VPNs, or virtual private networks, are everywhere. If you've spent any time on YouTube, chances are you've seen an ad selling VPNs; there have been literally hundreds and thousands of them.
We test and review VPNs so you don't have to, but what is a VPN? The argument is pretty simple: a VPN can mask your IP address and the identity of your device by routing your traffic through a remote server. Sites and services will see a different IP address than yours, and your Internet Service Provider will only be able to see that you are connected to a VPN server, rather than which sites you are visiting. That means a VPN can be an important tool for keeping your data private and secure, especially if you need to connect to an unsecured network. If you're on a public WiFi network, for example, you can't be sure what they're tracking while you're browsing the Internet. With a VPN, there is an extra layer of privacy, as long as you make sure the VPN provider can be trusted. But a VPN shouldn't be the end of your security journey. Complex passwords, multi-factor authentication, and other security basics should be much higher on your checklist.
Another commonly advertised feature of VPNs is bypassing geo-blocking techniques that companies use to prevent you from accessing certain content. Because you're connecting to a remote server, a VPN can effectively change your location, allowing you to watch another country's Netflix content or, say, watch doctor who on BBC iPlayer, exclusive to the UK. If you are in the EU, it may allow you to access sites that would otherwise be blocked due to the region's strict data protection rules. In the past, VPNs were even used to technology/russia-vpn-internet-putin/index.html” rel=”nofollow noopener” target=”_blank” data-ylk=”slk:skirt political;cpos:3;pos:1;elm:context_link;itc:0;sec:content-canvas” class=”link “>political skirt firewall to censor online access.
With many VPN manufacturers making sweeping claims about military-grade encryption, digital invisibility, and ultra-fast speeds, it's hard to know what's true and what's marketing hype. That's why Engadget began evaluating VPNs in 2023, looking at a number of factors such as security, speed, latency, usage limits, and price. And while we don't expect to conduct any more VPN tests until 2025, our guide to the best VPNs will continue to be the foundation of our coverage. In the meantime, this is our current VPN testing methodology.
Background Checks
Before installing or subscribing to a service, our work begins by investigating the lineage of each product. We refer to publicly available privacy policies, transparency reports and security audits, and take note of the security specifications of each service. We also analyze each company's history of security incidents, such as data breaches. We draw on some pre-existing academic work from organizations such as Consumer Reports, VPN Analyzer and others when analyzing security specifications.
Configuration
The next step in our review process involves taking a closer look at what it's like to set up the VPN. This involves looking at the different platforms each VPN supports, from certain web browsers to smart TVs, to better understand how it can be used. We'll also look at how easy it is to get started with a new VPN. Some will automatically connect to a secure server every time you use your device, while others will make you jump through hoops to stay connected. We're looking to understand how easy to use and intuitive these VPNs can be.
Use limits
While many VPN providers promise that their service works on all devices at all times, you often have to consider the fine print. We looked at the terms of service for each of the company's plans to understand what they offer. Is there a limit on the number of devices a user can have connected at once? Is there a “fair use” limit that takes effect after a certain amount of traffic? Are multi-hop connections with advanced features locked to only the most expensive plans? We research all of these things so you don't have to. We also run many of our more specific tests at the same time, allowing us to verify companies' claims about simultaneous device use.
Speed and latency
The first step in testing speed and latency is to determine the connection baseline before connecting to a VPN. We then use the “fast connect” feature in VPN apps to connect to the “fastest” provider available when testing internet speed. Once connected, we run internet speed tests with Ookla and ping tests with meter.net. When streaming these results, we'll note the average speed and ping in these results, as well as the difference between that average and our baseline when we're not connected to a VPN.
Geo-blocking
We tested all VPNs from the US. To check that a service can effectively bypass geo-blocking, we connect to a server based in Canada and try to access Netflix content that is only available to users in that country. We then connected to a server based in Hong Kong to try to watch a live news broadcast on a YouTube channel that is available exclusively to users in that region. Finally, we ran a play test by playing on UK servers. We're looking to not only see if we can access the same content from all of these servers, but also test for lags or any other headaches that might arise when using something.
Checking leaks
A DNS leak occurs when your device sends an unencrypted DNS query outside your VPN service's encrypted tunnel to an ISP's DNS servers. Firstly, this effectively defeats the use of a VPN by allowing third parties to view and potentially track your browsing activity and IP address.
A WebRTC leak is an issue that can occur in modern web browsers and can similarly expose your personal IP address to a website you are on. While you can prevent this by setting your browser to not send such data, a VPN should be able to prevent this from happening.
To check for both issues, we use publicly available tools, such as NordVPN's IP address lookup tool and ExpressVPN's leak tests before and after connecting to a VPN, and ensure that no failures occur.
