• Klarna has partnered with NordVPN to include a free VPN subscription
• Only Klarna Premium and Max members can redeem one NordVPN plan
• The perk is bundled into existing memberships

Buy now, pay later giant Klarna has a new perk for its paying members, and this one is all about your privacy.

The company has partnered with NordVPN to add encrypted connectivity as an included benefit for Klarna Memberships subscribers, folding a digital security tool into a subscription that was previously focused on cashback, travel protection, and lifestyle rewards.

It's the latest example of a payments company bundling in one of the best VPN services as a membership sweetener, and it follows hot on the heels of NordVPN's tie-up with Mastercard earlier this year, as well as other collaborations with companies such as CrowdStrike and Marvel.

The idea is simple. If you already have a Klarna membership, you can now activate a NordVPN subscription at no extra cost. Which tier you get depends on your membership level.

What the Klarna and NordVPN partnership involves

The structure is tied directly to Klarna's membership tiers.

Klarna Premium members will receive access to NordVPN Basic, while Klarna Max members will receive access to NordVPN Complete, both included within their existing membership subscription.

It's worth mentioning that at the time of writing (August 10, 2026), Klarna's membership page wrongly indicates that the perk for Max users is NordVPN Standard — described as "secure VPN access with enhanced security features". A NordVPN spokesperson clarifies to TechRadar that the company actually meant its Complete plan.

Regarding the partnership, NordVPN argues that VPN protection has become relevant infrastructure for both professionals and consumers, supporting secure connections on public and shared networks, such as those found in coffee shops, airports, and hotels.

Klarna describes the move as part of a strategy focused on offering tangible, valuable benefits at scale, giving members more control over aspects of their digital activity, and positioning its memberships to compete on overall value.

How to claim your free NordVPN subscription

Because the VPN is bundled into your Klarna membership, the first step is simply making sure you're on an eligible tier (Premium or Max).

With NordVPN's comparable Mastercard partnership, once users activate their NordVPN subscription, the service asks them to set up their Nord account and download the NordVPN app. We can likely expect the Klarna flow to follow the same rough path: confirm eligibility, activate the benefit, create or sign in to a Nord Account, then install the app on your devices.

If you're unsure whether your specific plan includes the perk, it's worth checking directly with Klarna, since availability can vary by region and membership level. Once it's live, you'll have the full NordVPN app to set up across your phone, laptop, and other devices.

NordVPN Basic vs NordVPN Complete: what's included

While users can use both plans on up to 10 devices simultaneously, features offered slightly differ.

As the name suggests, NordVPN Basic is the entry-level tier, and the main feature is the virtual private network (VPN) itself, using the same core software found across every NordVPN plan.

You get access to all NordVPN's server network — 211 locations in 135 countries— which TechRadar's reviewers found to be larger than any rival we test. You also get NordVPN's fast, secure NordLynx protocol, a reliable kill switch, and post-quantum encryption already baked in.

Basic also includes NordVPN's standard Threat Protection — now known as NordVPN's next-gen antivirus suite — which filters your traffic through NordVPN's DNS servers to block ads and malicious sites.

NordVPN Complete expands on Threat Protection's reach by adding real-time anti-malware and file scanning. The plan also bundles premium access to its password manager tool (NordPass) and 1TB of encrypted NordLocker cloud storage.

Governments worldwide are racing to deploy and enforce digital IDs to enhance data privacy and national security. As adoption accelerates, it’s estimated that more than two-thirds of the global population, 5.6 billion people will own a digital wallet by 2029. Yet these credentials remain largely confined to national borders due to the lack of global interoperability.

This is a challenge for today's digital economy and is becoming even more complex with the rapid rise of agentic commerce as autonomous AI agents are increasingly executing cross-border transactions on behalf of users. This interoperability gap forces platforms to reject foreign digital credentials, forcing users to upload their physical IDs to complete global purchases—the exact security risk digital IDs were designed to eliminate.

Digital IDs locked behind borders brings vulnerabilities

Without clear global frameworks, a digital ID issued by one nation is completely unreadable and untrusted by digital services based in another. This creates a gap between privacy, security, and convenience as consumers interact with cross-border digital services.

This could include booking an accommodation at a hotel, completing a global transaction, or deploying an AI agent to negotiate a corporate purchase. This mismatch brings severe vulnerability risks for all parties, the enterprise, the nation who deployed the digital ID, and the consumer.

When consumers are forced to upload their passport, just to complete a routine transaction, the government that spent millions building a secure digital ID ecosystem now completely lost control over its citizens' data sovereignty.

While image-based verification methods are secure and functional for localized onboarding, there are challenges that arise when users must repeatedly share sensitive documents across multiple organizations and jurisdictions to then be stored in a foreign database.

It expands the enterprise attack surface by multiplying the number of disparate databases where a user's personal identifiable information (PII) is stored and can become a target for data breaches and identity attacks.

The technical debt of fragmented standards

Without clear standards for digital IDs, enterprises are forced to navigate a patchwork of identity protocols. This creates security blind spots that make it easier for fraudsters to steal passport images and other personal data to open fraudulent accounts at scale.

Beyond security risks, IT leaders are facing technical debt with the fragmentation of digital IDs. In order to accommodate new digital ID variations, institutions would have to completely re-file pre-approved processes for regulatory approval. Since this is a complex and exhaustive process, organizations stick to their approved legacy workflows. However, this leaves them more vulnerable to emerging threats.

This challenge only gets worse when you take into consideration that some countries are heavily restricting their digital IDs. 31% of OECD countries do not provide any form of cross-border digital identity recognition, meaning roughly 3 in 10 countries still cannot use foreign digital identities to access public services. However, it’s not a lack of technical interoperability that prevents the cross-border use of digital IDs; rather, governing bodies are actively forbidding it.

For example, Under the EU’s upcoming EUDI wallet (eIDAS 2.0), only businesses established within an EU Member State have a clear path to register and accept verified citizen digital identities.

Similarly, processing the Philippines' PhilID is strictly restricted to companies incorporated and headquartered locally. Even if relying parties would be willing to deal with the non-standardized fractured technology of digital IDs, these protective regulations shut out international organizations from consuming them, forcing a reliance on legacy verification processes.

The security promise of digital IDs

Digital identity does have major benefits when it’s allowed to act at its full cross-border potential. When recognized and accepted by other organizations in other jurisdictions, consumers can establish trust without oversharing their personal information.

This limits the vulnerable information that organizations have to store in their databases and safeguards citizen’s privacy. Since only the specific data required to confirm authorization is transmitted, both organizations and sovereign nations can finally operationalize true data minimization.

As agents start executing actions on behalf of humans, reusable identity is the missing layer that makes the agentic ecosystem safe. Rather than forcing users back into a manual verification process, a standardized digital ID framework would allow an agent to present a pre-verified, universally trusted digital token.

This token could verify both the agent's authorization and the user's identity without exposing raw login credentials. This allows AI agents to fulfill their promise of true, autonomous automation.

The trust required for a borderless digital economy

Creating global interoperability for digital IDs isn’t just about ensuring a seamless digital economy; it’s about fundamentally shifting how we build and maintain trust in digital systems. While standardized cross-border frameworks are essential for the initial onboarding with digital IDs, true security with reusable identity requires moving beyond static, point-in-time checks.

This is especially true as AI agents begin navigating global platforms and executing transactions on behalf of users. As these agents are designed to operate continuously in the background, identity verification can no longer be a single, one-time event.

To make the digital ecosystem more secure and resilient for both humans and machines, trust must be re-established throughout the entire user lifecycle.

By deploying continuous monitoring through real-time behavioral and device pattern signals, enterprises can allow authentic users and their authorized AI agents to interact seamlessly beyond borders. Friction with identity verification would then only enter the equation when suspicious behavior is detected.

But spotting these subtle anomalies means fraud can no longer be addressed in isolation. By adopting an identity intelligence solution, organizations can layer multiple authentication and identity signals to build a more complete picture of risk. This intelligence can then be shared across organizations and even governments to detect fraud patterns and threats in real time, before they become widespread.

This unified knowledge is essential because the purpose of digital IDs was never meant to end at national borders. Governments must stop restricting international organizations from accepting their digital IDs because, when implemented correctly, enabling cross-border access creates a fundamentally safer environment for citizens.

We are living in a truly borderless digital economy, and our frameworks for digital trust must evolve to match this reality. Global interoperability and continuous trust are the foundation for a more secure, privacy-centric ecosystem—one where individuals, enterprises, and autonomous AI agents can interact with total confidence anywhere in the world.

We're featured the best VPN service.

This article was produced as part of TechRadar Pro Perspectives, our channel to feature the best and brightest minds in the technology industry today.

The views expressed here are those of the author and are not necessarily those of TechRadarPro or Future plc. If you are interested in contributing find out more here: https://www.techradar.com/pro/perspectives-how-to-submit

• NordVPN 5.3.0 for Linux automatically installs the GUI app alongside the command-line daemon
• A new NordVPN diagnostics command bundles troubleshooting info into a single shareable file
• CLI commands are now case-insensitive, and older operating systems like Ubuntu 20.04 are no longer supported

NordVPN has rolled out version 5.3.0 of its Linux app, marking a notable shift in how the provider approaches the notoriously command-line-heavy operating system. Starting with this August 2026 release, the provider’s graphical user interface (GUI) will now install automatically alongside the standard daemon.

The best VPN on the market according to TechRadar's testing, NordVPN has spent the last couple of years steadily improving its Linux offerings. While the company first launched a full GUI for Linux to make securing open-source systems as simple as clicking a button, it previously required a separate installation step.

Now, by making it part of the default setup process, NordVPN aims to increase its usage among Linux users who may have skipped or missed the extra package entirely.

"The GUI app now installs automatically alongside the daemon," the provider noted in its latest release notes. "It's been around for a while, but we figured it deserved a little more visibility."

This change ensures that all Linux users immediately benefit from visual features like light and dark mode, server maps, and easy toggles for post-quantum encryption, without ever having to touch the terminal. The integration comes just a year after NordVPN made its Linux GUI app open-source, allowing the community to inspect the code for complete transparency.

Simpler troubleshooting and broader changes

While the automatic GUI installation is the most visible change, version 5.3.0 brings several major quality-of-life improvements to the Nord's Linux VPN.

First is a brand-new diagnostics command. In the past, Linux users troubleshooting connection issues had to manually run a series of complex commands to pull network information, system specs, and firewall rules.

The new tool consolidates this process, gathering all necessary data into a single file that can be securely shared with the support team. However, NordVPN clarifies that "this command is not yet available for Snap package installations."

The command-line interface (CLI) has also received an overdue tweak: commands are now case-insensitive. As the company jokingly explained in the notes, users can "feel free to shout in ALL CAPS if the need ever arises."

Additionally, the NordVPN pause command has officially made its CLI debut, and the system tray app now includes a highly requested “Open NordVPN app” button. As the provider states, it "does exactly what the label suggests, which is always reassuring."

Under the hood, a few technical adjustments were made to improve networking. For users struggling to find local devices, mDNS traffic is now allowed by default when LAN discovery is turned on, meaning printers and local servers will no longer remain "impressively undiscoverable."

However, users running older setups should take note before upgrading. To keep up with modern standards, NordVPN has raised the minimum glibc version to 2.35. As a result, the 5.3.0 update officially deprecates support for older operating systems, including Ubuntu 20.04, Debian 11, and Fedora 32 through 42.

During our latest tests of Turbo VPN's Windows client, we identified active IP leaks and misconfigured protocols that put users' privacy at risk.

Owned by Singapore-based Innovative Connecting Pte. Limited, Turbo VPN boasts over 500 million downloads on Android.

Although the provider issued a patch after receiving our initial technical findings earlier this week, version 3.6.0.0 continued to leak IPv6 addresses across its proprietary protocols (Lepus and LinkSentinel) as well as standard OpenVPN connections.

Following further technical evidence provided by TechRadar, Turbo VPN has deployed a second update (version 3.7.0.0) for Windows to patch the persistent IPv6 leaks. Our testing confirms that this latest build now successfully blocks unencrypted IPv6 traffic.

However, information regarding the app's proprietary protocols remains scarce, and one protocol (V2Ray) was quietly removed during the recent updates. When asked about its removal, the company told TechRadar it is "still checking" the protocol.

Intermittent IP leaks

Concealing your IP address is a VPN's primary objective. However, when we began testing Turbo VPN's proprietary protocols earlier this week on an IPv4-only connection, we found that our real IP address wasn't being hidden at all.

Despite the app displaying that we were "connected," every online IP lookup test we ran showed our real IPv4 address. We rebooted our machine, reinstalled the app, and used multiple independent lookup tools, but the issues persisted.

To confirm our findings, we installed the app on a second machine on a separate dual-stack IPv4/IPv6 network. Testing on this setup revealed a distinct failure: while our IPv4 address was masked, our genuine IPv6 address remained exposed.

Subsequent follow-up tests on our IPv4-only connection also saw IPv4 masking stabilize, which highlights the intermittent nature of the initial build.

After we shared these technical findings with the team, Turbo VPN issued an update (version 3.6.0.0). In our testing of this build, the app successfully masked IPv4 addresses consistently but IPv6 addresses remained exposed on proprietary protocols and standard OpenVPN connections.

Given that most modern operating systems and web browsers favor IPv6 connections over IPv4, failing to tunnel or block this traffic left users on dual-stack connections exposed by default.

Following a subsequent update issued today, the Windows app is now blocking unencrypted IPv6 traffic while masking IPv4 addresses consistently.

Lepus: a VPN or Shadowsocks proxy?

Lepus is listed alongside Turbo VPN's standard VPN protocols. It is described as providing "excellent camouflage with equally outstanding speed and stability built for highly restricted networks."

However, during our initial tests Lepus operated in ways distinct from standard VPN protocols. Rather than creating a system-wide encrypted tunnel, it executed a local ShadowsocksR (ssr.exe) process that toggles Windows settings (ProxyEnable: 1) to run a local proxy on port 46288.

That means any non-browser data sent from your device — including background OS traffic, desktop messaging apps, and command-line utilities — did not benefit from an encrypted tunnel and was instead routed over a standard connection.

We asked the team at Turbo VPN how long this behavior may have been present for, but they did not reply to that specific question.

In our subsequent tests, version 3.6.0.0 successfully protected all outbound traffic in an encrypted tunnel and successfully operated as a system-wide tunnel for IPv4 traffic.

However, its configuration still allowed for IPv6 leaks, which means users on a dual-stack connection were left exposed. This is because the app did not enable any IPv6 virtual interfaces, assigned zero IPv6 gateway routes, and set no firewall rules to block outbound IPv6 traffic as shown below.

The official response, and what comes next

After sharing multiple rounds of technical feedback with Turbo VPN, the Windows app (version 3.7.0.0) appears to have fixed the remaining IPv6 leak issues.

Rather than attempting to create a full IPv6 infrastructure, the latest version appears to have implemented IPv6 blocking at the client level. This forces all web traffic down the encrypted IPv4 tunnel.

However, detailed information about the proprietary protocols remains conspicuously absent both within the app and on Turbo VPN's website — a search of the company's official website yields no results for Lepus or LinkSentinel.

Beyond a brief descriptor on the protocol-selection tab, users are given no technical context about how these protocols route traffic or what security mechanisms they employ. Combined with the silent removal of V2Ray, users are left with little information on how best to secure their connection.

The company did not respond to questions about the lack of information regarding the app's proprietary protocols. In response to our initial findings, the company said: "The behavior observed in the Windows client arose only under certain network configurations, appearing to occur in a limited number of network environments.

"Following the points you raised, our technical team carried out a thorough review and implemented the necessary improvements in the latest Windows build within a short timeframe."

We will continue to test the product and update our full review in the coming weeks.

• PIA has added 22 streaming-optimized VPN server locations
• No update, reinstall, or plan change is needed to access new servers
• Countries getting the label for the first time include France, Spain, Brazil

Private Internet Access (PIA) has more than doubled the size of its Streaming Optimized network, growing from 13 dedicated streaming locations to 35 with the addition of 22 new countries.

The expansion spreads across Europe, the Americas, Asia Pacific, Africa, and the Middle East, giving users a far wider spread of servers picked out specifically for watching online content.

For a provider already regarded as one of the best VPN options for value and customization, the change is less about adding raw server count and more about making the right servers easier to find.

Most of these countries already had standard PIA locations. What's new is a dedicated Streaming Optimized label sitting alongside them in the app. The new options show up automatically across PIA's apps without any updates required.

What PIA has actually added

PIA's Streaming Optimized locations are servers the company monitors and regularly tests against a range of streaming services, rather than general-purpose servers that may or may not work. The idea is to give users a reliable starting point instead of leaving them to guess which location to try.

France, Spain, Brazil, Mexico, South Korea, New Zealand, and South Africa are among the countries picking up the label for the first time, with further additions across Central and Eastern Europe. The full list of 22 new locations spans the Americas, Europe, Asia Pacific, the Middle East, and Africa.

According to PIA, the rollout was made possible as more of its locations became "technically ready to support the setup," part of a broader run of network upgrades the provider has been pushing out through 2026, as well as bringing its app to the Google-alternative app store, F-Droid.

Why streaming-optimized servers matter

Streaming platforms restrict content by region, checking your IP address against a database of known ranges and serving a different catalog depending on where you appear to be.

A virtual private network (VPN) sidesteps that by routing your traffic through a server elsewhere, so the platform sees the server's location rather than yours.

The catch is that services actively block IP addresses linked to VPNs, which turns finding a working server into a guessing game. Dedicated streaming servers exist to cut down that trial and error, with providers monitoring and refreshing them to keep the success rate up.

It is worth noting that performance still varies by service and account, and using a VPN this way may run against a platform's terms.

How to use the new PIA's streaming-optimized servers

Getting to the new locations takes seconds. Open the PIA app, head to the location list, and type "streaming" into the search bar.

The new countries appear alongside PIA's existing streaming picks. Choose the one you want and connect as usual.

Because everything is included with existing subscriptions and rolls out automatically, there is no separate plan or toggle to hunt for. PIA says it plans to keep expanding the network over time.

It’s official: TechRadar readers want VPN pricing to change. In a recent set of polls, 54% of TechRadar readers said price jumps were the most annoying part of VPN subscriptions, while a whopping 97% said they’d rather pay a flat fee than a discounted rate that rises later on.

The problem is that many of the best VPNs don’t work this way. Most opt for a reduced rate that increases at the end of the fixed plan. And while some providers offer an end-of-plan offer, it isn’t guaranteed.

One VPN that breaks this mould is Mullvad VPN. It costs €5 per month, every month.

Its price hasn't changed since it launched way back in 2009. What’s more, if you’d like to keep your payment anonymous, it allows cash payments, which require no identification whatsoever.

Mullvad's single price does mean it is more expensive per month than options offering an initial discount. NordVPN, for example, costs $3.49/month initially, over a dollar less, but you're faced with a $80+ price rise at the end of two years, and you pay the whole fee upfront.

Mullvad gives you greater control of your payments; no price rises, and performance that rivaled the very best VPNs in our March 2026 testing.

It achieved 2,308 Mbps using WireGuard in our speed testing, second only to PrivadoVPN. It also proved to be reasonably effective with streaming services. It struggled with Disney+ and Prime Video in some regions, but was flawless with global Netflix libraries and local services such as BBC iPlayer.

Compared to other VPNs, Mullvad does fall short on additional security features. It lacks capabilities such as antivirus, password management, or dark web monitoring to secure you outside of the VPN. For these features, you'd need to look to VPNs such as NordVPN or Surfshark.

Wanna have your own say? The polls are still open, so feel free to leave your vote and let us know why in the comments below.

• IPVanish has updated its Apple TV app to widen its VPN protocol choice
• Beyond IKEv2, the app supports WireGuard and OpenVPN (with Scramble)
• Both existing and new subscribers can unlock everything with a single step

IPVanish has given its Apple TV app a notable upgrade, adding support for the WireGuard and OpenVPN protocols in addition to the current IKEv2.

For anyone who streams from the sofa, this is a meaningful change. Protocol choice affects speed, stability, and how easily a VPN slips past networks that try to block it, so having multiple options is much better than a single default.

The update also comes with a bold competitive claim. IPVanish argues it's now the only provider offering WireGuard, OpenVPN (with Scramble), and IKEv2 together on Apple TV, building on its early arrival as one of the first premium services on the platform.

Subbu Sthanu, IPVanish's General Manager of Consumer Cybersecurity, framed the launch around the living room, saying the provider wants to give Apple TV owners "the ultimate balance of speed, security, and customization."

If you're shopping for the best VPN for your living-room setup, more protocol flexibility is exactly the kind of feature that separates a bare-bones tvOS app from a properly capable one.

What's new in the IPVanish Apple TV app

The refreshed app, rolled out in late July 2026, brings two of the most widely used VPN protocols to Apple TV for the first time, sitting alongside the existing IKEv2 option.

WireGuard is the headline addition. Built on a lean codebase with modern encryption, it's designed to deliver fast connections and low latency. This makes it well suited to streaming and gaming on a big screen.

OpenVPN is the other new arrival. As one of the oldest and most battle-tested protocols around, it's prized for flexibility, supporting both UDP and TCP connections and editable port settings.

Crucially, OpenVPN ships with IPVanish's Scramble feature. Scramble obfuscates VPN traffic so it looks less recognizable to networks that try to detect and limit VPN connections, which can help you stay connected on fussier Wi-Fi.

Why the VPN protocol choice matters

The value of multiple protocols comes down to fit. No single option is best for every network, so being able to switch lets you match your connection to the situation.

WireGuard offers the best balance of speed and security for most people, and it's the one to reach for when you just want smooth 4K playback. OpenVPN is the more configurable fallback, handy when a network is being awkward or actively blocking VPNs, especially with Scramble turned on.

Apple has allowed Apple TV VPN apps for a few years now, but many providers still ship fairly basic living-room clients. Adding genuine protocol choice puts IPVanish a step ahead of rivals.

How to change protocols on IPvanish Apple TV app

There's no complicated setup involved. All existing and new IPVanish subscribers can access the protocols simply by updating to the latest version of the app from the tvOS App Store.

Once updated, open the app, head into its settings, and pick your protocol before connecting. New to the app entirely? Our guide to installing IPVanish on Apple TV walks you through it.

• Private Internet Access has rolled out its VPN for Android on F-Droid
• It provides de-Googlers with an alternative to sideloading
• It reinforces PIA's commitment to maintaining its open-source status

Open-source Private Internet Access (PIA) VPN has rolled out its Android app on the digital store F-Droid, a privacy-focused alternative to the Google Play Store.

The move comes to the delight of VPN users who don’t trust Big Tech and its notorious track record of privacy violations, but are also fed up with more old-school, DIY de-Googling alternatives.

From now on, PIA users will be able to safely download the Android VPN app directly from the community-run store dedicated to open-source Android apps. This ensures that the version is free of Google dependencies without users having to manually source and upgrade new versions themselves.

The best VPNs often benefit from independent third parties to prove their reliability, including through commissioning security reports or independent audits.

With PIA now available via F-Droid, PIA users can now rely on a community of privacy-conscious individuals instead of having to blindly trust a binary file provided by the VPN directly. "We pride ourselves on being a VPN where anyone can read the code we actually ship — landing on F-Droid is a natural extension of that commitment," said the company.

What is F-Droid?

To install a VPN, Google Play Store is usually the common way. However, some users steer clear of the tech giant, which has faced countless legal cases relating to privacy and is known for collecting vast amounts of user data, including for targeted advertising.

A breath of fresh air, F-Droid's catalog of free and open-source Android apps is run by a group of volunteers that builds every app from the public source code rather than from a file provided by the developer, and makes it available on its Google-alternative store.

Because all apps on F-Droid are open-source and compiled independently, users can be sure that the binaries are tamper-free builds of the listed source code.

What’s more, F-Droid volunteers carry out these checks on users' behalf by auditing the open-source code, inspecting the code to check that it contains no spying or any sort of malicious behaviour — so you don’t have to do it yourself.

Why a native PIA's F-Droid app matters

The digital store offers a far more reliable alternative to the more traditional method of sideloading your VPNs. This involves changing the device's security settings to allow the installation of apps from sources outside the Google Play ecosystem, including the VPN's website or alternative sites.

However, compiled binary code is opaque and has to come from somewhere, often the developer themselves. And by relying on the developer you are implicitly trusting their word — something that is easily abused.

Furthermore, with sideloading, you won’t receive the automatic notifications and pop-up messages from the official app stores that you would get via Google Play, which means you’ll need to monitor and install the APK manually to keep the app up to date — something that F-Droid takes care of.

To download the F-Droid app, you can visit f-droid.org in your browser and download and install the F-Droid APK; then install PIA once you've found it in the list of downloaded apps.

Ultimately, you are always relying on a third party unless you install the software yourself. But between a profit-driven company and a group of volunteers with a privacy policy that guarantees no shared accounts, no installation tracking and no adverts, we are sure the choice for many will remain a no-brainer.

• AdGuard VPN arrives in the Meta Horizon Store as a standalone app
• The new app encrypts all VR activity rather than just browser traffic
• It joins NordVPN, ExpressVPN in offering dedicated Meta Quest apps

Diving into virtual reality has often felt like stepping into a privacy blind spot, but the tools to protect yourself are finally catching up. Following the release of its VR browser extension in March, AdGuard VPN has now officially launched a standalone app for Meta Quest headsets.

Available directly from the Meta Horizon Store, the new dedicated app brings system-wide privacy and security to Horizon OS.

This marks a significant upgrade for users who previously relied on AdGuard's browser-only extension. Now, whether you're battling friends in multiplayer games, streaming Netflix, or simply exploring virtual worlds, your traffic is encrypted across the entire headset.

"AdGuard VPN for Meta Quest works just like our mobile apps: it encrypts your traffic, hides your IP address, and secures your personal data, giving you a safer, unrestricted, and completely private virtual reality experience," the company explained in its official blog post announcement.

AdGuard joins a growing — albeit still small — number of providers offering dedicated Meta Quest apps. So, if you are looking for the best VPN to secure your headset, your options just expanded.

Why AdGuard VPN's Meta Quest app matters and how to get it

Until recently, securing a VR headset required frustrating workarounds. Users had to configure a virtual private network (VPN) on their router, share a connection from a PC, or sideload an Android app using developer tools. The arrival of native apps eliminates these technical hurdles.

While the AdGuard browser extensions for its VPN and ad-blocker tools launched earlier this year were a welcome addition, it was limited in scope.

As Vladimir Ozersky, Lead Product Manager at AdGuard, notes: "This isn't just another platform for us, it's a leap forward in bringing distraction-free, secure browsing into immersive environments."

The new standalone VPN app takes that leap further by encrypting your IP address in gaming lobbies and dedicated streaming apps, where browser-level protections simply don't reach.

Installing the new app is just as simple as downloading any other Quest title.

Users can navigate to the Meta Horizon Store on their headset, search for AdGuard VPN, and install the app directly.

Once installed, you can simply sign in to your account to connect to one of its 80+ server locations. The app is compatible with the Meta Quest 2, Quest Pro, Quest 3, and Quest 3S.

The growing list of VPNs on Meta Horizon

AdGuard isn't the first provider to recognize the need for better VR security. The Meta Quest ecosystem has rapidly transformed from a privacy desert into a highly competitive space for cybersecurity firms.

ExpressVPN paved the way in February, launching an "industry-first hybrid" browser extension alongside a dedicated Meta Quest app. This launch made ExpressVPN the first major provider to offer full-device encryption directly on the platform, specifically pitching it as a way to combat ISP throttling during bandwidth-heavy VR gaming.

NordVPN then landed on Meta Horizon in June with its own native application. Much like ExpressVPN and AdGuard, the NordVPN app allows users to encrypt all data leaving the headset without resorting to complex router configurations.

For privacy-conscious users, this growing trend is excellent news. With three major players now offering frictionless, native applications, securing your digital footprint in the metaverse is finally as straightforward as protecting your smartphone.

• Windscribe has released deGDID, a free tool that targets a hidden Windows identifier that VPNs cannot mask
• The identifier surfaced in a US court case where it helped trace a suspect's PC across VPNs and three countries
• Blocking the identifier can break Microsoft account features like Xbox, Outlook, and the Store

Windscribe has built a new tool that takes aim at a form of Windows tracking that even the best VPN cannot switch off.

The tool, called deGDID, targets a little-known Microsoft identifier called the Global Device Identifier, or GDID. It is a server-assigned code tied to a Windows installation.

The GDID burst into public view in July after it appeared in a US federal complaint against an alleged member of the Scattered Spider hacking group, where Microsoft gave investigators logs that correlated a Windows GDID with IP activity. Investigators traced the machine through VPN obfuscation across multiple countries over roughly eight months.

What Microsoft's GDID is, and why a VPN won't help

A Microsoft representative described the GDID in the complaint as a persistent, device-level identifier designed to uniquely identify an installation of Windows on a device.

It survives Windows updates but not a clean reinstall, which generates a fresh one. The privacy risk appears when that stable ID is tied to telemetry, Edge browsing data, Microsoft Store records, and IP addresses, letting Microsoft reconnect the same machine across sessions and services.

A virtual private network (VPN) protects your traffic by masking your IP address and encrypting your data. The GDID sits outside that tunnel, at the layer where Windows talks to Microsoft's cloud, so it ties every session together no matter which IP the traffic came from.

Switching to a local Windows account doesn't fix it either. Windscribe found its test machine still created a GDID even as a local account, and after manually deleting the value from the registry, it reappeared after a reboot.

How Windscribe's deGDID works, and how to use it

Windscribe's deGDID uses hosts file modifications and firewall rules to block the registration paths Windows uses to fetch a GDID, and wipes known local identity artifacts.

To run it, download the degdid.ps1 script from GitHub and run it in PowerShell with administrator rights. Use the -Status flag for a read-only check, or -Protect for the full block, verify, and wipe routine, with an -Unprotect option to reverse the changes.

The tool deliberately refuses to run on managed, domain-joined, or corporate machines.

This is not a clean opt-out. In hands-on testing, the script ran without errors, but then broke logins to Xbox, Outlook, and the Microsoft Store because the firewall rules also cut off the connectivity those services depend on.

Windscribe warns it may also affect OneDrive, passkeys, and Windows Hello, cannot guarantee it catches every GDID pathway, and does not erase records Microsoft already holds server-side.

For most people, this is just another reminder of what it means to be a Windows user, but if you want to inspect or reduce the identifier, deGDID is currently one of the only tools that tries. And if you want a more comprehensive solution, Windscribe suggests giving Linux a go.

• Surfshark is retiring its private Search tool, blaming a lack of usage
• Already begun on mobile, the full shutdown is expected by the end of 2026
• The company says the move frees up resources for its Antiscam Hub

Surfshark is preparing to shut down Search, its built-in private search engine, for the simple reason that not enough people were using it.

In a note to TechRadar, the company confirmed that the tool, which is bundled with its One and One+ plans, will be wound down over the coming months.

Surfshark framed the decision as a way to free up resources for the areas its customers care more about, chiefly its Antiscam Hub.

The move is a notable trim for one of the best VPN providers around, a company that has spent recent years bolting extra privacy tools onto its app. Search was one of them, offering ad-free, tracker-free results with the option to switch regions.

Why Surfshark is retiring Search

The problem, by Surfshark's own admission, is that hardly anyone used it. The company told TechRadar that adoption stayed limited to a very small slice of its user base, and that retiring the tool lets it pour resources into higher-demand areas instead. Chief among those is the Antiscam Hub.

It's a pragmatic call. Standalone private search engines face stiff competition from established names like DuckDuckGo, Startpage, and Brave Search, and a search tool tucked inside a VPN app was always going to be a hard sell against them.

The wind-down is staggered rather than immediate. Search has already been pulled from iOS, and it will disappear from Android with the next app release in early August. For now, it survives on Surfshark's web app, so anyone who relies on it there has some time to choose their new alternative.

Surfshark says it will retire Search everywhere else by the end of the year, and tidy up any lingering mentions of it across its website.

Where the resources are going: the Antiscam Hub

In May, the company launched its Antiscam Hub for iOS, a dedicated section of the app that pulls five existing tools into a single interface: Personal Email Masking, Alternative Number, Dark Web Monitoring, Unsafe Site Blocking, and Identity Theft Coverage.

At launch, the hub didn't so much add new features as reorganize existing ones, and Surfshark billed it as the starting point for a roadmap of increasingly sophisticated security features.

That roadmap is now taking shape: the company told TechRadar it will soon reveal a completely new addition to the Antiscam Hub for both iOS and Android users.

It won't reach everyone, though. The new feature "will be part of the Surfshark One and One+ bundles," Gabriele Sinkeviciute, Head of Product at Surfshark, told TechRadar, adding that the company will assess future releases individually.

"The VPN is our foundation, but our focus is on building an all-in-one security product," Sinkeviciute said.

That tracks. Rivals including NordVPN have been consolidating their security tools into unified suites, as VPN providers push beyond simple traffic encryption. It also reflects a grim reality: US consumers reported losing about $15.9 billion to fraud in 2025, the highest on record and up roughly 27% from $12.5 billion in 2024, according to the FTC.

For now, the takeaway is straightforward — Search is on its way out, scam protection is the priority, and Surfshark says there's more to come.

• Proton VPN silently issued a major client-side rebuild of the existing WireGuard codebase
• Proton Protocols introduces automatic network conflict detection, quicker server connections, and an in-app connection rating system
• The upgrade is currently in beta on Windows, Android, and Linux

When choosing the best VPN to protect your digital life, the underlying architecture is just as important as the server count. Now, Proton VPN has quietly delivered a massive under-the-hood upgrade designed to turbocharge performance and bypass online restrictions more effectively.

Discovered in the version 5.1.5 release notes for its Windows application, the Swiss-based privacy giant has officially introduced Proton Protocols. Described as a complete client-side rebuild of the provider's existing WireGuard codebase, this new architecture entirely overhauls how the application communicates with Proton's global network of servers.

For everyday users, this translates to immediate, noticeable improvements in the app's responsiveness. The update promises quicker, more stable connections, alongside new smart tools designed to eliminate frustrating connection errors.

Notably, the update introduces automatic network conflict detection, which can identify when other software on your device — like a strict firewall or third-party antivirus — is interfering with your VPN tunnel.

The rebuild also serves a crucial purpose for users navigating restrictive digital environments. By overhauling the underlying code, Proton is actively boosting its anti-censorship capabilities, ensuring journalists, activists, and everyday citizens can maintain safe, unrestricted access to the open web.

Why Proton Protocols matters

The shift to the new Proton Protocols codebase isn't just a simple bug-fixing patch. It represents a foundational shift, originally teased in the provider's recent Spring/Summer 2026 roadmap, designed to unify performance and features across all operating systems.

A Proton spokesperson explained to TechRadar that the new codebase is easier to integrate with all the languages natively supported and can be deployed across platforms, while adapting to different environments and bringing improved feature parity.

"For example, it has allowed Proton VPN to bring the Stealth protocol to Linux, improve anti-censorship capabilities, and lay the groundwork for post-quantum encryption," said Proton's spokesperson.

In other words, by standardizing the codebase, the company can deploy complex features to operating systems that are traditionally left behind. And, beyond preparing the platform for next-generation security threats like quantum computing, the rebuild makes life significantly easier for the development team.

"Issues within our apps will be easier to diagnose and fix, and it unlocks the next generation of Proton VPN performance," the spokesperson added.

What else is new in version 5.1.5?

While the new architecture steals the spotlight, the 5.1.5 Windows release also packs in several important quality-of-life updates aimed at refining the user experience.

If you occasionally run into issues where a sudden app or device crash leaves your DNS rules active, potentially blocking your regular web browsing after disconnecting from the VPN, this update officially fixes that bug. It also patches a known reconnection flaw specifically impacting users with IPv6 connectivity.

Furthermore, Proton is leaning on its community to help fine-tune future updates by introducing a direct connection feedback tool. Users can now instantly rate their connection quality with a simple thumbs up or thumbs down directly within the interface.

While the 5.1.5 update brings these features to Windows users today, the wider deployment of the new architecture is still ongoing.

"The update is currently in beta on Windows, Android, and Linux, with Apple coming soon," the company confirmed to TechRadar.

• Post-quantum encryption is now live on Norton VPN's Mimic and WireGuard
• Rebuilt iOS and Android apps have slashed connect times by more than 50%
• Norton has added 12 new countries across Asia and Africa

Competition for the title of best VPN is fiercer than ever, and Norton is making a strong case for the crown. The cybersecurity veteran has just unveiled the final releases from its first-half 2026 roadmap, delivering a robust mix of future-proofed privacy tools, significantly faster mobile applications, and an expanded global footprint.

The standout feature of this latest rollout is the introduction of post-quantum encryption. This comes alongside improved Software Development Kits (SDKs) for its mobile apps and an expanded server network across Asia and Africa.

At first glance, these releases may appear to be separate features. But for the provider, they all address the same need — customers must count on Norton VPN, wherever they are.

As Himmat Bains, Product Lead at Norton VPN, told TechRadar, post-quantum encryption is crucial to protect users' data from future threats. Faster, more reliable mobile connections mean VPN protection is there exactly when they need it. And coverage in 12 new countries means that more people can connect locally.

"Different problems, same answer — we want this to be the VPN you can simply trust and forget about," said Bains.

Post-quantum encryption lands on Norton's Mimic and WireGuard

As quantum computing advances, cybersecurity experts have increasingly warned of "harvest now, decrypt later" attacks. This is a tactic where cybercriminals or state actors steal encrypted data today, hoarding it with the intention of cracking it when quantum computers become powerful enough to break traditional encryption standards.

To combat this long-term risk, Norton VPN has upgraded its proprietary Mimic protocol to utilize the ML-KEM-1024 encryption algorithm by default across all platforms.

The company is also rolling out the exact same post-quantum protection to the popular WireGuard protocol on both desktop and mobile devices, ensuring that user traffic remains fully secure against tomorrow's technological threats.

Turbocharging mobile performance

While future-proofing encryption is crucial for long-term privacy, everyday users will immediately feel the benefits of Norton’s revamped mobile experience. The provider has entirely rebuilt its iOS and Android SDKs, the underlying code architecture that powers its mobile applications, from the ground up.

The performance gains are impressive. According to Norton's release notes, the new mobile architecture reduces connection times by more than 50% and connection errors by over 60%. For mobile users who constantly hop between home Wi-Fi, public hotspots, and cellular networks, this means a much smoother, almost instantaneous protective shield.

Just as importantly, this rebuilt framework will allow Norton to ship bug fixes and new features much faster going forward. The overhaul has already paid immediate dividends, leading directly to a rebuilt mobile widget that patches previous usability issues users had been facing.

"

A broader network and a busy 2026

Beyond the apps themselves, Norton is continuing to scale up its physical infrastructure. The provider has added 12 more countries to its network, specifically targeting underserved regions across Asia and Africa.

This expansion brings Norton's total reach to an impressive 102 countries and more than 140 global locations, seamlessly building on the momentum of previous network upgrades earlier this year.

This latest announcement caps off a remarkably busy start to the year for the Norton VPN team.

The provider brought a native Amazon Fire TV app (Fire OS 8 and newer) in March and introduced the industry's first AI-native VPN for Agents in April. It also successfully added Split Tunnelling on Mac in June, joining its Android and Windows counterparts.

Furthermore, WireGuard is now live across Mac, iOS, and tvOS, with a new Pause VPN feature on iOS closing the platform's last functional gap. The company also rolled out 25 Gbps servers across busy cities and added Manual IP Rotation.

"Our goal is simple: deliver a VPN for the masses," Bains told TechRadar, arguing that these releases weren't about shipping a longer list; "it was about closing the gaps customers actually feel."

Looking ahead, Bains confirmed that Norton's second-half roadmap pushes even further, noting that "we'll have third-party audits for the third year launching later in the summer, along with meaningful updates coming to our streaming and performance.

Trust your VPN software updates keep you safe? Believe that downloading the latest release protects you from most known threats?

You might be surprised to learn that there could be a set of invisible vulnerabilities lurking inside your state-of-the-art VPN. That's because more than half of Windows VPNs we analyzed include OpenVPN code that hasn’t been updated in over a year — potentially leaving you exposed to a wide range of security and performance threats.

OpenVPN is a protocol that determines how data is encrypted and routed between a user's device and a VPN server. Thanks to its open-source status, it became the industry's de facto standard, serving as the foundation for many commercial VPN services.

Because OpenVPN is developed as a separate open-source project, however, VPN providers often update their apps while leaving the bundled OpenVPN component unchanged. New interfaces, bug fixes, and major features may arrive regularly, but the code responsible for the fundamental VPN connection may be severely out of date.

Cracking the kernel

This July, we audited 32 Windows VPN clients ranging from established, multinational companies to smaller, older and free apps, to check the OpenVPN version included in their latest release.

The results were shocking. A massive 56% (18 of 32) use an OpenVPN version that is more than a year old, 41% (14) use configurations that are over two years old, 22% (7) rely on code more than four years old. And a terrifying 12.5% (4) use code that is at least five years old.

Not all providers were equal. Perhaps unsurprisingly, many of the best VPNs — including NordVPN, Windscribe and Proton VPN — use OpenVPN releases as recent as April 2026. At the other end of the scale, Turbo VPN and VyprVPN continue to use OpenVPN 2.4.7 from April 2019.

It might seem logical that companies with greater commercial resources are the ones investing more into keeping the app's codebase up to date. But having significantly older versions of the OpenVPN protocol raises significant privacy and security concerns regardless.

A variety of hidden risks

So is this really a big deal?

Marijus Briedis, CTO at NordVPN, tells TechRadar: “Because OpenVPN — like any project — regularly patches vulnerabilities, hardens its codebase, and improves performance, running a version that’s years behind might miss security components that current up-to-date versions offer.”

Jason Xu, senior app developer at Windscribe, argues that previously disclosed vulnerabilities could actually be more serious, precisely because they have been documented. “An attacker doesn’t even need to find a new bug; they can just read the changelog,” he notes.

Indeed, OpenVPN regularly releases Common Vulnerabilities and Exposures (CVEs): six vulnerabilities were registered in 2025, six in 2024, one in 2023, and one in 2022. This means providers with older versions likely did not adopt the upstream releases containing those fixes.

Of course, the risks have nuances. Running an older version does not necessarily mean an application is vulnerable to every newly discovered flaw. For example, if an older build does not include a feature which later caused a vulnerability, it is unaffected.

Briedis stressed that security can be maintained through other means, including backported patches, vendor fixes, configuration mitigations and/or removing vulnerable functions. However, he said the real concern is when none of those measures are in place and when there’s no visibility into whether they are.

The issues involved can be broad and numerous. Outdated dependencies, like running an older version of OpenSSL, are just some of the potential issues.

There is also a broader maintenance cost. According to Dr. Peter Membrey, Chief Research Officer at ExpressVPN, older versions can become increasingly difficult to integrate with current operating systems and cryptographic libraries. “Being several years behind can indicate a growing body of security, compatibility, and operational debt,” he says.

Ultimately, “the further behind you fall, the harder each upgrade gets,” Xu adds. “That’s the trap. Nobody decides to be five years behind; they just keep saying ‘next quarter’”.

A question of stack

Adopting a new OpenVPN release is a fundamental change requiring compatibility testing across platforms, regression checks, staged rollouts, and validation that nothing breaks in the software stack — a process which often takes months to complete.

Because of that, VPN providers say they are not obliged to adopt every upstream release.

NortonVPN, which is in the process of moving to the cutting-edge OpenVPN version at the moment, explains that each update needs to be assessed and tested carefully to make sure it delivers clear benefits without introducing stability, performance, or compatibility issues for customers.

Indeed, Karolis Kaciulis, Leading System Engineer at Surfshark, agrees that a six-to-18-month delay can be reasonable provided critical vulnerabilities are addressed promptly.

Some VPN providers whose updates date back more than two years have cited specific reasons to justify the delay.

StrongVPN, for example, states that work on its proprietary internal protocol has postponed the planned update to OpenVPN 2.7. Meanwhile, ClearVPN claims to ensure security by applying its own security patches.

Finally, PureVPN states that it is staying with OpenVPN 2.6.12 because it has developed custom technologies based on that version and because OpenVPN 2.7 removes support for the Wintun driver.

Time to DIY

So what can you do? Is it time to shun anyone not using the most recent version of OpenVPN?

Not necessarily. Many providers now use newer protocols like WireGuard by default, which generally benefit from more active maintenance.

In fact, several providers are in the process of phasing out OpenVPN support for faster, more agile protocols.

Proton VPN is one of the providers keeping pace, running one of the most recent OpenVPN builds on its Windows app. However, a spokesperson said that over time, the company "will start to phase out OpenVPN support in our client apps" while retaining the protocol on servers for legacy routers and older devices.

The spokesperson also noted that the protocol is "slow and bloated" in comparison to Proton VPN's Stealth and WireGuard protocols, though OpenVPN remains "robustly secure."

So whether you're using an app with the latest OpenVPN configuration or not, it might be worth switching protocols anyway.

But if you really want to know, you can audit your VPN by checking the client settings, diagnostic logs, or official release notes to confirm which version of OpenVPN your provider is using and when it was last updated.

A key red flag is protocol dependencies that are more than 12 to 18 months old without a documented security or compatibility reason as it may suggest that critical security updates have been delayed.

If you're still unsure, you can always contact your VPN provider's support team to receive more transparent info about timelines for protocol updates and security patches.

Ultimately, the risk to your security may well be limited. However, in the world of VPNs — where attention to detail in regards to security is the currency of providers — one might well ask: “Why not simply support the latest and most secure option?”

Why not indeed…

If you're looking to get ahead for college in the fall, then a VPN is one of the most sensible back-to-school staples to tick off your list now. You're going to spend a lot of time connected to campus Wi-Fi and it's often not as user-friendly as it might seem.

For sure, there can be security concerns when connecting to any form or public network, which a VPN can help with, but its best use at university is to make sure you can access all the content that you usually do at home.

That's because campus Wi-Fi can be very restrictive. These are networks that have to manage huge bandwidth demands, maintain cybersecurity, and also comply with legal requirements.

That means that they often limit access to certain usage-heavy services, and sites and apps that are more in a grey area when it comes to safety and the law. Think video streaming, online gaming and torrenting, for examples, as three activities that you might find curtailed.

But, if you're using a VPN on your device, the campus network in question won't be able to see what internet sites and services you're accessing, so it will be blind to you and your activities.

It will probably be able to see that you're using a VPN, the amount of bandwidth your device is using and what your device is but your online deeds will remain private. So, if you're headed to college this year, you might want to think about getting a VPN.

Right now, IPVanish is a good choice for college students. It does a great job of keeping your digital life private and, just as importantly, it's cheap!

At $2.19 per month, IPVanish is solid, 4-star VPN and is only short of the very best VPNs on features like server count and some streaming service unblocking that's not a priority for this use case.

It does also have a unique privacy feature which may be handy for your browsing too.

IPVanish's Secure Browser is remote browser software that runs on an IPVanish cloud server. The sites and services you then navigate to have no idea about you or your device at all. They only connect with the cloud server.

That means the session cannot be linked with you at all and no trackers, cookies nor anything else can come your way. It also protects you from any malware or any other nasty things that you stumble across. Definitely worth using when you're searching the darker corners of the web.

Along with IPVanish's standard features, that should have you covered for all the college dorm internet use cases you'll have. Give it whirl.

There are some very good and obvious reasons why a VPN should be part of your summer holiday plans.

Anyone who's ever had to rely on crawling hotel Wi-Fi speeds or faced blocks on their regular home streaming services while abroad will understand the frustration, and a VPN is a great solution for both of those.

A VPN will mask your online activities to make sure you can access whatever you like on public Wi-Fi without the network restricting your bandwidth or recording the sites and services you go to.

You can also use a VPN to supply you with an IP address of any country in the world, of course. That means that your device can appear to be connecting from back home and you won't get blocked from accessing iPlayer, Sling or any of your other regular streamers.

All good VPNs offer these things, and for a few dollars a month, it's well worth downloading one for this year's summer vacation.

If you are going to give that a try, then you should have a think about IPVanish. It's a very good VPN – not the best VPN, but a very good one – but the reason it's a good choice for your travels this time is that an IPVanish subscription currently comes with a free eSIM to use for 30 days too.

Compare that to ExpressVPN – the only other recommended VPN company that offers a free eSIM right now. First, ExpressVPN's plans are twice as expensive ($2.19 per month vs $4.49 per month) but, secondly, you only get access to your eSIM for 3 days with ExpressVPN!

Sign up to the IPVanish Essential plan ($2.19 per month) and you'll get 3GB for 30 days. If you go for the Advanced plan ($3.29 per month), then it's 5GB for 30 days.

The other good reason to try Advanced is that it comes with access to a cloud based browser called Secure Browser. This means that you'll do all your browsing and service accessing from IPVanish's cloud servers, instead of your own device, while on shared Wi-Fi networks. There's no way that any restricting network will have any idea of what you're doing and that should mean you're scot-free to access whatever you need with minimal disruptions.

You can read more about IPVanish and Secure Browser here. Have a great vacation and happy travels!

• NordVPN has launched HangUp, a free anti-scam call Android app
• HangUp needs just a free Nord account to get started
• The app is built upon NordVPN's existing Call Protection technology

NordVPN has released HangUp, a standalone Android app designed to identify and block unwanted calls that's completely free to use.

HangUp identifies and categorizes incoming calls, displays caller information, and lets users block entire categories such as scam or telemarketing calls. It's a notable move from a company better known for topping best VPN lists, and it signals another step in NordVPN's shift toward becoming an all-in-one security brand.

NordVPN research says that 2 in 5 Americans feel unsafe because of scam calls, and for many people, dodging fraudulent numbers has become a daily chore rather than an occasional annoyance.

"Scam calls are a basic digital safety problem at this point, and we felt that basic protection shouldn't be behind a paywall," NordVPN's spokesperson told TechRadar, explaining the reason why the company decided to build a free app.

The app is available worldwide on the Google Play Store, and NordVPN confirms to TechRadar that they are working on making it available for iOS soon.

Why a free call-blocking app is needed

The state of spam calls varies depending on where you live, but according to NordVPN's survey, nearly two in five Americans say they feel unsafe because of scam calls.

Plus, according to Hiya's State of the Call 2026 report, Americans receive an average of 10 unwanted calls a week, and nearly 30 million lost money to a phone scam in the past year, with an average loss of $682.

How HangUp works

HangUp is powered by NordVPN and uses caller reputation data to flag potentially harmful numbers before you decide whether to pick up. When a call comes in, the app checks the number, warns you if it looks like spam or a telemarketing attempt, and can sort callers by type so you know what you're dealing with at a glance.

The blocking works at the category level, so rather than blacklisting numbers one by one, you can choose to automatically block entire groups such as scam or telemarketing calls.

HangUp can also handle that blocking for you automatically, and it keeps weekly, monthly, and yearly stats so you can see how many unwanted calls it has stopped.

The provider already offers a Call Protection feature built into the main NordVPN app, which flags suspected scam calls before you answer and requires a premium subscription. That feature was developed in partnership with Hiya and has been rolling out to Android and iPhone users across a growing list of countries.

HangUp, by contrast, is a separate, standalone app that doesn't need a paid NordVPN plan at all. It brings the same core idea, warning you about and blocking dodgy callers, to anyone willing to sign up for a free Nord account.

Getting up and running is straightforward.

Download HangUp from the Google Play Store on your Android phone, sign in with a free Nord account (or create one on Nord’s website if you don't have one), and grant the app the caller ID and spam permissions it needs to screen your calls.

• NordVPN has begun a server-by-server upgrade until the end of 2026
• Every machine gets a newer Linux distribution, kernel, and IP address
• App users should notice little beyond the occasional reconnection

NordVPN has kicked off a months-long overhaul of the software running its VPN servers, a rollout that started in July and will continue, one server at a time, until the end of 2026.

Despite the scale, this isn't a feature update. TechRadar's best VPN pick is replacing the foundations beneath its network: every standard VPN server is moving to a newer Linux distribution, picking up an updated kernel, and getting a reworked software stack.

The one change users can actually see is the addressing. Every upgraded server is issued a new IP, which is harmless if you use the NordVPN app, but a headache if you don't.

A new Linux base for every server

NordVPN frames the work as maintenance rather than a redesign, and is explicit that it won't add features or change how the service behaves. The stated payoff is a more flexible environment for its engineers to automate, maintain, and scale.

Four things are changing: a newer Linux distribution carrying current security fixes, newer kernels, an optimised software stack aimed at server efficiency, and a different IP address on every upgraded machine.

Each server needs a brief reboot to get there, which is less disruptive than it sounds given NordVPN runs a diskless, RAM-only fleet on hardware it owns and colocates in third-party data centres. That architecture has been examined repeatedly in the provider's Deloitte no-logs audits.

What you'll actually notice

Very little, for most people. NordVPN says app users don't need to do anything, and the client will reconnect automatically if the server you're on drops out mid-session. Expect a short interruption while that happens.

Recent releases were built with this in mind. The provider's July Linux release notes describe the app switching you to another server in the same country, city, or group when yours goes offline, with the kill switch standing guard during the handover.

There should be an upside once the dust settles: steadier performance at peak times, more traffic capacity per server, and fewer disruptions down the line.

That builds on April's milestone, when the network passed 100 Tbps of aggregate capacity across 211 locations in 135 countries, with servers deliberately run at roughly a third of their limit to leave headroom.

The exception: manual setups

If you connect manually, using OpenVPN config files on a router, a NAS, or a bare Linux box, your setup will stop working once the server it points at has been upgraded.

The fix is easy but not automatic — download replacement config files from the manual setup area of your Nord Account once the server is back online, then swap out the old ones. NordVPN says the new files carry a "Verified" badge so you can tell which are current.

• ExpressVPN has launched passkey sign-in for passwordless logins
• Passkeys are more resistant to phishing, but passwords remain a backup
• The feature arrives as part of a redesigned ExpressVPN+ dashboard

One of the best VPN providers is retiring the password, at least as a requirement.

ExpressVPN has added passkey sign-in, giving users a way to get into their account without typing anything at all.

Instead of a password, you sign in using the screen lock already on your device, such as a fingerprint or face scan. That means nothing extra to remember and nothing to key in each time.

The change was announced on Tuesday (July 21) and is part of a wider redesign of the ExpressVPN+ dashboard, which the company is turning into a single home for your entire subscription.

What is new in ExpressVPN+

ExpressVPN+ now supports passkeys, so you can reach your account without entering a password. The company notes this can make life easier when you are setting the VPN up on a new device.

The redesigned dashboard sits behind that login. Rather than hopping between separate apps and account pages, you get one view of what is protecting you, which products you have set up, and anything that needs attention.

Depending on your ExpressVPN plans and regions, ExpressVPN says it can pull in insights from tools like ExpressKeys and Identity Defender, and you can also buy and manage holiday.com travel eSIMs from the same place.

How passkeys work, and why they are safer

A passkey swaps your password for a pair of cryptographic keys. The public key lives on the service's server while the private key stays locked on your device, and no shared secret ever travels across the network for an attacker to intercept.

That design is what makes passkeys resistant to phishing: there is no password to trick you out of, and the credential only works on the genuine ExpressVPN sign-in page.

It is an approach Apple, Google, and Microsoft have all backed, and one ExpressVPN has already brought to its ExpressKeys password manager.

To enable one, sign in to your ExpressVPN account, select your profile in the top-right corner, choose Account & Billing, and follow the prompts to add a passkey.

If you use ExpressKeys, you can save the passkey there alongside your other logins. And if you would rather stick with what you know, your password will keep working as another way in.

• Proton VPN's Stealth protocol is now available in beta for Linux GUI users
• The obfuscation feature disguises VPN traffic to better evade censorship
• It is currently supported on Debian, Ubuntu, and Fedora distros

In a major win for open-source enthusiasts, Proton VPN has officially launched its proprietary Stealth protocol in beta for Linux. Known for being one of the best VPN services on the market, the Swiss provider is continuing its push to bring the Linux experience up to par with its Windows and Mac counterparts.

Announced on its official Reddit account, the release introduces powerful obfuscation capabilities to the platform. In simple terms, the Stealth protocol makes your VPN connection look like regular, unencrypted internet traffic, allowing you to bypass aggressive internet blocks and firewalls in highly censored regions.

Speaking directly to TechRadar, the Proton VPN team confirmed the rollout, noting the strong demand from the open-source community. "Our Linux community has been vocal about their desire to receive Stealth protocol support, and we're pleased to now make this a reality," a Proton spokesperson said.

Being a beta release means that users may encounter instability and bugs. That's why Proton encourages users to report any issues. "We welcome as much user feedback as possible," Proton told TechRadar.

Proton also confirms that Stealth is only available on the Debian, Ubuntu, and Fedora distros at the moment, with more coming by the end of the summer. If you are looking to test the feature today, it is worth noting that it is currently limited to the Proton VPN Linux GUI (graphical user interface) app.

Flying under the radar: Why Stealth matters for Linux

Authoritarian governments, restrictive internet service providers (ISPs), and strict workplace network administrators frequently use a technique called Deep Packet Inspection (DPI) to detect and block VPN traffic.

Standard VPN protocols, like OpenVPN and WireGuard, have distinct cryptographic signatures. Even if your data is securely encrypted, DPI can analyze the metadata of your connection, spot those signatures, and immediately cut your access to the broader web.

Obfuscated servers, like those utilized by Proton's Stealth protocol, strip away this identifying metadata. By wrapping the connection to make it look like standard HTTPS web traffic, Stealth effectively hides the fact that you are using a VPN in the first place.

As Proton notes, "Linux users now have an effective, straightforward way to disguise their VPN traffic. The Stealth protocol helps avoid Deep Packet Inspection, and makes it harder for a VPN to be detected and blocked."

The Stealth beta release is part of a much broader strategy to revamp Proton's offerings for Linux.

Over the past year, we have seen the provider promise a complete Linux makeover, bringing parity across its desktop clients. Since then, the company has delivered official one-click installs to the Snap store, introduced better stability updates, and most recently, expanded its capabilities with a new split-tunneling feature.

Bringing Stealth to Linux fulfills one of the major promises Proton made earlier this year. It also reaffirms that users running open-source operating systems aren't left behind when it comes to vital anti-censorship tools.

While CLI (Command Line Interface) users will have to wait a little longer, this GUI beta is a massive step forward for digital freedom.

Beware of low-price or early stock Samsung Galaxy pre-orders after the July 22 Galaxy Unpacked 2026 event. They might be too good to be true.

Scammers will be praying on those looking for stocks of the just-announced Flip 8 and Fold 8 handsets and anyone looking for a cut-price deal or an early release unit should watch where they browse.

There will be fake shops out there ready to take your money, your identity and maybe drop you some malware all at the same time.

There are some simple things you can do before you buy, though. Check the URL of the store you're in. It may look like one you know but AI has made it incredibly easy to create and clone pages that look legitimate.

If you don't recognise the store and it's offering a Samsung Galaxy deal or Flip and Fold 8 stock that you can't find anywhere else, then it's very likely a scam.

There are free tools you can use, such as link checkers from the likes of Google and NordVPN. These will, analyse the page before you have to click on the link, and will let you know if the page has been compromised in any way, i.e. if there is any malware or phishing attacks waiting on the other side.

They're excellent in any situation where you're not sure about a link you're looking at or have been sent.

To keep yourself super safe, though, an extra layer of protection is advisable. There are browsers that can keep your more secure but it's hard to beat a browser that isn't even on your device in the first place.

IPVanish is a VPN that comes with a unique feature called Secure Browser which does just this. It's cloud-based software that you connect to from your device and then use to go online.

Because the browser isn't actually on your phone or laptop, it means that any site or service you access has no knowledge of you or your device at all. It can't follow you with trackers or cookies and it can't upload any malware or nasty code because it can't see you at all.

Combine that with the link checker and you'll avoid getting taken in by the fake shops and scams.

IPVanish is one of the VPNs we recommend. It's cheap, at $2.19 per month, and comes with a fast and wide spread server network which means you'll get good internet connection speeds when using it, and will be able to use an IP address that makes you appear to be in almost any country in the world.

There are more high spec, and more expensive, VPNs out there but you won't find any with a feature like Secure Browser too.

Do take a look at IPVanish if you want to add a little more safety to your surfing, and please be careful when you're searching for deals at any big events like Samsung Galaxy Unpacked 2026.

• PIA rolls out phased network upgrades, urging users to update their apps
• Updates are aimed at routing, capacity, and everyday reliability
• It has been since 2024 that PIA hasn't released a substantial app update

Private Internet Access (PIA) has just announced network infrastructure updates rolling out across parts of its system, and is asking users to update their apps to get the full benefit.

The changes are less about flashy new features and more about the plumbing: routing, capacity, and the day-to-day reliability of staying connected. PIA says the latest app versions include logic built to work with the upgraded backend as it rolls out region by region.

The announcement comes after a long quiet period from PIA. It has been since 2024 that the provider hasn't released a substantial app update.

While it remains a strong pick among the best VPN services thanks to rock-bottom pricing, deep customization, and a repeatedly audited no-logs record, its pace of visible improvement had lagged behind rivals like NordVPN and Surfshark.

What PIA is actually changing

As described in a blog post, the update centers on three practical improvements.

The first is smarter automatic reconnections. PIA's teams routinely take VPN servers offline for maintenance, and older app versions sometimes left users with dropped connections or manual reconnects. The refreshed logic is designed to ride out maintenance more smoothly and cut avoidable interruptions.

The second targets a persistent user gripe: CAPTCHAs. Because large VPNs funnel many people through shared IP addresses, websites often flag that traffic and throw up endless verification prompts.

The company says it has made routing and IP-management changes to distribute traffic more evenly, which may cut those challenges, though whether a site decides to throw a CAPTCHA at you or not is ultimately out of PIA's hands.

The third improvement concerns location accuracy. PIA has updated parts of its localization data so selected locations line up more accurately with the region you chose, meaning more relevant local search results and other regional content.

A phased rollout

These upgrades are not landing everywhere at once. PIA describes the rollout as phased, with some locations already on the newer platform and others still being migrated.

That is why it is nudging everyone to update now, as keeping your app current ensures you benefit the moment the improvements reach your region.

The latest versions span Windows, macOS, Linux, Android, iOS, and tvOS, available through the App Store, Google Play, or a direct download from PIA's site.

Does it address the criticism?

Such a substantial update is a meaningful, if measured, step from PIA. Still, it doesn't touch the areas where PIA has slipped most against rivals. These include raw speed — where our latest testing recorded a notable drop — and streaming unblocking, which has grown patchier.

That said, the provider's core strengths remain intact, including its large US server footprint, open-source apps, port forwarding, and a no-logs policy Deloitte has now verified across three audits.

For existing subscribers, the takeaway is simple: update the app for steadier connections and possibly fewer verification loops.

For anyone weighing PIA against the competition, these updates smooth over some rough edges without changing the wider calculation. It remains one of the best-value, most customizable VPNs around, just one still with ground to make up on speed.

• Surfshark adds thousands of servers to its FastTrack optimisation feature
• The technology now spans over 2.000 servers
• The VPN is gathering user feedback for further expansion

It was August 2025 when Surfshark told TechRadar that it would expand its custom-built FastTrack technology — its feature designed to optimise VPN traffic routing — and we’re pleased to confirm that it has kept its word.

In a recent post shared on X, Surfshark announced that it has upgraded its infrastructure, making the technology available on more than half of its servers across all continents.

In practical terms, this means that FastTrack, which promises speeds 70% faster than even the best VPNs, is now available on around 50% of its current network of 4.500 servers. If you’re a user, chances are it’s already available in your city too; just check for the FastTrack icon in the server list to find out.

A wide network upgrade

FastTrack is an optimization feature that Surfshark uses on part of its server network.

Rather than simply routing the user via a single virtual private network (VPN) path to connect to a server, FastTrack's algorithm calculates the actual latency values detected within its network to identify the fastest route to that specific VPN server.

Specifically, globally distributed probes run speed tests, measure latency, and save the results to determine the best-performing route for a user located in a specific country who needs to access a specific VPN location.

The system differs from traditional systems, where a server establishes a direct connection with the VPN server, and traffic follows the available route. With FastTrack, all network nodes are constantly monitored. Something that allows the system to continuously select the optimal connection.

Karolis Kaciulis, Leading System Engineer at Surfshark, claims these calculations optimise routes regardless of their geographical location. "For example, if a longer path can actually enhance performance due to better conditions, as it uses more advanced routers or higher-capacity cables, FastTrack will select it."

While the feature was initially limited to just three servers (Sydney, Seattle, and Vancouver), Surfshark has now converted more than 2.000 of its exit nodes to FastTrack, allowing users to connect to a much wider range of new servers that can benefit from the same speed boost.

The expansion seems almost a natural progression and follows the VPN provider’s announcement in October 2025 regarding a massive expansion — both in quantity and quality — of its global server network.

Last year, Surfshark indeed released another innovative self-healing VPN tool, Everlink. The feature aims to ensure connection stability even in the event of serious malfunctions or service interruptions.

More than speed

Of course, speed is obviously the main advantage of FastTrack, but using FastTrack also brings additional benefits, Surfshark claims.

For example, it ensures a significant reduction in routing errors, as one of the key features of Nexus — Surfshark’s routing infrastructure — is precisely its redundancy.

Indeed, as Nexus offers multiple routes within the network, if one route encounters a problem, traffic can be automatically redirected via another available route, thereby helping to prevent interruptions or slowdowns.

Surfshark also claims that FastTrack improves the VPN service overall, as it operates on a different data center network from traditional ISPs, naturally reducing the likelihood of throttling or various network limitations.

So, are there any drawbacks to this unique technology? Probably the most pressing issue currently is that it is only available on Surfshark’s VPN app for Mac. These limitations have already prompted some users online to call for an Android version as well.

"We are connecting user feedback to help determine where to expand next," a Surfshark spokesperson told TechRadar, fuelling hopes that new updates are already on the way.

• Proton VPN received 47 legally binding data requests in the first half of 2026
• The company could turn down every single one
• Proton's no-logs policy means the data authorities want does not exist

When a government comes knocking for user data, most companies face a simple choice: comply or fight. Proton VPN's latest transparency report points to a third option, which is having nothing to give in the first place.

The Swiss provider, regularly ranked among the best VPN services, updated its transparency report on July 14. It revealed 47 legally binding orders in the first six months of 2026 — more than the total number received in 2019 and 2020 — each one trying to identify a user connected to a specific server at a specific time.

All 47 were denied. "Proton VPN had no user data to hand over because our strict no-logs policy means we don't store the information in the first place," a Proton spokesperson told TechRadar, adding that all 47 requests came from Swiss authorities.

That brings Proton VPN's running total to 458 orders since 2019, with not a single one fulfilled.

The requests Proton VPN cannot answer

Every order in the report followed the same path. Authorities handed over a server IP address alongside a timestamp and asked Proton to name the person behind it.

The company says it cannot make that link because it never records it.

Under its no-logs policy, Proton VPN does not store the browsing activity, DNS queries, or connection metadata that would tie a user to a session. So, a binding order leaves nothing to produce.

A no-logs promise is only as good as the proof behind it.

In June, Proton VPN passed its fifth consecutive annual audit. European security firm Securitum inspected server configurations and interviewed staff on-site in Zurich.

The auditors found no records that could link a user to activity on a reviewed server. Because Proton's apps are open source and the full reports are public, users do not have to take the claim on trust.

The audits are point-in-time snapshots of sampled servers rather than blanket guarantees, but that level of regular, published scrutiny remains rare among consumer VPNs.

The Swiss factor, and its expiry date

VPN jurisdiction is the other half of the story. Swiss law does not force VPNs to keep connection logs, and Article 271 of the Swiss Criminal Code bars Proton from handing data to foreign authorities directly. Only a Swiss court order is binding, and Switzerland sits outside the 5, 9, and 14 Eyes intelligence-sharing alliances.

That edge, however, may not last.

A proposed revision to Swiss surveillance rules — currently halted and under revision after backlash — could require services with more than 5,000 users to identify customers and retain data for six months. Proton has already begun moving infrastructure abroad in response and has warned it could leave the country entirely if the law passes.

For now, it remains Swiss, and the 47 rejections show what that still buys.

ExpressVPN has kept its 30-day money-back guarantee on pause after launching a new promotion to follow its previous World Cup promotion.

The ExpressVPN Summer Tech Competition / Sweepstakes will see the company give away 30 new iPhone 17 Pros, with the caveat that users are not covered by ExpressVPN’s usual 30-day money-back guarantee.

The promotion runs from 11 July 2026 to 11:59 pm BST on 9 August 2026, directly following the ExpressVPN FIFA World Cup 2026 Ticket Giveaway event, which ran from 10 June 2026 to 11 July 2026.

During the promotion, each new sign-up gains 10 entries into the iPhone 17 Pro raffle, with the caveat that all sales are final during this period.

This means that ExpressVPN will not have offered its usual 30-day money-back guarantee for 60 days by the time the Summer Tech Sweepstakes promotion concludes.

Mixed reactions

On the surface, it might seem like ExpressVPN’s decision to remove the money-back guarantee during these promotional periods is logical.

After all, if the option for a refund were still available after entering a raffle for World Cup tickets or a new iPhone, users might attempt to game the system by entering the contest and then cancelling their ExpressVPN plan if they win.

However, ExpressVPN electing to deny users a money-back guarantee for two consecutive months has worried some users, representing a break from industry-standard practice.

Feedback to the decision has been mixed at best, with multiple commenters in the r/Express_VPN speaking out. User QueenBe12 warned others to “be careful” while user rockyyguy called the move “predatory business”, asking "who came up with this idea?"

In a statement given to TechRadar, ExpressVPN said: "ExpressVPN sometimes runs optional, limited-time promotions — such as the current prize draw — which customers can choose to join.

These promotional plans are clearly identified and disclosed at the point of purchase, including that they offer additional benefits, such as prize-draw entry, in place of the 30-day money-back guarantee. This allows customers to make an informed choice about which option best suits them before they subscribe.

Whether a money-back guarantee is offered or not, customers' statutory rights are unaffected. Anyone on a promotional plan can also contact ExpressVPN Support to request a refund, and each request is considered on its merits."

Why are money-back guarantees important for VPNs?

Like most software services, VPNs can be paid for as monthly subscriptions – but almost all VPNs offer huge discounts for signing up to one- or two-year-long plans.

In the case of ExpressVPN, a two-year plan offers an 84 per cent discount versus renewing monthly, and you get four extra months free of charge.

As such, when we talk about VPN pricing here at TechRadar, we’re usually referring to the price of one of these extended plans. It’s typically the most economical choice for most users.

However, our price-based recommendations are usually made in the context of money-back guarantees, which protect users from long payment plans if they sign up to the wrong option or realize that a certain VPN isn’t for them.

These guarantees are offered by many of the best VPNs, and many smaller and mid-tier brands will provide them as well. NordVPN and Surfshark VPN both offer 30 days; CyberGhost bumps this up to 45 days, and Norton VPN gives users a full 60 days.

This is all to say that ExpressVPN removing its money-back guarantee, even for a promotion, is a pretty big deal and a genuine reason to consider avoiding a longer plan until the promotional period concludes.

So, if you’re still keen on picking up ExpressVPN, consider picking up a monthly plan or waiting until 10 August for a longer plan, and be sure to check out our ExpressVPN review for an in-depth breakdown of its features and performance.

In the past year I've spent tens of hours streaming with VPNs, and one thing is consistently problematic for even the best VPNs — live events.

So, if you're traveling and keen to catch the World Cup final this weekend, you might think you're stuck. Thankfully, NordVPN proved to be the one streaming VPN I tested that consistently performed well in these scenarios.

Over the past year, I've used NordVPN with Peacock, BBC iPlayer, TNT Sports, ITVX, and 7Plus. And compared to any other VPN, it's proved the most effective.

I experienced the least delayed streams, the least buffering, and, most importantly, the fewest complete connection dropouts when using NordVPN. So, while cheaper alternatives such as Norton VPN and Surfshark exist, if you want the most reliable performance, this is where I'd put my money.

If you don't want a long term commitment, you could always choose to pick a monthly plan. For $15, you can watch the rest of the tournament and gain all the additional security benefits that come with a VPN.

You don't need NordVPN's most advanced features to watch the World Cup with a VPN. That's a good thing, as right now its premium plans are considerably more expensive than many other providers.

With long-term plans, Surfshark plans start at $2.49/month, a full dollar cheaper per month; the same goes for Norton VPN. If you're really budget-focused, both PIA and Cyberghost are less than $1.60 per month right now, too.

But, should you choose a NordVPN Plus plan or above, you do get some great perks. NordPass, the best password manager we've tested, cloud storage, dark web monitoring, and more are on offer.

It's worth mentioning that buying the more premium plans monthly will set you back at least $20, so I'd recommend signing up for a longer duration if you prefer these extra features.

• PrivadoVPN has added a built-in MCP server to its Windows, macOS apps
• It lets MCP-compatible AI tools manage your VPN connection
• The server is opt-in, runs entirely on the device, and is restricted to localhost

The latest update from PrivadoVPN hands the keys to your VPN over to your AI assistant.

The provider has built a Model Context Protocol (MCP) server into its Windows and macOS apps, letting compatible AI development tools connect to and control your connection directly from your coding environment.

MCP is the open standard Anthropic introduced in late 2024 to link AI systems with external tools and data. By adopting it, PrivadoVPN joins a growing list of providers wiring their apps into the agentic era, allowing the best VPN services to be driven by natural language rather than menus and toggles.

What PrivadoVPN's MCP server does

PrivadoVPN's server plugs into MCP-compatible tools including Claude Code, Codex, Cursor, LM Studio, and Visual Studio Code.

Once it's running, an assistant can connect or disconnect the VPN, switch server locations, and check your current connection, IP address, and status. It can also list available locations, swap between WireGuard, IKEv2, and OpenVPN protocols, toggle the Kill Switch, and run basic network diagnostics.

Under the hood, the server is a local HTTP component embedded in the client. It listens on a fixed port (5801 by default) and is restricted to localhost, so it cannot be reached remotely. Commands run through the official PrivadoVPN app, and any change shows up instantly in the interface.

Security sits at the centre of the design. The server is off by default and has to be switched on by the user; it never leaves the device, and every action is executed by the PrivadoVPN client itself rather than handed to the AI.

The company pitches the feature to developers, QA teams, and power users who routinely run tests across different regions and VPN configurations.

You can see all the technical details on PrivadoVPN's support page.

How to use PrivadoVPN's MCP server

To turn it on, users need to open the PrivadoVPN app, head to Settings, then Application, and turn on the MCP Server option. Once saved, it runs quietly in the background.

From there, you point your AI tool at the endpoint, http://127.0.0.1:5801/mcp.

In Claude Code, for example, a single terminal command registers it, while Codex, Cursor, LM Studio, and VS Code each take a short JSON snippet in their MCP configuration.

The VPN and AI agents race

PrivadoVPN is only the first of a growing but still small list of VPN providers joining the AI agents race.

ExpressVPN, for example, claimed an industry first in March when it launched an MCP server in beta for its desktop apps. Siilarly to Privado, also ExpressVPN's tool is opt-in, local, and covered by its strict no-logs policy.

Norton VPN went further with its "VPN for Agents", an AI-native tool that spins up temporary, Docker-based tunnels so each agent and task gets its own separate connection.

Windscribe took a different route, releasing a skill that lets agents such as OpenClaw drive its command line interface (CLI) on a dedicated machine, while PureVPN turned ChatGPT into a conversational assistant that recommends servers and connects through deep links.

Update 15/7/2026 : This article originally described the new features and fixes in the context of Nym's iOS app. The piece has been updated to reflect the update on other platforms.

Nym Technologies has released a major update to the NymVPN app across various platforms, adding several new connectivity and convenience features.

At the core of the update are new features designed to give users control over the balance between privacy and performance.

NymVPN is one of the more technical VPNs on the market. Central to its operation is the titular Nym mix network, or mixnet, which hides user metadata by routing traffic through a mixture of servers, scrambling IP addresses on both sides of the connection.

At the same time, a blend of other users’ traffic and decoy traffic is sent through the same mixnet, making it effectively impossible to trace any actions back to you.

NymVPN has seen several notable improvements of late. After being named one of TechRadar's VPNs to watch in January 2026, NymVPN added post-quantum encryption as standard in June this year, split tunneling for Windows users in April, and an ad-blocker earlier in 2026.

It now resembles a typical VPN a little more closely, though the new features and fixes included in the 2026.11.0 title update (labelled 2026.11.2 on Android) are a bit more complex than your typical VPN update. Read on for a breakdown of the new features.

Key features

The update introduces Server Families, a new alert system that lets users know when their chosen mixnet servers may belong to the same operator or subnet. This allows users to maintain decentralization by choosing servers from different operators for each node in the mixnet.

All Nym servers are community-run and decentralized using blockchain technology, but using different operators for each node maximises the possible obfuscation of network traffic.

Additionally, the update adds a new Mixnet Tuning feature in beta, allowing users to adjust the balance between anonymity and privacy.

Mixnets operate through a number of ‘hops’, referring to individual nodes between the origin and destination of network traffic. Nym uses a five-hop mixnet as standard, with an entry, exit, and three connection points in between.

This creates latency – according to Nym, its mixnet adds 15ms of delay per hop by default, totalling 75ms across five hops.

This is an intentional measure designed to hide the timing of your network traffic, as well as its origin and destination, but could be annoying for streaming video or playing online games, where latency should be as low as possible to maximise performance.

Mixnet Tuning adds two settings that allow users to adjust the NymVPN’s default instructions while maintaining connection. These are the ‘Send traffic continuously’ setting, which offers a range of 0.7Mbps to 2Mbps for decoy traffic, and ‘Packet mixing profile’, which changes how long each mix node holds onto your traffic, from 0ms to 200ms.

Keeping it convenient

NymVPN’s latest update also brings some quality-of-life improvements to the service, and while it’s still a fair way from our list of the best VPNs, it’s good to see that the app will now be easier to use on the best iPhones and best iPads.

These improvements include the ability to change the app icon to a calculator or notepad to avoid prying eyes, a bug fix for an issue that displayed subscription data incorrectly after a fresh install, and stronger ad blocking.

Additionally, Nym has increased NymVPN's data allowance from 2TB per month to 25TB per day. This is less of a limit on user behaviour and more of a safeguard against spam attacks.

And as for access in restricted areas, the desktop only Geo-Exclusion (beta) feature allows users in China to use NymVPN to access online content outside from other countries while still maintaining access to local services which block VPNs. As the full release notes detail, NymVPN says it will bring the feature to Russia next.

• IPVanish added OpenVPN Data Channel Offload (DCO) to its Windows app
• Internal testing recorded download increases of up to 196%
• The feature cannot be used at the same time as OpenVPN Scramble

IPVanish has released a new Windows client built around High-Speed Mode, the provider's implementation of OpenVPN Data Channel Offload (DCO). The company claims the feature lifts OpenVPN download speeds by up to 196%.

OpenVPN remains one of the most widely supported protocols in the industry, prized for its maturity and its ability to work almost anywhere. Its weakness has always been pace, which is why so many of the best VPN services now steer users towards WireGuard by default.

OpenVPN DCO addresses this problem. It moves the heavy lifting of encryption out of the app and into the deepest core of the operating system, cutting latency and easing CPU load without changing the protocol's security.

IPVanish has also swapped its Windows OpenVPN cipher from AES-256-CBC to AES-256-GCM, a change it says trims 32% off the time needed to connect to a server.

OpenVPN DCO remains an exclusive for Windows users. As the provider confirms to TechRadar, "OpenVPN DCO isn't possible on macOS, iOS, or Android. Those operating systems have locked-down kernels."

What IPvanish's High-Speed Mode actually changes, and how to use it

Standard OpenVPN shuttles data back and forth between the VPN app and the operating system. Every one of those handovers costs time. DCO keeps the data channel closer to the Windows networking layer instead, so encrypted traffic moves through the system with fewer stops.

IPVanish tested servers in New York, London, Berlin, and Tokyo, three times a day across three consecutive days. Averaged out, downloads improved by 131% on TCP and 196% on UDP, while uploads rose 34% and 101% respectively.

"IPVanish is already known for offering fast VPN speeds, and today we're raising the bar for Windows OpenVPN," said Subbu Sthanu, General Manager, Consumer Cybersecurity at IPVanish, adding that streamers, gamers, and remote workers should all feel the difference.

You can turn the feature on by updating your Windows app and going to the OpenVPN protocol in the Settings tab.

One catch is that High-Speed Mode is not compatible with OpenVPN Scramble — IPVanish's obfuscation feature that disguises your VPN traffic to slip past networks that block it. Turn one on, and you lose the other. For anyone connecting from a school, an office, or a country that filters VPNs, Scramble is probably the more important feature.

Which other VPNs offer OpenVPN DCO

ExpressVPN was among the first providers to unveil OpenVPN DCO in March 2025, claiming a 2,000% jump in UDP performance. Windscribe also added DCO on Windows at the same time, recently extending it to Linux, too.

Norton VPN followed in September 2025, citing doubled speeds and 15% lower latency.

Surfshark, NordVPN, and PrivadoVPN all ship a DCO adapter in their Windows clients, too. It's still a short list, with most providers betting on WireGuard instead.

• West Coast Labs found that the VPN battery drain is just a myth
• Leaving NordVPN on for 24 hours drains just up to 1.8% of battery
• NordVPN's NordLynx uses up to 31% less battery than OpenVPN

One of the biggest reasons people turn off their cybersecurity apps is the fear of a dead smartphone. For years, the conventional wisdom has been that running a virtual private network (VPN) in the background will relentlessly chew through your daily charge.

However, new independent research commissioned by NordVPN reveals that this long-held belief is actually a massive misunderstanding. If you've been avoiding firing up the best VPN to save a few precious battery percentage points, your phone has probably been lying to you.

West Coast Labs carried out an evaluation across flagship Apple, Samsung, and Google devices. Testing showed that running NordVPN continuously for a full 24 hours added a mere 1.4% to daily battery use on Android and just 1.8% on iOS.

To put that into perspective, leaving the VPN active all day on a premium Android device means you would only need to charge it roughly half a day earlier over the course of an entire month.

Why your phone's battery screen is lying to you

"Battery drain is one of the biggest reasons people avoid using a VPN," says Marijus Briedis, chief technology officer (CTO) at NordVPN. "We wanted to know if that myth holds up, and it turns out it largely doesn’t. Your phone makes VPN battery use look a lot scarier than it actually is."

The confusion stems from how Android and iOS calculate power consumption. When a VPN is active, your device routes all its internet traffic through that encrypted tunnel. Because of this, your smartphone's operating system labels all that transferred data as belonging to the VPN app.

If you stream a video or browse the web, your battery usage screen blames the VPN for the power drop. During an hour of streaming, West Coast Labs found that phones attributed an average of 49% of the session's battery drop to NordVPN.

However, when researchers used hardware instruments to measure the actual electrical current draw, the real VPN overhead was just 1.6% to 2.1%. Essentially, your phone's battery screen is simply counting data volume, not actual power loss. When idle, the background overhead is less than 0.5% of battery capacity per hour.

The commuter test and modern protocols

Another scenario notorious for eating up battery life is the daily commute. Phones rapidly switching between Wi-Fi and mobile data networks can force apps to constantly reconnect, draining juice in the process.

West Coast Labs simulated a two-hour commute with automated network switches every nine minutes. Even under this stress, NordVPN's transition overhead stayed at just 5.1% on Android and 6.8% on iOS. The app also successfully reconnected after more than 99 out of every 100 network switches.

So, where did the battery-draining myth come from? The report points the finger at older technology, specifically OpenVPN. Built in 2001, OpenVPN was designed long before mobile battery efficiency was a priority.

In contrast, NordVPN’s proprietary NordLynx protocol — which is built on the much lighter WireGuard standard — uses modern cryptography requiring significantly less processing power. Benchmarking tests showed NordLynx uses 31% less battery per unit of data than OpenVPN on Android, and 24% less on iOS.

“People deserve to make informed choices about their online security. If battery drain was the reason someone wasn’t using a VPN, we hope this report puts that concern to rest for good," says Briedis.

• Some Mastercard’s users can install NordVPN for free
• The VPN now offers its services as part of the credit card’s perks
• This move indicates that digital awareness is growing among consumers

Do you have a Mastercard? If so, you'll be happy to know that you may be eligible to use NordVPN's services for free.

These days, we know that using a VPN has become crucial for protecting one's digital identity. But when a major payment service provider enables its cardholder to access one of the best VPNs for free as part of the benefits included in their package, you realize that digital security has truly become an integral part of everyday life.

Indeed, Mastercard cardholders can now redeem a NordVPN subscription in exactly the same way they currently access airport lounges, fast-track services, and other lifestyle perks included in Mastercard's list of exclusive benefits.

How to get your VPN

Depending on your bank or Mastercard issuer and the country where you live, your Mastercard payment plan may now include NordVPN Basic and NordVPN Standard.

The basic version is already packed with features and serves as a golden ticket to digital security, thanks to its excellent unblocking capabilities, servers in 126 countries, 10 simultaneous connections, and the ability to block ads and malicious domains.

The luckiest users will be able to take advantage of NordVPN Standard, which exceeds all expectations, especially thanks to its next-gen antivirus digital suite.

The service helps protect your device from ads, trackers, malware, and malicious websites or downloads, and was previously ranked by the cybersecurity specialist AV-TEST and West Coast Labs (WCL) as the best tool for blocking malicious websites and anti-malware evaluation. We also tested it and can confidently confirm that it outperformed most other VPNs.

Mastercard cardholders can redeem their NordVPN subscription by checking their eligibility at https://nordvpn.com/partners/mastercard.

Customers are advised to contact their bank or card issuer to ensure that NordVPN’s digital benefits are included in their plan. Once they activate their NordVPN subscription, the service will ask them to set up their Nord account and download the NordVPN app.

A huge lifestyle plus

The partnership between NordVPN and Mastercard reflects a growing focus on privacy protection within financial services, particularly in industries where digital security is critical because sensitive data is constantly being shared.

In fact, virtual private networks (VPNs) allow cardholders to boost privacy by encrypting their browsing data and masking IP addresses. This provides solid protection against the risks associated with transactions made on public Wi-Fi networks, offering a defense against hackers who might intercept sensitive data.

The fact that a VPN is included among the lifestyle benefits offered by a payment giant shows that customers are paying closer attention to the digital world and view VPNs as an essential tool in their lives — just like vacations or entertainment.

"Digital security is becoming an essential part of everyday life, especially as people increasingly manage their finances, shop, and access important services online," stressed Kestas Saulis, Head of Payments at NordVPN.

Indeed, we might expect an ever-growing demand for digital security among payment services customers as they become increasingly aware of the real risks they face every time they conduct online transactions and share personal data.

• Proton VPN is now officially published by Proton AG on the Snap Store
• The release offers one-click install for Ubuntu and other compatible distros
• Some features are missing from this initial build due to sandboxing limits

Linux users looking for a top-tier security boost just got a major convenience upgrade. The team behind Proton VPN has announced that its app is now officially available to download directly from the Linux Snap Store.

While the Swiss-based provider always supported Linux VPN distributions, previous accessibility for Snap users was limited to a "community-maintained fork." This release marks the very first time the official build has been published directly by Proton AG.

The move makes downloading one of the best VPN services on the market significantly easier for the open-source community. According to Proton's announcement, users can now perform a straightforward "one-click install on Ubuntu and any distro that supports snaps," saving them the usual hassle of manual command-line configurations or repository hunting.

Proton's Snap Store build arrives complete with a "verified publisher badge," ensuring users aren't accidentally downloading a compromised or outdated client. Yet, it still lacks some key features due to sandboxing limits.

What’s missing from the first release?

While the Snap Store debut provides the broader community with an "official, trustworthy way to install Proton VPN," the developers were highly transparent about a few technical trade-offs in this initial version.

Most notably, there is "no split tunneling" available just yet.

This highly requested feature, which lets you choose which specific apps bypass the encrypted tunnel to maintain high network speeds, was introduced to Proton’s standard Linux app last year. However, it is absent in the Snap version. "Like our Flatpak, this is due to sandboxing limitations," the team explained, adding that it is "something we hope to resolve in the future."

The provider's anti-censorship tool, the Stealth protocol, also missed the cut. "Stealth protocol isn't included yet. It's not part of this first Snap release," the company confirmed.

Hardware compatibility also comes with a slight catch. The new package offers "no ARM support at this time." While Proton noted that they "expect ARM device volume to be low for now," they are "keeping an eye on it."

Software-wise, the developers warned that "older distros may have issues," cautioning that if users are on an operating system "older than Ubuntu 24, you might run into connection problems."

A big year for Proton’s Linux community

Despite these early missing features, the Snap Store launch is just the latest in a rapid string of upgrades demonstrating Proton’s dedication to its Linux user base. Unlike many competitors that treat open-source platforms as a secondary concern, Proton has spent recent months closing the feature gap between its Linux, Windows, and Mac applications.

At the beginning of the year, the company revealed a major Linux makeover.

This included upgrading the graphical app to the modern GTK4 framework to pave the way for a complete interface redesign. Meanwhile, command-line interface (CLI) power users received vastly improved server selection tools, alongside support for advanced features like custom DNS settings and the NetShield Ad-blocker.

With the brand-new official Snap release now live at snapcraft.io/proton-vpn, Linux fans finally have the reliable, hassle-free installation method they've been waiting for.

If you've survived the first 24-hour gap in this year's World Cup schedule, then it's time to ensure your viewing of the quarter-finals is the best it can be.

The World Cup's mass appeal puts a huge strain on streaming providers. And if you're travelling, you could easily miss out on commentary in your native language or be stuck behind paywalls if you're in the US.

This is where the best streaming VPNs come in handy. They offer high-performance encryption protocols, servers with huge capacity, and all the tech you need to securely watch your regular World Cup coverage from wherever you are.

Right now, the cheapest VPN for this is Norton VPN. It ranks second in our best streaming VPNs rankings, but is a dollar a month cheaper than our top pick — NordVPN.

Norton VPN has servers across 91 countries, speeds of over 1000 Mbps on WireGuard, and hardly struggled with any streaming services we tested.

It's also even cheaper when you pick up a 12-month plan. These now start from only $39.99.

By comparison, a year of NordVPN is $65.88, over $25 more.

So, if you're just after World Cup protection, why spend the extra? You even get AI-powered scam protection, real-time ransomware and malware protection, password management, dark web alerts, and 10GB cloud storage thrown in if you choose a Plus plan (still $15 cheaper than NordVPN).

For the absolute cheapest experience possible, only PIA, CyberGhost, and PrivadoVPN come with our seal of recommendation. These are all under $1.60/month but are far less reliable with streaming services, especially if you're planning to watch live events like the World Cup or Wimbledon.

• NordVPN has launched Message Protection for Android users worldwide, adding SMS screening to its Call and Message Protection suite.
• The tool checks incoming texts from unknown senders and pushes a notification when a message looks malicious or suspicious.
• Flagged texts open in a safe view that stops links being tapped by accident, and NordVPN says it never stores message content.

NordVPN is rolling out a Message Protection feature to Android users worldwide, giving people a way to catch fraudulent texts before they become a threat. The tool automatically screens incoming SMS messages and flags anything that looks like a scam.

The feature, which was already made available to iPhone users at the beginning of June, joins existing Call Protection on a single screen, so there is now one place to manage defenses against both suspicious calls and malicious texts.

NordVPN has long been a front-runner for the title of best VPN, but this update is another step in its shift toward an all-in-one privacy and security app, rather than a service that simply encrypts your traffic.

Why text scams keep climbing

According to GASA's Global State of Scams 2025 report, text and SMS rank as the second most common channel used by fraudsters. The same research, which surveyed 46,000 adults across 42 markets, found that 57% had been scammed in the past year, with global losses reaching an estimated $442 billion.

Citing the US Federal Trade Commission, NordVPN says text scam losses hit $639 million in 2025, a 36% jump compared to the previous year. Fake package deliveries, bogus bank alerts, and unpaid toll notices remain some of the most common lures.

"Text messages have always been one of the easiest ways for scammers to reach people at scale," says Domininkas Virbickas, product director at NordVPN. "Message protection is about breaking that chain before it starts."

How Message Protection works

The feature screens every incoming SMS from an unknown sender, checking it against phone reputation data, URL analysis, and content categorization. When a message is judged malicious or suspicious, users get an instant push notification naming the threat type and the recommended action.

If you want to view a flagged message, you can do so in a safe viewer that prevents links from opening, and you can track how many messages and calls get flagged in the unified dashboard.

The feature runs quietly in the background, even when the VPN is switched off, and NordVPN says it doesn't store the content of any of the calls or texts.

How to switch it on

On a fresh install, you can enable Message Protection during the onboarding steps. Existing users can go from the Home screen to Call and Message Protection under the Product hub, then follow the permission setup.

NordVPN has also launched Prompt Guard, a separate Chrome and Edge extension that warns you before you paste sensitive data, such as passwords or card numbers, into AI tools.

• ExpressVPN has grown to 214 'distinct, app-selectable server locations'
• The 214-location count across 113 countries does not mean 214 cities
• ExpressVPN now covers around 196 cities, up from 189

ExpressVPN has rolled out the biggest network in its history, expanding to 214 distinct, app-selectable server locations across 113 countries.

It's a significant step up for a provider TechRadar last clocked at 189 locations, and it arrives as the fight to top our best VPN list increasingly turns on where you can connect, not how many servers hide behind the app.

The fresh additions reach places the network had not touched before, including Nuuk in Greenland, Lagos in Nigeria, Doha in Qatar, Valencia in Spain, and Manchester in the UK. The move builds on ExpressVPN's rollout to all 50 US states earlier this year, bringing that same local-first approach to the wider world map.

It's worth noting, however, that what the provider refers to as a "server location" is a connection option in the app, rather than a guaranteed unique city. For example, ExpressVPN's UK entries bundle multiple London-area spots that each count separately toward the total.

If you strip those duplicates out, the real coverage is narrower. By TechRadar's own tracking, ExpressVPN now reaches roughly 196 cities, up from 189. It's a definite upgrade, but it still trails NordVPN, which covers around 224 cities and leads on country count, too.

A bigger, more local network

ExpressVPN is pitching this as a local-first expansion rather than a raw server-count boast. The new connection points span Europe, Africa, the Middle East, and North America, while established markets have been deepened rather than simply widened.

The UK line-up now runs from Docklands and Tottenham to Manchester and the Midlands, Australia stretches from Adelaide to Woolloomooloo, and Japan covers Osaka, Shibuya, Tokyo, and Yokohama.

More nearby options can cut latency, give you a backup when a route is busy, and let you match a specific city, state, or region to whatever you are doing, from streaming and gaming to banking or working while travelling.

Every new location runs on ExpressVPN's RAM-only TrustedServer tech, which wipes data on each reboot, alongside its no-logs policy and its record of independent audits.

How to switch to the new locations

Getting to the new spots is simple. Update to the latest version of the ExpressVPN app, open the location picker, and browse the expanded country and city list.

If you would rather not choose, Smart Location will pick the fastest option for you automatically, based on speed, latency, and distance.

You can preview the full network on ExpressVPN's server locations page before you connect. And if precise city-level control is what you are after, it is worth checking if the list covers the exact places you need, rather than trusting the headline figure alone.

• AdGuard VPN is available to download directly from the Microsoft Store
• This isn't a new version, just an easier way to install and manage the app
• The standalone installer on AdGuard's website remains available

Finding and setting up AdGuard VPN on Windows just became a little less fiddly.

The app has arrived on the Microsoft Store, letting users on Windows 10 and later find, install, and update the app in the same place they already get everything else.

Until now, Windows VPN users had to visit AdGuard's website, download a standalone installer, and run it manually. That route still works, but the Store listing trims the process down to a couple of clicks and folds AdGuard VPN into the background update system Windows handles automatically.

Crucially, this is not a rebuilt or redesigned app. The provider stresses it's the same AdGuard VPN people already use, simply served through a more convenient channel.

The move follows AdGuard's recent arrival on the Mac App Store, continuing a busy stretch of platform expansion for the Cyprus-based provider.

What the Microsoft Store listing changes

For users, this change is mainly about convenience. We all know how to get one of the best VPN apps from an app store: open the Store page, search for the app, and click install.

From there, the app can update automatically in the background alongside your other Store apps, so you're less likely to end up on an outdated build.

Discovery is another big win, as downloading through Microsoft's marketplace means you're getting the official, verified build.

Fake and copycat VPN listings have become a genuine problem recently, and security researchers have repeatedly warned that attackers disguise malware as trusted VPN brands. Even legitimate providers like Proton VPN and X-VPN have been impersonated, so a single authentic listing reduces the risk of grabbing a lookalike.

There's also easier app management, since installs, updates, and reinstalls all live in one familiar spot, plus the ability to read and leave reviews directly on the Store page.

Billing and the standalone installer stay put

Even if you download through the Microsoft Store, subscriptions are still handled directly through AdGuard. This keeps your plan under your own control and avoids store billing lock-in, along with the flexible subscription options AdGuard offers on its own site.

And, if you prefer downloading software directly, nothing is being taken away. The standalone installer on AdGuard's website remains available for anyone who'd rather skip the Store entirely.

It's a small but sensible addition to an app that already leans on AdGuard's own open-source VPN protocol, designed to disguise VPN traffic as ordinary HTTPS to slip past firewalls and network blocks. A paid subscription still covers up to 10 devices at once with AES-256 encryption, whichever way you choose to install it.

• NordVPN moved obfuscation from OpenVPN to the NordWhisper protocol
• The move promises faster connections and a wider range of locations
• The change is already live on iOS, with the rest of the apps set to follow soon

Keeping ahead of network filters is now a permanent job for any provider hoping to rank among the best VPN services, and NordVPN has just made a change that shows how quickly the ground is shifting.

Tucked away in the release notes of a fresh iOS app update, the provider has revealed that its obfuscated servers no longer run on OpenVPN. Instead, they are now powered by NordWhisper, the censorship-resistant protocol NordVPN built in-house and launched at the start of 2025.

The reason for the change, according to NordVPN, is simple: better speed and more places to connect from.

Marijus Briedis, CTO at NordVPN, also told TechRadar that NordWhisper is designed to work just as well, if not better than OpenVPN for overcoming restrictive networks. "In many cases, users should see improvements thanks to better speeds and a wider range of available server locations," he added.

The update is rolling out gradually, so not every user will see it straight away. Vriedis confirms that while the change is already live on the iOS VPN app, the team plans to roll it out to Android, Windows, and macOS within the following weeks.

What has actually changed, and why it matters

Obfuscated servers are a specialty category designed to hide the fact that you are using a VPN at all, letting your traffic slip past firewalls and deep packet inspection on networks that would otherwise block it. For years, connecting to them meant switching your protocol to OpenVPN, since obfuscation was tied to OpenVPN's TCP and UDP variants.

That is the part NordVPN has reworked. The obfuscated server category now runs on NordWhisper under the hood, and this is only the newest step in a busy stretch for the provider.

The biggest benefit for users is speed. Obfuscated OpenVPN connections carry extra overhead because the VPN traffic is wrapped in an additional disguising layer, which tends to drag performance down. NordWhisper was designed from the ground up to blend in with normal web traffic, so shifting obfuscation onto it should ease that penalty and deliver a smoother connection.

The second benefit is reach. NordVPN's obfuscated server pool has historically been limited to a modest list of countries, far smaller than its full fleet. Moving obfuscation onto NordWhisper opens the door to a broader set of locations, which is exactly what censored and heavily filtered users need most.

Crucially, none of this comes at the expense of security. NordWhisper follows the same encryption and privacy standards as NordVPN's other protocols, so users get the stealth without giving anything up in terms of protection.

How does NordWhisper work?

NordWhisper is NordVPN's proprietary, censorship-resistant protocol, first launched in January 2025 as a response to the growing sophistication of network filtering around the world.

NordWhisper uses web tunnel technology to disguise VPN traffic as ordinary internet activity, which makes it far harder for filters and deep packet inspection to single out and block.

The protocol is best suited to networks that actively block VPNs, such as some workplaces, schools, public Wi-Fi, and heavily censored regions. On open, unrestricted networks, faster options like NordLynx remain the better everyday pick.

NordVPN has also signalled where it wants to take the technology next, moving NordWhisper toward a fully TLS-based design and exploring the QUIC protocol to stay ahead of increasingly capable censorship tools. It is a direction the company frames as "the future" of VPN protocols.

Most of the best VPN deals are only available on two-year plans. But this time, Windscribe has bucked the trend.

On July 1, the company announced the chance to save $20 when you sign up using the promo code NOBACKDR.

The promo brings the price of its 1-year plan down to $49 — making it nearly $20 cheaper than NordVPN's equivalent one-year tier ($65.88).

Unlike most of the best VPNs, Windscribe only offers one-year and monthly plans. Thankfully, it doesn't impose price hikes at the end of your subscription, unlike NordVPN which rises to $139 after the first year.

In our most recent round of testing, Windscribe proved to be one of the fastest VPNs around, achieving 2263 Mbps using WireGuard. That was only beaten by Mullvad (2308 Mbps) and PrivadoVPN (2334 Mbps).

Its R.O.B.E.R.T phishing blocking tool is also effective, blocking 76% of the malicious links we threw at it. More impressively, it blocked 97% of ads too.

For the moment, its only real weakness is streaming. It couldn't unblock YouTube in the US or Prime Video in Japan at all. It also faced some minor issues with Prime Video US and Canada, and Disney+ in Australia and Japan.

While US YouTube proved tricky for even the best streaming VPNs, this performance isn't as good as we'd expect. So if streaming is your priority, I'd recommend looking towards NordVPN, Norton VPN, or Proton for the time being.

The World Cup's extortionate prices are well documented, but what if you could avoid the highest cost of them all, the ticket?

To access the pivotal stages of this year's tournament, tickets start at over $ 1,000, with some reaching up to $9,000. Luckily, ExpressVPN is giving you the chance to avoid this cost altogether.

Sign up for an ExpressVPN plan between now and July 11, and you'll be entered into a raffle for a chance to win tickets to the quarterfinals, semifinals, or the grand finale.

The longer the plan you choose, the more entries you get. 1-month plans get 1 entry, 1-year plans get 5 entries, and 2-year plans get 10 entries.

It's worth noting that the raffle is only for the ticket. However, the thousands you'll save on the ticket should cover the majority of other expenses you need for this once-in-a-lifetime game.

For the best value, I'd recommend a two-year Basic or Advanced plan. While the 'low' price of a one-month plan might be appealing, it only gets you one raffle entry, and it's a more expensive monthly plan than you'd find from other VPNs.

Picking an Advanced plan is probably the better choice if you fancy your odds of winning.

The 3 days of Holiday.com eSIM access included in Advanced plans means you shouldn't struggle to stay connected while you're out there. Plus you can use ExpressVPN across more devices, and gain access to features such as ExpressKeys, MailGuard and more.

If you're new to VPNs, don't worry. We rate ExpressVPN among the best VPNs for beginners, and it's also the most secure VPN we've tested this year. This means you should be able to get started quickly and never need to worry about your connection again.

Not convinced? Some of the best VPNs are also running superb deals right now, so long as you're willing to sacrifice your chance at a seat at the World Cup. Check out the best VPN deals right now below.

• VPN Super has released beta apps for Apple TV and Android TV
• The apps protect your streaming traffic
• They also rethink how your TV handles your data

Streaming has become one of the main reasons people reach for a VPN, and providers have noticed.

The latest example is VPN Super, which has just rolled out beta apps for Apple TV and Android TV, extending the service from phones and laptops onto the screen we watch the most.

The move follows a clear industry trend. Over the past couple of years, many of the best VPN services have shipped native apps for tvOS and Android TV, chasing viewers who want to unblock content, cut down on buffering, and keep their traffic private without wrestling with router settings.

What VPN Super is bringing to the big screen

The headline feature is straightforward: native apps that let you open the software on your TV, pick a server, and get back to watching.

According to VPN Super, the Apple TV app offers streaming-optimized servers built for smoother 4K playback, more than 50 server locations, and coverage for up to 10 devices on a single Premium subscription.

The company also promotes a no-activity-logs policy and an ad-free interface, along with a 30-day money-back guarantee. The apps are aimed at Premium subscribers, and the Apple TV version runs on tvOS 17 or newer.

There is a sports hook, too. VPN Super points to easier access to international soccer tournaments and major tennis events.

That's a pitch that other providers have leaned into, too, with X-VPN recently launching dedicated servers for the FIFA World Cup.

Why a VPN on your TV matters right now

The privacy argument is arguably the more compelling half of the launch. Modern smart TVs are far from passive screens.

Many use a technology called Automatic Content Recognition, or ACR, which samples what appears on your display and reports it back to manufacturers or their partners. Some sets do this hundreds of times per second, and the practice has been alarming enough that the FBI has urged consumers to weigh the privacy tradeoffs of smart TVs.

A smart TV VPN does not switch ACR off by itself, and you should still dig into your TV's privacy settings to disable it. What a VPN does add is an encrypted layer over the traffic leaving the device, which makes your activity harder to read on the network.

How to set up VPN Super on your TV

Getting started is designed to take only a few minutes: download the app, sign in with your Premium account, choose the location you want, and connect.

Both Apple and Android apps are currently in beta, with sign-up links available through VPN Super's site and its announcement.

• Amnezia VPN fully restored the functionality of its downloadable configuration files
• The fix mainly affects people running the VPN on routers, TVs, and other devices that can't use the standard app
• It follows weeks of disruption tied to a wave of attacks aimed at anti-censorship tools

Amnezia VPN has fully restored the functionality of its configuration files, the small downloadable files that let the service work on hardware its main app can't reach.

It might sound like a minor housekeeping update, but for customers using routers or TVs, it's the difference between a working VPN and a dead connection.

Picking the best VPN for a heavily censored network is hard enough, and losing a core setup method in the middle of that fight makes it harder still.

This restoration closes one of the more frustrating gaps left behind by Amnezia's recent troubles with DDOS attacks.

What Amnezia's config files actually do

Most people connect to a virtual private network (VPN) by opening the provider's app, signing in, and tapping a location. That works on phones, tablets, and computers, but not for devices that can't run the app, such as some routers or smart TVs.

Config files are made to bridge this gap and provide service for a wider range of devices. They include a small bundle of connection settings that you import directly onto a device. Once loaded, the device knows exactly how to reach an Amnezia server without ever opening the main client.

This is especially important for routers because, once set up with a working config file, they can route all connected devices through the VPN. It's also how Amnezia reaches platforms like certain Windows builds and iOS setups where the standard app simply won't run.

When config files stopped working, the people hit hardest were the router owners, the home-network tinkerers, and anyone relying on Amnezia to cover a whole household rather than a single handset.

Restoring the feature hands that group their setup method back. Anyone who had a router or TV connection drop can now download a fresh file and rebuild it, and the provider is nudging those users to do exactly that.

The broader context of Amnezia's target audience is important, too. Amnezia is built from the ground up to bypass aggressive censorship, and many of its users live in places where a reliable connection isn't a luxury but a way to reach the open internet.

The open-source project has leaned on its transparency as a selling point, having passed independent security audits in 2022, 2024, and 2025. Getting a core feature back online cleanly fits that same pattern of trying to keep the service dependable when the pressure is on.

Part of a wider recovery

The config file fix doesn't land in isolation. It caps off a bruising stretch for Amnezia, which recently restored 20 Premium server locations and began compensating affected users following a run of severe disruptions.

Those disruptions have been linked to a broader wave of attacks on anti-censorship tools, with Russia's internet regulator, Roskomnadzor, widely accused of involvement. In response, the provider strengthened its apps and rolled out its AmneziaWG 2.0 protocol, which tweaks data packets to make VPN traffic harder for deep packet inspection systems to spot and block.

Seen in that light, the return of config files is another box ticked off on the road back to normal service. The headline-grabbing wins were the restored servers and the user compensation, but fixing the plumbing that keeps routers and TVs connected is important too.

Not all FIFA World Cup 2026 coverage is the same.

For example, in the UK, England vs DR Congo is on BBC iPlayer, and that means you can watch it in glorious 4K UHD, but half of the World Cup games are on the HD-only ITVX streaming service.

But high res football fans, listen up: there is a place you can watch the match at maximum resolution, and all for free too.

The free-to-air CazéTV YouTube channel has the rights to show all of the FIFA World Cup 2026 coverage in Brazil, and in 4K UHD too. So, if you're a Brazil national currently abroad, then you can still access the stream.

Just pick yourself up a VPN, select a server in Brazil and then tune into CazéTV as you normally would back home. If you don't already have a VPN, then give Proton VPN a try.

We continuously test the best VPNs and we rate Proton very highly. It's great for streaming but, the reason we recommend it for CazéTV and Brazil is because Proton has more South American servers than an almost every other VPN provider, so you're not likely to run into capacity issues with other people trying to do the same.

But, just as importantly, Proton VPN also recorded the highest speeds over long distance connections (such as Europe to Brazil) in our recent tests, meaning that you should get a nice, clean, up-to-the-minute stream with no buffering or stuttering.

Proton VPN comes with live chat support just in case you have any difficulties getting connected. It's also one of the most private and secure VPNs out there if you're looking to stay safe online, as well as do some soccer streaming.

There is a free version of Proton VPN but it's the paid one you'll need to get access to the Brazil server and the faster streaming speeds.

VPNs are completely legal to use. They're excellent for streaming your regular shows wherever your travel and providing privacy and protection from prying eyes for all of your online activities.

Travelling to World Cup matches shouldn't mean paying huge sums to keep your phone working.

While some domestic add-ons will serve you well enough, what if there was a way to access unlimited data and secure your internet traffic in the process while you watch the World Cup?

An ExpressVPN Advanced plan encompasses five main tools. A VPN, eSIM, password management, Identity protection, and private emails – all for only $3 per month.

That means avoiding US roaming charges and it's also perfect if you want to watch the World Cup matches you're missing from your hotel room without paying for US streaming services because you can tune into BBC and ITV for free, just as you would at home.

ExpressVPN remains the most secure VPN I've tested. Its eSIM, provided by holiday.com, covers 150 countries with unlimited data for 3 days.

ExpressKeys offers unlimited password storage and generation, credit card storage, password health checks, and 2FA. Identity Defender gives you up to $3 million in identity theft insurance, and MailGuard comes with unlimited aliases.

In short, it comes with everything you need to travel to the World Cup this summer without overpaying for your phone.

If, however, you're at the game, you can use the VPN to dodge awful stadium Wi-Fi speeds thanks to separate, encrypted traffic tunneling. You'll also be protected against identity theft in the process, thanks to Identity Defender.

Normally, an Advanced plan would set you back much closer to $4.50 per month, which would then be paid upfront as anything up to $108. Now, it's only $83.72, and it throws in 4 extra months of protection with that cost.

ExpressVPN offers US locations in all 50 states, three Canadian cities, and one in Mexico City. This means no matter the game you're headed to, you can always be protected.

That said, several other VPNs could suit you better. NordVPN and Norton VPN both offer better streaming performance if you want to stream another game while you're travelling, and Surfshark is a cheaper option if you're just after a VPN.

ExpressVPN is, however, the only VPN offering the chance to win tickets to a World Cup match. The promotion has one more day before entries close, and gives you a chance to win tickets to a quarterfinal, semi-final, or even the final.

Be aware, though, that the promotion comes at the expense of ExpressVPN's 30-day money-back guarantee. So, if you sign up, you're locked in.

• Big Tech was hit with $3.5B fines over three years, Surfshark found
• Many were fined for using personal data unlawfully
• Enforceability remains a key challenge

Major tech companies have already been hit by fines totalling $3.5 billion for using vast amounts of users’ personal data to train their AI models, raising hopes that the days of AI operating in a regulatory vacuum might be coming to an end.

The figures come from Surfshark, one of the best VPNs on the market, which recently analysed 10 AI-related sanctions imposed on the usual suspects — Anthropic, Meta, Google, Clearview, Apple, Amazon, and OpenAI — between 2022 and 2026.

Disturbingly, nine out of ten fines were imposed for using users’ personal data — including biometric data, copyright-protected content, facial images, and children's voice recordings — without user consent or legal authorisation.

AI violations: which company misused our data the most?

According to Surfshark’s study, Clearview AI was the first, in 2022, to be fined a total of around $46 million for collecting facial images for its facial recognition database.

But the pace picked up in 2024, with five new separate fines imposed on Google, OpenAI, Meta, Clearview, and Amazon.

The size of the fines has also increased substantially, signalling a positive shift from regulatory warnings to severe financial consequences. In 2024, Meta was fined $1.4 billion for collecting users’ biometric data without consent, followed by Anthropic in 2025 with a record $1.5 billion for training its AI models using pirated books.

On a different note, the $250 million fine imposed on Apple in 2026 for AI misleading marketing practices might signal that current AI advertisement tactics might also soon become a thing of the past.

"This could be only the beginning," says Dr. Luis Costa, research lead at Surfshark. "The overarching trend suggests that accountability is catching up with innovation, and the industry must re-evaluate both how it builds AI and how it markets it."

While regulations and authorities seem to be starting to catch up and match their punishments with Big Tech's wrongdoings, the findings continue to raise serious questions about the risks users face when using these AI platforms.

"Firstly, the scale of unauthorised data collection is unprecedented: 90 per cent of AI-related fines imposed since 2022 relate to the use of data without the necessary consent," Costa explains.

"Second, this harvesting often targets highly sensitive, unchangeable data, as seen in Meta’s $1.4 billion biometric settlement and Amazon’s fine over children’s voice recordings," he adds.

It also remains alarming that many companies fail to adequately inform the public about how their sensitive data is used, leaving consumers oblivious to the fact that their personal information is permanently baked into commercial AI models.

Better enforceability is needed

Additionally, while these fines may seem exorbitant, it is worrying that the financial impact of such punishments rarely acts as a deterrent to these large technology companies, whose market capitalisation runs into the hundreds of billions of dollars.

In its research, Proton previously found that the $7.8 billion in privacy and competition fines imposed on Big Tech in 2025 could be collectively paid by these firms in less than a month.

However, Costa argues that the issue is more complex and regulators might be working toward targeted changes. "First, regulators are escalating the financial stakes, shifting toward massive penalties like Anthropic's $1.5 billion and Meta's $1.4 billion settlements."

Additionally, a major challenge right now is actually enforceability — particularly as some companies have already been exploiting loopholes to avoid paying fines. Clearview AI, for example, managed to avoid paying $105 million in fines imposed by four different European regulatory authorities by arguing that it did not fall within European jurisdiction.

"Even if these early fines are manageable for tech giants, their real value lies in establishing the firm legal precedents that will govern how AI must operate in the future," Costa concludes.

• ClearVPN now has a dedicated app for Apple TV and Android TV devices
• Users can log in via a quick QR code scan or smartphone link
• The apps include a dedicated Streaming section and Optimal Location tools

Finding the best VPN to secure your online life is increasingly important, but installing it on your living room television hasn't always been a seamless experience. Fortunately, MacPaw is looking to change that with the launch of its "privacy-first" ClearVPN service on Apple TV and Android TV.

With smart TV adoption recently surpassing 900 million units worldwide, our living room watching habits are generating more data than ever. By bringing its software directly to the biggest screens in the home, MacPaw hopes to add a vital extra layer of privacy to users' everyday viewing activities, while simultaneously granting them secure access to global content.

According to the Ukrainian software company, simplifying the user experience remains the top priority.

"We built ClearVPN on one belief: privacy should be effortless," said Tetiana Shokina, Product Manager at MacPaw. "Bringing it to Apple TV and Android TV wasn't a feature request; it was the obvious next step. If simplicity is our promise, it has to work on every screen, including the biggest one."

How to use ClearVPN's smart TV apps

The biggest hurdle with smart TV applications is usually the login process. Nobody enjoys painstakingly typing out long email addresses and complex passwords using a directional TV remote. To solve this, ClearVPN has implemented two simple sign-in methods that entirely bypass the television screen.

Once downloaded, the TV app will display a QR code that users can scan with their smartphone. This instantly opens a pairing page on the phone to authenticate the login, readying the TV app for use.

Alternatively, the app generates a short URL and an activation code that can be typed into any phone, tablet, or computer.

Once inside, ClearVPN's signature intuitive interface keeps technical decisions to an absolute minimum.

An 'Optimal Location' feature automatically connects you to the best available server, meaning there's no need to manually search through endless country lists.

For entertainment fans, a 'Dedicated Streaming' section makes it even easier, connecting users directly to the optimal server for specific streaming platforms so you can start watching privately within seconds.

A quick overview of ClearVPN

If you aren't familiar with ClearVPN, the service was originally launched in 2020 by Kyiv-based MacPaw, a global technology company best known for its signature product, CleanMyMac.

From its inception, the goal was to design an application for everyone, not just the tech-savvy, removing the complex settings that often make cybersecurity software feel intimidating.

In 2024, ClearVPN went through a major redesign as the provider launched improved apps. The service, however, has maintained its core mission: to ensure people's online lives receive the exact same protection as their offline ones.

ClearVPN is powered by modern protocols designed to deliver fast, stable connections, ensuring your streams won't be interrupted by constant buffering. A single subscription protects up to six devices simultaneously, creating a secure digital ecosystem.

New smart TV apps are available now for all ClearVPN users globally. You will need a device running at least Android TV 6+ or tvOS 18+ to install the new applications.

If you want to protect your other hardware, ClearVPN is also available to download on macOS, iOS, iPadOS, Windows, Android, compatible routers, and as a Google Chrome extension.

It's big game time at the 2026 FIFA World Cup as Scotland take on Brazil on a night which could see the Tartan Army seal qualification to the knockouts – and just because you're a UK expat it doesn't mean that you can't still enjoy watching Steve Clarke's men for free on BBC iPlayer just like you would back in Scotland.

So long as you're a license fee payer, you've every right to enjoy the Beeb's British commentary and support from your sunny spot in Dubai, Saudi, Singapore or wherever else you may be.

Just use a VPN, choose a UK server to connect to in the app, and then head to iPlayer and get streaming straight away, just like everyone else back in Scotland.

If you don't have a VPN, then we recommend NordVPN. We've rated it as the best VPN for streaming as well as the best VPN overall for more than two years now. Sign-up, install it on your laptop and away you go.

NordVPN comes with 24/7 live chat support just in case you have any difficulties getting connected. It also offers a tonne of scam protection features too if that's of interest to you beyond streaming.

VPNs are completely legal to use in all but the most draconian of countries. They're excellent for streaming your regular shows wherever your travel and providing privacy and protection from prying eyes for all of your online activities.

• AdGuard VPN is now available to download straight from the Mac App Store
• The app utilizes Apple’s native NetworkExtension for smoother integration
• The Mac version lacks a few extra features due to Apple's restrictions

Finding the best VPN for your Apple device just got a little bit more convenient. AdGuard VPN has officially launched a dedicated app on the Mac App Store, allowing users to secure their internet traffic with a simple, one-click installation.

Until now, Mac VPN users wanting to protect their online privacy with AdGuard had to navigate to the provider's website, download a standalone installer, and set up the software manually. While this process is standard for many tech-savvy individuals, the App Store offers a faster, more familiar, and often more trustworthy experience for the average consumer.

By bringing its software directly to Apple's official marketplace, AdGuard VPN is aiming to make robust digital privacy more accessible to a broader audience. Users can now easily manage their subscriptions, handle automatic app updates, and completely uninstall the service without ever leaving the Apple ecosystem.

What the App Store release brings to macOS

Beyond the obvious convenience of a streamlined download, the new Mac App Store edition of AdGuard VPN has been specifically built around Apple's modern VPN framework.

The app utilizes Apple's native NetworkExtension framework for its VPN management. This architectural choice helps ensure that the software integrates seamlessly with macOS, minimizing system conflicts while strictly complying with Apple's latest security and platform requirements.

Nikita Kanaev, Product Manager for AdGuard VPN, explained the strategy behind the new launch: "For us, launching on the Mac App Store is about bringing AdGuard VPN closer to Mac users and giving them the installation experience they already expect, fast, native, and fully integrated into Apple’s ecosystem."

However, there is a minor catch for power users.

Because Apple enforces strict platform restrictions on software distributed through its storefront, the new Mac App Store version differs slightly from the traditional desktop application.

AdGuard notes that the standalone release remains its most "feature-complete version," though the development team plans to minimize the differences between the two iterations over time. At the time of writing, these include the ability to purchase a two-year subscription (available on the standalone desktop app only).

Crucially, AdGuard's split tunnelling feature that let you exclude VPN traffic from specific applications — called App Exclusions — is also not available for the Mac App Store version of the app. The Website Exclusions tool, however, is accessible on both versions.

To know more about all the technical distinctions, you can consult AdGuard’s official Knowledge Base.

Is AdGuard VPN any good?

If you aren't familiar with the provider, our latest AdGuard VPN review highlights a service that has steadily grown its security capabilities since spinning out from its popular ad-blocking roots.

Rather than relying solely on standard protocols like OpenVPN or WireGuard, the service went open-source with its own custom VPN protocol. This proprietary technology is specifically designed to disguise your VPN connection as regular HTTPS web traffic, making it incredibly difficult for strict network administrators or local firewalls to detect and block your connection.

The provider has also been on a relentless development spree across multiple platforms over the past year.

Beyond rolling out accessibility-first updates for its Mac app and prioritizing usability for Windows users, AdGuard has aggressively expanded its ecosystem. The company recently released a completely revamped app for iPhone, and even ventured into the metaverse by launching VPN and ad-blocker extensions on Meta Quest.

With its long-awaited arrival on the Mac App Store, AdGuard is clearly cementing its position as an incredibly flexible and user-friendly option for Apple loyalists looking to boost their daily digital privacy.

Traveling today comes with a hidden bill that catches many off guard. It isn’t just the price of the flight or the hotel; it’s the steady drain of international roaming fees. Take Verizon’s TravelPass for instance. At $12 a day, this quickly adds up and can turn an exciting 2026 FIFA World Cup trip into an unexpectedly expensive one.

While some travelers rely on public wifi to save, this often means battling sluggish speeds and insecure networks that risk your data. Fortunately, the way we stay connected while abroad is changing. The world’s best VPN services are no longer just encryption tools; they’ve evolved into direct mobile data providers.

By bundling secure VPN access with an affordable eSIM plan, you can skip sky-high carrier fees and stream your favorite shows without geo-blocks. This ensures a secure, seamless connection throughout the tournament without having to worry about surprise bills.

Saily: NordVPN's highly flexible, pay-as-you-go traveler

Saily, NordVPN’s flexible eSIM platform, is ideal for travelers who prefer pay-as-you-go control over their data spending.

Instead of committing to a single monthly plan, you can purchase small 1GB or 5GB allowances exactly when you need them. The setup is refreshingly simple: you install just one eSIM profile on your phone. Once installed, it handles all of your data without cluttering your device with extra apps.

It’s worth keeping in mind that NordVPN and Saily remain separate subscriptions. Though you can link your logins, they don’t merge into a single bill. Instead, you’ll manage them independently, paying strictly for the data you use and the VPN access you need.

Holiday.com: ExpressVPN’s unlimited data premium tier

Subscribing to an ExpressVPN one or two-year Advanced or Pro plans gives you a coupon for Holiday.com, their eSIM partner. This partnership effectively bundles unlimited mobile data into your existing subscription.

However, the setup isn’t fully integrated. You still need to download a separate Holiday.com app to activate and manage your eSIM plan, meaning you’ll be switching between two different apps to stay secure and connected.

Plus, these unlimited data offers are time-capped, at three or five days. If you need more data, you can conveniently top up via the ExpressVPN dashboard.

What if your VPN doesn't do data?

Not everyone wants to switch providers just for a trip. If you’re already loyal to a traditional security suite, you might be disappointed to find they don’t offer cellular data themselves, preventing you from enjoying the convenience of an all-in-one solution.

The process is simple enough but requires a little more legwork. You’d need to purchase a standalone eSIM from a provider like Airalo – one of the best eSIMs for global travel –then manually toggle your VPN app on top of it when you need encryption.

This lets you shop around for the cheapest data plans but with the caveat that you’ll be juggling two separate apps.

Verdict

Choosing the right setup depends entirely on your travel style. Saily takes the crown for budget-conscious fans who want total flexibility; its pay-as-you-go model lets you buy exactly what you need without overcommitting.

On the other end of the spectrum, Holiday.com (via ExpressVPN) is the superior choice if you need a lot of data for streaming World Cup matches.

Other VPNs remain a robust option if device security is your top priority, offering complete control to shop for the best eSIM deals. However, this comes with a trade-off: you’ll be managing two separate subscriptions and apps. For most travelers, this DIY approach isn’t worth the hassle unless you have a specific security preference.

• Proton VPN uniquely blocks IP tunnel fingerprinting on iOS, researchers say
• Mullvad is among those that are vulnerable to the flaw
• The issue stems from iOS networking behavior

Correction (June 30, 2026): An earlier version of this article stated that Proton VPN was the only provider to prevent internal tunnel IP fingerprinting on iOS. While the security research referenced was focused on WireGuard implementations, it did not account for custom protocols. ExpressVPN has since clarified that its default Lightway protocol uses a similar fixed internal IP allocation that mitigates this tracking vector, while its WireGuard implementation dynamically rotates IPs on reconnection.

Proton VPN successfully avoids internal tunnel IP fingerprinting on iOS, according to recent tests carried out by security researchers at Mysk.

Internal tunnel IP fingerprinting is the ability to correlate a VPN session using the 'fingerprints' left by a recurring private IP address assigned inside a VPN tunnel.

Many of the best VPNs assign a static and unique IP address per session or device, leaving these traces behind.

The issue is that in the iOS ecosystem, apps can freely read the VPN tunnel's internal IP address, meaning it can be used as an additional tracking signal across apps.

However, Proton VPN assigns the same reserved local internal IP address — specifically 10.2.0.2 — to all users, removing the individual fingerprints left by your own online activity.

What researchers found

Imagine you are a member of a private club and, whilst visiting the building, you leave your fingerprints everywhere.

Even if no one can identify who they belong to, the fact that they are found on specific objects might give an idea of what a particular person has been doing.

This is effectively the problem with iOS. When you have a stable internal IP address allocated by WireGuard this acts as a digital fingerprint, and iOS allows any app to read it. This, in turn, can be used as a shared identifier, making it easier for those apps to deduce that they are running on the same device and within the same VPN session.

Proton VPN has chosen to address this problem head-on. Using a novel approach, users are all assigned the exact same internal IP address. This appears identical to those of all other users connecting to the service using the WireGuard protocol.

This week, security researchers at Mysk used software they have developed to illustrate the issue definitively. Using Loupe, they found that their iOS app reads a unique fingerprint while using Mullvad VPN, for example, but only reads a generic one while connected to Proton VPN.

Mullvad has previously pointed out issues related to having a static IP address and how this could bring privacy concerns, admitting that keeping a static IP for each device could be leaked via technologies like WebRTC, and help identify and track user activity.

In its blog, Mullvad advised that it was planning to introduce WG-dynamic assignment to help with the issue.

An iOS issue

Researchers appear to confirm that the issue is on the platform level, suggesting that Apple's operating system needs updates in its VPN handling rather than the other way around.

It is not yet clear whether Apple is actually addressing these issues.

This isn't the first time Apple's platforms clash with VPNs, either. Both security researchers at Mysk and Mullvad have also been publicly complaining about another iOS behaviour that could lead to a traffic leak during the app's updates.

In April, Mullvad decided to push an update to make its iOS app more secure, leveraging an iOS configuration option called includeAllNetworks to act as an airtight kill switch.

"Even if it comes with major UX limitations," Mullvad said in its blog post, while admitting that traffic will keep leaking during the update process.

Apple, however, doesn't seem to be aiming to fix this issue. Even in the newest iOS and iPad OS beta, Mysk found that the device's real IP still leaks during updating a VPN app while it is active.

At least for this 'leak,' though, Mullvad users will now receive a notification beforehand so they can choose the safest moment to update. While for IP fingerprinting, non-Proton users may need to wait a big longer for a fix.

• ExpressVPN has pushed version 14.2.0 to its Mac, Windows, and Linux apps,
• The update opens the app in compact mode by default, with a cleaner look
• A new MCP server lets AI coding tools read and control your VPN connection

ExpressVPN has just rolled out version 14.2.0 across all three of its desktop apps, and the headline change is a polished new coat of paint.

Released on June 17, 2026, the ExpressVPN update lands simultaneously on Mac, Windows, and Linux, keeping the experience consistent no matter which platform you're on.

It isn't the kind of ground-up overhaul we saw earlier this year, but it's a tidy round of refinements that should make day-to-day use feel that bit smoother. Most of the work is visual, with the layout tightened up and several sections given a cleaner design, with accessibility also getting a mention.

The provider, which we rate as one of the best VPN services around, has officially added an MCP server to all its desktop apps after a successful beta release. This gives AI coding tools a way to control your VPN connection directly from inside your development environment.

A fresh look across the board

The most noticeable change is the redesign. The app now opens in compact mode by default, and the layout has been polished for better readability and spacing. The Add-ons section gets a cleaner card design that makes each add-on easier to find and use, while Advanced Protection has been visually updated for a clearer, more consistent appearance.

The Dedicated IP setup pages have also been redesigned to match the latest visual style, with a few small layout issues in compact mode ironed out at the same time.

These tweaks build on the larger redesign ExpressVPN introduced earlier in the year, when it moved away from its super-simple approach toward a home screen that surfaces more information and gives instant access to key settings. The iconic giant 'Connect' button is still front and center, just with more to look at around it.

There's a practical addition under the hood, too. A new background latency switch lets you turn off the latency checks that feed the on-screen map, and if you disable them, you can simply refresh locations manually instead.

In a step forward for accessibility, ExpressVPN also lists improved keyboard focus and better screen-reader support among the changes in this release. That's a welcome fix considering that, in our latest ExpressVPN review, we pointed out how keyboard navigation has actually become worse due to the new layout.

A bigger push into AI

The standout functional change is the arrival of the MCP server.

ExpressVPN first gave AI agents the power to control your connection in March, but only as a beta release. The new update seems to be including the official stable release.

In short, the Model Context Protocol server acts as a local bridge between your AI tools and your VPN. It works with MCP-compatible clients, including Claude Code from Anthropic, OpenAI's Codex, and Cursor, letting an AI assistant read and control your connection without you ever leaving your coding environment.

For developers who already lean on AI tooling, the appeal is obvious: VPN controls have traditionally sat outside these workflows, so being able to manage your connection through natural-language prompts removes a fiddly bit of context-switching.

Should you update?

Yes.

While there's nothing here that fundamentally changes how the app behaves, the cleaner layout, tidier Add-ons and Advanced Protection sections, and the new background latency control all add up to a more comfortable experience.

The MCP server, meanwhile, is a genuinely forward-looking addition for anyone working alongside AI coding tools.