Best VPN Service for 2024: Our Top Pick In a Tight Race

2 days ago 2

Internet speed loss

VPNs somewhat lower your internet speed because you're routing your traffic through an encrypted server before communicating with apps, websites and other internet services rather than a direct connection. The fastest VPNs feature an average download speed loss of 25% or less. Generally, even folks with slower connections -- like satellite internet -- won't notice a marginal 25% or under dip. For bandwidth-intensive applications like gaming, 4K video streaming or uploading large files, you'll want a VPN with minimal speed loss. Casual users with faster internet speeds should be fine with more than 25% speed loss, but we look for VPNs that keep speed loss below 50%.

In our 2024 testing, NordVPN came out on top with an impressively low 11% average internet speed loss. Mullvad, Surfshark, Proton VPN and ExpressVPN all clocked an average internet download speed loss of 25% or less.

CNET speed test data

This table shows the speeds we experienced in our testing. Your speeds will vary depending on factors like your internet service plan and connection type. The percentage of speed lost is intended as a general indicator of how much the VPN slows down your connection; lower numbers represent a faster overall connection.

Provider ExpressVPN Surfshark NordVPN Proton VPN IPVanish PIA Mullvad

Avg. VPN speed (Mbps)	Avg. non-VPN speed (Mbps)	Speed loss
173	231	25%
153	193	17%
206	230	11%
157	180	21%
205	367	44%
98	211	49%
319	369	13%

Privacy

VPNs bolster your privacy by masking your IP address, which -- like your physical address -- indicates identifying information about your geographical location. At a minimum, we recommend a VPN with 256-bit encryption (for OpenVPN and IKEv2 VPN protocols) or ChaCha20 (with WireGuard), a strict no-logging policy and DNS leak protection. Because logging is tough to verify, look for regular third-party audits. You can and should be skeptical of your VPN provider's zero-log claims. Still, VPN audits are important but don't provide the full privacy picture.

Additionally, transparency reports offer peace of mind. We also suggest sticking with a VPN that includes a kill switch. More privacy-concerned users like investigative journalists or political activists will appreciate advanced features such as obfuscation (which makes it harder for ISPs to determine that you're using a VPN), Tor over VPN (for additional encryption using the Tor network) and a double VPN (which relies on a second VPN server connection to enhance encryption). Folks with critical privacy needs should consider a VPN provider with jurisdiction outside of the Five, Nine or Fourteen Eyes intelligence-sharing communities for even stronger peace of mind.

Server network

When considering VPN server networks, look at the overall number of servers, as well as the individual country locations. For instance, one virtual private network company may have twice the total number of servers as a competitor but half the different country locations, meaning you've got fewer international choices. At the high end, the most comprehensive VPNs for travel offer 90-plus individual countries, but anywhere over 60 countries will work for many folks.

Outside of country locations, some VPNs allow file sharing across all servers, whereas others feature dedicated P2P (peer-to-peer) options. For purposes like torrenting, check whether your desired provider permits file sharing on all servers or select ones.

Additionally, you'll sometimes find specialty servers, like Tor (The Onion Router) over VPN, Double VPN or obfuscated servers. Onion over VPN and Double VPN servers provide extra privacy by bolstering your encryption even further when compared with a standard VPN connection, with Tor using the Onion network while a double VPN relies on a second VPN tunnel. On the other hand, obfuscated servers make it more difficult for apps, websites or internet service providers to determine that you're using a VPN.

Device support

Think about your devices and what you'd like to run a VPN on. Most VPN companies offer apps for Windows, MacOS, Linux, Android/Android TV, iOS/iPadOS and web browsers. Apple TV apps are increasingly common, with ExpressVPN, NordVPN and IPVanish featuring TVOS applications. A graphical user interface application may be easier for Linux users than a command line interface option. Surfshark, Proton and PIA boast Linux GUI apps, making them compelling choices for Linux VPNs. You can typically install a VPN on your router for whole-home coverage and use it on devices that don't support native VPN apps, like Xbox consoles, although this will typically void the warranty on the router.

Most VPN companies let you install an app on as many gadgets as you wish, you're sometimes limited to simultaneous devices. ExpressVPN allows eight, while NordVPN and Proton give you 10. Surfshark, PIA and IPVanish are unlimited. Even with a provider like Express, Proton or Nord, you can still install a VPN on as many devices as you wish, but you'll be able to have only a handful of active sessions at once. Most folks should be fine even with eight to 10 simultaneous connections, but families or hardcore power users may feel constrained.

VPN device compatibility

Wondering which VPN services work on which devices? We've got you covered.

Windows MacOS Linux Android/AndroidTV iOS/iPadOS Fire TV Smart TV* Apple TV Router Browser plugin** Simultaneous connections

IPVanish	Surfshark	PIA	ProtonVPN	ExpressVPN	NordVPN
✔️	✔️	✔️	✔️	✔️	✔️
✔️	✔️	✔️	✔️	✔️	✔️
✔️	✔️ (with GUI)	✔️ (with GUI)	✔️ (with GUI)	✔️	✔️
✔️	✔️	✔️	✔️	✔️	✔️
✔️	✔️	✔️	✔️	✔️	✔️
✔️	✔️	✔️	✔️	✔️	✔️
✔️	✔️	✔️	✔️	✔️	✔️
✔️	✔️	✔️	❌	✔️	✔️
✔️	✔️	✔️	✔️	✔️	✔️
✔️	✔️	✔️	✔️	✔️	✔️
Unlimited	Unlimited	Unlimited	10	8	10

Streaming capabilities

VPNs can be great for privacy, they're also helpful for unblocking region-restricted entertainment content. You can use a VPN to watch streaming services like Peacock (for streaming the Paralympics or NFL games), Max or Hulu from your home country when traveling abroad. On the flip side, VPNs unlock access to foreign Netflix (so you can watch Terminator Zero), Disney Plus (so you can stream The Acolyte all you like) and Amazon Prime Video (where you can currently find The Beekeeper in the US) libraries.

Cost

With most VPNs, you can sign up for a monthly, bi-annual, annual or multi-year VPN subscription. Although multi-year deals typically net you the most savings, we usually recommend sticking with an annual plan for the best savings with the lowest risk. The virtual private network you sign up for may initially be fast, private and great for geo-unblocking, but may become slower, suffer a data breach or stop allowing access to foreign Netflix libraries over a year.

On the high end, VPNs such as Express cost around $100 per year, with value-packed providers like Surfshark and PIA offering year-long prices from $40 to $60. Some companies include price hikes: NordVPN normally charges $60 annually for your first year, then your plan renews at $100 per 12 months. Similarly, Surfshark goes for $45 a year upfront, then renews at $60 annually. Make a budget, then find a VPN provider that fits the bill while being mindful of price hikes. Notably, you can renew while avoiding raised renewal rates by taking advantage of seasonal discounts like Black Friday/Cyber Monday deals.

Additional VPN factors to consider

Don't use free VPN providers: Except for Proton, you'll find only paid VPN options on this list above because they're the only ones we recommend.

Look for a no-logs VPN but understand the caveats: The best VPNs keep as few logs as possible and make them as anonymous as possible, so there's little data to provide should authorities come knocking. Even "no-logs" VPNs aren't 100% anonymous.

There are limits to the privacy VPNs currently provide to iOS users: Recent independent research has surfaced suggesting iPhones and iPads running iOS 14 or later may be vulnerable to device-only VPN leaks, regardless of which VPN is used. Apple users concerned with potential leaks can take extra precautions by installing their VPN on a home router to ensure their entire Wi-Fi network is encrypted. Some iOS users may potentially reduce the likelihood of leaks while outside of a home network by enabling their VPN's kill switch and selecting OpenVPN protocols. You can also try closing all apps, activating your VPN and then enabling and disabling Airplane Mode before using your device normally. Apple advises users to activate their device's Always On VPN profile for additional protection.

VPN transparency is important, but warrant canaries are only the beginning: Many services use "warrant canaries" to passively note to the public whether or not they've been subpoenaed by a government entity. This is because many investigations from national security agencies can't be actively disclosed by law. Like the no-logging issue, warrant canaries aren't always as straightforward as they seem. You should spend more time investigating whether your prospective VPN has cooperated with authorities in the past, and how and when it's disclosed that fact.

Think twice about using a US-based VPN: The Patriot Act is still the law of the land in the US, and that means US-based VPNs have little recourse if and when the feds show up with subpoenas or national security letters in hand demanding access to servers, VPN user accounts or other data. Yes, they may have little data to access if the service has a strong no-logs policy, but why not just choose a service that's based outside Uncle Sam's jurisdiction? (If this is a concern for you, you'll also want to avoid countries with which the US has intelligence-sharing agreements.)

Other VPNs we've tested

Not every VPN can be a favorite. These are the ones we reviewed, but they're not full-throated recommendations for one reason or another, including limited features and concerns over adequately hiding your identity.

IPVanish is a decent beginner-friendly VPN for folks seeking basic privacy. It does a good job of unblocking geographically protected streaming content on multiple services, such as providing access to foreign Netflix libraries. We liked its intuitive VPN apps which, while easy to use even for novices, weren't quite as streamlined as apps from NordVPN or ExpressVPN. While you get privacy fundamentals from IPVanish, its US jurisdiction makes it unsuitable for people with critical privacy needs, like political activists, investigative journalists or asylum-seekers.

Its comparatively slow speeds -- we measured a 44% average internet speed loss -- severely lagged behind NordVPN (11%), Surfshark (17%), Proton VPN (21%) and ExpressVPN (25%). Likewise, its relatively small server network of 56 countries is head and shoulders below Nord (111 countries), ExpressVPN (105) countries, Surfshark (100 countries), Proton (112 countries) and PIA (91 countries). IPVanish sets you back $13 per month, $40 for your first year or $52 for two years combined -- but the one- and two-year plans jump to $90 annually after your introductory pricing period. For the price, you can get a VPN with faster internet speed maintenance and a much larger web of servers.

Read our IPVanish review.

Quick Take

Servers: 2,400-plus
Number of countries: 56
Country/jurisdiction: US
Platforms: Windows, MacOS, Linux (CLI), Chrome OS, Android, Android TV, iOS, iPadOS, Fire TV, Apple TV
Price: $13 per month, $40 for the first year (then $90 annually) or $52 for the first two years combined (then $90 annually)

Hotspot Shield VPN's TLS-based Hydra Catapult protocol, US jurisdiction and large percentage of virtual servers might strip away our trust in its ability to provide more privacy protections than its competitors. Those are all key components to its ability to achieve the blazing speeds it delivered during its most recent speed tests.

It effortlessly delivers smooth-streaming media and can dance between server connections without missing a beat, no matter how many interruptions you throw at it. A 26% speed loss puts it in second place, falling behind Surfshark (which lost just 16.9% of its speed the last time I tested it) and knocking Express down to third place with a 51.8% speed loss at the last measurement. Speed losses on UK connections were under 8%. When it comes to gaming, torrenting, browsing and streaming, these speed-dependent services won't be slowed down for Hotspot Shield users.

We're not excited about Hotspot's privacy and security. Since the services use a closed-source proprietary Catapult Hydra protocol, instead of the more transparent open-source OpenVPN protocol, we'd like to see Hotspot give the public more third-party audits, which is a necessary step to bring Hotspot up to speed with routinely audited VPNs like TunnelBear. As recently as April 2021, review site VPNMentor discovered a DNS leak in Hotspot Shield's plug-in for Google Chrome. Hotspot acknowledged the issue at the time and aimed to improve the product.

We're also not thrilled about the amount of user data Hotspot collects and its privacy policy. With its premium product, it gathers and retains much more information about users than most other VPNs. If you're using the free version of its product, it shares that information -- along with even more finite data, including your MAC address and specific phone identifier -- with advertising companies.

Its interface is user-friendly and its speeds are thrilling, but spending time with Hotspot is going to leave your wallet a little lighter than you might prefer. Its current price is higher than its nearest competitors, its speeds slightly slower and its privacy more questionable. If you're looking for a VPN purely on the grounds of speed, we still recommend passing on Hotspot until it improves.

Read our Hotspot Shield VPN review.

Quick Take

Number of servers: 1,800-plus
Number of countries: 80-plus
Country/Jurisdiction: US (Five Eyes member)
Platforms: Windows, Android, MacOS, iOS, iPadOS, Android TV, Linux, Amazon Fire TV, routers, web browsers
Price: $13 per month or $96 billed annually

TunnelBear has gotten a lot of hype in the last couple of years. When we looked under its hood and compared it with its VPN competitors, our excitement waned.

TunnelBear's speeds are reasonable. We lost nearly 63% of internet speed overall when we used it, which is about average for a VPN. TunnelBear's speeds have steadily improved over the years as measured by other review and testing sites, and the US scores we recorded saw a speed loss of only 54%.

On the plus side, TunnelBear is holding its own in the transparency competition among VPNs by publishing the results of its independent security audits and annual transparency reports. No IP address, DNS or other potentially user-identifying data leaks were detected during our testing, but in the past TunnelBear was observed to have been leaking WebRTC information. TunnelBear's VPN encryption is standard AES-256 and it supports Perfect Forward Secrecy.

It's also a Canadian business owned by US-based McAfee, so if you're looking for subpoena-proof international online privacy, you're playing with fire. It holds a paltry 23 server locations from which you can't manually choose your VPN server or even a city. It doesn't offer Tor-over-VPN, it offers split tunneling only on Android and it can't even unblock Netflix.

On a per-month breakdown, the least expensive TunnelBear plan is its $120, three-year plan. You can also go month to month for $10 or pay $60 upfront for a single year. Either way, TunnelBear accepts payment via credit card and Bitcoin. Unlike other VPNs, it doesn't take PayPal, plus it doesn't support Amazon Fire Stick or Android TV.

Read our TunnelBear VPN review.

Quick Take

Number of servers: 5,000-plus
Number of countries: 47-plus
Jurisdiction: Canada, with US parent company
Platforms: Windows, MacOS, Linux, Android, iOS, iPadOS, web browsers
Price: $3.33 per month, or $120, for a 3-year plan

If you need a VPN with a massive number of servers in tons of different locations, or if you’re a streaming enthusiast who likes to stream a wide variety of streaming content, then CyberGhost is a serviceable choice for casual use cases. If you’re a journalist, activist, dissident, physician, attorney or anyone else with critical privacy needs looking for a solid privacy-focused VPN, you won’t find it in CyberGhost.

We like that CyberGhost publishes extremely detailed quarterly transparency reports (far outdoing all other VPNs in terms of detail and frequency) and operates a RAM-only server infrastructure, but the company’s overall approach to user privacy needs some major attention. CyberGhost’s privacy policy outlines some questionable data-sharing practices, and we were perplexed by how the VPN’s website and onboarding process reinforces the dangerous falsehood that VPNs can make you totally anonymous online. We were also disappointed to see how CyberGhost attempts to trick users into agreeing to share additional data with the company through its apps.

Besides CyberGhost’s dubious approach to user privacy, the VPN’s apps are a mess. Throughout our testing process, we ran into numerous bugs and choppy performance on nearly all of CyberGhost’s apps across the platforms we tested. In our testing, all of CyberGhost’s apps consistently took an abnormally long time to connect to a server. At times, the apps would become entirely unresponsive, requiring an app restart and sometimes even a full system restart. CyberGhost’s apps also don’t offer much in the way of helpful bonus features like many others, including Surfshark and NordVPN, do. If you need a fast VPN, you’ll probably be disappointed by CyberGhost’s mediocre speed performance (30% speed lost in CNET’s testing).

Overall, CyberGhost is a sub-par VPN provider with buggy apps, middling speed performance and questionable privacy practices. It costs $13 per month, $42 every six months or $57 for the first 24 months (then $57 annually). For a similar price or even cheaper, you can choose several VPNs that are far superior to CyberGhost.

Read our CyberGhost VPN review.

Quick Take

Number of servers: 11,500-plus
Number of countries: 100
Jurisdiction: Romania, with UK parent company
Platforms: Windows, MacOS, Linux, iOS, iPadOS, Android, Android TV, Fire TV
$13 per month, $42 every six months, $57 for the first two years (then $57 annually)

Norton LifeLock, long known for excellence in security products, has a relatively limited offering in its VPN product. Norton Secure VPN does not support P2P or BitTorrent, Linux, routers or set-top boxes. It's Netflix and streaming compatibility is somewhat limited. Even worse, during testing, we experienced privacy-compromising data leaks.

During CNET's testing, Norton Secure VPN speeds were comparable to other mid-tier VPNs but not particularly competitive. Although its VPN is only available on four platforms -- Mac, iOS, Windows and Android -- Norton gets points for its 24/7 live customer service phone support and 60-day money-back guarantee.

Norton Secure VPN costs $40 for the first year, rising to $80 upon renewal. For that price, you get protection for five devices, which is well below ExpressVPN's eight simultaneous devices, Nord and Proton's 10 or Surshark and PIA's unlimited. Most VPN providers let you install a VPN on as many devices as you like but limit your simultaneous usage, Norton restricts how many total devices you can download a VPN on. This stingy device allowance is well under the competition. If you need more, you can always upgrade to Norton's Ultra VPN Plus with its 10-device policy. Norton Secure VPN Plus and Ultra VPN Plus bundle antivirus software, so if you need a VPN with antivirus, it's a consideration.

Read our Norton Secure VPN review.

Quick Take

Number of servers: 1,500
Number of countries: 30-plus
Country/jurisdiction: US
Platforms: Windows, MacOS, Android, iOS, iPadOS
Price: $40 for the first year for 5 devices (renews at $80) or $60 for the first year for 10 devices (renews at $130)

Read Entire Article