Some links to VPN providers on this page may be affiliate links. They do not change the price you pay or what our tests show. How we handle this.
What a VPN does
A VPN app sends your internet traffic through an encrypted tunnel to a server run by the VPN company. From there it goes on to the websites you visit. That changes who can see what:
Without a VPN
With a VPN
The encryption runs from your device to the VPN server. It is not end-to-end: after the VPN server, your traffic travels on as normal. Most websites use HTTPS, which encrypts what you send to the site itself. See the address websites see now.
What a VPN does not hide
- Your IP address and rough location, from the websites you visit.
- Which sites you visit, from your Wi-Fi network and internet provider.
- Your device. Browser, screen, system and settings still show to every site. See what sites can read.
- Who you are on sites you sign in to. If you log in, the site knows it is you.
- Your browsing from the VPN company. It sees what your internet provider used to see, so choose one that publishes an independent audit of its no-logs policy.
- Malware or phishing. A VPN does not stop these on its own, though some VPN apps add a blocker.
When a VPN is worth having
- You use public or shared Wi-Fi and do not want that network to see which sites you visit.
- You do not want your internet provider to see your browsing.
- You want sites to see a different country, for example to check how a site looks or works from abroad.
- You want to hide your home address from the sites and services you connect to.
When you can probably skip it
- You browse mostly at home on sites that use HTTPS, and you are not worried about your internet provider.
- Your main worry is tracking by websites. A VPN does little against that: a privacy-focused browser and a tracker blocker do more.
Leaks: check that your VPN works
A VPN can be on and still let your real address show. The most common cause is WebRTC, a browser feature for calls and video that can reveal your address. Another is IPv6: some VPNs carry only IPv4 traffic, so your IPv6 address can bypass the tunnel.
Normal traffic
A leak
Test your VPN runs once with the VPN off and once with it on, then shows whether your address changed and whether your real address still shows through WebRTC. If it leaks, turn on your VPN app's leak protection or kill switch, and check its IPv6 setting.
Is it legal?
Using a VPN is legal in most countries, including the UK and the US. Some countries restrict or ban VPNs, so check before you travel. Streaming services often limit what you can watch from other countries in their terms, and some block known VPN addresses.
How to choose a VPN
- An independent audit of the no-logs policy, published or available to read.
- Leak protection and a kill switch, which cut traffic if the tunnel drops.
- Enough devices on one plan for your household.
- A money-back period, so you can test it with Net Readout before you commit.
- Where the company is based, if you prefer a provider outside a particular country.
Four providers compared
Facts from each provider's own pricing and home pages, read on 27 and 28 October 2026. Plans change, so check the provider's page before you buy.
| Provider | Devices at once | Money-back period | Worth knowing |
|---|---|---|---|
| Proton VPN | 10 (VPN Plus). 1 on the free plan. | 30 days | Based in Switzerland. Open-source apps. A free plan to start with. |
| Surfshark | Unlimited | 30 days | One plan covers every device in a household, however many there are. |
| NordVPN | 10 | 30 days | A large network: more than 7,200 servers in over 225 locations, by NordVPN's count. The app also blocks known scam, phishing and malware sites, and ads. |
| Private Internet Access | Unlimited | 30 days (new subscribers) | Unlimited devices with open-source apps, from a provider running for over 10 years. App-store purchases follow the store's refund rules. |
- Choose Proton VPN if you want a provider based in Switzerland rather than the US, or want to start free.
- Choose Surfshark if your household has more devices than a 10-device plan covers.
- Choose NordVPN if you want a very large choice of server locations, with scam and malware blocking in the same app.
- Choose Private Internet Access if you want unlimited devices and open-source apps you can inspect.
Whichever you choose, run Test your VPN inside the money-back period.