How We Test, Rate, and Review VPNs

To find the best virtual private networks (VPNs), we put each one through hands-on testing across seven categories: features, performance, privacy and security, value, compatibility, customer service, and an overall editor's assessment. We run leak tests, benchmark speeds across multiple server locations, stress-test kill switches, and comb through logging policies and third-party audit reports to verify that providers are actually delivering on their privacy claims.

We've tested over 50 VPNs across these seven categories, then scored and weighted them to reflect what actually matters for security-conscious users.

Features (30.5%)

On top of giving you lots of secure servers to help anonymize your internet activity, there are plenty of additional security features VPNs can offer to take your experience (and privacy) to the next level.

Kill switch

What it is: A kill switch can automatically disconnect your internet connection or block internet traffic if you unexpectedly lose connection to the VPN's servers.

How we test it: We visit IPleak.net and switch servers while it’s continuously grabbing our DNS address. If our real IP address shows up between the first and second server, then the kill switch has failed to cut off traffic when faced with an unexpected disconnection.

How we rate it:

• Best: Our real IP address didn't appear at any point during server switching or simulated connection drops
• Worst: Our real IP was consistently exposed, or no kill switch exists

Split tunneling

What it is: Split tunneling lets you choose which apps or websites route through the VPN, and which use your standard internet service provider (ISP) connection directly. This is useful for letting bandwidth-heavy services maintain full speed while keeping your standard browsing private and encrypted.

We also note whether split tunneling is available on all platforms, since some providers restrict it to desktop only.

How we rate it:

• Best: Per-app and per-domain split tunneling are available and easy to configure
• Worst: No split tunneling support

VPN protocols

What it is: VPN protocols determine how your connection is encrypted and tunneled. Support for modern protocols like WireGuard and OpenVPN, plus the ability to switch between them, is a key quality signal.

Protocol choice has real performance and security implications. WireGuard is currently the fastest and most modern option, but its static IP assignment raises some privacy concerns that providers address in different ways. OpenVPN is battle-tested and highly configurable. IKEv2 handles network switching well, making it a strong choice for mobile. 

Providers that only offer proprietary protocols, and with no way to verify the implementation, should be treated with skepticism regardless of their marketing claims.

How we test: We check product specs and the app itself to verify which protocols are supported and whether users can manually select them.

How we rate it: 

• Best: Supports WireGuard, OpenVPN, and another protocol at minimum, with manual protocol selection available
• Worst: No standard protocols supported or protocol information is not disclosed

Server count and coverage

Though server quality is arguably more important than quantity, it’s important to have a wide range of options across many countries for maximum reliability and usability.

What it is: The size of the VPN's server network and how many servers are available. 

How we test it: Review the in-app server list and try to connect to several locations to ensure there aren’t many non-functioning servers.

How we rate it:

• Best: More than 3,000 servers that work.
• Worst: Less than 50 servers and some that have issues connecting.

What it is: How many countries have at least one working server in it.

How we test it: Check the product specs and in-app server list, and try connecting to at least one server in most countries to ensure the servers aren’t just duds

How we rate it:

• Best: Covers over 60 countries globally
• Worst: Only covers 20 or fewer countries

Multi-hop servers

What it is: Multi-hop (also called double VPN) routes your traffic through two separate VPN servers in different countries instead of one. This adds an extra layer of encryption and makes it significantly harder to trace your traffic back to your real IP address — useful for journalists, activists, or anyone with heightened privacy needs.

How we rate it: 

• Best: Multi-hop is available, easy to find, and works correctly
• Worst: No multi-hop option available

Dedicated IP

A dedicated IP is a static IP address assigned exclusively to you, rather than a shared address used by many subscribers. This reduces the chance of being blocked by services that flag shared VPN IPs, and is particularly useful for accessing work networks or avoiding repeated CAPTCHA challenges.

How we rate it:

• Best: Dedicated IP is available to purchase and functions as expected
• Worst: No dedicated IP option offered

Test results (20%)

Even the most secure VPNs still need to perform well, or they won’t be practical for everyday use. That’s why we test several different servers within every VPN, completing multiple speed tests and also just using our computer to see how it impacts our day-to-day browsing.

Speed

What it is: How fast our download and upload speeds are when connected to the VPN’s servers.

How we test it: Using SpeedTest.net, we first take our baseline speed without the VPN connected. We then record our speeds when connected to a U.S., Canadian, U.K., and Australian server. If possible, we try different cities within the countries to get a better idea of the average speed.

How we rate it:

• Best: Less than 30% speed lost on average.
• Worst: More than 90% speed lost on average.

Bypassing geo-restrictions on Netflix

What it is: How reliably the VPN servers can bypass geo-restrictions, especially for streaming sites like Netflix.

How we test it: Try to stream content on Netflix from servers in the U.S., Canada, the U.K., and Australia.

How we rate it:

• Best: All four servers were able to connect and stream Netflix flawlessly.
• Worst: None of the servers could bypass Netflix's geo-restrictions.

DNS and WebRTC leak protection

What it is: Domain Name System (DNS) translates website addresses into IP addresses and WebRTC allows browsers to communicate with each other (for things like audio and video calls). A leak for either of these means you can risk your real IP being detected, despite being connected to a VPN server.

How we test it: We use BrowserLeaks.com to test for DNS and WebRTC leaks. If it can’t detect our real IP, we know we’re good to go.

How we rate it:

• Best: Our real IP is not detected by our tests.
• Worst: Our IP is detected, despite the VPN claiming to be leak proof.

Editor's score (15%)

What it is: There are important qualities that don't fit neatly into technical specs or benchmark results, so this category is where we capture them. Anything that affects the experience of using a VPN day-to-day, but isn't covered by our other categories gets assessed here

As we test VPNs, we're evaluating things like: how intuitive the app is to navigate for both new and experienced users; whether the app includes a helpful tutorial or tips on the interface, how easy it is to find important settings (like protocol selection or kill switch toggles) without burying them in sub-menus; and how quickly the app can connect to a server and stay connected.and how quickly the app connects

How we test it: We download the apps across platforms and use them as a regular user would. We attempt common tasks like switching servers, changing protocols, enabling split tunneling, and reaching customer support, noting where the experience is seamless and where it creates unnecessary friction.

How we rate it:

• Best: Clean, consistent interface across platforms; key security features are accessible without digging; onboarding builds good habits rather than just rushing to connection
• Worst: Confusing or outdated UI; important features are hidden or poorly labeled; meaningful differences in functionality between platforms with no clear explanation.

Value (11%)

With so many subscription plans already crowding your wallet, making sure the VPN you choose provides the best value for the cost is extremely important. This means everything from price, to the amount of connections you get, and even their refund policies.

Lowest viable price

What it is: How much the VPN costs, including the different price levels and discounts it offers.

How we test it: Check out the pricing page and scour the site for any additional discounts we can find.

How we rate it:

• Best: Prices are lower than standard and/or offer a lifetime subscription.
• Worst: Prices are high in comparison to other VPNs and come with extremely middling features.

Simultaneous connections

What it is: How many devices you can have connected to a VPN server at the same time.

How we test it: Check out the product specs and try to connect to multiple devices at once.

How we rate it:

• Best: Allows for unlimited simultaneous connections.
• Worst: Only allows one device to be connected at a time.

Money-back guarantee

What it is: A set amount of time that you can ask for a refund of the subscription fee.

How we test it: We check out the pricing page for indications of a guarantee and also read through refund policies to see what situations they deem as acceptable.

How we rate it:

• Best: 30+ day money-back guarantee with no questions asked.
• Worst: No money-back guarantee or refund policy at all.

Privacy and security (9.5%)

One of the most important things a VPN should do for you is keep your information private and secure. There are a number of features in place that we look for to make sure the software is doing its best to keep you and your information safe.

Encryption

What it is: Encryption is when information is scrambled or converted into a secret code so it can be transferred securely without risk of being intercepted or stolen. VPNs should use highly secure encryption methods in order to ensure any information that passes through their servers is safe.

How we test it: We check the product specs and what type of protocols the VPN uses.

How we rate it:

• Best: Uses AES-256 or ChaCha20 encryption.
• Worst: Doesn’t indicate or uses inferior encryption methods.

Logging policy

What it is: A lot of people use VPNs to avoid their information being spied on, so making sure the VPN itself isn’t spying on them is important too. Logging policies outline what kind of data is collected by the software and how long it's kept for. This also indicates what kind of information they’d have available to give to authorities if requested.

How we test it: We review their logging policies and privacy policies to make sure they’re clear about the information they collect and how they make sure it’s safe and protected.

How we rate it:

• Best: They have a clear-cut no logs policy that’s been audited by a third party.
• Worst: They collect logs and try to be sneaky about it in their privacy policy.

Third-party audits of no-logs policies

What it is: VPNs can pay independent, third-party auditors to review their data policies and ensure proper security measures are in place. Having this done is entirely optional and indicates how confident the company is in its own policies.

How we test it: We search the VPN’s site to see if audits are mentioned. Companies typically publish their audits for transparency, so if they did have it done they’ll make sure it’s easily available. If we don’t find it, we assume they’re not audited.

How we rate it:

• Best: The company gets yearly audits and promotes it openly.
• Worst: The company has never been audited.

Headquarters location

What it is: Where a VPN is headquartered determines which data laws it must comply with. Providers based in Five, Nine, or 14 Eyes Alliance countries are subject to surveillance-sharing agreements that could compel them to hand over user data, which is why jurisdiction factors into our score. 

That said, headquarters location is just one factor of our privacy and security score rather than a definitive verdict. C

How we test it: We check the about page, privacy policy, and other documentation about the VPN’s registration to figure out what jurisdiction they work under.

How we rate it:

• Best: Company is located in a non-alliance country (like Switzerland).
• Worst: Company is located in a Five, Nine, or 14 Eyes Alliance country.

Customer service (5%)

What it is: We evaluate customer service across every available channel, including live chat, email support, and self-serve resources like knowledge bases and setup guides.

If live chat is available, we initiate conversations with questions to assess response time, agent knowledge, and whether answers are genuinely helpful. For email support, we measure how long responses take and whether follow-up questions are handled without needing to re-explain the original issue.

How we rate it:

• Best: 24/7 live chat with fast response times and knowledgeable agents and email support that resolves issues without excessive back-and-forth
• Worst: No live support available, only a self-service help center

Compatibility (3%)

What it is: We evaluate compatibility across five main platform categories: desktop (Windows, macOS, and Linux), mobile (iOS and Android), browser extensions, smart devices, and routers. 

How we rate it:

• Best: Fully featured, actively maintained apps across desktop, mobile, browser extensions, and router or smart device support 
• Worst: Limited to a single platform

How we calculate our ratings

Once we’ve finished testing a VPN and filled out our testing notes, we enter the results into our algorithm to calculate a weighted average. Each category is worth points and is weighted based on its relevance to the product. 

Decision factor	Weight	What's covered
Editor's score	15%	The ease of use and intuitiveness while testing the product
Value	11%	Lowest plan price, money-back guarantee length, maximum number of simultaneous connections
Features	30.5%	Working kill switch, split tunneling, multi-hop servers, dedicated IP addresses, number of servers, number of server countries, available VPN protocols
Test results	20%	Speed test score, Netflix test score, DNS and WebRTC leak test scores
Privacy and security	9.5%	No-logs policy, third-party audits, location of headquarters, encryption
Compatibility	3%	Availability of apps for desktop, mobile, browsers, smart devices, and routers
Customer service	5%	Number of methods available for human support

The resulting number out of five becomes our star rating, which we then use to inform our VPN rankings and recommendations site-wide.