As Lawmakers Take Aim at VPNs, the Privacy of Millions Could Be in Jeopardy
Proposed legislation in Michigan and Wisconsin claims to protect children, but could drive people to download malicious VPN apps.
Attila TomaschekSenior Writer
Attila covers software, apps and services, with a focus on virtual private networks. He's an advocate for digital privacy and has been quoted in online publications like Computer Weekly, The Guardian, BBC News, HuffPost, Wired and TechRepublic. When not tapping away on his laptop, Attila enjoys spending time with his family, reading and collecting guitars.
ExpertiseAttila has nearly a decade's worth of experience with VPNs and has been covering them for CNET since 2021. As CNET's VPN expert, Attila rigorously tests VPNs and offers readers advice on how they can use the technology to protect their privacy online.
Under the pretense of protecting minors and preserving morals, lawmakers in the United States and the United Kingdom are putting the privacy of millions of citizens at risk. Age verification bills that are aimed at preventing minors from accessing adult content online are nothing new, as the Free Speech Coalition lists 130 bills across much of the US since 2022 -- with 30 already signed into law. But the latest proposals from legislators in Wisconsin and Michigan take aim not just at access to adult content, but at virtual private networks as well.
As the UK and individual states have begun enacting age verification laws, internet users are turning to VPNs to make it appear as though their connection is originating from a different location, effectively bypassing the verification requirements. As a result, VPN use has skyrocketed, which is a boon for VPN providers, but due to the risks related to most free VPNs, it is also a big deal for cybercriminals.
Someone looking to change their virtual location could download any one of the thousands of free VPN apps available without realizing the risks involved. Google has even issued a warning to consumers on the dangers of downloading malicious VPN apps, which might inject user devices with malware, log their internet activity or misuse their personal data. Age verification laws and proposed VPN bans come with distinct privacy implications that are numerous and wide-ranging, putting people unnecessarily at risk.
Don't miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.
What the proposed state legislation says
In Wisconsin, Senate Bill 130 proposes that sites use “reasonable age verification methods” and requires the publishers and distributors of “material harmful to minors” to prevent access from known VPN IP addresses. Under the bill, entities in violation of the law would be subject to civil penalties.
In Michigan, House Bill 4938 takes it a step further and proposes an all-out ban on VPNs and access to online adult content entirely. The lawmakers in support of the bill, called the Anticorruption of Public Morals Act, want internet service providers in the state to “actively monitor and block known circumvention tools.” The bill prohibits “the promotion or sale of circumvention tools to access prohibited material.” Violators would be subject to civil and criminal penalties of up to 25 years in prison and fines of up to $500,000 under the proposed legislation.
Both state proposals focus on the distribution of content and possible methods to get around blocks or verification. But requiring internet providers to enforce content laws can be messy, as many Starlink users have discovered.
The fallout from online age verification
The proposed legislation is a tangle of different considerations, but one of the most important threads is age verification, an important piece in the Wisconsin legislation. Online age verification is not just a major invasion of privacy, but a potential bonanza for cybercriminals. With millions of internet users uploading images of their faces alongside their government-issued IDs so they can access online content, age-verification companies have become extremely attractive targets for hackers.
The wealth of personal information -- including full name, birthdate, address, nationality, ID number and likeness -- collected by ID verification companies is putting people at risk of having their data compromised in a breach, which can lead to identity theft and other real-life perils. Promises to keep data safe do not always work out. Several recent instances of ID verification data being compromised and shared online have made headlines.
Last year, 404 Media reported that ID verification provider AU10TIX left age verification data submitted by users of popular online services like Uber, TikTok, PayPal and X exposed on the internet for more than a year. This year, a data breach targeting the Tea app exposed 72,000 user-uploaded images, 13,000 of which were identification images. More recently, cybercriminals targeted a third-party customer support provider for Discord, stole ID photos of 70,000 users and demanded a ransom from the company. With age verification requirements more prevalent across the web, similar incidents are bound to continue.
What is a VPN? How can it help users access restricted content?
A virtual private network is software that encrypts your internet traffic while routing it through a secure server in a different location. A VPN's encryption can keep your online activity hidden from your ISP and any other entity looking to snoop on what you do on the internet.
Additionally, a VPN masks your true IP address, effectively swapping it out with the IP address of the VPN server you are connected to. This is key, because your IP address is linked to your general location, so if you connect to the internet using the IP address of a VPN server located in a different location, your online traffic will appear to originate from that location rather than your actual physical location.
A VPN encrypts your internet traffic and routes it through a secure server. This process masks your real IP address and hides your activity from entities like your ISP.
Getty Image/Zooey Liao/CNET
If you live in a state where certain sites are required to verify the age of its visitors, a VPN can make it appear as though you are in a different state or country that doesn’t enforce such requirements. This is the same functionality that helps users access geo-restricted streaming content and bypass censorship.
The best VPNs offer apps available for a variety of mobile devices, computers and streaming devices that are just as easy to download and use as any other app you find online. Just use the app interface to connect to a specific server location to protect your privacy and change your virtual location as needed.
While they are not able to protect against data breaches, VPNs are critical online privacy tools used by millions of people to protect themselves online. Activists, whistleblowers and people who live under repressive regimes use VPNs to hide their internet activity, bypass censorship, and access information and communication tools. Average internet users use VPNs to keep their internet activity private from their internet service providers and other online snoops who harvest and sell their data. Banning VPNs could put considerably more people at risk than these bills aim to protect.
Can ISPs block VPN use?
Websites and ISPs can employ certain tactics to detect and block VPN use. These tactics include blocking access from known VPN IP addresses, blocking certain ports, or using more involved methods like deep packet inspection, which can analyze the entire data packet and identify certain VPN protocols. These methods are how streaming sites like Netflix seek to curtail VPN geo-unblocking and how repressive governments censor the internet within their borders.
However, quality VPNs often provide obfuscation features that can disguise VPN traffic as regular internet traffic, evading efforts by websites and ISPs to block VPN use. Some VPNs like Proton VPN and NordVPN offer obfuscation-focused protocols that are designed specifically to thwart deep packet inspection.
A warning from Google
VPN use in the US and UK has reached stratospheric levels as age verification requirements continue to take effect. The problem is a large contingent of new VPN users may not be aware of the risks associated with downloading VPN software from a potentially disreputable entity. Thousands of VPN apps are available to download on the internet, many offered for free, which some users may find enticing as a simple fix to getting around age verification requirements or content restrictions. But many of them are unsafe to use, despite developers purporting otherwise.
In its fraud and scams advisory this month, Google warns of threat actors deploying malicious VPN apps disguised as legitimate services that can compromise user privacy. “Once installed, these applications serve as a vehicle to deliver dangerous malware payloads including info-stealers, remote access trojans and banking trojans that exfiltrate sensitive data such as browsing history, private messages, financial credentials and cryptocurrency wallet information,” the advisory states. Good antivirus software can help protect you from some of those threats, but the best plan is to dodge disreputable VPNs entirely.
Google urges users to enable Google Play Protect to protect from downloading potentially harmful apps and to only download apps from official sources rather than sideloading apps from unknown publishers. For VPN users specifically, Google says to be wary of free VPN apps and to look for apps with the VPN badge in the Google Play Store.
This is all sound advice, but I recommend not relying solely on the Google VPN badge or popularity ratings in the Play Store to determine whether a VPN is safe to use. Earlier this summer, a “verified” free VPN app sporting the Google VPN badge was found to be spying on users and capturing screenshots of their online activity. And 18 of the most popular VPN apps were recently found to have sketchy ownership and posed privacy risks.
Finding a safe VPN can take some diligence. Do some research into VPN ownership, read reviews from trusted sources, look through each privacy policy with special attention to what categories of user data is collected by a VPN and what entities that data may be shared with. Also look out for no-logs policies, third-party audits and any legal cases a VPN company has been involved with.
If you do not want to pay for a VPN, you will need to be especially mindful that you are making a safe choice. Sometimes using a free VPN can be worse than using no VPN at all because many free VPNs make money by selling user data, and some may even infect your device with malware to steal other personal information. The only free VPN I recommend is the free tier from Proton VPN since it provides the same basic privacy protections as its paid tier and does not put limits on bandwidth or usage.
If you are one of the many people who are newly jumping on the VPN bandwagon in the wake of new legislation and expanding use of online age verification, take a beat and do some research to make sure the VPN you choose will enhance your privacy rather than put it at risk.
Reddit Takes Australia's Under-16 Social Media Ban to the High Court
Following its announcement of tougher safety rules, Reddit is swiftly moving to contest the Australian law in court.
Alex Valdes
Alex Valdes from Bellevue, Washington has been pumping content into the Internet river for quite a while, including stints at MSNBC.com, MSN, Bing, MoneyTalksNews, Tipico and more. He admits to being somewhat fascinated by the Cambridge coffee webcam back in the Roaring '90s.
Reddit says it disagrees with the scope, effectiveness, and privacy implications of the new Australia social media ban for people under 16.
Reddit
Reddit, the social media and community chat forum, announced on Thursday that it is challenging Australia's under-16 social media ban in the country's High Court.
A statement posted to X said that the new law, which bans Australians aged 15 and younger from using apps such as Reddit, TikTok, Facebook, Instagram, Threads, X, Snapchat, YouTube, Kick and Twitch, "has the unfortunate effect of forcing intrusive and potentially insecure verification processes on adults as well as minors, isolating teens from the ability to engage in age-appropriate community experiences."
The move comes just days after the San Francisco-based company implemented age verification measures in Australia.
Initially, Reddit appeared to be complying with the Australian law without resistance. On Tuesday, Reddit said it would verify that new members and current account holders in Australia are at least 16. It also announced that account holders under 18 worldwide will get modified versions of the app that prevent access to NSFW and mature content, with stricter chat settings and no ad personalization or sensitive ads.
Don't miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.
A representative for Reddit did not immediately respond to a request for comment.
Reddit calls Australian law 'arbitrary'
Earlier this week, Reddit said the legislation limits free expression and privacy and "is arbitrary, legally erroneous, and goes far beyond the original intent of the Australian Parliament, especially when other obvious platforms are exempt."
"We believe strongly in the open internet and the continued accessibility of quality knowledge, information, resources, and community building for everyone, including young people," the Tuesday statement said. "This is why Reddit has always been, and continues to be, available for anyone to read even if they don't have an account."
Age verification rules -- such as the UK Online Safety Act -- are becoming the norm rather than the exception for governments and companies worldwide. The internet is increasingly being filtered to prevent children from accessing certain content online. It's a battleground where privacy, access to information and online safety are huge factors.
Age prediction and verification
Reddit had earlier stated that it would use an age prediction model to determine if new and existing account holders in Australia are at least 16 years old. If the model predicts that one of their members is under 16, Reddit will request proof of age. As outlined by the company, people must verify their birthdate by providing a government ID or taking a selfie. The company said it would suspend accounts of those it determines to be under 16.
Reddit claimed it would only securely store age information and not the photos or documents used in the verification process. The information would not be visible to advertisers or sold to data brokers, and would reportedly only be used to "enhance content relevance and ad experiences."
Reddit said it was planning to increase platform safety for those under 18. If you're under 18, you won't be permitted to moderate communities dedicated to NSFW or mature content. The site will disable ad personalization, and you will not see ads for alcohol, gambling or other sensitive topics.
What to Know About Australia's Social Media Ban: Reddit Is Challenging the Law
The new Australian law keeping children under 16 off of social media was bound to face legal scrutiny.
Alex Valdes
Alex Valdes from Bellevue, Washington has been pumping content into the Internet river for quite a while, including stints at MSNBC.com, MSN, Bing, MoneyTalksNews, Tipico and more. He admits to being somewhat fascinated by the Cambridge coffee webcam back in the Roaring '90s.
Australia's sweeping ban on social media for young children: Will it set a trend worldwide?
STR/Getty Images
While governments around the world continue to tackle the thorny issue of age verification for certain websites and platforms, Australia is taking a blunter approach -- and Reddit is immediately pushing back in court. The social media company has filed a High Court challenge to Australia's new law, which went into effect on Tuesday.
In a statement posted Thursday on Reddit, the company said that while it supports protecting users under 16, the legislation "forces intrusive and potentially insecure verification processes on adults as well as minors, isolating teens from the ability to engage in age-appropriate community experiences."
The age-restricted apps include TikTok, Facebook, Instagram, Threads, X, Snapchat, YouTube, Reddit, Kick and Twitch. Younger teenagers will still have access to popular gaming platforms, including Discord, as well as social media platforms such as Messenger Kids, WhatsApp, and Pinterest, and educational resources like Kids Helpline, Google Classroom, and YouTube Kids. The ban also doesn't include AI chatbots such as ChatGPT, OpenAI's Sora or Google Gemini.
Don't miss any of our unbiased tech content and lab-based reviews. Add CNET as a preferred Google source.
Australia is the first country to launch this kind of age-restricted social media ban. Several other countries, including China, Russia, North Korea, Iran, Turkey, Uganda, Saudi Arabia and India, have full or partial social media bans, typically for political and security reasons.
Other countries, including Denmark, France, Norway and Malaysia, are considering similar bans to Australia's and will monitor the effectiveness of the Australian ban over the coming months.
Although many studies have been conducted worldwide about the psycho-emotional effects of social media usage on children, the ban was inspired by The Anxious Generation, a book by US psychologist Jonathan Haidt. Annabel West, the wife of South Australian Premier Peter Malinauskas, encouraged her husband to consider a ban after reading Haidt's book in 2024.
Companies must enforce the ban, or face massive fines
Apps can use age-assurance technology, such as facial and voice analysis, to verify that a consumer is at least 16 years of age. Social media companies can also check how long an account has been active and assess age by language style and community memberships.
Kids being kids, they will find workarounds -- such as one 13-year-old who held up a photo of her mother's face to fool the age verification. The Australian government said it will prevent kids from using false identity documents, AI tools or VPNs to fake their age and location.
Tech companies will face a $33 million fine, as outlined in the legislation, if they fail to enforce the ban on users under 16.
Two 15-year-old Australians, supported by the Digital Freedom Project, are challenging the social media ban, and the country's High Court could hear their case as early as February. They argue, in part, that the ban "will have the effect of sacrificing a considerable sphere of freedom of expression and engagement for 13-to-15-year-olds in social media interactions (including communications on personal and governmental matters, and the benefits to those young people of such interactions)."
TikTok said it will comply with the new laws, although noting that the restrictions "may be upsetting" to customers. Meta, which owns Facebook and Instagram, has already begun removing accounts of users under 16 years old. Snapchat is ready to boot nearly half a million Australian kids from their accounts. Not surprisingly, X boss Elon Musk has criticized the change, writing in 2024 that the law "seems like a backdoor way to control access to the Internet by all Australians."
Some experts are praising Australia's ban
Donna Rice Hughes, president and CEO of Enough is Enough, a nonprofit with a mission to "make the Internet safer for children and families," praised Australia for "taking a proactive stick approach to protect children from social media harms."
"This ban should be an incentive for social media and other online platforms and services to be proactive in implementing safer-by-design technologies and default parental management tools before rushing to market with products that are potentially dangerous for children and teens," Hughes told CNET.
Hughes added that Big Tech has only itself to blame for governmental intervention such as Australia's.
"They've failed to do the right thing by our children from the start," she said. "The carrot approach of voluntary industry efforts to prioritize child safety over profits hasn't worked. A historic reality is that the first social media platforms to take off in the US and abroad, Facebook and Myspace, were developed for college-age students and older."
The US does not have a sweeping age limit like Australia's, but several states are developing new laws to regulate and restrict teens' access to social media.
Best VPN for iPhone 2025: Boost Your Privacy on the Go
Enhance your privacy while surfing the web, stream foreign Netflix libraries, unblock regional sports and avoid mobile traffic shaping with the best iPhone VPNs.
Our Experts
Written by
Attila Tomaschek
Written by
Rae Hodge
Written by
Sam Dawson
Article updated on
Attila TomaschekSenior Writer
Attila covers software, apps and services, with a focus on virtual private networks. He's an advocate for digital privacy and has been quoted in online publications like Computer Weekly, The Guardian, BBC News, HuffPost, Wired and TechRepublic. When not tapping away on his laptop, Attila enjoys spending time with his family, reading and collecting guitars.
ExpertiseAttila has nearly a decade's worth of experience with VPNs and has been covering them for CNET since 2021. As CNET's VPN expert, Attila rigorously tests VPNs and offers readers advice on how they can use the technology to protect their privacy online.
Rae Hodge was a senior editor at CNET. She led CNET's coverage of privacy and cybersecurity tools from July 2019 to January 2023. As a data-driven investigative journalist on the software and services team, she reviewed VPNs, password managers, antivirus software, anti-surveillance methods and ethics in tech. Prior to joining CNET in 2019, Rae spent nearly a decade covering politics and protests for the AP, NPR, the BBC and other local and international outlets.
Sam Dawson is a cybersecurity expert and VPN reviewer. After making the leap from academic research into the world of tech writing, Sam found his advocacy for data privacy was a natural fit for the team at ProPrivacy. He has since gone freelance, working for outlets such as TechRadar, TomsGuide, ITPro, and CNET, as well as continuing to conduct research in everything from VPN obfuscation techniques to dark web data leaks.
CNET staff -- not advertisers, partners or business interests -- determine how we review products and services. If you buy through our links, we may earn a commission.
Look for AES 256-bit encryption (over the OpenVPN and IKEv2 VPN protocols) and ChaCha20 (with WireGuard or IKEv2). Additionally, you'll want a VPN that has a kill switch, DNS leak protection and an audited no-logs policy. Privacy-critical users may appreciate a VPN provider based in privacy-friendly jurisdiction and advanced features like obfuscated servers, Tor-over-VPN, multi-hop connections and RAM-only servers.
Speed
All VPNs slow down your internet connection somewhat but a fast VPN should only reduce your download speeds by an average of 25% or less. The best-performing VPNs we tested dropped our speeds by less than 20%
Usability
A solid VPN for iPhone should be simple to use, whether you're a newcomer or a seasoned tech user, so that you can easily hop on a server and access different settings.
Device support
In addition to iOS and iPadOS, you may want to consider other devices you want to use a VPN on. Most quality VPN providers also support Windows, MacOS, Linux and Android/Android TV. VPN support for Apple TV is becoming increasingly common. Some VPNs offer Linux GUI apps, which are easier to use than CLI apps for new Linux users. And many VPNs also offer router support for whole-network coverage that lets you use the service with devices that don't have native VPN apps, like game consoles.
Cost
VPN pricing varies but you can expect to pay anywhere from $5 to $15 per month for a monthly VPN subscription plan. You can usually save money by choosing an annual rather than monthly subscription, with prices ranging from $30 to $100 per year. While multi-year bundles often offer the most savings, we typically recommend sticking with an annual plan for the most savings and the least risk.
vs
Compare
Back to selection
A virtual private network, or VPN, enhances your privacy on your iPhone by encrypting your internet traffic and masking your IP address. This means that your ISP or mobile carrier can't see what you do online, and the apps and websites you use won't be able to tell where you're actually connecting from, because they register the VPN server's IP address instead of your own.
Our experts have tested this product and selected it for this story. Its inclusion and description here solely reflect findings from our independent review. The company has paid for highlighted placements on this page.
Up to 73% off with 2-year plan, plus 4 free months
Because VPNs can make apps think you're in a different geographical area, you can unblock region-restricted streaming content, like foreign Netflix libraries or global Amazon Prime Video content. If your mobile carrier throttles video streaming on a cellular connection, you may even experience faster speeds and therefore better streaming video quality on your phone using a VPN.
At CNET, we regularly test a wide array of VPN providers on multiple platforms, including iOS and iPadOS. We evaluate each service based on several factors, including privacy features, speed, app design, streaming and overall value for the money. Whether you want to avoid streaming video throttling on a cellular connection, need to unblock geographically restricted content or are traveling internationally but need access to content from your home country, one of the best iPhone VPNs is a great addition to your app arsenal.
The best VPNs for iPhones in 2025
Surfshark is the best VPN for iPhones overall. We appreciate that Surfshark offers split tunneling on iOS and MacOS, not just on Windows and Android -- a relative rarity among VPN providers. Despite its budget-friendly prices, Surfshark doesn't compromise on performance, advanced privacy features or speed. We also like that Surfshark allows for unlimited simultaneous connections, which is great if you live in a large household or have a lot of devices.
ExpressVPN is the best iPhone VPN for beginners, thanks to its excellent privacy features and streamlined, user-friendly mobile interface on iOS and iPadOS (as well as Android and all other platforms). ExpressVPN even has servers in all 50 of the United States, making it a great choice for travel and for unblocking regional sports in the US. It's a great overall VPN, although it's more expensive than a lot of the competition.
NordVPN is the fastest VPN for iPhones, delivering blazing-fast speeds perfect for video streaming or online mobile gaming. Its fast server speeds, coupled with an impressive global roster of 8,000-plus servers in 126 countries, make NordVPN one of the best iPhone VPNs for streaming and travel.
Proton VPN is the most versatile iPhone VPN, offering an impressive server network alongside customizable settings and features that are great for power users. Proton is privacy-focused and open-source, and it performed well in our latest speed tests.
The Best iPhone VPNs compared
Surfshark
ExpressVPN
NordVPN
Proton VPN
Price
$15 per month, $48 the first year or $54 for the first two years (one- and two-year plans renew at $79 per year)
$13 per month, $75 for the first year or $100 for the first two years (one- and two-year plans renew at $100 per year)
$13 per month, $69 for the first year or $81 for two years (one- and two-year plans renew at $140 per year)
$10 per month, $36 for the first year or $72 for the first two years (one- and two-year plans renew at $80 per year)
Server network
4,500-plus servers in 100 countries
3,000-plus servers in 105 countries
8,000-plus servers in 126 countries
14,900-plus servers in 122 countries
Average internet speed loss
21%
18%
3%
16%
Simultaneous connections
Unlimited
10
10
10
Supported Apple devices
iPhone, iPad, Mac laptops and desktops, Apple TV
iPhone, iPad, Mac laptops and desktops, Apple TV
iPhone, iPad, Mac laptops and desktops, Apple TV
iPhone, iPad, Mac laptops and desktops, Apple TV
Supported platforms
Windows, MacOS, Linux, Android, Android TV, iOS, iPadOS, Apple TV, Fire TV, Web browsers, Routers
Windows, MacOS, Linux, Android, Android TV, iOS, iPadOS, Apple TV, Fire TV, Web browsers, Routers
Windows, MacOS, Linux, Android, Android TV, iOS, iPadOS, Apple TV, Fire TV, Web browsers, Routers
Windows, MacOS, Linux, Android, Android TV, iOS, iPadOS, Apple TV, Fire TV, Web browsers, Routers
Factors to consider in the best iPhone VPNs
Downloading a VPN app, creating an account, choosing a plan and connecting to your VPN shouldn't take longer than a minute or so.
Nelson Aguilar/CNET
With so many iPhone VPN apps available, it can be difficult to choose the right one. Based on our extensive research and hands-on testing of VPNs over the years, these are the factors to look out for when choosing the best VPN for iPhone:
Privacy
The most important factor to consider with any VPN is privacy. You should never use a VPN provider if you can’t trust that it's taking your privacy seriously. Every VPN worth its salt should provide AES 256-bit or ChaCha20 encryption, depending on the VPN protocol you're using.
Your VPN should also have basic privacy features such as a kill switch, DNS leak protection and a solid no-logs policy that is regularly audited. We recommend checking any provider’s privacy policy and reading its audit reports closely, as it’ll give you a good understanding of whether a VPN provider is serious about your privacy. If you notice a mention of data collection or sharing practices in a VPN's privacy policy that don't sit well with you, then it's best to trust your gut and look for a different provider.
If your privacy needs are critical, then you’ll need to look for a provider that goes above and beyond the standard privacy considerations. Your VPN should be based in a jurisdiction that has strong privacy laws that don't mandate data retention or logging. Choosing a provider that offers obfuscation is also necessary if you’re in a region or network that restricts or bans VPN use outright because it can help hide the fact that you're using a VPN in the first place.
Many of the best VPNs are also rolling out post-quantum protections that help protect against potential future threats from quantum computers, which is essential for privacy-critical users now and in the future. Finally, your provider should offer either a RAM-only server infrastructure or employ full-disk encryption on its hard drives, both of which can help ensure that your data remains secure. There are also some other privacy features that aren’t as vital but still useful, such as ad-blockers, Tor over VPN and multihop connections.
Speed
Your VPN's connection speeds can have a major influence on the quality of your streaming, downloading, video conferencing, gaming and general web-browsing activities. All VPNs slow down your internet somewhat, simply by nature of encrypting your traffic and routing it through one or more remote servers. To keep things running as smoothly as possible, you'll want a VPN that will have as minimal an impact on your regular internet speeds as possible. Generally, we've found that the best VPNs for iPhone only drop your internet download speed by an average of 25% or less. In our testing, we've seen as low as an average 3% speed loss. For bandwidth-demanding applications like competitive gaming or video streaming, you'll want a fast VPN.
Provider
Speed loss
Surfshark
21%
ExpressVPN
18%
NordVPN
3%
PIA
49%
Usability
A good VPN for iPhone should run smoothly and be easy to use, regardless of your technical expertise. It should have all of the features you need easily accessible with a tap of your finger. Many of the best iPhone VPN apps also include an easy way to get in touch with support directly from the device, which can be helpful if you need assistance on the go. Basically, your VPN app should be as easy for you to use as your iPhone itself. It should have a large network of servers around the world so you can connect easily and reliably from wherever you may be traveling and be able to help you access geo-restricted content from various regions.
Server network
Think about the cities, states and countries you travel to the most, or want to make it look like you're connecting from. Most of our top-rated VPNs feature thousands of servers in 100-plus countries. Large server networks benefit travel, since you can find a server near where you are for a fast, reliable connection -- usually, the closer you are physically to a VPN server, the less speed loss you'll experience. Additionally, a generous VPN server network is great for unblocking streaming content, since you've got a better chance of finding servers in countries you need to make it look like you're in. Plus, more servers may help maintain better internet speeds, because servers overloaded with users may slow down.
Alongside the total number of servers and countries, think about specialty servers. Some VPN providers, including ExpressVPN, let you torrent on any servers, whereas other VPN providers, like NordVPN and Proton VPN, have P2P servers optimized for peer-to-peer file-sharing.
Certain VPN providers offer servers with beefed-up privacy. For instance, you might find a double VPN, or multihop, VPN servers that feature a second VPN connection to make it even more difficult to trace your web traffic back to you. Likewise, some VPN companies have Tor over VPN, or Onion over VPN servers, which tout similar benefits, with the main difference being that multihop relies on a pair of VPN connections, while onion VPN uses a combination of Tor and a VPN connection simultaneously.
Streaming content unblocking
Because VPNs route your web traffic through a remote VPN server and change your IP address, apps you use and websites you visit will register your connection as originating from a different location. For instance, if you're in New York City but connected to a VPN server in the UK, apps like Netflix will think you're across the pond. Many streaming services, like Netflix, Amazon Prime Video, HBO Max, BBC iPlayer and CBC Gem, rely on your IP address to load content. Depending on your IP address, which contains general geographical information, the content library might vary a lot or you may not be able to access anything at all. But with a VPN, you can bypass regional restrictions to unblock content on Netflix, Amazon Prime Video and other services. Using a VPN for streaming could even help you save money.
Cost
Depending on your budget, you may want to take into account the cost and overall value of your iPhone VPN before making a purchase. VPN pricing can vary greatly from provider to provider but you can typically expect to spend about $5 to $15 per month for a monthly VPN subscription plan. If you want to save some money, you can choose an annual subscription, where prices can range from roughly $30 to $100 or more per year.
You'll want to be careful with free VPNs because you may end up risking your privacy instead of protecting it. Many free VPNs have slow speeds or have unreliable connections that frequently drop because of overloaded servers. Some even actively degrade your privacy, logging any internet activity through the VPN for sale to third parties or injecting ads into your browsing sessions. Proton VPN is currently the only free VPN that CNET recommends.
Most premium VPNs offer a money-back guarantee anywhere from a week to 45 days. You can also get a seven-day free trial with many VPNs when you sign up through Apple's App Store, so you have options to try various iPhone VPNs risk-free before you decide whether to fully invest in one. Luckily, there are plenty of ways to save money on your VPN subscription.
Device support
While you'll want a VPN for iPhone that works well on iOS, you may have other devices that you want to run a VPN on. Many VPNs work on Windows, MacOS, Linux PCs and Android devices. While Android TV and Fire TV apps are common for use on streaming devices, Apple TV apps are still on the rise. Providers like NordVPN, ExpressVPN, Proton VPN, Surfshark, PIA and IPVanish offer Apple TV VPN apps. (Disclosure: IPVanish is owned by the same parent company as CNET, Ziff Davis.) Think about the devices you want to install a VPN app on and make sure your desired VPN provider supports those gadgets.
If you’re looking for a cheaper alternative to high-priced VPNs like ExpressVPN and NordVPN, but still want a premium VPN experience, Surfshark is a great choice. Surfshark’s iOS app is slick, packed with useful privacy features and works just as well as its expensive peers. The app connects in a snap and settings are easily accessible with just a few taps. All in all, it’s a top-notch VPN for iPhone that’s fast, user-friendly and excellent for streaming when you’re on the go.
Why we like it
Like many other VPNs, Surfshark’s iOS app offers standard features like a kill switch, quick-connect and protocol selection (WireGuard, OpenVPN and IKEv2). Like other top VPNs, Surfshark includes standard privacy protections like an audited no-logs policy and DNS leak protection. But Surfshark’s iPhone app includes a few extras like an ad blocker, static IP, Rotating IP that automatically changes your IP address every few minutes and Dynamic Multihop, which allows you to tunnel through any two server locations of your choosing. Notably, Surfshark also offers split-tunneling on its iOS app, a feature that most other VPNs no longer offer for Apple devices. We also like that Surfshark gives you the option to pause your connection instead of disconnecting outright, which can be helpful if you need to take care of a few things while off the VPN but don’t want to forget to turn it back on when you want to protect your privacy.
But what really sets Surfshark apart from the competition is its Alternative ID feature that lets you generate a fake persona that includes a full name, physical address and email address that you can use to fill out forms and sign up for stuff online without having to use your actual personal information. Alternative ID features are included with all subscription plans, but an Alternative Number feature is also available for an extra $3 per month, letting you receive calls and communicate via text without having to divulge your actual phone number.
Surfshark isn’t the fastest VPN, but it’s still relatively speedy and plenty fast enough for general online browsing, as well as more data-heavy activities like streaming and gaming on your iPhone. In our 2025 speed tests, we calculated a total average speed loss of 21%, which is slower than NordVPN’s 3% speed loss but more in line with Proton VPN’s 16% speed loss and ExpressVPN’s 18%. Either way, if your network connection is fast enough to begin with, Surfshark’s speeds still shouldn’t noticeably impact your online activity.
In our streaming tests, Surfshark performed exceptionally well on iOS, unblocking content on popular streaming sites like Amazon Prime Video, Disney Plus, Hulu, Netflix and HBO Max -- through various global server locations. And with a massive network of over 4,500 servers in 100 different countries, Surfshark can help give you access to a vast amount of international streaming content on your iPhone whether you’re at home or traveling the world.
Surfshark's long-term plans offer a lot of value when compared with ExpressVPN's and NordVPN's prices, especially considering Surfshark's unlimited simultaneous connection allowance. The annual plan costs $48 for the first year, and the two-year plan costs $54 total for the first two years combined, with the annual and two-year plans renewing at $79 per year. However, Surfshark's monthly subscription costs $15.45 per month, which is more expensive than just about any other VPN's monthly rate, so for the best value, we recommend sticking with an annual plan. All subscription plans are backed by a 30-day money-back guarantee in case you're not satisfied with the service.
ExpressVPN is the best iPhone VPN for beginners because its iOS app is a breeze to use and because the service delivers industry-leading privacy protections, fast speeds and excellent streaming capabilities. The app's minimalist interface is simple to navigate and includes all the basic features you'd want in a VPN app, like a kill switch, protocol selection (Lightway, IKEv2, WireGuard) and easy access to servers. Additional tools you'll have on hand include a DNS leak test, WebRTC leak test and IP address checker -- which make it easy to ensure the VPN is working properly when you're on the go.
Why we like it
If you want to stream your favorite shows and movies on your iPhone, ExpressVPN is an excellent option. The 18% average speed loss we measured in our most recent speed tests means ExpressVPN should be plenty fast for streaming and other data-heavy online activities. During our latest tests with ExpressVPN's iOS app, we were able to access content on popular streaming services like Amazon Prime Video, Disney Plus, Hulu, Netflix and HBO Max.
Privacy-focused users will appreciate ExpressVPN’s forward-thinking privacy initiatives and its strong commitment to transparency. Its post-quantum protections help protect your data from future threats from quantum computers and are built into its Lightway and WireGuard protocols. ShuffleIP is another privacy feature that changes your IP address for every website you visit, making it even more difficult to track you online when using the service. Like ExpressVPN’s post-quantum protections, ShuffleIP works in the background so you don’t need to enable it separately. During our latest tests, the kill switch worked as expected on iOS and we detected no leaks. ExpressVPN's no-logs policy is regularly audited, offering additional peace of mind.
With ExpressVPN, you'll get the best overall VPN and one of the best iPhone VPNs you can buy. If you’ve got other devices to connect, ExpressVPN lets you link up to 10 simultaneously. But with its premium service comes a premium price tag. The monthly plan costs $13 per month, which is in the same ballpark as what most VPNs charge per month. But ExpressVPN's longer-term plans are considerably more expensive than many of its competitors, including Surfshark, Proton VPN and Mullvad. The yearly plan costs $75 for the first year and the two-year plan costs $100 for the first two years combined. The annual and two-year plans both renew at $100 per year after the initial billing period. ExpressVPN offers a 30-day money-back guarantee, so you can give the service a try before fully committing.
User-friendly apps on iOS, iPadOS, MacOS, Apple TV and non-Apple platforms
Blazing-fast internet speeds
Strong privacy
Great for streaming service unblocking
Cons
Inconsistent pricing structure
High renewal pricing
NordVPN is the fastest VPN for iPhones, making it an excellent choice for bandwidth-intensive activities like streaming videos, gaming or hopping on Zoom calls. Its minimal 3% speed loss in our 2025 tests made it significantly faster than the rest of the pack. Across the board, from its iOS and iPadOS to MacOS, Windows and Android apps, NordVPN is user-friendly, with a familiar app experience regardless of the platform. In our testing, NordVPN’s iPhone app was slick and intuitive, with easy access to settings like protocol selection (OpenVPN and NordLynx), server selection, specialty servers and Threat Protection.
Why we like it
Its generous global network of 8,000-plus servers across 126 countries makes NordVPN a solid choice for international travel and streaming content unblocking. We effortlessly unblocked content on many streaming apps, including Amazon Prime Video, Disney Plus, Netflix and BBC iPlayer.
While Nord’s superb entertainment support is great for casual VPN users looking to unblock streaming content, its strong privacy chops make it a compelling choice for users with serious privacy needs, like activists or whistleblowers. Its proprietary NordWhisper VPN protocol is designed to mimic standard web traffic, and therefore may slip through school Wi-Fi firewalls and other networks that restrict VPN use. Specialty servers like Tor Over VPN and double hop can enhance your privacy, making it even more difficult to trace your web traffic back to your device. And Meshnet is a unique privacy feature that lets you create a virtual network to host remote LAN parties for gaming, seamlessly access streaming services while traveling or avoid CAPTCHAs. NordVPN also includes a strict no-logs policy that's been independently audited, along with DNS leak protection.
At $13 per month, $69 for the first year or $81 for two years, NordVPN's introductory prices are decent. However, its annual and two-year plans skyrocket to an astronomical $140 per year upon renewal. You can avoid a pricey auto-renewal by stacking subscriptions, but we'd rather see NordVPN offer a more budget-friendly renewal price. But if you want blisteringly fast connectivity, NordVPN is a fantastic choice for streaming on your iPhone, iPad, MacBook or Apple TV. Your purchase is backed by an industry-standard 30-day money-back guarantee.
Proton VPN is the best (and only) free VPN that we recommend for iPhone or any other platform. But Proton’s exceptional premium VPN plan is a worthy upgrade -- or alternative to other paid VPN rivals. We particularly like the option to create custom server group profiles and easy access to settings like protocol selection (WireGuard, Stealth), kill switch, NetShield and VPN Accelerator.
Why we like it
Proton VPN's free plan doesn’t sell your user data, impose usage limits or plaster your screen with ads. But you can’t select a server manually, you’re limited to servers in 10 countries and you can only connect on one device at a time. By comparison, its paid plan provides 14,900-plus servers in 127 countries, lets you jump on any server you want and allows for up to 10 simultaneous connections.
Where Proton VPN excels is its balance of remaining privacy-forward but great for casual VPN users. It’s fast and outstanding for streaming, while prioritizing privacy. You’ll get some unique privacy features, like its proprietary Stealth VPN protocol that’s designed to bypass VPN blocks. Android users can access guest mode to use Proton VPN without creating an account, and the company said that feature is coming to iOS and iPadOS in 2025. Proton VPN also has a kill switch, independently audited no-logs policy and DNS leak protection.
During our tests, Proton unblocked nearly every streaming service we tried, including some tough-to-access ones, like Egypt Netflix libraries -- ExpressVPN and Surfshark were the only other VPNs we tested that were able to load Netflix Egypt. Whether you want to boost your privacy, need to stream geo-protected content or want a generous global server network for travel, Proton VPN is a great choice. While some VPNs like ExpressVPN are slightly more user-friendly, it’s hard to find a VPN that balances intuitive app design with streaming unblocking as well as Proton does.
Proton VPN costs $10 per month, $36 for the first year or $72 for the first two years, with the annual and two-year plans renewing at $80 per year. Proton VPN is a solid overall investment that provides fast speeds, unique and useful privacy amenities plus excellent streaming service unblocking capabilities. All plans include a 30-day money-back guarantee.
Latest tests No leaks detected, 16% speed loss in 2025 tests
Network 12,000-plus servers in 117 countries
Jurisdiction Switzerland
Price $10 a month, $60 for the first year or $108 for the first two years (one- and two-year plans renew at $80 per year)
Score Breakdown
Security
9
Usability
8
Value
7
Speed
8
Privacy
8
Features
9
How we test iPhone VPNs
PIA's apps offer a lot of options for customization.
PIA/Screenshot by CNET
When we evaluate the best iPhone VPNs, we spend weeks testing the features offered on each VPN's iPhone app to see how they compare to the competition. We carefully consider the look and feel of the app and the overall usability of the software, including how easy it is to establish a connection, bearing in mind the generally smooth user experience iPhone users are accustomed to.
We test the performance and reliability of the VPN connection on each of the protocols available in the provider's iPhone app, while paying special attention to how the app performs when switching between Wi-Fi and a mobile network. We test for leaks and ensure each service's kill switch is working as it should, in addition to testing the functionality of every other feature available on the VPN's iPhone app. If a provider offers unique features (or includes a rare-to-iPhone feature like split-tunneling) we make sure to call them out and document our experience using them.
Many VPNs also offer easy access to customer support directly from their iPhone app, so we test that functionality and evaluate how seamlessly the app is able to connect the user with a support agent as well as the general effectiveness of the support itself.
We test each VPN's ability to circumvent geographical restrictions and access content on popular streaming sites on the iPhone, while taking into account previously-tested speed performance and noting any issues with buffering or stream quality. Finally, we evaluate each provider's prices to determine the service's overall value.
Other iPhone VPNs we tested
PIA
Private Internet Access is a decent cheap VPN that undercuts most of its rivals at $12 per month, $40 for the first year (renewing at $50 annually) or $79 every three years. We like its customizable apps and privacy-forward design that includes open-source apps as well as a reader-friendly privacy policy. PIA is one of the few VPN providers that offers split tunneling on MacOS, so Apple aficionados may appreciate the flexibility to route some apps but not others through a VPN.
However, PIA’s high 48% average speed loss is about double what you can typically expect from a fast VPN, making it a tough sell for users with slow or unreliable internet connections. Additionally, we experienced many CAPTCHAs with PIA when trying to access websites like Google. And its app design, while mostly user-friendly, felt outdated compared to most of the competition. While PIA is a good budget VPN, you can get a lot more value with a VPN like Surfshark or Proton VPN for a little bit more money.
IPVanish's iPhone app is fairly easy to use and includes a prominent "Connect" button on the home screen that'll get you connected quickly. If you navigate to the "locations" screen to select a specific server, you can either connect to the "optimal location" or choose from a list of servers. However, after you've connected, there's no indication of whether you're connected or not unless you navigate back to the home screen. Even if you connect to the optimal location, the Connect button on the locations screen still says "Connect" -- which can lead to some confusion.
Although IPVanish's iPhone app isn't as streamlined as the others on this list, it includes split tunneling functionality -- a feature most VPNs don't offer with their iPhone apps. Even so, it's difficult to enthusiastically recommend IPVanish to iPhone users considering that far superior services are available for the same price or cheaper. IPVanish costs $13 per month, $40 for the first year or $53 for the first two years combined. The annual and two-year plans both renew at $90 per year after the initial billing period. Also, IPVanish's 30-day money-back guarantee only applies to the annual and two-year subscription plans, not the monthly plan. (Disclosure: IPVanish is owned by CNET's parent company, Ziff Davis.)
The only free VPN for iPhone that we recommend is Proton VPN. Its free tier employs the same encryption standards as its premium tier, doesn't impose any use or speed limitations and doesn't sell your data. There's no shortage of free VPN options available for iPhone, but we generally don't recommend most free VPNs for a number of reasons. First, many free VPNs make money by collecting your personal data and selling it to third parties -- putting your privacy at risk and defeating the purpose of using a VPN in the first place. Many free VPNs may also inundate you with annoying pop-ups and unwanted advertisements, and some may even contain malware. Additionally, free VPNs impose limitations on use, are burdened by overcrowded servers (which can negatively affect speeds and stability), typically lack streaming support and often employ substandard encryption.
What is the best VPN if I only care about streaming?
In our testing, ExpressVPN was the VPN that performed the best for streaming on iPhone as well as on every other device we tested. If your main priority is to unblock international streaming content on your iPhone with a VPN, we recommend going with ExpressVPN because it has proven year after year in our tests to be the most reliable service for geo-unblocking content from all over the world.
iPhone VPN FAQs
What's the best iPhone VPN right now?
Surfshark is our choice for best iPhone VPN, thanks to its suite of useful features, easy-to-use app and the rare ability to enable split tunneling on iOS. ExpressVPN is our runner-up for the best iPhone VPN due to to its reliability, responsiveness and ease of use. NordVPN, is the best VPN for iPhone power users who want best-in-class internet download speeds and exceptional streaming support. ProtonVPN offers the only free VPN plan we recommend and is a versatile VPN for people who enjoy customizing their settings.
You should use a VPN on your iPhone if you need to boost your privacy by keeping your internet activity hidden from your ISP, access geographically restricted content like foreign Netflix libraries or circumvent throttling and censorship restrictions. Using a VPN on your iPhone is a great way to protect your privacy when you're on the go.
No, iPhones do not have a built-in VPN app, but there is a built-in VPN client in iOS that lets you connect to a VPN server. But the easiest way to use a VPN on your iPhone or iPad is by downloading your VPN provider's app.
Do iPhone VPNs leak traffic?
Recent independent research claims that VPNs on iOS devices leak user traffic outside of the VPN tunnel, unencrypted. VPN providers have pointed out that the vulnerability exists on Apple’s side and affects all VPNs on iOS devices. Proton VPN outlined a workaround to the issue in a blog post, advising iOS VPN users to connect to a VPN server, enable Airplane mode (to kill existing internet connections and temporarily disable the VPN) and disable Airplane mode. The VPN should then reconnect with all internet connections running through the VPN tunnel. Proton notes that it’s not a 100% guarantee that the VPN will be rendered leak-free through this process, but it can only help.
What does my ISP/mobile carrier see when I'm connected to my VPN?
Your internet service provider or mobile carrier can see that you're connected to a VPN, but it won’t be able to see the websites you visit or your browsing history, because your iPhone VPN encrypts your online traffic. Your ISP/mobile carrier will also see things like the IP address of the VPN server you're connected to, the time stamps of when you're connected and the amount of data you've transmitted. If you want to hide the fact that you’re using a VPN altogether, you can connect to an obfuscated server, if offered by your VPN.
The easiest way to set up a VPN on your iPhone is by downloading your VPN provider's app from Apple's App Store. Then, fire up the app, punch in your login credentials and tap "Connect" or "On" -- the exact phrasing may differ -- to enable your VPN. To turn off a VPN on your iPhone, tap the "Disconnect" or "Off" button.
Can I use my VPN on multiple devices besides my iPhone?
Yes, the best VPNs for iPhone all allow for multiple simultaneous connections, which is great if you want to use a VPN on other devices -- like a MacBook, Windows PC, Android device smart TV or streaming device. Typically, you'll be able to connect at least five to 10 devices simultaneously, with a few services offering unlimited connections.
Attila covers software, apps and services, with a focus on virtual private networks. He's an advocate for digital privacy and has been quoted in online publications like Computer Weekly, The Guardian, BBC News, HuffPost, Wired and TechRepublic. When not tapping away on his laptop, Attila enjoys spending time with his family, reading and collecting guitars.
Subject to your privacy choices we and our partners use technology, including cookies, to view and retain your site interactions, enable site functionality, enhance user experience, perform analytics, and for advertising and marketing purposes as described in our Cookie Policy. By clicking Accept or continuing to our site you agree to our Terms of Use.
Hello, there!
We noticed that you’re currently using an ad blocker.
CNET is able to deliver our best-in-class reviews, tips, buying advice and news to you for free with the help of ads. Please consider supporting our world-class service journalism by removing the ad blocker from your browser. We appreciate you!
