The network has recently grown to 1040 servers spread across an impressive 160 locations in 64 countries, for instance.
There are Windows, Mac, iOS, Android and Linux apps, Chrome and Firefox extensions, and a website-unblocking Smart DNS system for games consoles, TVs and more.
Whatever you're using, there's no need to worry about annoying 'simultaneous connection' limits - you can install and run Surfshark on as many devices as you like.
The service is strong on the technical essentials, including strong AES-256-GCM encryption, OpenVPN and IKEv2 support, a no-logs policy, and a kill switch to protect you if your connection drops.
- Want to try Surfshark? Check out the website here
Oh, there’s also URL and ad blocking, P2P support on most servers, VPN chaining (use two servers for one hop), split tunneling, the company's own zero-knowledge DNS servers, and 24/7 support via email and live chat if anything goes wrong.
That's a lot of power, but Surfshark hasn't finished yet.
Major changes to our last review include support for two-factor authentication, making it more difficult for an attacker to hack your account. New GPS spoofing for Android ensures any apps requesting your physical location will get the coordinates of your chosen VPN server.
And there are a bunch of smaller improvements, including dark mode, extra configuration options and extended diagnostics to speed up any troubleshooting.
Plans and pricing
Surfshark's monthly plan is more expensive than some, at $11.95, and paying for a year up-front still only cuts the cost to $5.99 (Private Internet Access, Speedify, Bitdefender and others all have annual plans for under $4.) But the two-year plan looks like a real bargain at $1.99, one of the lowest prices we've seen for a full-featured VPN.
If you worry about signing up for long-term plans, then so do we, but when the price is this low, it doesn't really matter. Just look at the figures: sign up for two years at Surfshark and you'll pay $47.76 up-front; choose just one year at NordVPN and you'll spend $83.88. Even if you're barely using Surfshark after a year, it still looks like fair value to us.
A seven-day free trial for Android, iOS and Mac gives you some time to sample the service for yourself. We'd like something longer, with Windows support, too, but it seems unfair to complain when many providers have no trials at all.
Surfshark even delivers more than you'd expect with its range of payment methods, with support for credit cards, PayPal, cryptocurrencies, Amazon Pay, Google Pay and Ali Pay.
But if, after all this, you sign up and find the company isn't for you, no problem - you're protected by a 30-day money-back guarantee.
Privacy and logging
Surfshark's privacy features start with the VPN basics: secure protocols (OpenVPN UDP and TCP, IKEv2), AES-256 encryption, and a kill switch to block internet access and prevent identity leaks if the connection ever fails.
But that's just the start. Surfshark has its own private DNS on each server to reduce the chance of others spying on your activities. And the ability to use a double VPN hop (connect to Paris, say, then leave the Surfshark network in New York) makes it even more difficult for anyone to follow your tracks.
Like ExpressVPN, Surfshark is based in the British Virgin Islands, and the company points out that this means it's not required to keep logs of user actions.
A FAQ page on logging spells this out, stating that Surfshark doesn't collect: 'Incoming and outgoing IP addresses; Browsing, downloading or purchasing history; VPN servers you use; Used bandwidth; Session information; Connection timestamps; Network traffic.'
The only data the company keeps about you is your email address and billing information, the FAQ explains, and some anonymous, aggregated stats: performance information, frequency of use of the system, unsuccessful connections, crash reports.
We would like more information on these stats, how they're collected and what the company sees, but overall, there's nothing too surprising here. (If you're unhappy, you can limit this data collection a little, for example by disabling crash reporting in your app Settings box.)
The Surfshark website boasts that it has passed a security audit by the German Security company Cure53. And that's true, but this was limited to an examination of Surfshark's browser extensions, so can't tell us anything about logging or other back end processes. And as it happened in November 2018, we're unsure that it tells us anything useful about the service as it is today.
Still, it's good to see that Cure53 found only two relatively small issues, and concluded that it was 'highly satisfied to see such a strong security posture on the Surfshark VPN extensions, especially given the common vulnerability of similar products to privacy issues.'
Getting started with Surfshark was easy. We downloaded and installed the Windows client, chose the signup option, and were even able to select a plan and hand over payment from within the installer, no third-party browser required.
The Windows client interface is more versatile than most, adapting like a responsive website as you resize its window. At its smallest, the client looks much like any other VPN app, with a Connect button, status information and a list of locations. But expand or maximize the client window and it reformats to display new panels and options.
Getting connected is easy. Tap the button, desktop notifications tell you when Surfshark connects and disconnects, and the interface updates to display your new virtual location and IP address.
The Location list doesn't display latencies, but server load icons highlight your best (and worst) options, and a Favorites system enables managing commonly used servers.
Right-clicking the Surfshark system tray icon displays a miniature app window, rather than the usual basic menu, allowing you to connect to the fastest server, choose one of your most recent locations, or open the full app interface.
A MultiHop tab passes your traffic through two VPN servers, ensuring that even if the exit server is compromised, an attacker still won't have your real IP. There are 13 routes available, where the first server is your initial connection (options include USA, UK, Singapore, Germany, France, India, Netherlands and Australia), and the second is where you'll appear to be to the outside world (France, Germany, Hong Kong, Netherlands, Portugal, Singapore, Sweden, UK, USA.) The idea is that even if the exit server is compromised, the attacker will still only get an anonymous IP.
A Whitelister panel enables creating whitelists of applications, websites and IP addresses that will bypass the VPN (an equivalent of the split-tunneling feature you'll see with providers like ExpressVPN). If using Surfshark breaks a particular website or app, adding it to the whitelist should solve the problem.
(Alternatively, you're able to set the Whitelister to route only your chosen apps through the VPN. That may be more useful if you're only using Surfshark for one or two tasks, maybe torrenting; set up your torrent client to connect via the VPN and everything else will use your regular connection.)
Surfshark's CleanWeb feature blocks ads, trackers and malicious links. We're unsure how effective this might be, though, as in our quick tests we found specialist tools like uBlock Origin blocked more ads and offered more control.
A NoBorders mode aims to help you get online in countries where VPNs are commonly blocked. Surfshark doesn't explain in detail what this does, but presumably it tries to obfuscate your traffic in some way.
More conventional features include options to launch the VPN along with Windows, or change the protocol between OpenVPN UDP and TCP, IKEv2 or Shadowsocks (an alternative way to direct traffic through an encrypted tunnel, commonly used to bypass internet censorship in China.)
A kill switch is on hand to block your internet connection if the VPN drops. It works, too, but not quite as well as we'd like.
Our first issue is that it's only available in the most extreme form, where the kill switch prevents you accessing the internet at all, ever, unless you're connected to Surfshark. We prefer the more standard approach where the kill switch is only active if the connection drops within a VPN session, and you still have the option to close the app and use your regular internet connection, instead.
In another complication, although the kill switch successfully blocked our internet traffic when we forcibly closed the VPN, it didn't display any notification to alert the user. If you're browsing and the VPN drops, all you'll see is your internet connection fails with no obvious reason why. This may only last for a few seconds, until the app auto-reconnects, but it's still potentially annoying.
If you don't have the kill switch active, the problem gets worse. If the VPN drops, not only will your connection remain active, but the client won't warn you. And as we found the app occasionally failed to reconnect, again without warning the user, your identity and data could be exposed for some time.
Surfshark's Windows client needs some work, then, but it's generally easy to use and there's a lot of functionality to explore.
Mobile VPN apps are often far more basic than their desktop cousins, but Surfshark's Android offering is surprising similar. There's more or the same interface, the same location list, multihop connections, CleanWeb's ad and malware blocking, and split tunneling for apps and websites with the Whitelister.
There's the same OpenVPN/ IVEv2 and Shadowsocks protocol support, and a kill switch to protect you if the VPN drops.
The Android app throws in extra features, too: a choice of encryption methods (AES-256-GGM or Chacha20Poly1305, maybe giving you better speeds), a 'use small packets' option to improve performance with some mobile networks, and the ability to automatically connect to the VPN when you access mobile, secured or unsecured networks.
And if any of this doesn't work as it should, you can send bug reports, raise or browse tickets from within the app (no need to open your browser and waste time hunting around the website.)
It's much the same story with Surfshark's iOS app: the look and feel are very similar, and you still get the kill switch, the choice of protocols (OpenVPN, IKEv2) and the other options you won't always find on other mobile apps.
Put it all together and these are impressive apps, well implemented and straightforward to use. A nice antidote for anyone tired of losing VPN functionality on mobile devices, and considerably more than we'd expect from a $1.99 a month service.
Surfshark's support for OpenVPN includes providing downloads of configuration files for each of its servers. That's good news if you're planning on manually setting the service up on other platforms which can use them, and it also allowed us to use our automated performance testing software to check out a sample of Surfshark's locations.
There was good news all round. We had no connection failures, connection times were fractionally faster than average, and all servers returned IP addresses for their advertised locations.
UK download speeds were as good as we could expect, at around 68Mbps on our 75Mbps test line.
We switched to a 600Mbps connection in the US, and tried the same tests again.
Average speeds of 150-160Mbps didn't begin to use all our bandwidth, but that's not necessarily an issue with Surfshark - they can also be affected by our ISP, load on the speed test site, and more.
What we can tell from the tests is Surfshark always gave very acceptable US performance. Across all forty checks, the very lowest speed we recorded was 119Mbps, more than enough for most people.
To check worst case speeds, we used the client to choose distant servers highlighted as having the heaviest load. Performance became very inconsistent, as we'd expect, but was still usable most of the time (South Korea managed 7-28Mbps, for instance.)
Put it all together and it looks like Surfshark delivers very acceptable performance, almost all of the time. The speeds you'll see will depend very much on your location and target servers, though, so it's important to take the trial and carry out performance tests of your own.
If you're tired of VPNs who vaguely hint about their unblocking abilities, but never make any real commitment, you'll love Surfshark. Not only does the company say up-front that it unblocks Netflix, it also names the 14 countries where it currently works (US, France, Japan, Italy, Australia and more.)
This wasn't just overblown marketing-oriented confidence, either. We were able to access US Netflix from all five of our test locations.
YouTube has only the most basic of geographic protections, so we weren't surprised to find that Surfshark also allowed us to browse US YouTube content.
BBC iPlayer can sometimes be more of a challenge, but not this time. Surfshark bypassed its VPN blocking with ease, giving us access from both of its UK locations.
Amazon Prime Video support is a little more complicated, as usual. We could watch Amazon Prime Video while connected to Surfshark's UK servers, using a UK-registered Amazon account, but weren't able to watch Prime Video when connected to other countries. That is, you can use Surfshark to access the service in your home country (or wherever you've registered your Amazon account), but it won't allow you to view content from other countries.
If Surfshark doesn't work for you, the support site has setup and installation tutorials, troubleshooting guides, FAQs and other resources to point you in the right direction.
While there's a little useful content there, it's mostly related to setup, for example including guides to setting up the service to run on various routers. When we searched for more details on Surfshark's own features, we found most were described in the same one or two lines used on the main website, and others (NoBorders) weren't mentioned at all.
Organization is a problem, too. If you want to know about the iOS app, for instance, enter 'iOS' in the Support search box and most providers point you to one or two 'How to use'-type articles that tell you everything you need to know. Here, you just get a list of articles responding to a host of common iOS-related issues: 'unstable connection troubleshooting', 'How to change App Store region on iOS', 'How to set up OpenVPN on iOS' and so on. It's good to have all that detail, but what's lacking here are ExpressVPN-like one-stop manuals which tell you everything you need to know about a particular app. Hopefully that'll be addressed in the future.
Fortunately, if you have any issues, support is available 24/7 via live chat. We tried this while trying to diagnose a connection issue, and had a friendly reply in under 60 seconds.
The support agent seemed to be follow a general script a little more than we would like, for example asking us very standard system-level questions ('do you have any other VPNs installed?', 'what antivirus are you using?'), even after we explained that our problem was connecting to a single server, and the reason was because of a 'host not resolved' error (our DNS couldn't find an IP address for the server name.)
We can't blame the agent for following what works probably 95% of the time, though, and this did change as the conversation went on. The agent listened to us, realized the script wasn't enough, made more relevant suggestions and gave sensible answers to our own questions, over a session which lasted around 30 minutes.
Although there are no guarantees, our overall impression was a positive one. This felt like someone who was following a script because it was helpful, not because it's all they could do, and when we went off-road, they were more than capable of following us and discussing more complicated issues. That's very good news, and again, it's much more than we would expect for a service costing from $1.99 a month.
Surfshark is a powerful and low-priced VPN with an array of advanced features. There are some issues, too, but the service has seen some major improvements over the past year, and it deserves to be on your VPN shortlist.
- We've also highlighted the best VPN services of 2020