How to choose a VPN: a checklist

To choose a VPN, check it against a short list: an independently audited no-logs policy, modern protocols, a reliable kill switch, apps for every device you own, enough simultaneous connections, clear pricing that includes the renewal price, and a money-back guarantee long enough to test it yourself. Speed and server locations matter too, but they come after trust. Here is how to check each one.

Trust first: logs, audits and jurisdiction

A VPN provider can see the traffic your internet provider used to see, so the first question is what it keeps. Look for a no-logs policy that states plainly that the service does not record the sites you visit, the content of your traffic or your IP address while you are connected. Read the privacy policy itself, not only the marketing page. Some data, such as your email address and payment records, is always needed to run an account.

A policy is a promise. An independent audit is evidence. The more trustworthy providers have had their no-logs claims assessed by an outside auditing firm, and repeat those audits over time. Check when the latest audit took place and what it covered.

Jurisdiction is the country whose laws the company operates under. It affects what authorities can ask the company to hand over. It matters less than whether the company holds any useful data in the first place, which is why audits come first.

Protocols and speed

The protocol is the method the app uses to build its encrypted tunnel. The two widely trusted open protocols are:

• WireGuard: modern and lightweight, generally fast, with a small codebase that is easier to review.
• OpenVPN: older, very well tested and highly configurable, though often a little slower.

Some providers build their own protocol on top of these. NordLynx, for example, is NordVPN's protocol built around WireGuard. When a provider offers its own protocol, check what it is based on and whether the company has explained publicly how it works.

Speed depends on the protocol, how busy the server is, how far away it is and the speed of your own connection. Published speed figures rarely match what you will see at home. The reliable test is your own: during the refund period, try a nearby server at the times you normally go online and compare it with your usual connection.

Features that protect you

• Kill switch: blocks internet traffic if the VPN connection drops, so nothing goes out unencrypted. Check that it is available on each of your platforms and whether it is on by default.
• DNS leak protection: keeps your DNS lookups inside the encrypted tunnel.
• Server locations: you need servers near you for speed, and in the countries you travel to. A long list matters less than having the right places covered.
• Simultaneous devices: count your phones, laptops, tablets and anything else you want protected, then check the limit per account.
• Apps for your platforms: support for Windows, macOS, iOS, Android and Linux varies, as do browser extensions and router setups. Make sure every device you own is covered.

Extras worth weighing

Many VPN subscriptions now come with additional tools, such as threat protection that blocks known malicious sites and trackers, a password manager, encrypted cloud storage or alerts when your details appear in a data breach. These can be good value if you would otherwise pay for them separately. They are less useful if you already have tools you like. Judge the VPN on its core job first, then treat the extras as a tiebreaker.

Price: read past the first term

VPN pricing usually has three parts, and it pays to look at all of them.

• Introductory price: the first term is often discounted, especially on longer plans.
• Renewal price: after the first term, the plan usually renews at the standard rate, which can be noticeably higher. Read the renewal terms before you buy.
• Term length: multi-year plans have the lowest monthly equivalent, but you pay for the whole term upfront.

Work out the total cost over the period you expect to use the service, including at least one renewal. If you are not sure you will keep it, a shorter term costs more per month but commits you to less.

A money-back guarantee is the safest way to test a VPN. NordVPN, for example, offers a 30-day money-back guarantee. Read the conditions of any guarantee: how to claim it, whether it covers every payment method, and whether it applies to renewals.

Support and transparency

Check how you can reach support, whether by live chat, email or a help centre, and whether it is available when you are likely to need it. A clear, detailed help centre is a good sign. So is a company that publishes how its service works, who audits it and how it handles reports of security problems.

The checklist

• An independently audited no-logs policy, with a recent audit date.
• Modern protocols such as WireGuard or OpenVPN, or a documented protocol based on them.
• A kill switch and DNS leak protection on all your platforms.
• Servers where you live and where you travel.
• Enough simultaneous devices for your household.
• Apps for every platform you use.
• The total cost including the renewal price, not only the first term.
• A money-back guarantee long enough to test speed and apps at home.
• Support you can reach and documentation you can read.