this method of selection gives us a starting point for filtering through the hundreds of VPN providers. Unfortunately, other factors also come into play. VPNs that once made our list—like ExpressVPN—are sometimes sold to less reputable companies.
Using these criteria, I narrowed the field to the most popular, reputable VPN providers and began testing them over a variety of networks (4G, cable, FiOS, and plenty of painfully slow coffee shop networks) over the years. To compare speeds in a consistent manner, before each update I run through each of our picks again, one after the other testing over a Starlink connection via a laptop, and a 4G Verizon connection on mobile. I also considered available payment methods, how often connections dropped, and any slowdowns I encountered. Lastly, I’ve tested DNS leaks using bothBrowserLeaksandIPLeak.
Al that gives me a baseline on which to evaluate the speed and security, but the results are still unique to that moment. These tests are a snapshot in time and can be affected by all sort of variables ranging from your web browser to your ISP. As noted above, while we believe the recommended VPNs above are secure, fast, and a good value, in situations where sensitive data is involved, please use TOR.
Are There Any Good Free VPNs?
As noted above, ProtonVPN has a free version. It’s limited to a single device and there are only three servers to connect to which means it can be slow. There’s no logs, and no ads, and no other limits. In my testing it was slower than the paid account, but it does work.
Other than that, it’s worth keeping in mind the adage “if you’re not paying for it, you are the product.” Do not trust a VPN that isn’t taking your money (and don’t trust many that are either). The good news is that all the picks above offer free trials, which allow you to evaluate how well each VPN will work in your unique situation and for your needs.And remember that there is a way to browse more securely without spending a dime: use the TOR network. Do I sound like a broken record yet? Good. If you’re short on cash, use TOR.
What Are the Limitations of VPNs and Do You Even Need One?
It’s important to understand not just what a VPN can do, but also what it can’t do. As noted above, VPNs act like a protective tunnel. A VPN shields you from people trying to snoop on your traffic while it’s in transit between your computer and the website you’re browsing or the service you’re using.
Public networks that anyone can join—even if they have to use a password to connect—are easy hunting grounds for attackers who want to see your network data. If your data is being sent unencrypted—like if the website you’re connecting to doesn’t use the secure HTTPS method—the amount of information an attacker can gather from you can be disastrous. Web browsers used to show a green lock icon at the top of your screen next to the web address, but that’sgoing away. Instead browsers will warn you when a page isn’t secure. These days, most websites connect using HTTPS, so you’re probably fine most of the time, but on school, library, and small business websites that may not always be the case. Unless you’re using a VPN, which hides all of your activity, even on unencrypted websites.
Just connecting to a VPN isn’t enough. Be sure to check outour guide to using a VPNto make sure you have everything set up correctly.
A VPN also changes your IP address, which adds an additional layer of protection. By giving you a different IP address, a VPN can make it appear as though you’re in a different physical location. So even if you’re sitting in California, the website you’re accessing will think you’re in Canada, Hungary, Uruguay, or Thailand. Unfortunately, this method of obscuring your location is not airtight. Technology built into web browsers that’s known as WebRTC can leak your true IP address even when you’re using a VPN. If this is a concern, disable WebRTC in your browser before connecting to a VPN. Mullvad has instructions on how todisable WebRTC in most browsers.
It’s debatable how much masking your IP address really helps protect your privacy in the first place. Your IP address is only one of many, many bits of data websites collect about you. If privacy is your concern, you’re better off using web browsers (and extensions) that offer additional tools to protect your privacy.Mozilla Firefoxhas several of these tools available. Or if you want to get serious about it, use the ultra-privateTor browseras noted above.
To add to the confusion around VPNs, providers—even some I’ve recommended here, unfortunately—often engage in misleading marketing. Nearly every VPN service website I visited had some kind of red banner claiming I was “not protected,” even when I was using a VPN at the time. The problem is that I wasn’t usingtheirVPN. More honest VPN providers, like Mullvad, tell you what’s actually happening: “You’re not protectedby Mullvad.” Kudos to Mullvad for not using fear to sell subscriptions.
Either way, the important thing to remember is that using a VPN does not make you anonymous. While VPNs may not be able to do much to protect your privacy, they are an essential tool when it comes to protecting you from snoops trying to gather your unencrypted data sent over insecure networks.
Under theUAE Decree Law No (34) of 2021 concerning combating rumours and cybercrimes, the use of VPNs for illegal means is punishable by law.
Read more on wired.com
