By clicking a retailer link you consent to third-party cookies that track your onward journey. This enables W? to receive an affiliate commission if you make a purchase, which supports our mission to be the UK's consumer champion.
VPNs explained: how to pick a good VPN that won't risk your data
A virtual private network (VPN, also known as a proxy) means different things to different people, depending on what they’re trying to do online.
VPNs have a range of uses, from extra security when working on public wi-fi or when sending sensitive information to accessing local services while travelling. However, not all VPNs are made equal, and it's important to make the right choice when picking a service to avoid putting your data at risk.
On this page, we explain in simple terms how the technology works and explore whether VPN companies can be trusted to protect your data.
News, deals and stuff the manuals don't tell you. Sign up for our Tech newsletter, it's free monthly.
What is a VPN?
A VPN is software that encrypts your internet traffic and routes it through a secure server, hiding your online activity from your internet service provider (ISP) and the websites you visit. VPNs can be installed on multiple devices in the home, from computers and laptops to smartphones and tablets.
In principle, this means everything you do while connected to the internet can’t be seen by anyone aside from the VPN company, and even then, most VPN companies claim to have systems in place that make it impossible to trace who is doing what on their VPNs.
It also means the requests you send and receive can be diverted to anywhere in the world where the VPN has a presence, which can be useful in certain circumstances.
How does a VPN work?
If you want to visit a website, you perform a website search – type in the web address, requesting to visit the website. This request is sent from your device via your router to your ISP, which sends your request on to the website. The data from the website is sent back to your ISP, then to your router, and then to your device, and you can load the webpage.
With a VPN installed, things work a bit differently, as shown in our graphic below:
- You perform a website search.
- The VPN software scrambles the address, encrypting it.
- The address goes to your router.
- The router sends the address to your ISP, such as Virgin or BT.
- The ISP sends the encrypted address to the VPN company server.
- The website address is unscrambled by the VPN server and you're sent to the website.
- This process is reversed using the same encryption, so your ISP can’t see the websites you visit and the websites can’t identify you.
Some websites like to use the metaphor of a tunnel or a locked envelope to which only your VPN provider has the key. These aren’t wholly inaccurate, but don’t provide a full picture of where your data goes. In addition, your ISP still knows when you’re online and how much data you are sending and receiving, even if you’re using a VPN, it just doesn't know what websites you're visiting.
We can reveal the broadband providers that get it right: those that give you a fast, reliable connection and fix things quickly if they go wrong. See our guide to the best and worst broadband providers.
Does a VPN protect my privacy?
If you want to encrypt your connection when using public wi-fi, a VPN is a handy tool that can help protect you from poorly secured networks and opportunistic hackers. However, it’s not a panacea and is only one of many tools needed to fully protect your identity online.
There is an awful lot a VPN doesn’t do. For example:
- It doesn’t stop websites using trackers and cookies to serve you ads and build advertising profiles about you.
- It doesn’t stop you getting viruses, and already-running malware on your computer will continue to be a problem.
- It won’t protect you from phishing scams – you need Which? Best Buy antivirus software to properly protect your laptop, as a VPN won't do it.
- If you use a VPN but are logged into your Facebook and Google accounts, chances are Facebook and Google will know what you’re up to anyway.
Keep in mind that when you send your data through a VPN, you’re simply shifting control of that data to the VPN provider, so you need to trust them to handle it responsibly.
The encryption needs to be strong, and the VPN provider’s systems must be robust enough to withstand hacking attempts or even insider misuse. While VPN companies make big claims about security and privacy, it ultimately comes down to trust.
Free VPN vs paid VPN: what's the difference?
Switching on a VPN isn't as simple as offloading your worries to another company. You need to trust that the company will do the right thing. Instead of trusting your ISP with your data, you're now paying a VPN company to handle your web habits instead
While it's impossible to know what goes on inside a VPN company's systems, paid services from reputable brands are often audited by independent third-parties to offer peace of mind. It's more hit and miss with free services – some are well established, but others may carry hidden risks – in the past, studies have found malware and cases of VPNs selling user data for profit.
Other restrictions with free VPNs include only offering a limited number of servers, plus a very tight data limit. Good paid VPNs however, offer a wide range of features.
- Apps for all your devices – the majority of VPNs have apps for Windows, Mac, iOS and Android, with some also providing software to allow the VPN to run on your router, thereby encrypting your entire household’s internet traffic in one fell swoop.
- DNS leak protection – it’s possible that some programs on your device might sneak past the VPN installed on your computer. Leak protection should stop software from being able to do this.
- Kill switch – if your connection to your VPN drops because of a technical fault, a kill switch will disable your device’s internet connection to ensure no unencrypted data leaves the device.
- Split tunneling – this lets you set which apps on your device are encrypted via your VPN and which go to your ISP.
- Simultaneous connections – this lets you use your VPN on more than one device at the same time.
- Unlimited data and bandwidth – make sure the VPN you’re subscribing to has no limits on the amount of data you can use. Most have unlimited subscriptions, but some may have speed limits.
VPNs and age verification checks
As part of the Online Safety Act, from 25 July 2025, platforms are required to use age verification technology to 'prevent children from accessing pornography or content that encourages self-harm, suicide, or eating disorders.' This includes sites that exclusively host adult material, but also social media, streaming services and other platforms where part of the catalogue may include age-restricted content. In these instances, failing to provide age verification shouldn't stop you from using the platform, but you won't be able to view age-restricted content.
This change to the law has led to a spike in internet users downloading VPNs to bypass these checks. However, as we explain above, not all VPNs are made equal, and some users could be put at risk if they don't opt for a reputable service.
Parents should also be mindful of the potential impact a VPN can have on allowing access to such content without checks, particularly if they use a family VPN service or a child has one installed on their device. (See also: How to set up parental controls on smartphones and social media).
For more information on what the Online Safety Act means for your data and what risks you should be aware of, see our guide to age verification checks.
Popular paid VPNs
If you're looking to subscribe to a VPN, you're most likely going to be purchasing directly from a provider.
Below, we've listed out some of the most popular reviewed VPNs that are widely available.
- ExpressVPN has servers in 105 countries. There are several payment plans to choose from, including a deal that gets you two years and four months of coverage for £4.03 per month, billed £112.88 for 28 months.
- NordVPN offers a network of servers across 126 locations and 'over 8,000 VPN servers' in total. It has several plans, the cheapest of which costs £2.69 a month for two years.
- Private Internet Access VPN costs £1.69 per month (for 26 months) or £5.39 per month (for 6 months). It has servers in 91 countries.
- Surfshark has over 3,000 VPN servers in 100 countries. There are 9 different payment plans to choose from and the cheapest annual deal is £2.59 per month.
Using a VPN for streaming services
Video streaming is one of the most common reasons why someone might subscribe to a VPN. Since television and film rights differ from country to country, it can be hard to access content in certain countries.
For example, you may want to access UK television catch-up services while on holiday, or in the UK, a film may only be available via a pay-per-view service such as Apple TV, but in the United States it’s available on Netflix. If you already have a Netflix subscription, you might begrudge paying for the Apple TV edition of a show when you’re already paying for Netflix.
With a VPN, you can ask for your location to appear as if you are in any other country the VPN offers. This means, to Netflix, it can appear as if you and your computer are physically located in the United States, so it can show you the content it has licences for in that country.
Will a VPN slow down my internet connection?
VPNs promise high-speed connections with unlimited data. Since you still need to send data via your internet provider before it reaches your VPN provider, you will always be limited to the maximum speeds that your ISP can provide and will still have to abide by your ISP or mobile provider's monthly data limit.
If you have a super-fast internet connection, you might find your speeds drop when you're using a VPN.
If you're looking for a new laptop, our in-depth lab tests reveal which models are worth your money and which aren't. See our expert pick of the best laptops.
Is it legal to use a VPN?
VPNs are not illegal in the UK, but the legality of their use in other countries varies, so you should check the country you are in if you are not in the UK.
However, this doesn’t guarantee seamless access to streaming content, as providers must comply with licensing agreements that limit what certain users can view. As a result, Netflix and Amazon Video in particular often detect a person using a VPN and will block them from viewing anything until they disconnect the VPN.
Netflix and other streaming services also reserve the right to terminate your account if you attempt to access content in this way, although we haven’t heard of this happening in practice. Still, the risk remains.