The best VPN service of 2020 – CNET

If, like a lot of people, the global pandemic is forcing you to work from home these days, remote VPN access is more essential than ever for protecting your privacy online. But as the number of commercial virtual private networks continues to grow exponentially, finding the best VPN to meet your specific needs can be tricky. 

So to help you find the best VPN for you, we’ve sifted through a multitude of overhyped VPN providers all touting their own private network. We’re keeping a close eye on how each VPN provider stands compared with its competitors, as well as any new VPN services that may become available, and we’ll be regularly updating this directory as new options hit the market.

Since we don’t recommend free VPN services, this directory is packed only with paid commercial VPNs. In our current testing and ranking system, we looked at more than 20 factors, including price, security, number of server locations, ease of remote access, bandwidth caps, logging, dedicated and dynamic IP, client software and customer support. To see exactly how we test and rate each virtual private network, check out our full evaluation walk-through.  

Let’s look at each of our VPN vendors below in more depth. Keep in mind that this is an evolving list: It was originally published earlier and is constantly updated. We’re actively working on more VPN testing and research, so expect this guide to change throughout the year as our virtual private network use continues and we put each VPN option through its paces.  

ExpressVPN

  • Number of IP addresses: 30,000
  • Number of servers: 3,000-plus
  • Number of server locations: 160
  • Number of simultaneous connections: 5
  • Country/jurisdiction: British Virgin Islands
  • 94-plus countries
  • 3 months free with 1-year plan

ExpressVPN consistently proves itself one of the fastest VPNs on the market, and actively promotes its commitment to privacy. The company tells us its network is powered by TrustedServer technology, which ExpressVPN built to ensure that there are never any logs of users’ online activities. In the privacy world, ExpressVPN has a strong track record, having experienced a server seizure by authorities which proved their zero-log policy true at the time. We also like the quality of the VPN’s setup guides, and the detailed information in its FAQ. 

Like the rest of the top five VPN services we’ve reviewed for 2020, ExpressVPN offers a useful kill switch feature, which prevents network data from leaking outside of its secure VPN tunnel in the event the VPN connection fails. Unlike the others, though, ExpressVPN gained points from us for its support of bitcoin as a payment method — something not all of our favorites offer, but which adds an additional layer of privacy during checkout.

The company has been in business since 2009, and ExpressVPN has a substantial network of fast VPN servers spread across 94 countries. Its best plan is priced at less than $7 a month for an annual package, which includes three months free. 

Read more: ExpressVPN review: A VPN speed leader with a secure reputation

Surfshark

While Surfshark’s network is smaller than some, the VPN services makes it up on features. Let’s start off with the biggest win it offers: unlimited device support. If you want to run your entire home or office on Surfshark’s VPN, you don’t have to worry about how many devices you have on or connected. It also offers antimalware, ad-blocking and tracker-blocking as part of its software.

Surfshark received generally high marks when its Chrome and Firefox extensions were audited for privacy by German security firm Cure 53 (PDF link of full report) — though that audit was commissioned by Surfshark.

The company has a solid range of app support, running on Mac, Windows, iOS, Android, Fire TV and routers. Additional devices such as game consoles can be configured for Surfshark via DNS settings. We particularly like the feature that allows you to whitelist certain apps and websites to automatically bypass the VPN. For some business uses, this can be critically important. 

Surfshark also offers three special modes designed for those who want to get around restrictions and more carefully hide their online footsteps. Camouflage Mode masks your VPN activity so your ISP doesn’t know you’re using a VPN. Multihop jumps your connection through multiple countries to hide your trail. Finally, NoBorders Mode “allows [you] to successfully use Surfshark in restrictive regions.” Just be careful. Doing any of these three things could be illegal in your country and could result in severe penalties. During our testing, we saw no DNS or IP address leaks, and had no trouble accessing Netflix. 

Unlike many of the other VPN providers, Surfshark doesn’t offer a one-year plan. Its best offer is $2.49 a month, for its two-year plan (you pay about $60 up front). A six-month plan is $6.49 a month (about $39 up front), and month-by-month plans are $12.95 a month. Definitely take advantage of its generous 30-day trial to decide if you like this service (and if you choose the two-year plan, maybe set a reminder in 23 months to see if you can talk it into a continued discount rate).

Read more: Surfshark VPN review: A feature-rich service with blazing speeds and a security focus

NordVPN

NordVPN is one of the most recognized brands in the VPN field. It offers a generous simultaneous connection count, with six simultaneous connections through its network, where nearly all other providers offer five or fewer. NordVPN also offers a dedicated IP option, for those looking for a different level of VPN connection. NordVPN offers a kill switch feature, and the ability to VPN into Tor. We detected no privacy leaks during our tests, and found its speeds to be reliably fast. 

The company’s two-year subscription plan costs $3.71 a month ($89 billed at once). That price is lower than most contenders, but creeps up for the six-month plan ($9 a month or $64 total) and the monthly plan ($11.95 a month). But it does have a full 30-day refund policy. 

While NordVPN has lived on this list for a long time, we moved it to the penalty box in October 2019 to re-evaluate our recommendation after a report emerged that one of its rented servers was accessed without authorization in 2018. Nord’s actions following the discovery included — eventually — multiple security audits, a bug bounty program and heavier investments in server security. 

While we’d have preferred that Nord self-disclosed the issue much earlier, the fact that the breach was limited in nature and involved no user-identifying information served to further verify that NordVPN keeps no logs of user activity. As a result, Nord remains on this list as a recommended vendor. 

Read more: NordVPN review: Still the best value for security and speed

IPVanish

A big win for IPVanish is its fun, configurable interface, which makes it an ideal client for those who are interested in learning how to understand what a VPN does under the hood. Its multiplatform flexibility is also ideal for people focused on finding a Netflix-friendly VPN. 

A unique feature of IPVanish, and one we’re intrigued by, is the VPN’s support of Kodi, the open-source media streaming app that was once known as XBMC. Any serious media fan has used or built Kodi or XBMC into a media player, and the integrated IPVanish Kodi plugin provides access to media worldwide.

At $10 a month or $62 a year, IPVanish is obviously trying to move you towards its yearly program. We’re a little disappointed that it only allows a seven-day trial, rather than a full 30 days, but it does offer a full money-back guarantee. That said, the company gets kudos for its recent increase from five to now 10 simultaneous connections. We also liked its connection kill switch feature, a must for anyone serious about remaining anonymous while surfing. 

Read more: IPVanish review: Get under the hood with this zippy VPN

cg-22-1
CyberGhost

CyberGhost VPN

In CNET’s previous coverage of virtual private networks, we’ve praised CyberGhost for its roster of competitive features. Our in-depth review of CyberGhost last year included speed testing, security verification and an analysis of its full suite of privacy tools. Since then, CyberGhost has increased its number of servers and is prepared to roll out new privacy tools, all while remaining one of the cheapest VPNs we’ve reviewed — at $2.75 per month for a three-year plan

As we’ve bolstered our approach to VPN reviews in recent months, however, CyberGhost has raised some red flags. Its parent company’s history warrants skepticism; our previous tests have shown it to expose your VPN use to your ISP; its website and app trackers are more numerous than warranted; and its ad-blocker uses an untrustworthy method of traffic manipulation no VPN should even think about. Its low price previously made it worth considering if you needed to change the appearance of your location online, but not if you wanted best-in-class security. 

While CyberGhost’s speeds and security appear to be improving, I don’t currently recommend using CyberGhost if you’re in a country where VPNs are illegal. I also recommend anyone in the US reviews CyberGhost’s parent company before deciding whether to pay for a subscription. 

On the plus side, however, CyberGhost is still faster than Norton Secure VPN and was less taxing on my device’s processing power during testing. It also offers split-tunneling in its Windows client and has its servers neatly organized into user-friendly categories: NoSpy servers, servers geared for torrenting, servers best for streaming and servers best for use with a static IP address. CyberGhost imposes no data caps and allows unlimited server switching.

Read more: CyberGhost VPN review: Promising improvements but its parent company concerns me


logo-norton-360-with-lifelock
Norton

Norton Secure VPN

  • Number of countries: 29
  • Number of servers: 1,500 (1,200 virtual)
  • Number of server locations: 200 in 73 cities
  • Country/jurisdiction: US
  • $40 for the first 12 months

LifeLock, long known for excellence in security products, has a relatively limited offering in its VPN product. Norton Secure VPN does not support P2P or BitTorrent, it does not have a kill switch feature, and it does not support Linux, routers or set top boxes. Its Netflix and streaming compatibility is somewhat limited. Even worse, during testing, we experienced privacy-compromising data leaks. 

During CNET’s testing, Norton Secure VPN speeds were comparable to other mid-tier VPNs but not particularly competitive. Although its VPN is only available on four platforms — Mac, iOS, Windows and Android — Norton gets big points for its 24/7 live customer phone support and 60-day money back guarantee.

Read more: Norton Secure VPN review: More work is needed for this privacy product to shine


Below you’ll find additional VPNs. We’re in the process of reevaluating them for 2020. 


purelogo
PureVPN

PureVPN

PureVPN does not log connection information. The company joined the “no log” movement in 2018, which was recently verified via a third-party audit by Althius IT (albeit one commissioned and paid for by PureVPN). 

We like that PureVPN offers a 31-day refund policy and supports Bitcoin payments, to further extend anonymous browsing. We also like that PureVPN has both Kodi and Chromebook solutions available. In addition, PureVPN was the first VPN service we noted to fully implement the GDPR.


strongvpn-logo-1
StrongVPN

StrongVPN

StrongVPN blasts onto our favorites list with excellent infrastructure and decent price performance. As with our other favorites, StrongVPN has a strong no-logging policy. Since VPN is all about protecting your privacy, that’s a place the savvy VPN providers can pick up points.

Strong also picks up kudos for its large base of IP addresses, which also helps protect your anonymity. It has a solid collection of servers and worldwide locations. For those of you who need a dedicated IP, you can get one from the company, but you’ll need to contact support to get help setting it up.

One of StrongVPN’s strongest strengths is the company’s network. It owns and operates its entire network infrastructure, which means it has no externally dictated limits on bandwidth or the type of internet traffic allowed on the network. This gives you the confidence that you’ll be able to power through your work.

StrongVPN’s regular monthly price of $10 is in the middle of the pack, but its yearly price of $70 is among the lowest of our contenders. 


private-internet-access-ad-300x250
Private Internet Access

Private Internet Access

  • Number of IP addresses: N/A
  • Number of servers: 3,252
  • Number of server locations: 37
  • Country/jurisdiction: US

Speaking of price, if you want a solid VPN provider, Private Internet Access is the place to go. 

The key to getting the most savings with this vendor is buying its two-year plan for $69.95. That works out to $2.69 a month. It also offers a one-year plan for $39.95 (which comes out to $3.33 a month), or a monthly plan for $9.95 a month.

The company does not release information on the number of IP addresses available, but at 3,252, its server count is more than any of our other picks.

These folks have been around since 2010, and don’t log anything. It provides a generous five connections, a connection kill switch feature, and some good online documentation and security guidance. Our one disappointment is that its refund policy is seven days instead of 30, but you can certainly get a feel for its excellent performance in the space of a week.


hotspot
HotSpot Shield

Hotspot Shield

Hotspot Shield is a product that has had some ups and downs in terms of our editorial coverage. Back in 2016, it picked up some positive coverage based on founder David Gorodyansky’s comments about protecting user privacy. Then, in 2017, a privacy group accused the company of spying on user traffic, an accusation the company flatly denies. Finally, in 2018, ZDNet uncovered a flaw in the company’s software that exposed users. Fortunately, that was fixed immediately.

So what are we to make of Hotspot Shield? Frankly, the controversy caused us to drop it from our directory for a while. But it approached us, made a strong case for its ongoing dedication to privacy, and we decided to give it another chance.

Here’s the good news. It offers one of the best money-back guarantees we’ve seen for VPN services, a full 45 days. It supports Linux, Windows, Mac, iOS and Android, along with plugins for Chrome and Firefox. It also supports routers and media players. And, as a bonus, it has a connection kill switch feature.

The company does not support P2P or BitTorrent — and it also doesn’t support OpenVPN. Every other vendor does, but Hotspot Shield limits its protocol support to L2TP/IPSec and something it calls Hydra, an enhancement of the transport protocol.

Overall, the company did impress us with its attention to privacy. It has a published privacy canary. It also told us, “We have built in malware, phishing and spam protection. Our commitment to our users is that Hotspot Shield will never store, log or share your true IP address.”


Goose VPN

I had to know why Goose VPN was so named. My first order of business was to reach out to the company’s co-founder and ask. Geese, I was told, make excellent guard animals: There are records of guard geese giving the alarm in ancient Rome when the Gauls attacked; geese have been used to guard a US Air Defense Command base in Germany and a brewery in Scotland.

It’s clear that the goose is an ideal mascot for a service that’s meant to guard your digital communications. And so, we have Goose VPN.

Goose VPN‘s standout feature is that it allows you to have an unlimited number of simultaneous connections (or devices) using the VPN at once. It’s price is also competitive, at €2.99 a month (about $3.53) for a two-year plan, or €71.76 (about $85) billed at once. Its one-year plan is €4.99 (about $5.90) a month, and its monthly plan costs €12.99 a month (about $15.35). 

Goose provides all the usual clients, including iOS, Android, Mac and Windows, and adds support for routers, Android TV and Linux. It is working on a kill switch feature, which may even be up and running by the time you read this review. The company also offers 24/7 ticket-based support.

Ducks quack, geese honk and swans whoop (we know, because we looked it up). Overall, especially given the unlimited connections and low yearly price, we think Goose VPN is something to honk about. 


VyprVPN Services

  • Number of IP addresses: 200,000-plus
  • Number of servers: 700-plus
  • Number of server locations: 70-plus
  • Country/jurisdiction: Switzerland
  • 30-day money back guarantee

VyprVPN has the largest bank of IP addresses of any of the services we’ve examined. The company offers a wide range of VPN protocols, including its own high-performance Chameleon connection protocol.

We like that the company offers a connection kill switch feature and, for those who need it, there’s an option to get a dedicated IP address. VyprVPN is a standout in its effort to provide privacy and thwart censorship. When China began its program of deep packet VPN inspection, Golden Frog’s VyprVPN service added scrambled OpenVPN packets to keep the traffic flowing. 

The company offers three plans: two years for $60, one year for $45, or monthly at $12.95. The company’s two-year offering is the sweet spot.


Buffered VPN

  • Number of IP addresses: 11,000
  • Number of servers: 800
  • Number of server locations: 46
  • Country/jurisdiction: Gibraltar

Buffered VPN doesn’t disclose much about the size of its network, but the 30-day money back guarantee means that you can take its service for a test drive and really get a feel for how well it performs for you. The company saddened us because it does keep some connection information. It cheered us up, though, due to its client support, unlimited bandwidth and generous number of simultaneous sessions allowed.

The company is relatively new, founded in 2013. We like how Buffered has made a strong commitment to internet freedom, and an equally strong commitment to providing quality customer support.

At $12.99 a month and $79 for a year of service, it doesn’t offer the least expensive plan, but we do recommend giving it a try.


Hide My Ass

  • Number of IP addresses: 3,106
  • Number of servers: 830
  • Number of server locations: 280
  • Country/jurisdiction: UK
  • $2.99 a month for 3-year plan

We have to give these folks an extra shout-out just for the name of this service. The firm has a strong network with a good selection of VPN protocols supported. While it has an extensive (and clearly written) set of policy documents, the company explicitly allows P2P and torrents.

We like how HMA offers support on a wide range of devices, including game consoles. We gave it kudos for bitcoin support, and its excellent money-back guarantee. It did make us frown a bit because it does log connection data. It also offers five simultaneous connections.

While its monthly pricing of $11.52 is at the high end of the spectrum, its yearly pricing is competitive at $83.88 for a full year.


Webroot WiFi Security

  • Country/jurisdiction: US
  • Starting price: $40

As VPN services go, Webroot WiFi Security is relatively bare-bones — but it’s also cheap. Starting at $40 for a year of VPN service, you can get a bundle with both VPN and Webroot’s antivirus software for $70 for your first year. Both of these prices bump up after the first year: VPN protection jumps to $60 and the bundle jumps to $120.

While we applaud the combination of VPN and antivirus in one package, Webroot has had a troubled few years. In 2017, it mistakenly flagged Windows’ system files as malicious. In 2018, a kernel exploit was found in the company’s Mac antivirus client. In 2019, the company was acquired by backup firm Carbonite.

If you’re only protecting a few devices and want to save money, Webroot’s VPN might be for you. That $40 price is for up to three devices. If you want to protect five devices, you’ll need to pay $60 for a year and $80 after that. Frankly, once you enter that price range, there are products with more capabilities available.

Webroot’s VPN has recently improved its security protocol offering. While it does connect using IKEv2 by default, it also offers L2TP and the very old and very insecure PPTP protocol (although it does warn that it’s not “as” secure). In April, however, Webroot began offering OpenVPN protocol options for all platforms except iOS. Another concern for those of you who need deep protection is that the company does log both which VPN server location you connect to and the country you connect from.

So who is Webroot’s VPN for? If all you want to do is protect your Wi-Fi connection while surfing in your local coffee shop or at a hotel, you only need to connect a few devices, and you want to save money, this is a workable option. But if you’re in need of a serious VPN with deep capabilities, you’ll want to look elsewhere in this directory. Also, we didn’t find any reference to a money back guarantee, so check with its presales and support before buying.


VPN FAQ

Since we’re living in a connected world, security and privacy are critical to ensure our personal safety from nefarious hacks. From online banking to communicating with coworkers on a daily basis, we’re now frequently transferring data on our computers and smartphones. It’s extremely important to find ways of securing our digital life and for this reason, VPNs have become increasingly common.

What Is a VPN?

A virtual private network is a technology that allows you to create a secure connection over a less-secure network between your computer and the internet. It protects your privacy by allowing you to anonymously appear to be anywhere you choose.

A VPN is beneficial because it guarantees an appropriate level of security and privacy to the connected systems. This is extremely useful when the existing network infrastructure alone cannot support it.

When your computer is connected to a VPN, the computer acts as if it’s also on the same network as the VPN. All of your online traffic is transferred over a secure connection to the VPN. The computer will then behave as if it’s on that network, allowing you to securely gain access to local network resources. Regardless of your location, you’ll be given permission to use the internet as if you were present at the VPN’s location. This can be extremely beneficial for individuals using a public Wi-Fi network or public Wi-Fi hotspots.

Therefore, when you browse the internet while on a VPN, your computer will contact the website through an encrypted connection. The VPN will then forward the request for you and forward the response from the website back through a secure connection.

VPNs are really easy to use, and they’re considered to be highly effective tools. They can be used to do a wide range of things. The most popular types of VPNs are remote-access VPNs and site-to-site VPNs.

Now playing: Watch this: Top 5 reasons to use a VPN


2:42

What is a remote-access VPN?

A remote-access VPN uses public infrastructure like the internet to provide remote users secure access to their network. This is particularly important for organizations and their corporate networks. It’s crucial when employees connect to a public hotspot and use the internet for sending work-related emails. A VPN client, on the user’s computer or mobile device connects to a VPN gateway on the company’s network. This gateway will typically require the device to authenticate its identity. It will then create a network link back to the device that allows it to reach internal network resources such as file servers, printers and intranets, as if it were on the same local network.

It usually relies on either Internet Protocol Security or Secure Sockets Layer to secure the connection. However, SSL VPNs can also be used to supply secure access to a single application, rather than an entire internal network. Some VPNs also provide Layer 2 access to the target network; these will require a tunneling protocol like Point-to-Point Tunneling Protocol or Layer 2 Tunneling Protocol running across the base IPsec connection.

What is a site-to-site VPN?

This is when the VPN technology uses a gateway device to connect to the entire network in one location to a network in another location. The majority of site-to-site VPNs that connect over the internet use IPsec. Rather than using the public internet, it is also normal to use career multiprotocol label switching clouds as the main transport for site-to-site VPNs.

VPNs are often defined between specific computers, and in most cases, they are servers in separate data centers. However, new hybrid-access situations have now transformed the VPN gateway in the cloud, typically with a secure link from the cloud service provider into the internal network.

What is a mobile VPN?

A traditional VPN can affect the user experience when applied to wireless devices. It’s best to use a mobile VPN to avoid slower speeds and data loss. A mobile VPN offers you a high level of security for the challenges of wireless communication. It can provide mobile devices with secure access to network resources and software applications on their wireless networks. It’s good to use when you’re facing coverage gaps, internetwork roaming, bandwidth issues or limited battery life, memory or processing power.

Mobile VPNs are designed and optimized to ensure a seamless user experience when devices are switching networks or moving out of coverage. It generally has a smaller memory footprint, and because of that, it also requires less processing power than a traditional VPN. Therefore, it enables your applications to run faster while the battery pack is able to last longer.

A Mobile VPN is a worthwhile tool to have since it increases privacy, user satisfaction and productivity, while also reducing unforeseen support issues caused by wireless connectivity problems. The increasing usage of mobile devices and wireless connectivity make it more important to ensure that your data is being transferred through a secure network. It will allow you to access the internet, while staying safe behind a firewall that protects your privileged information.

Who needs a VPN?

People who access the internet from a computer, tablet or smartphone will benefit from using a VPN. A VPN service will always boost your security by encrypting and anonymizing all of your online activity. Communications that happen between the VPN server and your device are encrypted, so a hacker or website spying on you wouldn’t know which web pages you access. They also won’t be able to see private information like passwords, usernames and bank or shopping details and so on. Anyone who wants to protect their privacy and security online should use a VPN.

How to choose a VPN service?

There’s a vast range of VPN services on the internet. Some are free VPN services, but the best ones require a monthly subscription. Before you decide to download a VPN, make sure you consider these factors for understanding a VPN.

Cost: VPNs aren’t too pricey, but they vary from vendor to vendor. If your main concern is price, then go with something inexpensive, or a free VPN service — like Spotflux Premium VPN or AnchorFree HotSpot Shield Elite. Free servers are often slower, and since most are ad-supported, they place adverts on the online pages you access. Others can even limit the speed of your connection, as well as your online time or amount of data transferred.

It’s also important to note that leading VPN providers offer stronger security features to ensure you’re digitally safe. When selecting a paid VPN service, always be sure to check which countries it operates servers in.

Read more: 5 reasons not to use a free VPN

Reliability: Select a VPN that is reliable and read the reviews to make sure that it’s capable of protecting you by providing you with sufficient online privacy.

High security: An effective VPN will have the following security features: 128-bit encryption, anonymous DNS servers and an absence of connection logs.

Are there any bandwidth limits? This can often be linked to price; paying more will generally provide more bandwidth with faster internet access.

Are VPN apps for Android, iOS phones and tablets available? Apps for Android and iOS devices are also vulnerable, so make sure your VPN server can support a VPN app.

To ensure privacy, you want to make sure you have a VPN that doesn’t store online logs. Some servers provide virus and spyware protection, and features like that can significantly increase your online safety.

Using a no-logs VPN service will provide you with a higher degree of security. It can protect you from blanket government surveillance and prevent your internet service provider from knowing your online activity.

Using a VPN for Netflix and other forbidden treasures

Online streaming services like Netflix and Hulu have been making it difficult for foreign users to access their content in other countries. Many people can get around region restrictions by using a VPN service to route your traffic through another country.

It can be quite simple to watch Netflix and other restricted goodies. You’ll have to use a VPN service that allows you to get a unique IP address. This can often be available for an additional fee. Look for VPN services that offer a “dedicated IP address,” “dedicated IP” or “static IP.” Additional features like these will always allow you to access content from Netflix through a VPN service.

This is by far the easiest way to access your forbidden apps since there’s no specific way to block VPN traffic.

Many people started using a VPN to evade geo-restrictions. But despite its forbidden benefits to users outside the US, a VPN is a great tool that can protect you and enhance your online experience over the internet by providing you with sufficient security and privacy. When it comes to selecting the best VPN, you have plenty of choices. There are many cost-effective VPN options, and all of them will vary in monthly offerings. Choosing the best VPN is easier once you narrow down the competition. The best indication of a good VPN service provider is that it has the right security and the right support in place for you.

Got a question for our security community? Head over to the CNET Forums and join the conversation.  


More internet service and WFH guides