VPN Questions, Honest Answers

It depends on your situation. You likely benefit from a VPN if you:

• Use public WiFi (cafes, airports, hotels)
• Don't want your ISP tracking and selling your browsing history
• Live in a country with internet censorship
• Want to prevent websites from seeing your real IP address
• Work with sensitive information

You might not need one if you only browse at home on trusted networks and don't care about ISP tracking. But consider this: in the US, your ISP can legally sell your browsing data — and your family's — to advertisers. Every site visited, every search made, packaged and sold. A VPN is the simplest way to stop that.

A VPN creates an encrypted tunnel between your device and a VPN server. This means:

• Your ISP can't see which websites you visit — they only see you connected to a VPN server
• Websites see the VPN's IP address, not your real one
• Public WiFi snoopers can't intercept your traffic

A VPN does NOT make you anonymous. The VPN provider can still see your traffic (which is why choosing a trustworthy, no-logs VPN matters enormously). But with the right one, you can open your laptop at a café knowing your connection is encrypted before the page even loads.

Most free VPNs are not safe. They don't charge you because they're making money another way — usually by selling your browsing data to the same advertisers you're trying to avoid. Many free VPNs:

• Sell your browsing data to advertisers
• Inject ads into your browsing
• Have weak or no encryption
• Log everything you do

No. Your ISP can see that you're connected to a VPN, but they cannot see:

• Which websites you visit
• What you download
• Your search queries
• Any content of your traffic

All they see is encrypted data going to and from the VPN server's IP address.

Slightly, yes. Your data has to travel through an extra server. But with modern VPNs using the WireGuard protocol, the slowdown is usually minimal (5–15%). You probably won't notice it for browsing or streaming.

Factors that affect speed: distance to VPN server, server load, your base internet speed, and the VPN protocol used. Both Mullvad and Proton VPN support WireGuard, which is significantly faster than the older OpenVPN protocol. (Mullvad fully phased out OpenVPN in January 2026 — WireGuard only now.)

The most important factors for privacy-focused users:

• No-logs policy — verified by independent audits, not just marketing claims
• Open source apps — so security researchers can verify the code
• Jurisdiction — based outside 5/9/14 Eyes surveillance alliances is preferred, though jurisdiction matters less if the VPN truly keeps no logs
• Payment options — can you pay anonymously (cash, crypto)?
• Track record — have they been tested in court or by authorities?

Less important (but nice to have): server count, streaming unblocking, fancy features.

Open source means the VPN's code is publicly available for anyone to inspect. This matters because:

• Security researchers can verify there are no backdoors
• Bugs are found and fixed faster
• You don't have to "trust" the company — you can verify

Mullvad and Proton VPN are fully open source. NordVPN has taken steps toward transparency — they open-sourced their Linux client (Oct 2025) and the Libtelio networking library. But the Windows, Mac, iOS, and Android apps remain closed source, so you still have to trust them on most platforms.

A no-logs VPN claims not to record your browsing activity, connection times, or IP addresses. But anyone can claim this — verification is what matters:

• Independent audits: Has a third-party security firm verified the no-logs claim?
• Real-world tests: Has the VPN been subpoenaed or raided? What happened?

Mullvad is laser-focused on privacy:

• No email required — just a random account number
• Pay with cash mailed in an envelope
• Flat €5/month, no upsells — the same price since 2009
• Proven no-logs (police raid found nothing)
• ~700 servers in 43+ countries

Proton VPN is part of a privacy ecosystem:

• Integrates with Proton Mail, Calendar, Drive, Pass
• Free tier available (unlimited data, no ads, 10 countries)
• More features (Secure Core, NetShield ad-blocking)
• Based in Switzerland (strong privacy laws)
• 17,000+ servers in 127 countries

My take: Mullvad for maximum privacy. Proton if you want the full ecosystem or a free option. See the full side-by-side comparison →

I don't actively recommend against NordVPN — it's a functional VPN with 8,000+ servers in 118+ countries. But I switched away because:

• Mostly closed source: They open-sourced the Linux client (Oct 2025) and the Libtelio networking library. But the Windows, Mac, iOS, and Android apps remain closed. I can't verify what those apps are actually doing on most platforms.
• 2018 breach: A server was compromised in Finland. They didn't disclose it for over a year.
• Aggressive marketing: They pay 40–100% commissions, which is why they top every "best VPN" list

If streaming and server count matter more to you than verifiable privacy, NordVPN is fine. It's just not what I prioritize. See my full NordVPN review →

ExpressVPN is owned by Kape Technologies, a company with a controversial history. Kape was formerly known as Crossrider, which was associated with adware distribution before rebranding and acquiring VPN companies (also CyberGhost, PIA, and ZenMate). Surfshark merged with Nord Security (NordVPN's parent company) in 2022 — they're separate brands under the same corporate umbrella.

Additionally:

• Neither ExpressVPN nor Surfshark is fully open source
• Aggressive affiliate programs across the industry mean these VPNs dominate "best VPN" lists regardless of actual quality
• I haven't personally tested them long-term, and I only review VPNs I've actually used

I'm not saying they're bad — I'm saying I can't vouch for them personally, and the ownership structures give me pause.

Because they don't pay affiliates.

Mullvad deliberately has no affiliate program. They believe it corrupts recommendations — and they're right. Most "Best VPN" lists are ranked by commission rates, not actual quality.

NordVPN pays 40–100% commission. ExpressVPN pays $13–$36 per sale. Mullvad pays $0. Guess who tops those lists?

This is exactly why I recommend Mullvad despite earning nothing from them. Trust matters more than commissions. Read my full Mullvad review →

Proton VPN is my current daily driver. I'm already in the Proton ecosystem (Mail, Calendar, Drive, Pass), and having everything integrated under one Swiss roof made the switch natural.

I tested Mullvad for a month and respect it deeply for pure privacy. If my only concern were maximum anonymity — no identity, no trace — Mullvad would be the one. It's still my #1 recommendation for that use case.

Full transparency: I earn a commission if you sign up for Proton VPN. I earn nothing from Mullvad. Read my full verdict here →

No. A VPN is one layer of privacy, not complete anonymity. You can still be identified through:

• Browser fingerprinting
• Logging into accounts (Google, Facebook, etc.)
• Cookies and trackers
• Payment methods linked to your identity
• The VPN provider itself (if they log)

For stronger anonymity, you'd need Tor, which is much slower and more complex.

The 5 Eyes (US, UK, Canada, Australia, New Zealand) is an intelligence-sharing alliance. There's also 9 Eyes and 14 Eyes with more countries.

VPNs based in these countries may be compelled to share data with governments. That's why privacy-focused VPNs choose their jurisdiction carefully:

• Switzerland (Proton VPN) — strong privacy laws, outside 14 Eyes
• Sweden (Mullvad) — strong domestic privacy protections, though Sweden is a 14 Eyes member
• Panama (NordVPN) — no data retention laws, outside surveillance alliances

That said, jurisdiction matters less if the VPN truly keeps no logs. You can't hand over data you don't have — which is exactly what Mullvad proved when Swedish police came knocking.

In most countries (US, Canada, UK, EU, Australia, etc.), VPNs are completely legal.

Some countries restrict or ban VPNs: China, Russia, Iran, UAE, and others. If you're in one of these countries, research local laws carefully.

Using a VPN for illegal activities is still illegal — the VPN doesn't change that.

Watch for these warning signs:

• No mention of open source status — if they don't discuss code transparency, they're not focused on privacy
• Only recommends VPNs with affiliate programs — Mullvad pays $0 to affiliates. If it's never mentioned, follow the money.
• No discussion of audits or real-world tests — "no-logs" is meaningless without verification
• "Best VPN" lists that change frequently — rankings shouldn't shift based on who's paying the most this month
• No affiliate disclosure — required by law in most countries, and a sign of trustworthiness
• Identical reviews across multiple sites — often indicates paid content farms

The best VPN reviewers use the services themselves, disclose their income sources, and recommend products they don't profit from (like I do with Mullvad). See which VPNs pay affiliates — and how much →

Because they're the best option for pure privacy, and I'd rather be honest than rich.

I still earn from Proton VPN (which I also use and recommend). But recommending a product I don't believe in just for commission would destroy the trust this site is built on.

Long-term, honesty is better business anyway.

Affiliate commissions from Proton VPN. When you click my Proton links and sign up, I may earn a commission at no extra cost to you.

I earn nothing from:

• Mullvad (no affiliate program)
• NordVPN (I don't promote them)

This is fully disclosed throughout the site.

No. That would defeat the entire purpose of an honest comparison site.

Maybe. I only review VPNs I've personally tested over an extended period. If there's strong demand for a specific VPN, I'll consider testing it.

Contact me with suggestions.