A Virtual Private Network (VPN) is like a tunnel you can use to pass through a public network, [protecting your data](https://www.wired.com/2017/03/want-use-vpn-protect-privacy-start/) from outside eyes. Whether you're worried about [ISP's selling your data](https://www.wired.com/2017/03/senate-prepares-send-internet-privacy-black-hole/), or want to stay safe on public WiFi, a VPN can help protect you.

However, while a VPN will keep you safe at your local coffee shop, it does come with a cost. Using a VPN means your VPN provider will know everything about your browsing habits. This also make VPN providers a tempting target for hackers.

This means picking the right VPN service is [serious business](https://drewdevault.com/2019/04/19/Your-VPN-is-a-serious-choice.html). Most VPN providers claim they keep no logs, but this is rarely verified. You're stuck taking companies at their word. For this reason we've limited our testing to VPN providers that have been independently audited and published the results.

To help you sort out when and why you might want a VPN, as well as why you may not, be sure to read through our complete guide below. If you're already sure you want to use a VPN here are out top picks among commercial VPN providers.

### Best for Most People

[#image: /photos/5e59755dc880ec0008a5239b]||||||

**[ExpressVPN](https://www.expressvpn.com/order){: rel=nofollow}**

ExpressVPN is based out of the British Virgin Islands and is currently the only VPN that's been verified to not keep customer logs. ExpressVPN has been [independently audited](https://www.expressvpn.com/blog/pwc-audits-expressvpn-servers-to-confirm-essential-privacy-protections/), failed to produce logs in court, and even had the Turkish government [seize its servers](https://www.hurriyetdailynews.com/social-media-posts-e-mails-of-turkish-policeman-who-killed-russian-ambassador-deleted-via-virtual-computer-124304) and find... nothing. When it comes to no logs, this is your best VPN bet.

Even better for those of us not particularly worried about logs, ExpressVPN offers a great set of tools to simplify connecting to the company's VPN servers. There are apps for nearly every device, including home routers which, once set up, mean you don't have to worry about setting up apps on every device. On-the-go there are apps for Android, iOS, even the Nook special instruction.

In my testing, ExpressVPN consistently offered the fastest connections and had the most reliable Netflix experience. Not only was I able to circumvent Netflix's country restrictions, ExpressVPN's network was plenty fast enough for HD streaming.

**[ExpressVPN costs $6.67 per month if you buy one year up front](https://www.expressvpn.com/order){: rel=nofollow}**

### Best For VPN Newcomers

**[TunnelBear](https://www.tunnelbear.com/pricing){: rel=nofollow}**

Choosing a VPN can be overwhelming. If you're tired of lock icons and security mumbo-jumbo TunnelBear might be just the VPN you're looking for. It's cute bear animations help de-mystify what VPNs do, how they work, and what they can do for you. Sometimes the easiest way to make technology more approachable is by putting a friendly face on it. 

We're fans of TunnelBear's [password manager sibling, RememBear](https://www.wired.com/story/best-password-managers/) for the same reason. It's amazing how bears can put you at ease. 

Don't worry though, TunnelBear isn't all cute bear animations. It has all the same security features of other VPN providers, has a [no-logging policy](https://www.tunnelbear.com/privacy-policy), good [privacy policy](https://www.tunnelbear.com/privacy-policy), and its been [independently audited](https://www.tunnelbear.com/blog/tunnelbear_public_security_audit/).

In my testing speeds with TunnelBear were competitive with ExpressVPN. One of my favorite parts of TunnelBear is the free trial option, which makes it easy to test drive and see what your speeds are like without committing. TunnelBear has fewer geographic locations than our other options, but unless you're traveling abroad, or need to get around a specific geo-restriction, it shouldn't matter for most users. 

**[TunnelBear costs $4.99 per month if you buy one year up front](https://www.tunnelbear.com/pricing){: rel=nofollow}.**
### Best for Advanced Users

**[Mullvad VPN](https://mullvad.net/){: rel=nofollow}**

Mullvad is based in Sweden and first came to my attention because of its early support for [WireGuard](https://www.wireguard.com/), a [faster protocol for tunneling VPN traffic](https://www.wired.com/story/wireguard-gives-linux-faster-secure-vpn/). 

Another option I like is Mullvad's cash payments. Yes, for total anonymity you can generate a random account number, write that number down, mail it, along with cash, to Sweden and in theory no one will be able to connect you to that account (the truly paranoid will don a tinfoil hat, wear gloves, print from a public printer, and mail from a remote mailbox).

These edge case features aside, Mullvad offers a down-to-earth VPN service that doesn't overhype with its marketing, and helps users take additional steps to protect their privacy. For example the company has an entire page showing you how to [disable WebRTC in your web browser](https://mullvad.net/en/help/webrtc/). As long as WebRTC is enable (and it is by default in most browsers) websites can view your actual IP address even when you use a VPN.

Mullvad offers apps for every major platform, as well as routers (note that the Android app is in beta). The applications are all open source and you can check them out on GitHub. They've been [independently audited](https://mullvad.net/en/blog/2018/9/24/read-results-security-audit-mullvad-app/) as well. Advanced users can download configuration files and use them directly with OpenVPN.

In my testing speeds were good, though sometimes less consistently so than ExpressVPN. I never encountered a situation where I couldn't get a fast connection, but sometimes I did have to try a different servers to get speeds I was happy with.

**[Mullvad VPN costs €5 per month](https://mullvad.net/en/account/create/){: rel=nofollow}**

### How We Picked

VPN providers like to claim they keep no logs, which means they know nothing about what you do using their services. There are a variety of reasons to be skeptical about this claim, namely that they have to have a user ID of some kind tied to a payment method, which means the potential to link you to your data exists. 

For that reason I mainly limited my testing to providers that have either been subpoenaed for data in the U.S. or Europe and failed to produce logs, or have undergone a third-party security audit. While this is still no guarantee these providers aren't saving log data now, it provides a baseline to start filtering through the hundreds of VPN providers out there. 

Using this criteria I narrowed the field to the most popular, reputable VPN providers, and began testing them over a variety of networks (4G, cable, FiOS, and plenty of painfully slow coffee shop networks) over the last nine months. I tested network speed, ease of use (how you connect), and also considered available payment methods, how often connections dropped, and any slowdowns encountered.

### Why You Might Not Need a VPN

It's important to understand not just what a VPN can do, but also what it *can't* do. As detailed above, VPNs are a like a tunnel. VPNs protect you from people trying to snoop on your traffic in transit. 

Public networks make it easy for attackers to get a copy of your network data. If your data is being sent unencrypted—the website you're connecting to doesn't use HTTPS—the results can be disastrous. Web browsers make it easy to tell when your connection is secure, look for a green lock icon at the top of your screen. These days most websites connect over HTTPS, so you're probably fine. But if that green lock icon isn't there anyone can view whatever data you're sending. Unless you're using a VPN.  

Adding a VPN protects even your unencrypted data from prying eyes. Be sure to check out [our guide to using a VPN](https://www.wired.com/2017/03/want-use-vpn-protect-privacy-start/) to make sure you have everything set up correctly.

A VPN also changes your IP address, which protects your privacy to a degree. Unfortunately, this is not airtight. A web-based API known as WebRTC can leak your IP address even from behind a VPN. If this is a concern in your situation, make sure you disable WebRTC in your browser. Mullvad has instructions on how to [disable WebRTC in most browsers](https://mullvad.net/en/help/webrtc/).

It's debatable how much masking your IP address really helps protect your privacy in the first place. You IP address is only one of many, many bits of data websites collect about you. If privacy is your concern, you're better off using web browsers (and extensions) that offer tools to protect your privacy, like [Mozilla Firefox](https://www.mozilla.org/en-US/firefox/new/), or, if you want to get serious about privacy, the [Tor browser](https://www.torproject.org/download/). 

To add to the confusion around VPNs, providers—even two of the ones I've recommended here unfortunately—often engage in misleading marketing. Nearly every VPN service website I visited had some kind of red banner claiming I was "not protected", even if I was using a VPN at the time. the problem is that I wasn't using *their* VPN. More honest VPN providers, like Mullvad, tell you what's actually happening: "you're not protect *by Mullvad*. Kudos to Mullvad for not using fear to sell. 

Either way, the important thing to remember is that using a VPN does not make you anonymous. While VPNs may not be able to do much to protect your privacy, they are an essential tool to protect your unencrypted data over insecure networks. 

If you want to circumvent some kind of geographic restriction on content, browse securely over open networks, or get around an ISP-level content filter, then a VPN is a useful tool.