How to Choose a VPN

With hundreds of VPN providers on the market, selecting the right one requires evaluating several technical and legal criteria. This guide walks through every factor you should assess before subscribing.

Step 1 - Define Your Primary Use Case

Different use cases demand different features. Identify your primary goal first:

Goal	Most Important Features	Providers to Prioritise
Streaming	Fast servers, Netflix/Disney+ unblocking, no bandwidth caps	NordVPN, ExpressVPN, CyberGhost
Maximum privacy	Audited no-logs, outside 14 Eyes, anonymous payment	Mullvad, ProtonVPN
Budget	Low price, unlimited devices, decent speed	Surfshark, PIA, CyberGhost
Torrenting	P2P-optimised servers, port forwarding, no speed limits	Mullvad, PIA, NordVPN
Censorship bypass	Obfuscated servers, stealth protocols	ExpressVPN, ProtonVPN (Stealth), NordVPN

Step 2 - Evaluate the Privacy Credentials

Marketing claims are not enough. Look for concrete evidence:

• Independent audit: Has a reputable firm (Cure53, PwC, Deloitte) reviewed the no-logs policy and found it accurate?
• Jurisdiction: Is the company registered outside the 5/9/14 Eyes intelligence-sharing alliances? See our jurisdiction guide.
• Warrant canary: Does the provider publish a canary that would disappear if they received a secret government order?
• Data minimisation: Does the provider require an email address and payment information, or allow anonymous sign-up with cash/crypto?
• Real-world test: Has the provider been subpoenaed and proven unable to hand over user data?

Step 3 - Assess Technical Quality

Technical Factor	What to Check	Why It Matters
Supported protocols	WireGuard and/or OpenVPN present	WireGuard is the modern standard; OpenVPN is battle-tested
Kill switch	Available on all platforms, ideally system-wide	Prevents IP exposure if the VPN tunnel drops
DNS leak protection	All DNS queries route through the VPN's own resolvers	DNS leaks reveal browsing habits to your ISP
IPv6 handling	VPN either tunnels IPv6 or blocks it	IPv6 leaks can expose your real address
Split tunnelling	Route only selected apps through the VPN	Useful for work VPN + personal traffic separation
Open-source clients	Code publicly auditable	Independent verification of security claims

After subscribing, always verify your setup with our VPN Leak Test and Proxy Check. See also: Best VPNs 2026 Comparison.

A Weighted Checklist, in Order

These are ordered deliberately. A failure high on this list cannot be compensated for by strength further down.

#	Criterion	What a good answer looks like	Disqualifying
1	Audited no-logs policy	A named auditor, a recent year, and a stated scope covering the no-logs claim	"No logs" asserted with no external verification
2	Leak behaviour on defaults	No IP, DNS or WebRTC leak without hardening the config	Any leak on default settings
3	Kill switch	System-level, on by default, survives a client crash	App-level only, or absent on your platform
4	Protocols	WireGuard or equivalent, plus OpenVPN as a fallback	PPTP offered as a serious option
5	Jurisdiction	A country whose disclosure laws you have actually checked	Undisclosed corporate ownership
6	Transparency	Published ownership, transparency reports, open-source clients	No identifiable company behind the product
7	Price clarity	Renewal rate stated up front	Renewal price only discoverable after purchase

Red Flags Worth Walking Away From

• Lifetime deals. Running VPN infrastructure is a recurring cost. A one-off payment means the economics have to come from somewhere else — usually your data, or the service quietly degrading.
• No named company or address. If you cannot tell who operates the service, no privacy policy it publishes is enforceable.
• Bundled "free" VPN inside another app. Browser extensions and mobile utilities that add a free VPN are frequently monetising bandwidth resale.
• An audit that does not cover no-logs. A security audit of the mobile app is not the same as verifying the logging claim; read the scope.
• Ownership changes with no announcement. Several providers have quietly changed hands; the policy you agreed to may no longer be the operative one.

Questions to Ask Support Before You Pay

Response quality to these is itself a signal — a provider that answers them precisely is one that has thought about them.

1. Which auditor performed your most recent no-logs audit, in what year, and is the report public?
2. What connection metadata do you retain, for how long, and where is it stored?
3. Does the kill switch operate at the firewall level, and does it hold if the client process is killed?
4. Do you run your servers from RAM, and are they owned or rented?
5. What is the renewal price after the introductory term?

Then Verify It Yourself

Every claim above is a promise until you test it. Inside the refund window, run our leak test on default settings, kill the client process mid-transfer to check the kill switch, and re-test after any client update. Our full testing methodology describes exactly how we do it.

Frequently Asked Questions

What is the single most important factor when choosing a VPN?

An independently audited no-logs policy. Everything else — speed, server count, price — is recoverable if you switch providers. A provider that logged you cannot un-log you.

Does server count matter?

Far less than the marketing suggests. What matters is whether there are servers in the countries you actually need and whether they are uncongested. A provider with 3,000 well-provisioned servers beats one with 10,000 oversubscribed ones.

Should I buy the longest subscription to get the best price?

Only once you have tested the service. Multi-year plans carry the steepest discounts but lock you in past the point where audits, ownership, or client quality might change. Start monthly, test properly, then commit.

How do I test a VPN before committing?

Subscribe within a refund window, then run a leak test, check speeds to the locations you actually use, verify the kill switch by force-killing the client, and confirm any streaming services you care about still work.

How we evaluate VPNs: every provider on this site is judged on audited no-logs claims, leak-test results, protocol support, jurisdiction, and price transparency — never on commission. Our full evaluation method →

ⓘ Affiliate disclosure: Some links to VPN providers in these guides are affiliate links - We may earn a commission at no extra cost to you. This never affects rankings or evaluations.

Last updated: 2026-08-02