How to Choose a VPN

A VPN (virtual private network) directs your internet traffic through an encrypted tunnel to a remote server, and the differences between providers are primarily about specific, checkable features rather than marketing claims on the homepage.

Before you start

You’ll need to settle three things first:

1. What you want the VPN to do. Securing your connection on public Wi-Fi, keeping your internet provider from logging the sites you visit, and accessing your own accounts while travelling are different tasks, each pointing to different features.
2. Which devices will you protect? Count them, and note the operating systems. Support and feature availability vary by platform, particularly on iOS.
3. A rough budget and commitment. Monthly plans cost more per month than annual ones, and a money-back guarantee (commonly 30 days) lets you test a provider on your own connection before you commit.

If you’re still unsure what a VPN does or whether you need one, start with what a VPN is and come back.

How to choose a VPN

Work through these five checks in order. The early ones quickly rule out weak providers; the later ones separate the remaining ones.

Step 1: Start with what you need it for

Match the VPN to your use case before you compare anything else, because the “best” VPN is the one that does your job well. 

If your main concern is privacy on shared networks, weight encryption and a kill switch most heavily. If you travel and want to reach services from home, prioritise a broad server network and reliable connections. 

If you only need to keep your internet service provider from seeing your browsing, almost any reputable VPN covers that, so you can decide on price and ease of use. Write your top one or two needs down; they decide which of the steps below matter most.

Step 2: Check the security essentials

Confirm the VPN uses strong, named encryption and a current protocol before you look at anything else, because these are what make it a security tool rather than a redirection service.

Look for AES-256 (the Advanced Encryption Standard, the same cipher used to secure online banking) or the modern, fast ChaCha20. For the protocol (the set of rules that builds the encrypted tunnel) look for WireGuard or OpenVPN, both of which are independently audited; IKEv2/IPsec is a sound choice on mobile. 

Treat the phrase “military-grade encryption” as marketing and check for the named cipher instead. Our explainers on VPN encryption and VPN protocols cover what each term means.

Step 3: Verify the privacy claims

Check that the provider’s no-logs policy has been confirmed by an independent audit, not just asserted in marketing. 

A no-logs policy is the provider’s commitment not to record what you do while connected, and the credible providers publish a third-party audit (from a firm such as a major accountancy or security auditor) to back it up. 

Two related signals are worth a look: whether the provider has ever produced user activity logs in response to a legal request, and the country it operates from, since that determines which authorities can compel data. 

The phrase you’ll see is the “14 Eyes” intelligence-sharing alliance, a group of countries (the US, UK, Australia, Canada, New Zealand, and nine European partners) that share signals intelligence; some privacy-focused providers base themselves outside it deliberately. Jurisdiction matters less than an audited no-logs policy, but it’s a reasonable tiebreaker.

Step 4: Confirm the features that match your use

Make sure the VPN includes the specific features your use case from Step 1 depends on. 

The ones worth checking by name:

• Kill switch. A kill switch cuts your internet if the VPN connection drops, so your traffic never leaks unprotected. Essential for any session where a brief exposure matters; check it’s available on your devices, as it isn’t universal on mobile.
• Split tunnelling. Split tunnelling lets some apps use the VPN while others use your normal connection. Useful if a banking app blocks VPNs or local devices stop working when everything is tunnelled.
• Server network. More server locations give you more options for appearing in a given country and reduce the chance any single server is congested. Check the provider lists servers in the regions you actually need.
• Device and platform support. Confirm there’s an app for each operating system you use, and check how many simultaneous connections a single subscription allows, since that caps how many devices you can protect at once.

Step 5: Weigh speed, price, and support

With the essentials confirmed, compare what’s left: speed, cost, and support. A VPN adds some overhead, so expect a small drop in speed; WireGuard generally minimises it. 

On price, compare the annual cost rather than the headline monthly figure, and be cautious with free VPNs, which sometimes fund themselves by logging or selling data, the opposite of what you’re paying a VPN to prevent. For support, check whether help is available when you’d need it (24/7 live chat is common) and whether setup guides exist for your devices.

How to confirm your choice

Use the money-back guarantee as a free trial on your own connection. 

Install the VPN, turn on the kill switch, and connect, then run a few checks: confirm your apps and local devices still work, run a quick speed test with the VPN on and off to see the difference, and use an online IP-checking tool to confirm the sites you visit see the server’s location rather than yours. 

If anything fails or the speed loss is too steep for your use, request a refund within the guarantee window and try another. Our guide on how to set up a VPN walks through the installation in five steps.

Common mistakes to avoid

• Choosing on price alone. A free or very cheap VPN that logs your activity defeats the purpose. Check the no-logs audit before the price.
• Trusting “military-grade” and “no-logs” at face value. These are claims until a named cipher and an independent audit back them up.
• Ignoring your platform. A feature that exists on Windows may be missing on iOS. Confirm the features you need work on the devices you own.
• Assuming a VPN makes you anonymous. It hides your traffic from the network and masks your IP address, but it does not make you anonymous to a service that verifies your identity or to a site you log into.

Frequently asked questions

You’re ready to compare

You can now judge any VPN on what counts: named encryption and a current protocol, an audited no-logs policy, the specific features your use case needs, and a fair price you’ve tested against a money-back guarantee. The one thing to watch is the gap between a claim and its proof. Treat “military-grade” and “no-logs” as unverified until a named cipher and an independent audit back them up. For the providers we rate against these criteria, see our best VPNs comparison, and for the mechanics behind the features above, how a VPN works.