It's big game time at the 2026 FIFA World Cup as England take on Ghana on a night which could see the Three Lions seal qualification to the knockouts – and just because you're a UK expat it doesn't mean that you can't still enjoy watching Thomas Tuchel's men for free on BBC iPlayer just like you would back in Blighty.

So long as you're a license fee payer, you've every right to enjoy the Beeb's British commentary and support from your sunny spot in Dubai, Saudi, Singapore or wherever else you may be.

Just use a VPN, choose a UK server to connect to in the app, and then head to iPlayer and get streaming straight away, just like everyone else back in England.

If you don't have a VPN, then we recommend NordVPN. We've rated it as the best VPN for streaming as well as the best VPN overall for more than two years now. Sign-up, install it on your laptop and away you go.

NordVPN comes with 24/7 live chat support just in case you have any difficulties getting connected. It also offers a tonne of scam protection features too if that's of interest to you beyond streaming.

VPNs are completely legal to use in all but the most draconian of countries. They're excellent for streaming your regular shows wherever your travel and providing privacy and protection from prying eyes for all of your online activities.

• AdGuard VPN is now available to download straight from the Mac App Store
• The app utilizes Apple’s native NetworkExtension for smoother integration
• The Mac version lacks a few extra features due to Apple's restrictions

Finding the best VPN for your Apple device just got a little bit more convenient. AdGuard VPN has officially launched a dedicated app on the Mac App Store, allowing users to secure their internet traffic with a simple, one-click installation.

Until now, Mac VPN users wanting to protect their online privacy with AdGuard had to navigate to the provider's website, download a standalone installer, and set up the software manually. While this process is standard for many tech-savvy individuals, the App Store offers a faster, more familiar, and often more trustworthy experience for the average consumer.

By bringing its software directly to Apple's official marketplace, AdGuard VPN is aiming to make robust digital privacy more accessible to a broader audience. Users can now easily manage their subscriptions, handle automatic app updates, and completely uninstall the service without ever leaving the Apple ecosystem.

What the App Store release brings to macOS

Beyond the obvious convenience of a streamlined download, the new Mac App Store edition of AdGuard VPN has been specifically built around Apple's modern VPN framework.

The app utilizes Apple's native NetworkExtension framework for its VPN management. This architectural choice helps ensure that the software integrates seamlessly with macOS, minimizing system conflicts while strictly complying with Apple's latest security and platform requirements.

Nikita Kanaev, Product Manager for AdGuard VPN, explained the strategy behind the new launch: "For us, launching on the Mac App Store is about bringing AdGuard VPN closer to Mac users and giving them the installation experience they already expect, fast, native, and fully integrated into Apple’s ecosystem."

However, there is a minor catch for power users.

Because Apple enforces strict platform restrictions on software distributed through its storefront, the new Mac App Store version differs slightly from the traditional desktop application.

AdGuard notes that the standalone release remains its most "feature-complete version," though the development team plans to minimize the differences between the two iterations over time. At the time of writing, these include the ability to purchase a two-year subscription (available on the standalone desktop app only).

Crucially, AdGuard's split tunnelling feature that let you exclude VPN traffic from specific applications — called App Exclusions — is also not available for the Mac App Store version of the app. The Website Exclusions tool, however, is accessible on both versions.

To know more about all the technical distinctions, you can consult AdGuard’s official Knowledge Base.

Is AdGuard VPN any good?

If you aren't familiar with the provider, our latest AdGuard VPN review highlights a service that has steadily grown its security capabilities since spinning out from its popular ad-blocking roots.

Rather than relying solely on standard protocols like OpenVPN or WireGuard, the service went open-source with its own custom VPN protocol. This proprietary technology is specifically designed to disguise your VPN connection as regular HTTPS web traffic, making it incredibly difficult for strict network administrators or local firewalls to detect and block your connection.

The provider has also been on a relentless development spree across multiple platforms over the past year.

Beyond rolling out accessibility-first updates for its Mac app and prioritizing usability for Windows users, AdGuard has aggressively expanded its ecosystem. The company recently released a completely revamped app for iPhone, and even ventured into the metaverse by launching VPN and ad-blocker extensions on Meta Quest.

With its long-awaited arrival on the Mac App Store, AdGuard is clearly cementing its position as an incredibly flexible and user-friendly option for Apple loyalists looking to boost their daily digital privacy.

Traveling today comes with a hidden bill that catches many off guard. It isn’t just the price of the flight or the hotel; it’s the steady drain of international roaming fees. Take Verizon’s TravelPass for instance. At $12 a day, this quickly adds up and can turn an exciting 2026 FIFA World Cup trip into an unexpectedly expensive one.

While some travelers rely on public wifi to save, this often means battling sluggish speeds and insecure networks that risk your data. Fortunately, the way we stay connected while abroad is changing. The world’s best VPN services are no longer just encryption tools; they’ve evolved into direct mobile data providers.

By bundling secure VPN access with an affordable eSIM plan, you can skip sky-high carrier fees and stream your favorite shows without geo-blocks. This ensures a secure, seamless connection throughout the tournament without having to worry about surprise bills.

Saily: NordVPN's highly flexible, pay-as-you-go traveler

Saily, NordVPN’s flexible eSIM platform, is ideal for travelers who prefer pay-as-you-go control over their data spending.

Instead of committing to a single monthly plan, you can purchase small 1GB or 5GB allowances exactly when you need them. The setup is refreshingly simple: you install just one eSIM profile on your phone. Once installed, it handles all of your data without cluttering your device with extra apps.

It’s worth keeping in mind that NordVPN and Saily remain separate subscriptions. Though you can link your logins, they don’t merge into a single bill. Instead, you’ll manage them independently, paying strictly for the data you use and the VPN access you need.

Holiday.com: ExpressVPN’s unlimited data premium tier

Subscribing to an ExpressVPN one or two-year Advanced or Pro plans gives you a coupon for Holiday.com, their eSIM partner. This partnership effectively bundles unlimited mobile data into your existing subscription.

However, the setup isn’t fully integrated. You still need to download a separate Holiday.com app to activate and manage your eSIM plan, meaning you’ll be switching between two different apps to stay secure and connected.

Plus, these unlimited data offers are time-capped, at three or five days. If you need more data, you can conveniently top up via the ExpressVPN dashboard.

What if your VPN doesn't do data?

Not everyone wants to switch providers just for a trip. If you’re already loyal to a traditional security suite, you might be disappointed to find they don’t offer cellular data themselves, preventing you from enjoying the convenience of an all-in-one solution.

The process is simple enough but requires a little more legwork. You’d need to purchase a standalone eSIM from a provider like Airalo – one of the best eSIMs for global travel –then manually toggle your VPN app on top of it when you need encryption.

This lets you shop around for the cheapest data plans but with the caveat that you’ll be juggling two separate apps.

Verdict

Choosing the right setup depends entirely on your travel style. Saily takes the crown for budget-conscious fans who want total flexibility; its pay-as-you-go model lets you buy exactly what you need without overcommitting.

On the other end of the spectrum, Holiday.com (via ExpressVPN) is the superior choice if you need a lot of data for streaming World Cup matches.

Other VPNs remain a robust option if device security is your top priority, offering complete control to shop for the best eSIM deals. However, this comes with a trade-off: you’ll be managing two separate subscriptions and apps. For most travelers, this DIY approach isn’t worth the hassle unless you have a specific security preference.

• Proton VPN uniquely blocks IP tunnel fingerprinting on iOS, researchers say
• Mullvad is among other porvider that remain vulnerable to the flaw
• The issue stems from iOS networking behaviour

Proton VPN is the only VPN that successfully avoids internal tunnel IP fingerprinting on iOS, according to recent tests carried out by security researchers at Mysk.

Internal tunnel IP fingerprinting is the ability to correlate a VPN session using the 'fingerprints' left by a recurring private IP address assigned inside a VPN tunnel.

Many of the best VPNs assign a static and unique IP address per session or device, leaving these traces behind.

The issue is that in the iOS ecosystem, apps can freely read the VPN tunnel's internal IP address, meaning it can be used as an additional tracking signal across apps.

Instead, Proton VPN assigns the same reserved local internal IP address — specifically 10.2.0.2 — to all users, removing the individual fingerprints left by your own online activity.

What researchers found

Imagine you are a member of a private club and, whilst visiting the building, you leave your fingerprints everywhere.

Even if no one can identify who they belong to, the fact that they are found on specific objects might give an idea of what a particular person has been doing.

This is effectively the problem with iOS. When you have a stable internal IP address allocated by WireGuard — in any VPN — this acts as a digital fingerprint, and iOS allows any app to read it. This, in turn, can be used as a shared identifier, making it easier for those apps to deduce that they are running on the same device and within the same VPN session.

Proton VPN has chosen to address this problem head-on. Using a novel approach, users are all assigned the exact same internal IP address. This appears identical to those of all other users connecting to the service using the WireGuard protocol.

This week, security researchers at Mysk used software they have developed to illustrate the issue definitively. Using Loupe, they found that their iOS app reads a unique fingerprint while using Mullvad VPN, for example, but only reads a generic one while connected to Proton VPN.

While TechRadar confirms the findings regarding Proton, the team could not independently verify whether every other VPN service is affected.

However, Mullvad previously pointed out issues related to having a static IP address and how this could bring privacy concerns, admitting that keeping a static IP for each device could be leaked via technologies like WebRTC, and help identify and track user activity.

In its blog, Mullvad advised that it was planning to introduce WG-dynamic assignment to help with the issue.

An iOS issue

Researchers appear to confirm that the issue is on the platform level, suggesting that Apple's operating system needs updates in its VPN handling rather than the other way around.

It is not yet clear whether Apple is actually addressing these issues.

This isn't the first time Apple's platforms clash with VPNs, either. Both security researchers at Mysk and Mullvad have also been publicly complaining about another iOS behaviour that could lead to a traffic leak during the app's updates.

In April, Mullvad decided to push an update to make its iOS app more secure, leveraging an iOS configuration option called includeAllNetworks to act as an airtight kill switch.

"Even if it comes with major UX limitations," Mullvad said in its blog post, while admitting that traffic will keep leaking during the update process.

Apple, however, doesn't seem to be aiming to fix this issue. Even in the newest iOS and iPad OS beta, Mysk found that the device's real IP still leaks during updating a VPN app while it is active.

At least for this 'leak,' though, Mullvad users will now receive a notification beforehand so they can choose the safest moment to update. While for IP fingerprinting, non-Proton users may need to wait a big longer for a fix.

• ExpressVPN has pushed version 14.2.0 to its Mac, Windows, and Linux apps,
• The update opens the app in compact mode by default, with a cleaner look
• A new MCP server lets AI coding tools read and control your VPN connection

ExpressVPN has just rolled out version 14.2.0 across all three of its desktop apps, and the headline change is a polished new coat of paint.

Released on June 17, 2026, the ExpressVPN update lands simultaneously on Mac, Windows, and Linux, keeping the experience consistent no matter which platform you're on.

It isn't the kind of ground-up overhaul we saw earlier this year, but it's a tidy round of refinements that should make day-to-day use feel that bit smoother. Most of the work is visual, with the layout tightened up and several sections given a cleaner design, with accessibility also getting a mention.

The provider, which we rate as one of the best VPN services around, has officially added an MCP server to all its desktop apps after a successful beta release. This gives AI coding tools a way to control your VPN connection directly from inside your development environment.

A fresh look across the board

The most noticeable change is the redesign. The app now opens in compact mode by default, and the layout has been polished for better readability and spacing. The Add-ons section gets a cleaner card design that makes each add-on easier to find and use, while Advanced Protection has been visually updated for a clearer, more consistent appearance.

The Dedicated IP setup pages have also been redesigned to match the latest visual style, with a few small layout issues in compact mode ironed out at the same time.

These tweaks build on the larger redesign ExpressVPN introduced earlier in the year, when it moved away from its super-simple approach toward a home screen that surfaces more information and gives instant access to key settings. The iconic giant 'Connect' button is still front and center, just with more to look at around it.

There's a practical addition under the hood, too. A new background latency switch lets you turn off the latency checks that feed the on-screen map, and if you disable them, you can simply refresh locations manually instead.

In a step forward for accessibility, ExpressVPN also lists improved keyboard focus and better screen-reader support among the changes in this release. That's a welcome fix considering that, in our latest ExpressVPN review, we pointed out how keyboard navigation has actually become worse due to the new layout.

A bigger push into AI

The standout functional change is the arrival of the MCP server.

ExpressVPN first gave AI agents the power to control your connection in March, but only as a beta release. The new update seems to be including the official stable release.

In short, the Model Context Protocol server acts as a local bridge between your AI tools and your VPN. It works with MCP-compatible clients, including Claude Code from Anthropic, OpenAI's Codex, and Cursor, letting an AI assistant read and control your connection without you ever leaving your coding environment.

For developers who already lean on AI tooling, the appeal is obvious: VPN controls have traditionally sat outside these workflows, so being able to manage your connection through natural-language prompts removes a fiddly bit of context-switching.

Should you update?

Yes.

While there's nothing here that fundamentally changes how the app behaves, the cleaner layout, tidier Add-ons and Advanced Protection sections, and the new background latency control all add up to a more comfortable experience.

The MCP server, meanwhile, is a genuinely forward-looking addition for anyone working alongside AI coding tools.

CyberGhost continues to offer one of its best deals while other VPNs raise their prices. You can get a 2-year subscription for $1.59 per month with two months extra — that's $41.34 for 26 months of protection.

Surfshark's recent price jump means plans now cost at least $67.23, $25 more than CyberGhost. Despite this, both VPNs offer more than 100 locations, deliver strong speeds over WireGuard, and have proven solid streaming VPNs.

CyberGhost was around 400 Mbps faster than Surfshark over WireGuard in our most recent tests and it also proved more consistent when streaming Netflix throughout our testing.

Where CyberGhost falls short is its device limit. Surfshark offers unlimited simultaneous connections. CyberGhost? 7.

This means that if you're trying to secure your entire family you'll likely run out of connections pretty quickly. You can fix this by setting up CyberGhost as a router VPN, but if you're new to VPNs entirely, this is a complex way to start.

Thankfully, if you want to test it out, you get longer to decide than with almost any other VPN. CyberGhost's 45-day money-back guarantee is only bested by Norton's 60-day guarantee. None of the best VPNs offer anywhere close to this, instead giving you only 30 days to decide.

What's the catch?

Aside from the mere 7 connections, there's one other noticeable drawback to CyberGhost — it's got almost no guidance for beginners.

Loading it up on Android, you'll notice no explanations and no guidance on how to use it. If you're looking for a beginner VPN, Surfshark or Proton VPN will be far superior.

These VPNs have extensive help catalogues, explainers across almost every feature, and quick access to support.

It's also worth noting that, unlike VPNs such as NordVPN or Surfshark, there's no additional security features.

CyberGhost's one plan is purely VPN-focused. While you can add other tools for an extra fee, you might be better off choosing a different cheap VPN that gives you access as standard.

• Surfshark's Dausos promises better reliability across restricted networks
• The update fixes connectivity issues with school and corporate networks 
• It is the latest tweak to a young protocol that claims up to 30% faster speeds

Surfshark has rolled out a fresh update to Dausos, the proprietary VPN protocol it built in-house, and this time the work is aimed at one thing: getting it to connect reliably on the networks that lock everything down.

If you have ever tried to fire up one of the best VPN apps on a school or office connection only to watch it hang, this is the kind of fix you have been waiting for. The problem comes down to how tightly some networks are managed.

Academic institutions and corporate environments tend to run strict firewall configurations that can block or interfere with VPN traffic, and previously, some Surfshark users hit exactly that wall when connected to the Dausos protocol.

The update is the latest in a string of refinements to a protocol that is still finding its feet, having already been patched once after a TechRadar investigation flagged problems on residential broadband lines.

What the update changes and who benefits

The goal of the update is to make sure Dausos connects reliably on restricted networks, such as those you find in academic institutions and corporate environments.

"We want as many people as possible to experience the power of Dausos, which is why continuous improvement is our priority," says Karolis Kaciulis, Leading System Engineer at Surfshark.

Kaciulis explains that, responding directly to user feedback, the update fixes the connectivity issues some experienced in certain network environments.

For everyday users, the practical benefit is clear. Whether they are students trying to reach content on campus Wi-Fi or employees working through a tightly managed corporate connection, this update directly addresses one of the biggest friction points Dausos users have been running into.

Surfshark's reasoning is that a protocol built for ordinary people has to work in the places ordinary people actually connect from.

Why to use Surfshark's Dausos

Dausos is Surfshark's proprietary VPN protocol, and the company's pitch is that it was built from the ground up for individual, everyday use rather than adapted from older shared-tunnel technology.

The headline difference is how it handles traffic. Where protocols such as WireGuard and OpenVPN route every user through a single shared tunnel, Dausos gives each connection its own private, dedicated data channel.

By isolating each user's data, it aims to cut out the slowdowns caused by other people sharing the same server, particularly at peak times, and Surfshark claims the protocol can be up to 30% faster than rivals.

For security, Dausos uses AEGIS-256X2 encryption optimized for modern hardware and is built with post-quantum protection in mind, combining a hybrid ML-KEM and X25519 key exchange with an ML-DSA self-signed root certificate system so connections stay safe against both current and future quantum threats.

The protocol also leans on post-compromise security, which generates a new key for every connection so a leaked key cannot expose future sessions, and port randomization that obscures the connection path. It has also been independently audited by the cybersecurity firm Cure53.

To switch it on, open the Surfshark app, head to Settings, VPN Settings, open the Protocol menu, choose Dausos, and connect to a server.

• Proton VPN has passed its fifth annual independent no-logs audit
• The audit confirms the provider doesn't log any user-identifiable data
• Proton openly published the full report, criticizing competitors who don't

If you use a virtual private network to protect your digital life, you have to trust that the provider isn't secretly recording your every move. Thankfully, one of the top names in the industry has just proved its privacy claims are more than just marketing speak.

Following up on its fourth independent audit last year, Proton VPN has announced that it successfully passed a fifth consecutive annual third-party examination. Conducted by leading European security firm Securitum, the latest independent audit confirmed that the provider strictly adheres to its no-logs policy.

This means the company isn't tracking your IP address, logging the websites you visit, or storing your DNS queries. If you are looking for the best VPN to keep your online habits completely private, this independent verification that a provider is actually keeping its promises is exactly what you want to see.

According to Proton, its privacy claims have already been stress-tested in the real world. The provider notes that its no-logs policy has been tested in over 400 legal cases where it was ordered to turn over user data, but couldn't comply simply because the logs didn't exist.

Securitum is a heavy hitter in the cybersecurity space, overseeing more than 300 security testing projects every year for major corporations and banks. In addition to reviewing Proton VPN’s servers, the auditing firm recently completed a separate security audit of all Proton applications and found no significant vulnerabilities.

Looking under the hood

During this year's assessment, Securitum experts spent several days on-site examining VPN configuration files, assessing operating procedures, and interviewing staff to ensure that user data isn't being quietly collected.

The resulting 2026 report is clear. "The technical evidence reviewed during the engagement did not indicate that the examined Proton VPN server infrastructure logs users' browsing activity, DNS queries, destination services, network traffic contents, or user-identifiable connection metadata," the auditors concluded.

The assessment also found no persistent records that could tie a specific user to activity performed on a given server.

Proton's dedication to peer review stems from its origins; the company was founded by scientists who met at CERN. Because of this, all Proton VPN apps are fully open source, meaning anyone with the technical know-how can inspect the code. The company also runs a bug bounty program to encourage security researchers to find and report potential flaws.

The provider also benefits from being headquartered in Switzerland. Under the current Swiss legal framework, Proton VPN is not subject to any mandatory data retention laws, which adds an extra layer of protection for users seeking a strictly private VPN.

Taking a swing at the competition

Alongside the positive audit results, Proton VPN took the opportunity to highlight its commitment to transparency, while throwing a little shade at rival providers.

In a blog post detailing the news, Proton CEO Andy Yen pointed out that the company publishes its full no-logs reports for anyone to read.

"Many of our competitors have never been independently audited or have performed a sleight-of-hand, getting their privacy policy audited instead of their actual no-logs infrastructure," wrote Yen.

Yen also criticized competitors who make their audits difficult to access, noting that some require users to sign non-disclosure agreements or only make the reports available to paying customers. While Proton made the full findings fully accessible here.

• Mullvad releases major desktop update version 2026.3
• New GoTun engine, security hardening, performance optimizations added
• Users gain faster obfuscation, stronger protection, and improved stability

Mullvad VPN has released version 2026.3 of its desktop application for Windows, macOS, and Linux, reinforcing its status as one of the best VPN services for privacy-first users.

Rather than a superficial UI overhaul, this release digs deep into the engine, delivering significant performance gains, deeper security hardening, and refined obfuscation. It swaps out core components to deliver speeds up to three times faster in specific scenarios while plugging critical security holes that would otherwise allow unauthorized code execution.

The update is exclusively for desktop users, bringing a suite of technical improvements that enhance stability, reduce memory fragmentation, and ensure that privacy protections remain robust even during complex network reconnections or system restarts.

What’s new in version 2026.3

The headline change in the universal adoption of GotaTun as the userspace WireGuard implementation across all desktop platforms, replacing wireguard-go. This unification ensures more efficient packet handling. Alongside this, a new port setting for LWO (Layer 2 Obfuscation) gives users granular control over their connection parameters.

Optimization of LWO yields a 1.5 to 3 times speedup in internal benchmarks, making obfuscated connections viable for everyday streaming and browsing. On the Linux VPN app, switching to the jemalloc memory allocator reduces fragmentation and improves responsiveness.

The release also addresses several critical bug fixes and security concerns. A new security measure blocks the renderer process from executing arbitrary binaries on Windows VPN and macOS VPN apps, preventing privilege escalation.

For users managing multiple devices, the update fixes long-standing issues with split tunneling on Linux, where the command would hang. It also resolves conflicts on Windows where other VPN clients could clash with Mullvad’s split-tunnel driver.

Additionally, Mullvad's desktop builds now remember recent server selections and add a context menu for quicker access, streamlining the location selection process without cluttering the main interface.

Benefits for Mullvad users

The immediate benefit is faster, smoother performance, especially for users relying on obfuscation. The combination of GotaTun and optimized LWO means secure browsing feels less sluggish in restrictive environments.

Security-conscious users gain peace of mind from the renderer restrictions and improved firewall handling during restarts, preventing accidental data leaks. Stable split tunneling allows routing specific apps directly while keeping everything else encrypted, without encountering hangs.

Finally, usability tweaks, like the "recent servers" list and fixed notification duplicates, contribute to a more polished experience. Whether you’re a power user tweaking obfuscation ports or someone who just wants a reliable privacy tool that you can set and forget, version 2026.3 delivers a stronger foundation.

To upgrade, users can visit the official Mullvad website or use the in-app update feature available on Windows and macOS.

ExpressVPN has removed its 30-day money-back guarantee for new subscribers following its recently announced 2026 World Cup sponsorship and ticket draw.

In its updated terms of service, the company says the "promotional benefit" of the raffle "cannot be combined with the money-back guarantee".

Removing the money-back guarantee while hosting a World Cup raffle makes sense, given that people could repeatedly sign up in a bid to boost their chances of winning a ticket before canceling their subscriptions after the winner is announced.

However, if you're new to VPNs, we always recommend using a service with a money-back guarantee. It gives you the time you need to get used to a VPN, install it on all your devices, and be 100% sure you're happy before committing your funds.

So, if this has put you off ExpressVPN for now, which VPNs should you choose? More importantly in this instance, which VPNs go above and beyond, offering bigger guarantees than most.

The best VPN money-back guarantees

I've scoured the web, and these are currently the best 3 VPN money-back guarantees you'll find:

• NordVPN offers a private server with dedicated IP, hardware, port forwarding
• The feature is aimed at gamers, self-hosters, and smart home owners
• It's an add-on for $11.99 per month on top of an active subscription

UPDATE: After publication, NordVPN shared more details on how its new Dedicated Servers work. We add some of these comments throughout the copy.

NordVPN has launched a private, dedicated VPN server, a new add-on that gives you your own private corner of the internet with a static IP address, isolated hardware, and port forwarding. In plain terms, the feature lets you reach your home network, devices, and personal services from anywhere in the world without exposing your real location.

Most people pick one of the best VPN services to stay more private while browsing, and a standard connection with a shared IP does that job perfectly well. But with this add-on, you are the only person using the server, and you get all the bandwidth to yourself, as well as full control over the IP's reputation.

"Some users need their VPN to have a broader scope. They want to secure their gaming server’s IP address, access their home network from across the world, and keep their real IP off the public internet," says Domininkas Virbickas, product director at NordVPN. "A dedicated server gives them the resources to do that."

The feature is now available for $11.99 per month and requires an active NordVPN subscription.

What NordVPN's dedicated server actually is

The dedicated server is a virtual private server assigned exclusively to one person and deployed automatically once you buy it. Where a standard or dedicated-IP connection still runs on shared hardware, this gives you an entire virtual machine to yourself, with your own CPU, memory, and bandwidth.

When compared with other non-VPN virtual private servers, however, NordVPN clarifies to TechRadar that the feature "does not provide end users with SSH or console access."

The specs are modest but sensible for the job: 1 vCPU, 4GB of RAM, up to 1 Gbps of dedicated bandwidth, and a 4TB monthly data allowance, with up to 10 devices able to connect at once.

"When the 4 TB monthly bandwidth allowance is reached, connection speeds are reduced to up to 10 Mbps until the start of the next month," a NordVPN spokesperson told TechRadar.

The headline feature, though, is port forwarding. Port forwarding lets specific types of internet traffic find their way to a particular device sitting behind the server, so people on the outside can reach it. Layered on top of a VPN, it does this without revealing the real IP address of whoever is hosting.

A NordVPN spokesperson confirmed to TechRadar that secure port forwarding is possible on Dedicated Servers, as the "hardware assigned to the single user removes the blocker of opening ports on a shared VPN server's infrastructure."

Therefore, there are no plans to extend this feature to Dedicated IP users.

Why would anyone want one

For general browsing and streaming, you do not need this, and NordVPN is upfront that shared servers perform just as well for normal VPN use. The dedicated server is for the people whose needs spill beyond simple privacy.

For example, anyone hosting a game world normally has to hand their real IP address to every player who joins, and that exposes them to DDoS attacks and leaks location data. Routing traffic through a dedicated server keeps your real IP hidden, while port forwarding still lets friends connect.

Finally, if you want to log in to your home PC from a remote location or self-host your own tools, a dedicated server gives you a stable, private route in. This is a long-standing reason people pair port forwarding with a VPN: it lets you reach a server inside your home network remotely and safely. Similarly, you can also reach your smart home devices.

How to get started

The dedicated server is an extra that anyone can add to their NordVPN subscription, and the private server is provisioned automatically after purchase.

From there, you can pick the US, the UK, Germany, or France as your server location. Once it's live, you connect through any of the major NordVPN apps using the NordLynx protocol.

A few limits are worth noting before you buy. The feature is not available on browser extensions or Apple's tvOS, and it does not support OpenVPN or any protocol other than NordLynx.

It’s not pitched as an upgrade for everyday browsing or streaming, where a standard shared connection works just as well. But if you need a dedicated IP, isolated resources, and port forwarding, this gives you your own private corner of the internet to do it from.

• Samsung MAX VPN officially retires on June 15, 2026
• The app will remain on devices as a dead shell unless uninstalled
• Former users should transition to a reliable third-party VPN

Samsung MAX VPN is officially shutting down for good, leaving its over 50 million mobile users urgently searching for the best VPN to secure their everyday online activity.

Once a helpful background utility app for masking IP addresses and compressing mobile data on Galaxy devices, Samsung MAX VPN retires as of today (June 15, 2026). This means its privacy and data-saving features will stop working entirely.

A Virtual Private Network (VPN) encrypts your internet connection, effectively scrambling your web traffic so that third parties, like hackers on a public coffee shop network, cannot monitor what you are doing.

Samsung MAX was a convenient, built-in way to achieve better online privacy and security, while also helping users stretch their mobile data allowances.

If you have been relying on Samsung MAX to protect your smartphone, here is everything you need to know about today's shutdown and how to quickly find a suitable replacement.

The end of the road for Samsung MAX VPN

Samsung Max VPN was designed to act as a privacy assistant exclusively for Samsung users. According to a report from SammyFans, the software was "never a famous app on a Galaxy phone, and it rarely made headlines."

Its Google Play page, however, counts more than 50 million downloads. Some of these users have expressed their disappointment with the shutdown.

One reviewer wrote: "I am so bummed. 15 June 2026 is the last date for use, it seems. Wish there were another app available like this. This app was great and then became good; and then, somehow, things were not as good: it saved data, and then it wouldn't for whatever reason. Sad to say goodbye."

Instead of an abrupt cutoff with no explanation, users who opened the app in recent days were greeted with a brief farewell message instead of their usual data-saving dashboard. The in-app notice plainly stated: "This is the final version of the app, and the service will be available until June 15, 2026."

After today, the VPN connection and all background data-saving features will cease to function. The application itself will not automatically delete itself from your smartphone; instead, it will likely just sit on your home screen as a "dead shell" until you decide to manually uninstall it.

Finding an alternative

So far, Samsung has not announced a like-for-like successor to fill the void. This might change, as seen when Google axed its premium One VPN but later ensured that Google fully launches VPN for Pixel users as a built-in system feature.

For now, however, Samsung MAX users are left without a native replacement. So, if you rely on the app to keep your data safe on unsecured public Wi-Fi networks, you need to be proactive. Browsing without protection on public networks can leave your passwords, banking details, and personal communications exposed to bad actors.

The good news is that the Google Play Store is filled with highly rated third-party applications that offer much stronger security protocols and wider server networks. I recommend checking our best Android VPN guide to compare today's top picks.

If you want to maintain top-tier privacy without spending a dime, we recommend checking out our guide to the best free VPN services.

When choosing a new provider, always make sure to read up on their logging policies and server locations to ensure your browsing data remains strictly your own.

World Cup 2026 has kicked off — and if you’re looking to keep up with the latest matches wherever you are, or just keep your connection secure, it’s a good idea to use one of the best VPNs while streaming.

It’s well known that most major VPN providers offer apps for desktop, mobile, and tablets, but some go a step further with apps that you can install straight onto your TV.

Having a VPN app on your TV means skipping the hassle of connecting via a phone or laptop and allows you to keep your streaming activity and personal data private.

However, not all TV operating systems are alike when it comes to VPN availability — while Android TV, Google TV, Amazon Fire OS TVs and Apple TVs support native VPN apps, Samsung’s Tizen OS and LG’s webOS don’t. But don't worry, we’ll cover a workaround below.

Which VPNs work on TVs?

Which VPN will work on your TV depends on which platforms your VPN service is available on and whether your TV allows VPNs to run on its operating system.

Some VPNs are widely available across platforms. Norton VPN has a native app on Apple TV and Amazon Fire TV, and Android or Google TVs can run the Google Play version of the app natively.

The same is true for NordVPN and ExpressVPN, which both support all four platforms. However, it’s worth checking your VPN service’s specific device support information. Amazon’s latest Vega OS Fire Sticks, for example, is not compatible with ExpressVPN or Norton VPN.

For more details on the operating systems supported by different VPNs, it's worth checking out our roundup of best smart TV VPNs.

As for Samsung TVs running Tizen OS and LG TVs running WebOS, VPN apps are not natively supported — but this doesn’t mean you’re out of luck if you’re looking to watch the World Cup securely.

How to use a VPN with a Samsung or LG TV

To access VPN-like functionality on a Samsung or LG TV, you'll need to use Smart DNS. This effectively reroutes your Domain Name System (DNS) queries, so you can access your favorite shows from home. However, it won't mask your IP address or encrypt your traffic like a VPN does.

It’s not a given that a VPN service will offer a SmartDNS feature. Of the best VPNs, ExpressVPN comes with its MediaStreamer SmartDNS tool, while NordVPN also has a SmartDNS capability. CyberGhost, which features in our best smart TV VPN list, also offers this functionality.

Using this method isn't always that easy and success isn't guaranteed. The simpler solution s to run a VPN on a laptop or mobile device, stream the World Cup (or whatever you’d like to watch) on that device, and then connect to your TV with a HDMI cable.

Can I cast a VPN stream to my TV with AirPlay or Chromecast?

Unfortunately, casting from a phone running a VPN to a TV not running a VPN usually doesn’t work, because the two devices aren’t part of the same network environment.

Casting relies on communication between devices on the same network, so using a VPN on only one device can interrupt the connection between them.

If you link both your TV and phone to the same network — either behind the VPN or with SmartDNS — you’ll have a better chance of casting, but it’s still not as reliable as using a native VPN on your TV, or even using SmartDNS.

So the tip worth remembering: if you're TVs operating system allows it, download a VPN direct to your device. If it doesn't, you can always use your laptop and connect to your TV using a standard HDMI cable.

• NordVPN's next-gen antivirus blocked 96% of phishing sites in the 2026 AV-Comparatives test
• The software perfectly distinguished between active malicious links and 200 legitimate banking URLs
• Detection rates jumped by 6% compared to the previous test in May 2025

When you're searching for the best VPN to secure your online traffic, you increasingly need an app that does more than just encrypt your data. As phishing attacks grow more sophisticated, top providers are evolving into robust, all-in-one cybersecurity suites, and independent testing shows these built-in tools are making a real impact.

In the newly released 2026 Anti-Phishing Comparative Test by independent cybersecurity evaluation authority AV-Comparatives, NordVPN’s next-generation antivirus achieved a massive 96% phishing detection rate.

Even better for users who hate annoying pop-ups blocking safe internet browsing, the software managed this impressive high block rate with absolutely zero false positives.

The results highlight a steady improvement for the provider. Compared to the last AV-Comparatives test of this sort in May 2025, NordVPN’s phishing detection has improved by 6%.

Putting the antivirus to the test

To put the software through its paces, AV-Comparatives ran its testing between May 11 and May 22, 2026. Assessors threw 275 active phishing URLs at the most recent product version of NordVPN’s next-gen antivirus available at the time. These malicious links specifically targeted personal data across popular platforms, including PayPal, online banking portals, email services, and social media networks.

To ensure the antivirus wasn't just blindly blocking everything, the testers also introduced 200 legitimate banking URLs to validate the false positive results. NordVPN safely allowed the real sites through while neutralizing the threats.

"Phishing sites today are sophisticated enough to fool almost anyone, and most people shouldn't have to become cybersecurity experts just to stay safe online," said Domininkas Virbickas, product director at NordVPN. "Results like these are exactly the kind of protection that makes a real difference in people's daily lives."

This isn't the first time the company has impressed the ISO-certified independent testing firm. Back in June 2024, NordVPN became the first VPN service provider to be approved for the AV-Comparatives anti-phishing protection badge. To earn this certification, software must detect and block at least 85% of phishing URLs without causing any false alarms on legitimate banking and related sites.

How to recognize phishing websites

While utilizing a premium service, like the next-gen antivirus available with a NordVPN Complete subscription, is a powerful safeguard, threat actors are constantly evolving their tactics. Maintaining good digital hygiene remains crucial.

Alongside using reliable cybersecurity software, NordVPN recommends users follow a few simple tips to avoid being caught out:

• Verify the URL: Always inspect your browser’s address bar. Watch out for subtle variations in a domain name, suspicious prefixes, or being unexpectedly redirected to a subpage instead of a homepage.
• Read the text carefully: If an unsolicited email or message is urging you to act immediately or trying to induce panic, take a step back. Look closely for typos or other mistakes.
• Enable two-factor authentication (2FA): Adding a second step, such as a one-time code sent to your phone, ensures that even if a hacker steals your password, they won’t be able to access your account.
• Check the website’s protocol: Ensure the site uses a secure HTTPS connection. Look for the padlock icon in the address bar; spoofed URLs often only use unsecured HTTP protocols.

• Amnezia VPN rolls out version 4.8.18.0 to thwart recent Russian blocking
• The update fixes a bug that exposed the VPN to alleged targeted attacks
• Attacks targeting VPNs continue to escalate in Russia

If you’re looking for the best VPN that’s truly committed to fighting censorship, Amnezia VPN’s latest update might point you in the right direction.

In its newest release, the open-source VPN says it has fixed a bug in its AmneziaWG protocol that left its infrastructure vulnerable to a recent coordinated cyberattack, allegedly carried out by Russia's media regulator, Roskomnadzor (RKN).

Available on all platforms, version 4.8.18.0 can be downloaded from Amnezia’s website, GitHub, and the Android and iOS app stores.

Critical security fixes

Last week, Amnezia reported that Russian media regulatory authorities had attacked its VPN infrastructure, causing the system to shut down completely.

The incident prevented users of Amnezia's Free and Premium services from switching between servers and prolonged the recovery process by several days.

According to the company, the latest update patches the vulnerability that RKN likely exploited to carry out the attack.

Mazay Banzaev, founder of Amnezia VPN, told TechRadar that RKN had likely developed a high-level protocol identification system capable of detecting and blocking Amnezia VPN traffic.

The regulatory authority then allegedly used the filter to identify a specific vulnerability in Amnezia’s software and launch targeted attacks against its infrastructure.

"The key challenge lies precisely in the RKN’s new approach to blocking," Banzaev tells TechRadar. "Whereas previously they simply blocked protocols, they now use protocol fingerprints to identify servers and block them automatically on a case-by-case basis."

According to Banzaev, RKN’s new approach makes debugging protocols much more difficult: the system still works, but within a few hours or days, the server may crash completely. Therefore, even a single user running an outdated version of the protocol can compromise the entire server, causing it to crash.

Therefore, the VPN service says it remains focused on improving the service’s long-term resilience, and announced that it will soon be publishing more in-depth technical analyses on its blog.

"Right now we can confirm that AmneziaWG’s developments continue; we have no intention of giving in to the difficulties," Banzaev says.

An ongoing fight

The founder calls the recent incident "one of the most serious in the project’s history." The alleged RKN coordinated attacks happened on multiple sides — from changes in approaches to restricting VPN traffic, searches for the VPN’s protocol signatures, DDoS attacks, phishing, and API scanning.

"We were forced to adapt many technical components to the new operating conditions," he explains. "But the pressure on our services continues to grow."

AmneziaVPN is not the only service facing these challenges. Russian users have recently reported issues with Telegram's cryptographic protocol to bypass blocks, while other VPN services, such as BlancVPN, also claim to have suffered disruptions in May. Although Russian authorities recently extended the deadline for imposing fees on VPN usage, they are instead stepping up their restrictions on VPNs.

In the case of Amnezia, its AmneziaWG 2.0 custom protocol was specifically built to mimic normal traffic to evade censorship detection in unrestricted regions. However, its very own nature and purpose mean it requires continuous updates and fixes to maintain its resilience.

"This is a difficult path we have consciously chosen," Banzaev admits. "These principles allow us to operate effectively in countries with strict restrictions on access to information, and to keep pace with censors technologically," he notes.

On the good side, its persistence appears to have been rewarded by its supporters, with Amnezia claiming to have received a huge number of comments and messages of support after the incident.

"For us, this is no less important than the technical results of the team's work, and it is precisely this that gives us the confidence that we are moving in the right direction," Banzaev says.

• PureVPN has launched an integrated ChatGPT Co-Pilot
• It enables users to ask ChatGPT for user recommendations
• The LLM aims to handle manual configurations

Do you love using the best VPNs to watch your favourite series, but hate spending hours on Google trying to find out which server you need to access it? Then you’ll be pleased to know that PureVPN has found a new way to eliminate those tedious manual steps and help you focus solely on your heavenly VPN experience.

The VPN has announced an integration with ChatGPT, allowing its users to submit service-related requests to the LLM and have manual configurations handled by the AI assistant — ready to be applied with a single click.

The PureVPN app is now available on ChatGPT Apps Directory for users across the US, Canada, Australia, Germany, France, Japan, the Netherlands, Singapore, Switzerland, and the UAE.

How does PureVPN's ChatGPT Co-Pilot work?

Even if you already know how to use a virtual private network (VPN), finding the right server or settings can be tricky and time-consuming, especially for those who aren’t particularly tech-savvy.

PureVPN’s integration with ChatGPT aims to enable its users to resolve any configuration palaver without having to resort to manual trial and error after hours on Reddit.

Previously, ChatGPT could only provide general advice and instructions, but was unable to guide users through effective Pure VPN’s manual configurations. With the new release, the AI can interact with PureVPN’s infrastructure from start to finish.

Specifically, by typing @pureVPN while using ChatGPT to send a request related to any VPN configuration on PureVPN, the AI will determine suitable settings, including which server or location, or any additional optimised configuration required for that task.

ChatGPT will then generate a single button, allowing users to launch the VPN app with those settings already configured via secure deep links.

PureVPN provides various examples of how ChatGPT can immediately solve users' problems. For example, a remote worker using a public Wi-Fi network asking ChatGPT for a secure connection will see the AI select a highly-encrypted local node and display a 'Connect Now' button to instantly protect the user’s privacy.

Similarly, a streamer asking for a server optimised for video traffic to watch their favourite show will be presented with a 'Watch Now' button, with the show ready to stream.

Privacy first

If your concerns revolve around privacy and whether your VPN configurations might be exposed while using ChatGPT, Shoaib Usman, manager at PureVPN, puts your mind at rest and says the integration follows strict data isolation boundaries.

"OpenAI cannot see into PureVPN: ChatGPT purely acts as the initial guidance layer," he tells TechRadar. "The moment a user clicks the deep link, control shifts 100% to our native application."

Basically, all the encryption process and network routing happen locally on the user's device, completely insulated from OpenAI’s servers.

The system ensures privacy in both directions, as PureVPN cannot see into ChatGPT either, as OpenAI’s ecosystem strictly sandboxes third-party applications.

"PureVPN has zero access to the user’s broader chat history, account data, or other conversations. We only receive the specific text explicitly directed to use via the PureVPN mention," Usman adds.

However, it is important to emphasise that the decision to share information with ChatGPT, including your intentions regarding your personal use of the VPN, remains entirely up to you and is not PureVPN’s responsibility.

While for streamers and gamers, the convenience of letting ChatGPT configure the VPN might outweigh any privacy concerns, more privacy-conscious users might prefer to stick to more old-school methods for their manual configurations.

While PureVPN claims to be "the first VPN" to commercially transform an AI-powered interface into an interactive control panel, the AI hype has recently been catching on with more and more VPNs — with ExpressVPN and NortonVPN being at the forefront of AI agents' integrations. And we expect this trend to continue.

Whether you’re looking to keep your connection secure at kickoff or want to catch a match while traveling, using a VPN is a great way to keep up with the 2026 World Cup.

Any of the best VPNs can give you a safe and secure workaround for common issues during high-traffic events, such as ISP peering issues and increased network pressure.

But getting the very best streaming performance from your VPN can take more than just clicking the ‘on’ button — in fact, certain settings and features can slow down your connection.

Keep reading for a rundown of the settings you should switch to in order to get the best VPN streaming performance possible during World Cup 2026 — and of course, be sure to test whether these settings work for you before kickoff.

Pick the right protocol

The first thing to consider when it comes to VPN streaming performance is which protocol you’re using.

To put it simply, protocols are like sets of rules and directions that determine how your data moves through a VPN network. They affect nearly every aspect of a VPNs performance, from network speed to the security of your data and activity.

Many of the best VPNs offer multiple protocols and the ability to switch between them on the fly. The three most common are WireGuard, OpenVPN, and IKEv2. For streaming, WireGuard is faster than OpenVPN, and IKEv2 is only really useful for switching between different network types.

Certain services also offer proprietary protocols like NordVPN’s NordLynx and ExpressVPN’s Lightway.

Additionally, it’s worth taking a look at whether your VPN service offers post-quantum encryption. This is the best choice for security, but can slow down your streaming, so if you’re not looking to do anything too important while streaming the World Cup, you might consider turning it off for a speed boost.

Pause obfuscation

Obfuscation is the process by which a VPN hides its own existence from potential surveillance. Where using a VPN hides your online traffic, obfuscation hides the fact you’re using a VPN.

Take Norton VPN’s Mimic protocol, which disguises VPN traffic as regular HTTPS traffic (aka the protocol most web traffic uses). This is useful for the privacy-conscious, and especially for those in territories where VPN use is restricted.

However, this added layer of invisibility takes time to process and puts strain on your connection — not ideal for streaming events full of blink-and-you’ll-miss-it moments like the World Cup. If it’s safe to do so, switching off obfuscation could give you a faster connection.

Use split tunneling

Split tunneling is one of the more recent advancements in consumer VPN services, allowing users to direct specific traffic through a VPN while leaving others untouched.

This is useful for streaming the World Cup and other major events without disrupting the rest of your online activity. Certain apps – especially ones that deal with sensitive personal data, like mobile banking, or geo-locked services – can stop working properly if a VPN is in use.

Split tunneling has the added effect of keeping your VPN’s bandwidth free for streaming, which could allow for a smoother or higher-quality stream.

Switch off ad-blockers

Much like obfuscation, ad-blockers put additional pressure on your VPN connection, potentially hampering your streaming performance.

Additionally, ad-blockers can cause some streaming services to crash or freeze. Broadcasters and streaming services may use ‘tracking beacons’ to assess whether ads have been watched – if these return a negative result, the stream shuts off.

There’s nothing worse than losing your connection at a crucial moment, especially when it comes to the World Cup — it’s better to shut your ad-blockers off than risk a crash.

Spend just a few minutes dialing in these changes before the next game kicks off, and you can get back to enjoying the match buffer-free.

Norton VPN has reduced its price just in time for the 2026 World Cup. With plans starting at $39.99 (£29.99) for one year of protection, it's cheaper than big-name competitors like NordVPN, Proton, and ExpressVPN.

What's more, the company's mid-tier plan (Norton VPN Plus) is now the same price as its entry-level plan. That means you can get the company's AI-powered scam detection tool, dark web monitoring and password manager effectively for free.

Don't let the budget price fool you, either. Norton has quietly become one of the fastest-improving and fastest-performing VPNs of 2026.

In our latest rounds of testing, it topped out at an impressive 1,010 Mbps, proving it's fast enough to stream live tournament matches in HD without buffering or regional blocks getting in the way.

The deal also includes a generous 60-day money-back guarantee. That’s double the standard 30 days you get from other major providers, so you can use it to watch the entire World Cup risk-free and cancel for a full refund if you aren't completely satisfied.

When you commit to a year-long plan, it's important to know the company will keep upgrading its product and Norton is doing exactly that.

Last month, the provider significantly scaled up its infrastructure, expanding its server network to more than 130 locations across 90 countries.

Norton also introduced a Manual IP Rotation feature for its Windows and Mac desktop apps. So, if a streaming service flags or restricts your current connection mid-game, you can swap to a fresh virtual IP address on demand without having to drop your connection or interrupt the live stream.

Norton VPN has also become one of the very best at unblocking popular streaming platforms. It easily clears regional hurdles for major services, unblocking Netflix libraries across the US, UK, Australia, Canada, and Japan.

It also handles Disney Plus, Amazon Prime Video, and US YouTube with ease, letting you watch your favorite home content from anywhere in the world. So if you're traveling to North America to watch a World Cup match, you can keep on top of your favorite shows.

• Proton confirmed its Firefox VPN extension is temporarily unavailable
• The issue is allegedly due to a mandatory Mozilla review process
• While the team works on a fix, users are advised to use the standalone app

Proton made headlines when it made the Proton VPN browser extension free for all, opening up robust privacy tools to users who don't want to pay for a premium subscription. But Firefox users have suddenly hit a major roadblock. One of the best VPN add-ons for Mozilla's browser has been temporarily pulled, leaving both free and paid users unable to download or manage the tool.

Users began noticing the issue about a week ago, reporting on Reddit that the VPN browser extension was getting stuck in an endless loading circle. This freezing prevented access to crucial settings like split tunneling, a tool that lets you choose which websites bypass the VPN, even though the underlying encrypted connection reportedly remained active.

Shortly after these bugs surfaced, the add-on disappeared entirely from the Mozilla Add-ons store. Anyone attempting a fresh installation is now met with a standard "Page not found" error. Proton VPN has since acknowledged the situation, with the company confirming the extension is temporarily unavailable "because of a review requirement from Mozilla".

"The team is aware and working on it"

The sudden removal has caused understandable friction within the community, especially for those who rely exclusively on browser-based protection for lightweight streaming or daily browsing.

Taking to the official r/ProtonVPN subreddit, one user wrote: "I'm really disappointed, I'm a paying user who waited more than a month for the Firefox extension to be fixed, repeatedly told the developers were 'aware' of the issue. Now I find the extension has been pulled completely instead of updated."

What happened to the firefox extension? from r/ProtonVPN

In response to the growing confusion on social media, Proton's official support channels confirmed the ongoing downtime.

Reassuring users on X about alternative ways to stay secure while the extension is under review, the company stated: "You can use the desktop app."

Furthermore, community members monitoring the situation on Reddit have reiterated that "The team is aware and working on it", though an official timeline for the add-on's return has not been provided.

What to do while you wait

If you are currently looking for the best Firefox VPN extension and rely heavily on Proton, you are not entirely out of luck. Until the Mozilla review queue clears and the official add-on returns, there are a few easy workarounds:

• Use the desktop client: As Proton's support team suggested on X, the standalone Proton VPN desktop application remains fully functional and unaffected by the Mozilla review process. It offers superior system-wide protection, encrypting all traffic on your device, and includes advanced features not typically found in a lightweight browser add-on.
• Change your browser: The underlying issue is strictly tied to Mozilla's specific review queue. If you prefer keeping your VPN traffic isolated strictly to your web browser, a popular choice for users who want to run a VPN in one window and their standard connection in another, the extension remains completely operational on Chromium-based alternatives like Google Chrome, Brave, and Microsoft Edge.
• Sideload the extension (for power users): If you absolutely must use Firefox and are comfortable with a more technical approach, the open-source community has provided a fallback method. As one Reddit user pointed out, "The .xpi extension can be built then manually installed, based on the source code found here", linking directly to Proton's official GitHub repository. While effective, this is generally recommended only for advanced users.
• Use Firefox's built-in VPN: Launched with the 149 update, Firefox now includes a free-to-use VPN directly built into the browser. While the feature is only available to users in the United States, the United Kingdom, Germany, and France, if you are based in these countries, you'll be happy to know that Mozilla has scrapped its 50GB data limit for all summer — just enough time, perhaps, for Proton to fix the issue.

• Mozilla is lifting the 50GB monthly data cap on Firefox's free built-in VPN
• The offer includes 28 locations to browse from, up from the five standard set
• Everything reverts to the usual data cap and five locations on September 1

A free VPN built right into your browser is a rare thing, and for the next few months, Firefox is making its version even more appealing. Mozilla has announced that it is temporarily removing the data cap on its free built-in VPN, giving eligible users unlimited bandwidth for the summer season.

Until now, Firefox's free built-in VPN has handed users 50GB of free bandwidth each month. From now through August 31, that limit disappears entirely, so there is far more room to browse privately while you travel, hop onto public Wi-Fi, or connect from somewhere new.

On top of the unlimited bandwidth, Mozilla is also unlocking access to 28 countries to browse from during this period. A serious upgrade from its standard set of locations, covering only five countries.

It is a generous move for something baked into a browser at no cost, and a reminder that you don't always need to pay for one of the best VPN services to get a taste of private browsing.

What's new this summer

The headline change in the Firefox blog post is simple: the 50GB monthly bandwidth cap is gone for the summer, replaced by unlimited usage in Firefox from now until August 31.

During the promotion, Mozilla is also opening its network to servers in 28 countries to connect from, giving you a much wider spread of places to browse from than usual (Canada, France, Germany, the UK, and the US).

The additional countries available during the summer include Australia, Austria, Belgium, Bulgaria, Chile, Colombia, Denmark, Finland, Ireland, Italy, Malaysia, Mexico, the Netherlands, New Zealand, Portugal, Singapore, Spain, Sweden, Thailand, Norway, and South Africa.

The Firefox VPN isn't available everywhere. The browser only offers the feature in the countries Mozilla lists on its support page.

What the built-in Firefox VPN is, and how to use it

Mozilla launched the free built-in VPN with Firefox 149. It began as a beta for Firefox desktop users in the United States, the United Kingdom, Germany, and France, with more countries planned over the following releases. The browser later gained location selection, letting users choose which country to browse from.

Unlike a traditional virtual private network (VPN) app, this one only covers your browser. Once it's on, Firefox routes your browsing traffic through its encrypted proxy network that swaps out your IP address before it reaches a website, so the sites you visit see the proxy's IP rather than your own.

Firefox already encrypts your traffic with HTTPS, and masking your IP adds another layer of privacy, which is especially handy on public Wi-Fi like the network at your local coffee shop.

The feature lives behind a toggle, and you can manage it any time in Settings > Privacy & Security > VPN. If a particular website misbehaves while the VPN is active, you can switch the VPN off for that site straight from the panel, or add sites to a list in advanced settings so they never connect through the VPN.

If you've been curious about trying private browsing without committing to a subscription, this is a good window to do it.

• ExpressVPN is now the exclusive VPN supporter for the FIFA World Cup 2026
• It offers 50 premium tickets for the quarterfinals, semifinals, and final
• The partnership aims to keep traveling fans digitally secure

In a major move to bring digital security to the global stage, ExpressVPN has announced it is an Official Tournament Supporter for the FIFA World Cup 2026 in the US, Canada, and Europe.

Currently among our best VPN recommendations, ExpressVPN is the exclusive VPN supporter for the event — an achievement the company confirmed to be the largest sports deal it has ever signed.

To celebrate the landmark announcement, ExpressVPN is running a ticket sweepstakes for people who sign up to its services, giving lucky fans the chance to win 50 premium tickets spanning the quarterfinals, semifinals, and the highly anticipated final. Note that these purchases won't be covered by the usual 30-day money-back guarantee, as per the company's Terms and Conditions.

With the tournament expected to draw a staggering global audience of around six billion viewers, the stakes for digital privacy have never been higher. The sheer scale of the event makes it the perfect venue to remind fans that online safety matters wherever they watch.

Charles Butler, Chief Executive Officer of ExpressVPN, says: "The FIFA World Cup 2026 is the greatest show on Earth, and our goal is for fans to experience every moment of it securely, without their data being stolen in the process.”

The company is also planning a major Times Square Digital Takeover in partnership with Clear Channel Outdoor during the week leading up to the final, featuring AI-powered advertisements across New York's iconic displays.

Why the World Cup is a cybersecurity flashpoint

While the excitement of the tournament is undeniable, major international sporting events are consistently some of the most targeted moments on the cybersecurity calendar. The FIFA World Cup 2026 will see millions of fans flocking to stadiums across the US, Canada, and Mexico. Many of these attendees will be traveling internationally, relying on foreign SIM cards and hotel networks they have never used before.

This massive influx of travelers means a heavy reliance on unsecured public Wi-Fi networks at airports, restaurants, and local venues. Fans bouncing between a dozen or more of these networks on any given day are at significant risk of surveillance and data theft. Cybercriminals regularly exploit these high-traffic events, launching phishing campaigns tied directly to ticketing, travel itineraries, and team merchandise.

Even seemingly legitimate venue Wi-Fi networks can be incredibly dangerous. Hackers frequently use off-the-shelf tools to spoof real networks, a tactic known in the industry as an "evil twin" attack.

A recent ExpressVPN research highlighted that 7 in 10 World Cup football fans are ready to put their digital privacy at risk, often blindly trusting a public network simply because it carries a familiar venue name. Unfortunately, that familiar name is not always proof that a connection is safe.

This isn't ExpressVPN's first foray into the sports world; the provider recently partnered with Tottenham Hotspur to bolster digital defense for fans. However, the World Cup operates on an entirely different scale, making pitch-side cybersecurity reminders a vital addition.

For those watching safely from home, the security risks might be lower, but a VPN still offers massive benefits. If you're wondering, should I use a VPN to watch the World Cup, the answer remains a resounding yes — whether it's to avoid ISP throttling or simply to secure your connection while streaming the beautiful game.

• The NordVPN client is now available on the Meta Horizon platform
• The app is installable directly on Quest headsets, no sideloading required
• NordVPN is the third VPN provider to enter the metaverse

NordVPN has arrived on the Meta Horizon platform, making it one of the very few VPN services you can drop straight onto a Quest headset. For anyone who has struggled to get one of the best VPNs running in virtual reality, it's a small but meaningful shift.

Until now, protecting a headset meant tinkering: configuring a VPN on your router, sharing a connection from a computer over a hotspot, or sideloading an app through developer tools. None of those routes is friendly to the average user.

Meta has been folding its Quest ecosystem into Meta Horizon, and one result is that VPN apps can now be installed natively on Quest devices. NordVPN is now the third provider to take advantage.

What's new and why it matters

The change is simplicity. NordVPN now installs directly through Meta Horizon, so the encryption lives on the headset rather than being bolted on from your router. That means full-device coverage: the app encrypts traffic leaving your headset, and masks your IP across the whole device, not just the browser.

This is great for online play on the Quest 2 and 3, which exposes your traffic and IP address much like any connected device. Masking it makes it harder for others in multiplayer lobbies to trace your location. It won't stop Meta's own data collection, but it does limit what third parties learn about your connection.

Because this is a native app rather than a browser extension, you install it the same way you'd add any other Quest title.

• Open the app store on your headset through Meta Horizon;
• Search for NordVPN;
• Install the app;
• And sign in with your account to connect.

The older methods haven't gone anywhere for people who prefer them.

A virtual private network (VPN) configured on your router will automatically cover any Quest device that connects over Wi-Fi, and sharing a VPN connection from a computer via a hotspot remains an option.

More advanced users can still sideload apps through SideQuest, though that route requires enabling developer mode and is better suited to those comfortable poking around in system-level settings.

Other VPNs available on VR headsets

NordVPN isn't arriving in an empty field, but it is joining a very short list.

ExpressVPN got there first, unveiling a dedicated Meta Quest app that encrypts everything entering and leaving the headset last February, which it pitched as a way to stop ISP throttling during demanding VR streaming and gaming.

The provider paired the launch with an "industry-first" hybrid browser extension that combines a lightweight proxy with remote control of the full desktop app. This lets users assign different VPN locations to specific sites, while adding safety nets like WebRTC leak blocking and HTML5 geolocation spoofing.

AdGuard took a different route, launching two privacy-focused extensions for the Meta Quest Browser: the AdGuard Ad Blocker and the AdGuard VPN.

The VPN extension encrypts browser traffic and masks your IP to help bypass geo-blocks, while the ad blocker scrubs ads, trackers, and pop-ups that feel especially intrusive when they're floating inches from your eyes.

Because they're browser extensions rather than system-level apps, they only protect what happens in the browser, making AdGuard the lightweight choice for people who mainly want cleaner web surfing rather than VPN-protected gaming.

• An independent audit confirms X-VPN doesn't collect or store identifiable user data
• The audit examined technical controls, server security, and data governance
• Third-party audits prove that a VPN's no-logs policy is actually enforced in practice

Virtual private networks exist to protect your digital footprint, but a privacy policy is only as good as the infrastructure backing it up. X-VPN took a major step in proving its reliability by publishing the results of an independent no-logs audit, officially verifying that it does not monitor or store your online activity.

When hunting for the best VPN services, trust is the ultimate currency. Providers frequently claim they don't keep tabs on you, but without third-party verification, users are left taking those promises at face value. Conducted under the stringent ISAE 3000 (Revised) standard by an unnamed "Big Four" auditing firm, this rigorous review confirms that X-VPN is genuinely living up to its privacy promises.

According to the official announcement, the audit concluded on February 28, 2026. Crucially, it focused not just on the provider's written policies, but on the practical, day-to-day operations of its server networks and data governance.

Looking under the hood

It is easy for a provider to state they offer a truly private VPN, but proving it requires deep technical scrutiny. This audit was specifically designed to put X-VPN’s technical controls, server security, and internal oversight to the test.

The auditors examined five key areas of the provider's ecosystem. First, they verified that sensitive user activity data is simply not stored or recorded. Second, they confirmed that only the bare minimum user information required to run the service is ever processed.

The evaluation also looked at the backend infrastructure, ensuring that VPN servers, core databases, and code remain secure and compliant across deployment and maintenance. Finally, the auditors verified that X-VPN’s Data Protection Officer (DPO) oversight mechanisms operate with complete independence and transparency, and that the company's privacy policy accurately reflects its actual operations.

Ultimately, the results were definitive. The official report states: "Based on the audit result, X-VPN does not track, collect, or store data that could identify users or reveal what they do online."

X-VPN's users can view the full report after logging in to their account.

Why independent verification matters

If you are wondering why VPN audits matter, the answer comes down to accountability. The VPN industry has evolved rapidly, and top-tier competitors have made regular, independent audits the industry standard. X-VPN’s latest move proves it is eager to compete on that same trusted playing field.

Understanding the difference between no-logs and zero-logs can be confusing for the average user, but the core takeaway from this audit is simple: your browsing history, destination IP addresses, and DNS queries remain entirely yours.

As the press release notes: "For privacy services, the real question is not whether a provider makes reassuring claims, but whether those claims can withstand independent scrutiny." Bringing in an outside auditing firm successfully "helps shift the discussion from broad privacy language to examined evidence."

For a deeper dive into how the service performs on speed, streaming, and usability, you can check out our full X-VPN review. However, from a purely privacy-focused perspective, this audit is exactly the kind of transparent, verifiable evidence we want to see from modern cybersecurity tools.

The best VPNs do the hard work for you. But what if you want complete control of your VPN connection?

Protocol choice, split tunneling, obfuscation, and server location is the normal extent of 'control' offered. PIA, however, takes this a step further.

Port selection, encryption level, and packet size are just some of the variables in your control. While it's not the fastest VPN, this deep customization lets you perfectly balance performance and security for your exact needs.

Right now, it's also among the cheapest VPNs out there. While it'd normally set you back $2.19 per month, it's currently only $1.33/month — $34.58 in total for 26 months of protection.

That's cheaper than Surfshark, our best cheap VPN, and NordVPN, our best VPN overall. In fact, the only VPN we recommend that's cheaper right now is PrivadoVPN, at only $1.11/month.

It's rare to find a top-tier VPN this affordable. In fact, there are only three other VPNs in this price bracket that I would recommend.

Surfshark is the best cheap VPN overall. It's much quicker than PIA, offers more features, and performs better with streaming services. However, it's comparatively expensive at $1.99/month.

CyberGhost is another VPN offering a super-low price right now. Starting at $1.59 per month, it's not quite as customizable as PIA, but it offers more locations and you can try it for 24 hours without paying a penny.

PrivadoVPN is the cheapest VPN I'd recommend. It's only $1.11 per month, but only has 67 locations and is yet to undergo a third-party audit. However, it's among the fastest VPNs I've ever used.

Explaining complex tech to your grandparents is not easy – let alone setting them up with something like a Virtual Private Network (VPN) – but silver surfers need scam protection too, particularly if they're using shared networks in supported accommodation.

I've spent over two years using Proton VPN and I'm pretty convinced that this is the one I'd suggest to my gran. I'm not saying she's going to understand the fineries of VPN protocols and kill switches, but I'd bet she'd be happy having the Proton auto-connected in the background without it becoming a problem.

First time VPN users that do want to get into the app and get under the hood will be pleasantly surprised, though. All Proton VPN apps are filled with tooltips explaining what the features do. It's got a solid customer support site, and its apps are clearly laid out to avoid confusion.

Right now, it's also cheaper than the best VPN overall, NordVPN, which starts at $3.09 per month for its most basic plan. Proton includes all of its VPN features in one plan, and, for now, it's only $2.99 per month.

That's a saving of about $10 over a 2-year plan. What's more, NordVPN also adds local tax to its advertised prices which Proton does not.

If you know what you're doing with VPNs already, there are a couple of other good choices.

Surfshark is the best cheap VPN and starts at around $1.99 per month. It still performs just as well as Proton, offers more features to secure your data outside of the VPN, and has apps simple enough for most people.

For the absolute best performance, NordVPN is the pick. It's the most expensive of the three and carries hefty auto-renewal costs, but its worth it. No VPN is as good with unblocking streaming services, and it has very strong security credentials too.

• A new Surfshark study found that over 50% of the top 15 mobile browsers collect user location data.
• Microsoft Edge, Aloha, Yandex, and Phoenix collect precise location data, with Edge and Aloha openly sharing it with third parties.
• Privacy-focused browsers like Tor, Brave, and DuckDuckGo do not collect app-level location data, proving that continuous tracking isn't technically necessary.

Google Chrome recently introduced approximate location sharing to give users more control over their whereabouts. While that’s a step in the right direction, a new study indicates that the mobile browser industry still has a massive location-tracking problem.

Cybersecurity firm Surfshark analyzed 15 popular mobile browser applications and discovered that over half of them actively gather user location data. Even more concerningly, four of those apps are scooping up your precise location, rather than a generalized area.

While using the best VPN is a fantastic way to spoof your IP address and encrypt your online traffic, granting app-level location permissions on your smartphone can completely bypass those protections, giving away your physical whereabouts.

“Your browser maps your daily routine and weekend plans before you’ve shared them with anyone. This location tracking is a profit-driven exploitation of personal habits, rather than a technical necessity for the browser to function,” said Justas Pukys, Senior Product Manager at Surfshark.

To help you understand exactly what data you are handing over, here is how the top 15 mobile browsers stack up when it comes to tracking your physical location.

The worst offenders

Precise location collection is far from an industry standard, but four browsers in the study, Microsoft Edge, Aloha, Yandex, and Phoenix, declare that they collect both approximate and precise location data.

Most browsers that collect this data keep it internal, but Microsoft Edge and Aloha are glaring exceptions. Both companies openly acknowledge that they share this location data with third parties, severely elevating the privacy risks for their users.

Phoenix collects this data under the guise of "App functionality" and "Personalization," while Yandex claims it needs your location for five distinct purposes: "Personalization," "Advertising or marketing," "App functionality," "Analytics," and "Fraud prevention, security, and compliance."

Approximate location tracking

Four popular mobile browsers collect only your approximate location: Google Chrome, Apple Safari, Opera, and Mozilla Firefox.

However, the intent behind this collection varies wildly. According to Surfshark's analysis, Safari limits its location collection strictly to personalizing the user experience.

Opera, on the other hand, relies on your location exclusively for advertising and marketing purposes. Chrome and Firefox fall into the same boat as Yandex, citing a wide spectrum of five distinct purposes ranging from analytics to marketing.

Browsers that don't track you

The good news is that seven browsers in the study do not collect location data at the app level at all. This proves that continuous location tracking is a lucrative choice, not a technical requirement for rendering web pages.

If you want to keep your daily routines entirely private, Surfshark’s research points to privacy-branded browsers like DuckDuckGo, Brave, Tor, and Ecosia, alongside Samsung Internet, UC Browser, and Mi Browser. All of these declare no app-level location data collection in their Google Play Data Safety disclosures.

The real-world risks of location tracking

Mobile browsers simply do not need to harvest your location data. As Pukys points out, websites that genuinely need your location, like a local weather or delivery site, can request one-time location access directly through the browser.

Allowing your browser app to continuously monitor your movements leaves your daily habits vulnerable.

Constant surveillance exposes your weekly routines to potential malicious entities and data brokers. By opting for approximate location settings in your device menus, or simply switching to less intrusive apps, you can easily reclaim your physical privacy.

Amazon Prime Day has just been announced which makes it a very good time to bag a free Amazon gift card while you still can.

We've had an exclusive Surfshark deal running on TechRadar for just over a week now but it ends tonight. You get a free Amazon gift card when you sign up to any of the two-year plans.

Surfshark Starter gets you $10, One gives $20, and One+ $30, and it's same denomination in pounds if you're in the UK.

Plans start from only $1.99 per month but do beware that the deal ends tonight and we're not likely to see anything like this from Surfshark until Black Friday 2026 at the very earliest.

Of the three Surfshark price plans, I recommend Surfshark One for $2.49 per month. That's $67.23 upfront but you get the $20 gift card against that, so it's effectively more like $47.23.

Compare that to the lower tier Starter plan which is $1.99 per month, $53.73 up front but only a $10 gift card. So, only a few dollars less than One at an effective $43.73 but without all of the best features.

How to get a free Amazon gift card

What I particularly like about the One plan are the data security tools that I think are really useful for sales times, like Prime Day, and beyond.

You can use Alternative ID so that you don't have to register with any shops and services with your real email address and Alerts let's you know if any of your data is compromised, including credit cards and ID.

There's also web content blocking, and a secure search engine free of ads and trackers.

Prime Day runs from June 23 – 26. Surfshark is a great option to look after your ID and data during this time and beyond but take a look at our other best cheap VPNs for more choice if you want to shop around.

• NymVPN v2026.9 brings a streamlined interface, simplified entry/exit server selection, and a new color palette.
• Post-quantum encryption keys are now enabled by default for all Fast Mode connections to combat future decryption threats.
• The update introduces a beta ad blocker for iOS, a toggle for Stealth API Connect, and a dedicated client for Windows ARM.

NymVPN has officially launched its v2026.9 update. The release focuses heavily on polishing the user experience, rolling out a complete visual overhaul alongside critical security updates like default post-quantum encryption keys.

While NymVPN operates quite differently from conventional choices on our list of the best VPN services, its unique combination of a high-speed obfuscated VPN mode alongside a five-hop decentralized mixnet mode offers some of the strongest privacy protections available.

Historically, the technical complexity of decentralized systems has made them tricky to navigate, but this update aims to bring these highly secure tools directly to everyday consumers.

The rollout spans multiple platforms, bringing specific updates to iOS, Android, Linux, Windows, and macOS. It also marks the official launch of the Nym Referral Program, giving users a way to earn $NYM token rewards, free gift passes, and exclusive privacy gear.

A streamlined interface for complex privacy

To make decentralized privacy more accessible, the Nym Team has redesigned the NymVPN user interface from the ground up.

This visual facelift includes a simplified toggle to quickly switch between Fast and Mixnet modes, reorganized features and settings, and a streamlined onboarding flow.

Selecting entry and exit servers is now much more straightforward, and the app features a collapsible menu alongside a fresh color palette.

There is also a new connection display, which helps users understand exactly how their traffic is being routed and protected. The update also introduces new desktop and mobile widgets for macOS and iOS to let users manage their connections directly from their home screens.

Upgraded security: Post-quantum keys and iOS ad blocking

Security remains at the forefront of this release. Crucially, post-quantum encryption keys are now out of beta and are enabled by default on all Fast Mode connections.

This means that NymVPN automatically secures your key exchange process to protect your data from future decryption by quantum computers, without requiring you to toggle any settings. It's a proactive step as more services prepare for the post-quantum world.

For iOS users, the v2026.9 update introduces a beta ad blocker, a feature already available on other platforms.

Nym notes that blocking ads acts as a vital security measure, stating that "ads often function as spyware to track your behaviour across web sessions." The developer claims the new blocker was able to block up to 92% of ads in internal tests. Additionally, iOS security has been bolstered by excluding the user's passphrase from iCloud backups.

Stealth API toggles, Windows ARM, and F-Droid release

This update also introduces several infrastructure and platform improvements. A new toggle for the Stealth API Connect feature has been added, allowing users to manually decide when to use it.

When toggled on, it always protects Nym network connections, but when toggled off, it will only engage when standard connections fail, which helps speed up connection times in less restrictive environments.

Windows users running ARM-based devices now have access to a dedicated native application. Additionally, a driver issue that previously plagued split tunneling on Windows has been resolved.

Android users who prefer open-source app stores will also be pleased to know that NymVPN v3.5.0 is now live on F-Droid, meaning the app is fully up-to-date with F-Droid's build requirements.

Finally, NymVPN is fixing a bug in which a "bandwidth exceeded" message would appear in error. In line with this, the developer is changing how it labels its limits; "Bandwidth" is now more accurately called "Fair usage data".

These latest updates are a big milestone for NymVPN. The provider had previously been bogged down by limited performance and unwanted user experience issues.

Now, these improvements should set the provider back on its path to bringing Nym's complex privacy tech to a more mainstream market. While there's still a way to go, it's looking more positive for the time being.

• NordVPN has launched Call Protection for iPhone users worldwide.
• The tool runs in the background, analyzing call patterns and metadata to flag potential scam calls in real-time.
• Research from the Global Anti-Scam Alliance shows consumers globally lost roughly $442 billion to scams in the past year.

NordVPN has announced it is rolling out its Call Protection feature to iPhone users worldwide.

Designed to help people spot and dodge fraudulent calls before they pick up the phone, the tool provides a real-time warning to keep users one step ahead of scammers.

While NordVPN has long been a heavyweight contender for the title of best VPN, this latest iOS update underscores the company's shift toward becoming an all-encompassing digital privacy and security suite.

The scale of the scam call problem cannot be overstated. According to recent research from the Global Anti-Scam Alliance (GASA), consumers across 42 countries lost roughly $442 billion to scams over the past year alone. Even more alarmingly, 57% of adults worldwide report having been scammed during that same period.

By bringing Call Protection to iPhone users worldwide, NordVPN is trying to stop scam calls before they get started.

A privacy-first approach to call screening

Giving a third-party app access to your incoming calls can sound daunting from a privacy perspective, but NordVPN claims its tool is built strictly with data security in mind.

The Call Protection feature utilizes a privacy-first approach that analyzes call patterns and metadata to spot potential scams.

Crucially, NordVPN says the feature accomplishes this without ever touching or listening to your actual conversations. It runs quietly in the background, meaning it doesn't even require an active VPN connection to screen out bad actors.

By throwing up an early warning notification on the screen, the tool puts the recipient on high alert. That extra warning gives people time to think before they answer, which can help them avoid scams and fraud.

"Protecting people from scam calls on Android was only ever half the picture, and iPhone users deserve that same level of defense," says Domininkas Virbickas, product director at NordVPN.

"Our job is to make sure that wherever people are, whatever device they use, they have a real line of defense."

How to enable Call Protection on your iPhone

Setting up Call Protection is incredibly straightforward, though you will need to give the app permission to manage your caller ID settings.

To activate the feature, iPhone users simply need to open their NordVPN app and navigate to the "Products hub" tab.

From there, select "Call Protection" and toggle the feature on. The application will then automatically guide you through updating the necessary iOS settings to allow the background screening to function.

Once the initial setup is complete, Call Protection will run silently in the background, giving you a real-time heads-up whenever a known scammer tries to ring your device.

The introduction of iOS call screening joins NordVPN's existing roster of built-in security tools, which currently includes a next-generation antivirus suite, advanced phishing and malware protection, and its proprietary Dark Web Monitor.

• Norton VPN has added 25 new server locations, bringing its total to more than 130 locations across 90 countries.
• The update introduces a new Manual IP Rotation feature, allowing users to swap their virtual IP address on demand without dropping the connection.
• The new manual IP tools are available right now on Windows and Mac, with iOS and Android support coming soon.

Norton has announced a major upgrade to its VPN service that significantly expands its server network, as well as a new privacy tool that swaps IP addresses on the fly.

Norton VPN's server network now includes over 130 locations across more than 90 countries. This includes 25 brand-new locations across the Americas, Europe, Asia-Pacific, Africa, and the Middle East — perfect for users looking for a faster connection or looking to bypass geoblocking.

In addition to the bolstered server count, Norton has added Manual IP Rotation to help users navigate temporary blocks from streaming services and websites. This feature lets you instantly switch to a fresh virtual IP address on demand, without actually disconnecting your active VPN session.

More locations, more control

Until now, if a site blocked your VPN address, you usually had to disconnect, switch servers, and wait for the connection to come back. Norton's new approach removes that friction entirely.

"VPN users today expect more than just a secure connection, they want flexibility that fits how they actually live online," said Himmat Bains, Product Lead for Norton VPN, in a recent blog post.

"Broadening our IP Rotation capabilities is a direct response to that. Users can now choose between automatic IP Rotation, which refreshes their VPN IP every 30 seconds in the background, and our new Manual IP Rotation, which puts that same control in their hands on demand."

If you rely on one of the best VPNs to unblock overseas Netflix libraries or catch up on sports while traveling, this on-demand IP switching could be a major upgrade. Generating a new IP instantly helps you sidestep platform restrictions smoothly while maintaining your encrypted connection.

The server expansion itself is another big win. The 25 new locations include spots like the Bahamas, Puerto Rico, Monaco, Kenya, and the UAE, building on Norton's previous addition of 55 new locations in 2025 and showing a clear commitment to growing its global footprint.

"With Norton VPN expansion to 130+ server locations in over 90 countries, users now have more locations to choose from, helping them stay connected to the online content and services they rely on, browse with added privacy, and access a more localized online experience, all backed by the trusted protection Norton VPN is built to deliver," added Bains.

Who gets the upgrade?

If you are already subscribed to any Norton VPN plan, the good news is that the 130+ server locations are available across the board right now.

As for the highly anticipated Manual IP Rotation feature, it is currently live for users running Norton VPN for Windows and Mac.

If you primarily use your smartphone or tablet to stay secure on public Wi-Fi, you will have to wait just a little bit longer. Norton has confirmed that support for iOS and Android devices is currently "coming soon."

• ExpressVPN's new products pass third-party review
• This brings its independent audits to 27
• Some medium-severity issues were identified

ExpressVPN is celebrating the results of a new independent audit carried out by third-party cybersecurity firm Cure53, bringing its total number of third-party assessments to a whopping 27.

The new audits were completed on two products launched by one of the best VPNs on the market, a few months back: ExpressMailGuard — a service that provides limitless email aliases — and Identity Defender, an identity protection app.

Curve53 gave the green light with no significant vulnerabilities reported. However, it highlighted several areas that required closer attention. More details below.

While this was not a clean score-sheet on this occasion, such findings highlight why independent audits are now crucial for any reputable provider wanting to provide a truly secure VPN service for its customers. In this context, an independent audit is not just about a software passing a test the first time, but rather an open commitment to address any architectural issues that may arise.

ExpressVPN is a veteran when it comes to third-party checks. Since its first audit in 2018, its products have been consistently scrutinized by several renowned firms, including PwC, Cure53, and KPMG, securing four ISO certifications, and reflecting a growing commitment to accountability that goes well beyond industry standards.

"Every product we build that touches user data gets handed to independent researchers whose job it is to break it. Twenty-seven audits later, we remain committed to the same standard: trust must be earned, not assumed," said Aaron Engel, CSO at ExpressVPN — words to live by when we talk about VPNs.

What Cure53 found?

Curve53 conducted comprehensive source-code reviews and infrastructure assessments of both products — from UIs and email processing functionalities to backend infrastructure, authentication, personally identifiable information (PII), and data storage.

Investigations took place in early March and were carried out for a maximum of 18 days.

In the case of ExpressVPN Identity Defender, the independent auditor identified eleven areas of concern. Of these, seven were classified as security vulnerabilities of a 'medium' grade; issues that do not cause a major impact on any area within scope.

Two medium-severity issues related to the storage of unencrypted data. In the first case, ExpressVPN was passing unencrypted data structures to its log and, in doing so, prevented its redacting processes from securing them. In the second, data relating to the user identity was being used for a secondary purpose, thereby inadvertently providing hackers with one potential way to triangulate data about you.

For ExpressMailGuard, Cure53 team identified even more issues — a total of thirteen findings. However, of these, only two were classified as direct security vulnerabilities, and eleven were categorised as more general weaknesses with no direct route to exploitation.

In this case, the sole medium-level exploitable vulnerability is related to the incorrect processing of sender email address data, an issue that could aid a malicious actor in spoofing emails, amongst other things.

Other medium-severity issues included recipient verification emails being sent to wrong addresses — neither a risk in isolation, but potentially useful in conjunction with another vulnerability.

Curve53 advice included promptly addressing and resolving these findings, undertaking regular tests to identify new risks as they arise, and reporting issues to maintainers when third-party code was involved.

The Champions League has long been a staple midweek viewing for me. But, in recent years, my internet connection has struggled to match the standard of football it's trying to stream.

Whether it's throttling, congestion, or ISP peering causing my issues, I don't entirely know. That said, I've quickly found that a VPN has solved my issues almost entirely.

I've been using NordVPN to watch my beloved Chelsea since the beginning of their search for a third Champions League trophy. While the results on the pitch have left something to be desired, the results for my connection have been far more impressive.

Connecting to a local server, I've never found myself struggling for stream quality, nor have I seen my stream delayed so much that I see the goals in my phone notifications first.

Unlike other VPNs, I also rarely found my stream completely dropping out. While some of the best VPNs like Proton and Surfshark provide stiff competition in many other ways, I found my connection dropping more often with these providers when streaming on services such as TNT and Peacock.

Can you use a free VPN to watch the Champions League final?

Free VPNs come nowhere close to the best streaming VPNs you'd need to pay for. While yes, it's theoretically possible to watch the final with a free VPN, limitations in server network, data caps, and reduced streaming performance all make it more hassle than it's worth.

If you're wary of paying huge sums, the best cheap VPNs will prove far more effective. Surfshark starts from only $1.99 per month and will perform better than any free VPN on matchday.

Alternatively, consider picking up a one-month VPN plan. The likes of Proton VPN can give you a month of protection for only $10. Should you then choose to extend your plan, you can then pick up a deal on a longer option that works out to far less per month.

Protect your data and get a bonus Amazon gift card with our latest exclusive Surfshark deal.

TechRadar readers can claim up to $30 in Amazon gift cards for free with 2-year Surfshark plans. The VPN ranks as our best cheap VPN, and while it's not quite NordVPN — our best VPN overall — it includes more than you'd expect given the low price.

In our latest speed testing, Surfshark achieved just over 1000 Mbps using WireGuard, putting it in a similar bracket to NordVPN (1249 Mbps) and ExpressVPN (1177 Mbps). It also has several unique features that can help keep you secure outside a VPN.

The One plan is the best-value Surfshark plan and a great way to protect more than just your browsing data. It gets you $20 in free Amazon vouchers and all of Surfshark's best cybersecurity features for $2.49/month.

While top-tier rivals like NordVPN and Proton VPN edge it on security and streaming capabilities, Surfshark costs at least $1/month less.

It’s an ideal, budget-friendly choice for beginners who want simple apps and solid everyday protection.

There are also rarely VPN deals available that offer Amazon gift cards. To make the best use of your free money, I've found a security toolkit you can put together for under $30 to protect your data outside your phone.

Alternatively, it's a great time to pick up some Amazon deals in preparation for summer.

• NordVPN rebrands its app across three pillars: connect, protect, monitor
• Threat Protection's tools are now under a newly launched anti-gen antivirus
• Anti-gen antivirus tools blocked 4.8 million threats in April alone

NordVPN is officially changing. The cybersecurity giant has announced a major rebrand, shifting its focus from a standalone VPN provider to an all-in-one digital security app.

The revamped NordVPN application is now organized around three core pillars: "connect," which refers to the virtual private network tech; "protect," where what's known as the Threat Protection suite becomes next-generation antivirus; and "monitor," which includes tools like Dark Web Monitor.

As Marijus Briedis, CTO at NordVPN, said in a press statement: "Such an approach reflects what users increasingly want from digital protection: stronger security, less complexity, and fewer separate tools to install and manage."

The need for a next-gen antivirus

The rebranding of Threat Protection features as next-generation antivirus capabilities is especially significant to grasp how the company is adapting to an online landscape where threats are diversified.

Many of today's most common and damaging digital dangers, including phishing pages, fake online stores, scam messages, and account takeover attempts, do not rely on downloadable files at all. Instead, modern cybercriminals use deception, compromised credentials, and social engineering to target unsuspecting users.

Yet, as Briedis explains, people still use the word 'antivirus' as a "shorthand" for digital security. "Modern protection should address the real risks people face online today, from phishing and scams to malicious downloads. Protection needs to evolve, without compromising the standard of privacy people expect from us," said Briedis.

Traditional antivirus software, in fact, has historically focused on reactive file scanning. NordVPN's next-generation antivirus aims to redefine this concept for private customers. It focuses on proactive, real-time protection to stop phishing, scams, ads, trackers, and malware before they ever reach a user's device.

Over the last year, we have tracked how NordVPN has steadily integrated broader defense features against online scams and malware. And these tools are already working hard. In April alone, NordVPN's next-gen antivirus tool blocked 4.8 million threats. Malware made up the majority of these blocks, accounting for over 3 million stopped threats.

Now, those extra layers of defense are taking center stage. A massive evolution for a service that already ranks among the best VPN options on the market.

Privacy-first security by design

One of the biggest concerns for users adopting all-in-one security suites is privacy. Antivirus software historically requires deep system access, which can raise surveillance concerns.

NordVPN claims its security approach is designed around collecting the minimum signal required to make a threat decision, avoiding turning security tools into surveillance products.

This privacy-first ethos extends across NordVPN's entire suite, from its core VPN capabilities to its dedicated machine learning models used to catch specific threat categories.

For users looking to streamline their digital setup, this rebrand also seeks to reduce the clutter of managing multiple subscription services.

"Consumers should not have to choose between convenience, protection, and privacy," says Briedis. "Our goal is to bring together advanced VPN technology and next-generation antivirus in one streamlined app experience that reduces complexity and better matches how people think about digital safety today."

This rebrand follows what has already been a highly active period for the provider; you can catch up on their other recent updates in our recap of everything NordVPN released in early 2026.

In an age where everyone from advertising companies to government agencies is trying to snoop on your online activities, a VPN is a vital tool in keeping your private data...private.

The best VPNs don’t log any information about who you are or what you get up to online - or do they? Signing up to a premium VPN means signing up for a payment plan, and that’s an avenue by which a VPN account can be tied to a specific person.

Some VPNs offer alternative methods of payment such as crypto-currency or gift cards, but the most secure, anonymous payment method is still cold, hard cash.

Enter Mullvad VPN. While it might be a little feature-light compared to other, more expensive VPNs, it offers the core features we want to see in every VPN we recommend like a kill switch, obfuscated connections, a no-logging policy, multihop servers and, more uniquely, the ability to pay for your subscription with cash in an envelope.

Best ways to stay anonymous online

With the ability to sign up anonymously, and pay for your subscription with cash, there’s no better choice than Mullvad if anonymity is your top concern.

Most premium VPNs will let you sign up using debit cards, Paypal and crypto-currency. Mullvad takes this further and accepts payment through Monero, bank transfers, Swish, EPS transfer, Bancontact, iDEAL | Wero, and Przelewy24.

Mullvad’s overall offering is less extensive compared to other premium VPNs out there. There’s no dark web monitoring, no integrated anti-virus, ad blocking or any of the other added features that come with more expensive competitors. If you’re looking for an all-in-one solution for your online security, there are better options out there.

Mullvad focuses on doing one job, and doing it well, and that’s securing your connection from anyone who might want to snoop on it.

Other VPN providers do that too, but they also tend to cost more than Mullvad does. Mullvad is one of the few providers to provide a list of not only where its servers are located in the world, but who the service provider is for each server.

You can even see whether the hardware is owned by Mullvad itself or rented from someone else, allowing you to see the companies your internet traffic interacts with, every step of the way from your device to the internet.

Mullvad’s commitment to transparency even extends to their VPN client, which is Open Source, meaning anyone can look at the source code and confirm if the company is serious about its privacy claims.

• Surfshark has launched a new Antiscam hub for iOS users
• The new interface brings together five cybersecurity tools to make fighting off threats more streamlined
• The new interface is currently in a pilot phase before expanding to other platforms

Surfshark has launched Antiscam Hub for iOS users, bringing together five cybersecurity and digital footprint management tools in a new space within the existing Surfshark app.

In its announcement post, Surfshark, one of the best VPNs available, describes the new experience as a ‘specialized user interface’ designed to streamline users’ mobile security actions, particularly for protection against phishing, fraud, and other scams.'

The announcement explains that the Antiscam Hub has been designed to address scams that rely more on manipulating human behaviour than purely digital methods. It does this by putting Surfshark’s suite of personal protection tools in a single area, which, in theory, could make it easier to stay focused in the event of an attack.

These tools include Personal Email Masking and Alternative Number, which hide the user’s email address and phone number. Also included are Dark Web Monitoring, which gives real-time notifications when personal data is leaked, and Unsafe Site Blocking, which provides a firewall against untrustworthy sites.

While the Antiscam hub is available for all Surfshark users, those in the US (excluding New York State) can also access Identity Theft Coverage, which provides insurance against identity fraud up to $1m for opted-in Surfshark One+ subscribers.

Gabriele Sinkeviciute, Head of Product at Surfshark, said: “Cyberthreats are constantly shifting, and right now we are witnessing the ultimate uptick of scams. In the last month only, our unsafe site blocking feature blocked nearly 1.2 million new phishing and malware sites created by bad actors.”

“Easy-to-use tools that can make you more alert from such threats are much more important than ever.”

A reminder, not a revolution

It’s worth noting that the Antiscam Hub doesn’t bring any new features to Surfshark – it’s simply a new interface that makes it easier to find and access existing security tools.

That might not sound like a big deal for tech-savvy users. But, with VPNs becoming more integrated into mainstream tech usage, the Antiscam hub should be a big boost for those with less mobile experience – modern scammers move quickly, so being able to access all your defensive tools at a glance could make a difference.

Plus, as governments around the world continue to tighten rules on internet use, the conversation about the impact of VPNs remains hotly contested.

While Surfshark and VPNs like it are a great pick for keeping your browsing hidden or accessing local content securely, the new Antiscam hub serves as a reminder that there are other crucial aspects to think about.

Personal data protection and scam awareness are only the beginning of this, but new users might previously have turned a blind eye to it.

Still, it would be nice to see some upgrades to the tools on offer to go with the new interface. Surfshark has identified the Antiscam hub as the starting point for a roadmap of ‘increasingly sophisticated’ security features, but we don’t know what this will mean for users just yet.

What's more, at the time of writing, the Antiscam hub is only in a pilot phase on iOS devices before expanding to other platforms, so we could be waiting a while to see more tangible upgrades.

If you needed a reason to pick up a Memorial Day VPN deal, Surfshark just gave you the best deal we've seen this year.

TechRadar readers can exclusively claim up to $30 in free Amazon gift cards, alongside 3 months of extra protection when you get a 2-year Surfshark plan. That means 27 months of protection from one of the best VPNs currently available, plus the ability to grab something else you need from Amazon for less.

Interested? You've only got a week to get your hands on this VPN deal before it expires on June 2. Once you've signed up, your Amazon voucher will arrive on day 31 of your plan — so you can't make use of it's handy 30-day money-back guarantee and grab the freebie.

Plans start from only $1.99/month, paid as $53.73 upfront. But, since the value of the voucher increases depending on the plan you choose, I'd recommend a One plan. This costs $2.49/month (paid as $67.23 upfront) and comes with a $20 voucher.

It also stops your cost jumping to the $113.13 One+ plan all for the sake of only $10 more in gift cards and Surfshark's Identity theft coverage.

Looking for something different? Some other top VPNs also have discounts available right now:

NordVPN is our best VPN overall. Most notably, it was the best streaming VPN in our latest testing by some way. It also offers stronger security credentials than Surfshark, however this comes at a price, since plans start from $3.09 per month.

ExpressVPN is a superb option if you're new to VPNs and want the most secure VPN possible. It's only $2.79 per month at its cheapest, but packs some of the fastest VPN speeds we've seen, and includes other helpful features such as password management that Surfshark lacks.

Proton VPN combines the value and security of ExpressVPN with the server network and speeds of NordVPN. It offers 188 locations worldwide, is based in Switzerland, meaning you're backed by tight privacy laws when using it, and it starts from only $2.99 per month.

• Split-tunneling and ad blocker arrived in beta across more NymVPN apps
• A first phase of post-quantum security has also been deployed
• A redesigned app is due soon, promising a "cleaner, simpler" interface

NymVPN has spent the past two months in shipping mode. Between March and April 2026, the privacy-focused provider pushed out a string of upgrades that touch nearly every part of its service.

In a recap covering the period, NymVPN confirmed that beta versions of split-tunneling and ad blocking are now live, alongside the first phase of a post-quantum security rollout built on what the team describes as a novel protocol. An innovative payment option has also gone live, letting users access the network without an account, a subscription, or any identifying details.

That's a lot of ground covered for a service that only celebrated its first birthday in March, and it edges NymVPN closer to the feature set users expect from any best VPN contender, while keeping the anonymity-first design that sets it apart.

Split-tunneling and an ad blocker go wider

The most important addition of the period is split-tunneling, a feature long requested by NymVPN users who want to route some apps through the mixnet while letting others connect normally.

Beta builds rolled out across more Linux and Android devices earlier this month, after Mac users got it at the beginning of April and Windows aficionados gained access to the feature less than three weeks after that.

Alongside it, a new in-app ad blocker is now in beta, too, but only on Android.

Nym has been clear that both features are still being refined, and the team has actively asked users to share feedback on how the betas behave in the wild.

Post-quantum security arrives in its first phase

Arguably, the most technically significant change is the first phase of post-quantum encryption(PQE), using what Nym calls a novel Lewes Protocol.

PQE is available across all platforms for the Fast mode option.

The move puts NymVPN among the small group of providers actively shipping protections against the "harvest now, decrypt later" threat, where adversaries store encrypted traffic today in the hope of breaking it with future quantum hardware.

Nym hasn't yet detailed the full technical stack publicly, but framing this as a "first phase" suggests further hardening is on the way over the coming releases.

Pay as You Go ditches the account entirely

The other big release is Pay as You Go, a new way to access the Nym network using decentralized $NYM payments and zero-knowledge credentials.

There's no account to create, no subscription to renew, and no identity tied to your usage. It remains one of the more unusual billing models in the VPN space.

A redesign and a market push are next

Looking ahead, Nym says a redesigned NymVPN app is "less than two weeks" away from launch, promising a cleaner and simpler interface without losing any of the underlying tech.

The company also plans to back the refresh with targeted advertising, a community referral program, and what it calls "guerrilla outreach" to users in countries dealing with internet censorship.

It's a busy schedule, and one that reflects the more activist tone CEO Harry Halpin has been striking lately, including in his recent anti-Palantir manifesto.

For now, the takeaway is simple: in eight weeks, NymVPN has closed several long-standing feature gaps, added a genuinely forward-looking piece of cryptography, and made its most privacy-pure access option yet generally available.

If the redesign lands as promised, the next recap could be just as full.

The Memorial Day weekend is here. But, if you're traveling, be sure to stay vigilant about the information you put online along the way.

Connecting to public Wi-Fi at a local cafe or gas station comes with a few security trade-offs. Unsecured networks make it easier for third parties to monitor your online activity or intercept unencrypted data.

Luckily, a virtual private network stops this. A VPN encrypts the data you send online before it can be intercepted and it remains hidden from your ISP.

One of the best VPNs for this is ExpressVPN. Among US VPNs, it's one of only a few to offer servers in all 50 states. It also offers super-secure encryption keys, and other useful tools like a password manager depending on the plan.

What's more, it's cheap. It starts from $2.79 per month right now, almost half what you'd have been paying for it eighteen months ago. This drop puts it among the best cheap VPNs, beating the likes of NordVPN and Proton for value at the time of writing.

Depending on what you use a VPN for most, some alternatives might suit you better.

For example, while ExpressVPN has some of the best security credentials available, NordVPN is a better streaming VPN overall. We tried it with top services like Netflix, Disney+, and Prime Video, and it hardly faltered.

Equally, if you're after robust privacy laws to back up your security, or you're a keen torrenter, Proton VPN is a great solution. It's based in Switzerland and is one of the few top VPNs to offer port forwarding support.

Where ExpressVPN wins compared to both, however, is Aircove. Aircove is ExpressVPN's router, which builds VPN security in directly. While you can set up a router VPN with either Proton or NordVPN, it involves a much more complex process compared to Aircove's plug-and-play capability.

• iPhone users can now control Mozilla VPN from their iOS Control Center
• Targeted under-the-hood updates boost stability on macOS, Linux clients.
• Mozilla VPN remains entirely separate from Firefox's free, built-in tool

Securing your digital life should never feel like a chore. The best VPN services understand this, which is why top-tier providers constantly refine their apps to make online privacy a seamless, set-and-forget experience. Mozilla is the latest provider to double down on this philosophy, rolling out a series of welcome upgrades to its standalone premium service, Mozilla VPN.

For iPhone users, the headline addition is a highly anticipated iOS Control Center shortcut. This widget allows you to toggle your VPN connection on or off in a single tap, without ever needing to open the app itself.

At the same time, desktop users aren't being left behind. Both macOS and Linux clients are receiving highly targeted, under-the-hood optimizations designed to streamline stability and future updates.

Sleek shortcuts for iPhone, stability for desktops

The new iOS Control Center shortcut is a massive quality-of-life win for Apple users.

Leveraging iOS's expanded widget and toggle capabilities, the shortcut allows users to easily control their privacy directly from their home screen swipe-down menu.

Meanwhile, desktop platforms are receiving critical maintenance updates to ensure everything runs smoothly. Rather than packing the releases with flashy visual features, Mozilla’s developers have focused entirely on performance and reliability.

According to the official release notes on GitHub, macOS users will benefit from a fully optimized client: "[macOS] Over the past few releases we've improved how the VPN operates under the hood. This release completes that work."

Linux VPN users also receive a backend boost, with the release notes highlighting: "[Linux] Some behind-the-scenes changes that help us get new versions out to you more easily." This focus on development efficiency ensures that future security patches can be delivered to open-source systems with minimal friction.

What is Mozilla VPN?

Mozilla VPN is a premium, paid subscription service priced at $4.99 per month. Unlike many competitors that build their own server infrastructure, Mozilla partners with the privacy-focused Swedish provider Mullvad. It routes your data through Mullvad's network of over 500 servers across 30+ countries, utilizing the highly secure WireGuard protocol.

Because it operates at the system level, Mozilla VPN protects all internet traffic leaving your device, whether you are gaming, torrenting, or using third-party apps.

It is easy to confuse Mozilla VPN with the browser-based security tool built directly into Firefox. However, they are entirely different services.

Firefox offers a free built-in VPN that functions strictly as a browser proxy. It is capped at 50GB of data per month and is only available to users in the US, UK, Germany, and France.

While a recent Firefox update introduced region selection for this free tool, it only secures the traffic inside your Firefox browser. For system-wide, unlimited protection across all your apps, the standalone Mozilla VPN client remains the necessary choice.

Summer travel promises sunshine and relaxation, but if your trip coincides with a massive sports fixture, heading abroad can quickly turn into a frustrating experience.

Strict regional licensing laws, can mean that trying to load up your go-to home streaming platforms, like Peacock, Sky Sports, or Sling TV, from a foreign hotel room results in a harsh error message.

This happens because streaming platforms look directly at your temporary local IP address to restrict or entirely change your available content libraries.

The moment your device registers on a foreign network, your access to the subscriptions you pay for back home is instantly revoked.

Fortunately, choosing the best VPN is an easy way to reclaim your access. Premium VPN providers deploy specialized "obfuscated" servers specifically designed to bypass the aggressive VPN blocks implemented by streaming networks.

How the "Digital Home-Coming" works

By connecting your device to a VPN server in your home country, the VPN masks your foreign hotel Wi-Fi IP and replaces it with a local VPN IP address. This allows you to securely log in to your paid home streaming accounts and avoid resorting to the malicious, unofficial "free" streaming sites that often harbor malware.

While using a VPN is generally legal in most vacation destinations, it often violates the user agreements of streaming platforms. Be aware that bypassing geo-restrictions carries the risk of potential account penalties, though outright bans are rare.

For the most up-to-date recommendations, specifically tested against 2026's demanding 4K/8K bitrate requirements and advanced detection algorithms, check out our comprehensive best VPN for streaming guide.

Performance is king: avoiding the buffering screen

When it comes to live sports, performance is everything. High latency inevitably causes buffering, and fast, stable connection speeds are absolutely required for live broadcasts.

Top-tier market options are specifically engineered for this. Surfshark regularly pushes incredible speeds of 1000 Mbps+ using the WireGuard protocol, while ExpressVPN uses its proprietary Lightway Turbo to keep streams seamless.

Meanwhile, NordVPN relies on its SmartPlay feature. This combines VPN and DNS technologies to bypass streaming blocks without requiring you to manually tweak advanced settings.

However, a VPN cannot perform miracles. It cannot fix inherently slow or congested hotel Wi-Fi, and VPN encryption will always hamper speeds slightly anyway, so a good enough internet connection is a must.

To maximize your chances of a flawless stream, always choose a VPN server physically closest to your home city, and be sure to test your setup a few days before the event kicks off.

Final whistle

A reliable, high-speed VPN serves as a crucial digital companion for any summer travel. Before you pack your bags, take five minutes to review your streaming platform's latest policy updates regarding travel and VPN usage.

If you are looking to dial in your setup before heading to the airport, be sure to check out our guides to the best Netflix VPN and the fastest VPN services currently on the market.

• Mullvad has begun testing a fix for newly found IP fingerprinting issues
• The company confirmed the bug does not reveal a user's true identity
• The patch is expected to begin to be deployed in the coming weeks

Following the discovery of a minor networking vulnerability earlier this month, Mullvad has begun testing a mitigation to fix an exit IP fingerprinting issue across its server fleet.

Last Friday, May 15, the privacy-focused provider became aware that its servers were mapping exit IP addresses in a highly predictable way after a security researcher found this flaw during a security analysis. If a user jumped from one location to another, a mathematical quirk meant their sessions could be linked, compromising the anonymity of the server switch.

While this flaw never risked exposing your real IP address or personal identity, it did allow websites to see that the same anonymous person connecting from Server A was now connecting from Server B.

Now, Mullvad has designed a permanent fix to sever this link. This ensures its network privacy standards remain on par with the best VPN services on the market. Deployment is expected to begin in the coming weeks, and anyone can track the progress of the update here.

The announcement comes as Mullvad co-founder and co-CEO Fredrik Strömberg was quick to acknowledge the issue, promising a fix for any unintended behavior and a reassessment of "whether the intended behaviors are acceptable or not."

We have approached Mullvad for further comment.

How the vulnerability works

Typically, fingerprinting is a threat associated with web browsers silently gathering hardware data. However, this issue occurred entirely at the network level.

Each Mullvad server hosts multiple users sharing a single exit IP. To manage heavy traffic, these servers utilize a wide range of exit addresses. When a user connects, their device uses a unique WireGuard key to encrypt the connection, alongside an internal tunnel address.

Because of how these internal addresses were processed, a user switching servers was highly likely to be assigned an exit address with the exact same relative position.

"When a user switches from one VPN server to another, this sometimes makes it possible for services such as websites to confidently guess that the same user that connected from the new VPN server is the one that connected from the previous VPN server," the company explained in its announcement.

The company ensures, however, that "this does not reveal the identity of the user."

Mullvad also added that because multiple users share every exit IP, the flaw will not provide certainty but "in many cases good guesses can be made."

To permanently close the loophole, Mullvad is currently testing a new internal method for assigning exit IPs. The company confirmed that this upcoming patch "will give no information on which exit address is used on another VPN server, or by another user on the same server."

The update will be rolled out gradually over the coming weeks. In the meantime, if your personal threat model requires absolute separation between server sessions, Mullvad recommends logging out and logging back into the app before switching servers. This action forces the app to generate a fresh WireGuard key and internal IP address.

A win for the wider ecosystem

Interestingly, Mullvad's swift remediation won't just protect its direct customers. The patch will natively benefit users of other privacy tools that rely on Mullvad's server infrastructure as an exit node.

One notable example is Obscura VPN, a new provider built entirely on a two-party architecture. Obscura manages the initial entry hop to encrypt your connection, but relies on Mullvad-operated servers to complete the final exit hop to the open web.

As Obscura's Founder Carl Dong noted in a post on X, because Obscura utilizes Mullvad's network, this incoming anti-fingerprinting patch will seamlessly pass downstream, actively shoring up the privacy guarantees for users across multiple services.

The 2026 Premier League season is coming to a close. Whether you're watching behind your hands for fear of your team being relegated or hoping for a snatch-and-grab win to get into Europe, Sunday the 24th certainly isn't a gameweek to miss.

An easy way to ensure you don't miss a kick is with a VPN. Virtual Private Networks secure your connection via an encrypted tunnel. Since these services have servers worldwide, you can choose to connect via a tunnel in your home country. This means if you're traveling over the weekend, you can stream the game with your usual streaming service, without encountering location-based blocks.

For me, no VPN can handle your matchday better than NordVPN. It ranks as our best VPN overall, offering fast download speeds, secure protocols, and, most importantly, seamless streaming performance.

I've tested it with the likes of Sky, Peacock, TNT, and Ziggo, and it's never faltered when streaming live events such as football, tennis, or F1. It's also fast enough that I've rarely found my stream delayed to the point where I find out the score from a phone notification first.

Right now, NordVPN is only $3.09 per month — $83.43 in total — for 27 months of protection. This means you'll get secure access to the finale of this Premier League season, plus two more after that.

Streaming is the biggest challenge VPNs face. The best streaming VPNs regularly update their servers to ensure their IP addresses work with key platforms like Netflix, Prime Video, and Disney+, while also ensuring your streaming quality isn't massively impacted once you're signed in.

Our most recent tests proved NordVPN was the best overall at these areas. That said, several VPNs work well with sports-focused streaming platforms if you want something a touch cheaper or with different features.

Personally, Surfshark is my next best recommendation. It does sometimes struggle with dropouts when watching live events, but it starts from $1.99 and comes packed with other features.

Alternatively, Proton VPN is as secure as NordVPN, is normally slightly cheaper (between $2.79 and $2.99 per month), and offers an equally broad selection of server locations. That said, it struggled to reach the same streaming quality as NordVPN on regular occasions.

As the concept of "digital sovereignty" takes hold globally, an increasing number of countries are implementing blocks on major communication platforms like TikTok, X, and WhatsApp.

For governments, controlling these apps is a way to manage the flow of information; for citizens and visitors, it represents a massive digital roadblock.

In high-surveillance zones, the reality is even starker. State-run Internet Service Providers (ISPs) actively monitor public networks to track user sentiment and analyze app traffic, meaning every unencrypted message or search query can potentially be intercepted by local authorities.

For travelers and remote workers, unrestricted internet access is needed to communicate with family back home, manage finances, and find essential local information.

Finding the best VPN is no longer just a workaround to watch your favorite Netflix shows abroad; it is a critical safety tool.

What you need to protect yourself against social media blocks

Simply downloading a basic virtual private network is no longer enough. Advanced government firewalls can now easily detect standard VPN traffic signatures. If the firewall sees that you are using a VPN, it will instantly throttle or block your connection.

To overcome this, you need a provider that offers "obfuscation." This technology scrambles your VPN data, stripping away its recognizable signature so it looks like standard, unblocked HTTPS web traffic to anyone snooping on the network.

However, you should be aware of the technological limits. While a premium VPN can perfectly bypass regional IP blocks, it cannot circumvent social media access if the platform itself mandates local ID or phone number verification to create an account.

In these extreme censorship environments, decentralized networks like Tor offer a basic, highly anonymous alternative for text-based communication. Just keep in mind that the Tor network is notoriously slow, making it practically useless for media-heavy apps.

What to look for in an effective VPN

When operating in monitored regions, your digital toolkit needs specific technical safeguards.

Chief among these is a kill switch. This is a non-negotiable feature that immediately cuts your device's internet traffic if the VPN connection drops, preventing your actual IP address and data from being exposed to local ISPs.

If anonymity is your primary concern, look into a Double VPN (or multi-hop) feature. This passes your traffic through two separate encrypted servers (for example, routing your data through London and then New York) to maximize privacy.

Be warned, however, that encrypting your data twice will heavily degrade your connection speeds.

We are also seeing a massive shift in how travelers connect upon arrival. NordVPN’s Saily eSIM integration and ExpressVPN's Holiday.com offer with Pro plans now provide encrypted cellular data the second your plane touches down.

While incredibly convenient, budget-conscious travelers should note that pairing a standalone travel eSIM with a separate, independent VPN subscription often yields lower total costs.

Whatever route you choose, remember the golden rule of digital travel: download and install all your VPN software prior to departure. Once you cross the border into a high-surveillance zone, provider websites are almost always the first things blocked.

Staying safe in 2026

Maintaining privacy and communication requires serious preparation before entering heavily monitored regions. You must constantly balance the use of powerful tech tools with a clear understanding of your host country's local regulations.

To make sure your devices are fully prepared, be sure to check out our comprehensive Best VPN guide, and read our updated 2026 NordVPN vs ExpressVPN showdown to see which provider fits your travel itinerary.

• IPVanish expands network to 150+ global locations
• Nearly 1,000 new RAM-only servers boost privacy
• Expansion narrows the gap with top-tier VPN providers

IPVanish has officially crossed a major threshold by expanding its global VPN network to 150 server locations.

This milestone follows a year of heavy lifting, with IPVanish adding over 1,000 new servers to reach a total of more than 3,400 worldwide.

While the company spent 2024 spreading its wings across Asia, South America, and Africa, the latest push is focused on improving speeds and reliability for users in North America and Europe.

New additions include Barcelona, Calgary, Berlin, Edinburgh, Detroit, and Salt Lake City, reinforcing the network alongside long-standing, high-traffic hubs like New York, London, and Frankfurt.

Rather than just chasing a higher number of countries, the phase of expansion is about packing more power into the places people use the most.

With this upgrade, IPVanish is stepping up to compete directly with the best VPN names in the game.

Why more servers actually matter

The real win here isn’t just the map getting bigger; it’s about fixing the bottlenecks that otherwise slow users down. By adding new capacity into busy regions like North America and Europe, IPVanish is relieving the strain on peak-hour traffic, specifically between 7 PM and 12 AM when streaming and gaming activity spikes.

For the average user, this means the difference between a constantly buffering stream and smooth playback, or a choppy video call and a clear one, without having to constantly hunt for a "less crowded" server.

Subbu Sthanu, General Manager of Consumer Cybersecurity at IPVanish, framed the expansion as part of a broader commitment to performance.

"IPVanish is dedicated to continually expanding our server network, enabling us to offer customers the fastest VPN speeds at home and while traveling," Sthanu said. "Reaching 150 server locations is an important milestone, but it’s also part of a much larger investment in the future of the IPVanish network."

Yet the hardware is getting a serious upgrade, too.

IPVanish has already rolled out nearly 1,000 RAM-only servers across 25 locations. Unlike traditional hard-drive servers that can hold onto data, these wipe everything clean the second they lose power.

It’s a huge boost for privacy, and with 40 Gbps network interfaces, it should not come at the cost of speed. Currently, over 35% of the IPVanish network is running on this RAM-only infrastructure.

The company has also introduced a RAM-only server filter within its apps, making it easy to identify and connect specifically to RAM servers.

Best of all, these upgrades ensure a consistent experience across all apps, from desktop to mobile to Smart TVs. Whether you’re working on a laptop or watching your favorite Netflix show from your couch, you get the same fast, secure connection.

How this compares to rival VPN providers

NordVPN recently expanded to 211 locations across 135 countries. ExpressVPN maintains approximately 189 locations in 94 countries, and Proton VPN has grown its network to over 20,000 servers in 191 locations.

By comparison, IPVanish covers 112 countries with its 150-location network, closing the gap between major providers.

IPVanish has also stated its goal is to reach 100% RAM-only server deployment by 2027, which would align it with the security standards of the likes of NordVPN, Surfshark, and ExpressVPN.

For consumers, choosing between these providers often comes down to their priorities: geographic coverage, streaming needs, budget, or feature requirements.

• Firefox's built-in VPN now lets users choose their favorite server location
• The feature is rolling out to users in the US, UK, France, Germany, Canada
• Firefox 151 also adds private session reset, stronger protection, and more

The latest Firefox update, 151, has added a highly requested feature to its VPN: the ability to pick your favorite server location.

Mozilla launched the free-to-use Firefox VPN just two months ago, but already more than one million people have signed up to try it. Even for a free service, however, not having a location selector was a big restriction, so this move brings the experience closer in line with the best VPN services.

The biggest difference is that you can now use the VPN for browsing region-specific content instead of just using it for privacy. This includes streaming, but it's worth noting that the 50GB monthly limit will get used up pretty quickly through this kind of heavy usage.

What's changed in Firefox's built-in VPN

Firefox's VPN is built right into the browser, and primarily focuses on the basics of encrypting your browser traffic and masking your IP address.

With the new update, the VPN now includes a location menu listing each of the countries where Mozilla has launched VPN support. For now, that's the US, UK, France, Germany, and Canada. If you leave the setting on 'Recommended,' Firefox will choose the location with the best connection (just as it was before the update).

Mozilla has confirmed that more countries are planned for future releases, and the rollout is being staged, so not everyone will see the option immediately.

To try it, open Firefox 151, head into the VPN controls in the browser, and look for the new country picker. From there, choose any of the supported regions or stick with the Recommended option.

What else is new in Firefox 151

The VPN upgrade is the headline change, but Mozilla Firefox 151 ships with a handful of other useful additions worth knowing about.

A new Clear Private Session button, shaped like a small flame and tucked next to the address bar in Private Browsing windows, lets you wipe cookies, history, logins, and other session data in one click without closing the window.

Enhanced Tracking Protection has also been strengthened. Firefox says its updated fingerprinting defences reduce the number of users who can be uniquely identified by common tracking techniques by around 14% on average, and by roughly 49% on macOS.

The update is also bringing the AI controls tab to mobile, both on iOS and Android. While availability depends on users' location, these include features like translations, voice search, and the company's flagship Shake to Summarize, which was named by TIME as one of the Best Inventions of 2025.

• Obscura VPN is now available for Android users via Google Play, Obtainium
• Users can also claim a 25% discount for a limited time
• Dedicated apps for Windows and Linux are currently in development

If you've been searching for the best VPN to protect your mobile device, a fresh and highly secure contender has just entered the chat. Obscura VPN has officially landed on Android, bringing its unique flavor of privacy to the world's most popular mobile operating system.

Previously limited to iOS and macOS, the provider is now available to download on Google Play and the open-source app manager Obtainium. It marks a major milestone for the privacy-focused company, which aims to shield the vast amounts of personal data and location history stored on our smartphones.

"Your phone holds more of your personal life than almost anything else you own," the company stated in a blog post announcing the release. "You carry it everywhere, which means apps and other services can build up a detailed record of your location. That activity deserves to stay private, which is why we built Obscura."

To celebrate the Android launch, the provider is offering a 25% discount to all users for a limited time. You can secure the deal by using the promo code ANDROID26 at checkout.

The development team noted they are currently working on bringing the app to other alternative Android storefronts in the future. A company spokesperson also told TechRadar that native apps for Windows and Linux are officially in development, though no firm release date has been set.

In the meantime, those on unsupported platforms don't have to miss out completely. Users on Windows and Linux can still connect to the network using a manual WireGuard guide provided by the company, ensuring they can benefit from its top-tier encryption while they wait for dedicated software.

What makes Obscura VPN different?

If you aren't familiar with Obscura VPN, the provider burst onto the scene in early 2025, promising to be "private by design" and to "outsmart internet restrictions." The goal was to fix the inherent trust issues found in the wider cybersecurity industry.

Its standout feature is a two-party relay architecture. Traditional VPNs act as a single middleman, meaning the provider theoretically knows both your real identity and your browsing history. Obscura promises to solve this by splitting the journey into two.

Obscura manages the entry hop, encrypting your traffic using the widely trusted WireGuard protocol. Your data is then passed to an independent exit server operated by the highly respected Mullvad VPN, which ultimately connects you to the internet.

"This splits 'who you are' from 'what you do,' meaning neither party can tie your identity to your browsing," Obscura VPN founder Carl Dong previously told TechRadar.

Beyond its unique server setup, Obscura asks for zero personal information at signup; no name, no email, and no credit card details. It also leverages the QUIC protocol to bypass strict internet censorship. This newer technology helps to disguise VPN connections as regular web traffic without the performance drops associated with older methods.

The service's strict privacy claims aren't just marketing speak, either. Late last year, Obscura VPN passed a comprehensive independent audit conducted by leading security firm Cure53. The auditors spent 20 days probing the source code and confirmed its architecture had "no major security vulnerabilities".

That brand-new smart fridge might be keeping your groceries cool, but it could also be leaving your personal data out in the cold.

Today’s smart devices, ranging from security cameras and thermostats to seemingly harmless smart lightbulbs, often ship with notoriously weak security protocols. Worse still, they frequently "phone home," sending a constant stream of your usage data back to manufacturer servers.

Unlike your laptop or smartphone, you cannot simply download and install security software on a smart plug. These Internet of Things (IoT) devices are essentially closed boxes, leaving consumers with very few options for on-device protection.

If you want to secure these gadgets, the most effective solution is to secure the network they connect to. By setting up hardware-level encryption directly on your Wi-Fi router, you can automatically protect all connected IoT devices simultaneously.

To that end, finding the best VPN with router support is your first port of call.

However, it is vital to understand the limitations of this approach. A Virtual Private Network (VPN) restricts data protection to transit only. It will securely tunnel your data, but it cannot fix underlying firmware vulnerabilities or stop manufacturer-side data leaks once the information reaches their proprietary cloud servers.

The hidden security risks of smart devices

Many budget-friendly IoT devices rely on unencrypted channels to communicate. This leaves your network traffic vulnerable to local eavesdropping, meaning anyone nearby with the right tools could potentially intercept your data.

Even when encrypted, the continuous cloud connections required by smart homes allow Internet Service Providers (ISPs) and third-party trackers to map your daily routines. By simply monitoring spikes in your network activity, an observer can easily deduce when you wake up, when you leave for work, and when you go to sleep.

While a VPN will effectively hide this traffic from your ISP, it cannot prevent manufacturers from collecting and storing data once it reaches their servers.

To truly enhance your privacy, you need to combine a network-level VPN with strict in-app privacy settings and manually opt out of data-sharing agreements in your companion apps.

How a router VPN can help

By installing a VPN directly on your router, you encrypt all outgoing traffic from your home. This process successfully masks the specific signatures of your smart devices, making it incredibly difficult for outside observers to identify what hardware you are running.

For added security, combine a VPN with a separate guest Wi-Fi network. By relegating all your smart gadgets to a secondary network, you prevent hackers from "jumping" from a compromised smart plug to your primary laptop or smartphone.

Some of the best VPN providers like NordVPN and ExpressVPN now feature military-grade AES-256 encryption and Post-Quantum Encryption (PQE) protection as standard, ensuring your network is future-proofed against emerging threats.

If you are intimidated by network configuration, ExpressVPN’s Aircove router simplifies setup for beginners, offering built-in VPN protection straight out of the box. Alternatively, tech-savvy users can manually flash open-source firmware like DD-WRT or OpenWrt onto compatible routers as a highly cost-effective DIY alternative.

Just be aware of the trade-offs. Router-level encryption demands processing power, which can reduce your overall internet speeds and occasionally introduce technical troubleshooting hurdles when devices refuse to connect.

Take back control of your data

Securing your smart home is about more than just blocking malicious hackers; it is about reclaiming ownership of your personal data.

VPNs remain a powerful tool in your privacy arsenal, but they work best when deployed alongside regular hardware firmware updates and strict network isolation.

Ready to upgrade your home network? Check out our comprehensive guide to the best VPN routers and our ultimate best VPN service round-up for 2026.

Google I/O 2026 has arrived, and while Android, Gemini, and YouTube share the headlines, Google has yet again forgotten its VPN service along the way.

Pixel VPN by Google (formerly Google One VPN) has been included in Google Pixel phones for several years now. However, aside from a name change and a small improvement to its integration in Android menus in recent months, it hasn't garnered much attention from its Alphabet owners, leaving it far from being among the best VPNs right now.

Thankfully, some of the best Android VPNs continue to push improvements to their services, and one example that's doing this for less right now is Proton VPN.

The provider is $2.99 per month ($71.76 total) for two years of protection. Even better, its Unlimited plan is only $7.99/month ($191.76 total) and gives you a secure way to ditch Google entirely without losing functionalities such as Docs, Drive, and Calendar.

Proton ranks third in our overall VPN rankings. Its Android app is easy to use and comes packed with explanations if you're new to VPNs and unsure what to do. It's faster than most VPNs out there, and it also has some of the most secure VPN servers available, perfect if privacy is your primary focus.

Proton isn't the only great Android VPN out there, though. Surfshark ranks as my top Android VPN overall. It packs a ton of features into plans that are often only a little over $2 per month. It also has 'Alternative ID' a feature, which takes Android 17's new 'Spoofing Protection' feature to another level by giving you an entirely new, secure identity to use on websites to avoid data breaches.

For the best VPN performance overall, look to NordVPN. It's more expensive than both Proton VPN and Surfshark, but by far the most effective. It's among the fastest and most secure VPNs, is post-quantum encrypted, and includes features such as the best password manager out there, NordPass.

• A researcher found Mullvad's WireGuard exit IP may enable fingerprinting
• Mullvad's co-founder confirmed an upcoming patch to address any issues
• Mullvad will also re-evaluate if the intended behaviors are acceptable or not

Mullvad VPN, a provider highly regarded for its rigid privacy stance and no-logs policy, is currently addressing claims that its IP assignment structure can be used to track individual users.

The issue was brought to light by an independent security researcher known as "tmctmt," who found that Mullvad’s method of assigning public exit IP addresses for its WireGuard connections isn't entirely random. Instead of assigning a fresh IP every time you connect, the exit IP is deterministically tied to your unique WireGuard key.

Because this internal mathematical "seed" remains static until your key rotates, moving between different Mullvad servers may produce a recognizable constellation of IP addresses. By analyzing these IP logs, administrators on forums or websites could potentially link a user's disparate connections back to the same device with over 99% confidence.

Mullvad co-founder and co-CEO Fredrik Strömberg quickly acknowledged the report on Hacker News, arguing that: "Some aspects of the described behavior are as we intended and some are not."

Strömberg confirms that a fix is actively being deployed for any of the unintended behaviors, adding that "we will also re-evaluate whether the intended behaviors are acceptable or not."

TechRadar has also reached out to Mullvad directly for further comment.

Feature or bug?

Unlike competitors that cram thousands of users onto a single IP address, Mullvad assigns multiple exit IPs per server to prevent annoying CAPTCHAs and rate limits.

The researcher tested this system by cycling through 3,650 public keys across nine different servers. Despite there being over 8.2 trillion possible IP combinations, all of the generated keys resulted in just 284 distinct IP patterns.

Using a custom "seed estimator," the researcher showed that linking these exit IPs could narrow a user down to a pool of about 340 people (assuming 100,000 active users). While it doesn't instantly dox your real name, it provides more than enough data to cross-reference multiple accounts or connections.

Responding on Hacker News under the username "kfreds," Strömberg was quick to note that the backend cause wasn't exactly as theorized by the researcher, but confirmed action was being taken.

"The cause is not exactly as described in the blog post. As for mitigation, we are already testing a patch of the unintended behavior on a subset of our infrastructure. If any of you try to reproduce the blog post's findings you may get confusing results throughout the day," Strömberg noted.

The company recently pushed updates to make its iOS app more secure, but server-level IP assignment affects users across all platforms. While Mullvad addresses the unintended infrastructure quirks, Strömberg noted they will "re-evaluate whether the intended behaviors are acceptable or not," framing the issue as a "trade-off between multiple aspects of privacy, and multiple aspects of user experience".

Strömberg also left a polite note for future bug hunters: "Finally, for those of you who do security research: when you find a security or privacy issue, please consider notifying the maintainer/vendor before publishing your findings, even if you intend to publish right away".

If you are a current Mullvad user, you can easily mitigate this tracking risk today. The researcher advises avoiding rapid server switching, and occasionally logging out and back into the Mullvad app to force a manual WireGuard key rotation.