Free VPNs are not automatically scams, and paid VPNs are not automatically trustworthy. The price tag tells you almost nothing about what happens to your traffic after it leaves your laptop. What matters is how a provider pays for its servers, what it writes down about you, and whether its software fails safely when the connection drops.
This comparison avoids brand rankings. Instead it looks at the three places where free and paid services diverge most — logging, speed and kill switches — so you can pick based on what you are actually defending against.
The economics of free, in plain terms
Servers, bandwidth and support cost money every month. Someone is paying. For most free VPNs, that someone is an advertiser, a data broker, or an investor funding a funnel toward a paid plan. None of those arrangements is automatically sinister, but each creates a different incentive. An ad-supported app wants session time and broad device permissions. A broker wants anything it can resell. A free tier attached to a paid product mostly wants you to upgrade — which is the least hostile of the three, because it means the free version is designed to be limited rather than deceptive.
That distinction is the most useful thing to look for. Free tiers from established paid providers usually cap your data, restrict you to a few locations and leave out the kill switch. Predictable, clearly stated limits. Free apps with no paid plan and no visible revenue source deserve more caution, especially when they ask for permissions a tunnel does not need.
Logging: what you are trusting, not what is advertised
Nearly every provider claims it keeps no logs. The claim is cheap; verification is not. Ask three questions instead.
Who can compel the provider?
A no-logs policy is only as strong as the jurisdiction it sits in and the company's willingness to push back on a request. Where data retention is mandatory, a written promise cannot override the law. Providers that publish independent audits of their infrastructure give you something firmer than a sentence in a privacy policy — though an audit covers a moment in time, not forever.
What is recorded at signup?
Even a genuinely log-free VPN knows your email address, your payment method and the timestamps of your sessions. If you paid by card, your bank knows you bought a VPN. If that payment trail matters to you, look for anonymous account options and accepted payment methods, and accept that card payments are never anonymous.
Is your device the product?
Some free apps have been documented doing more than tunnelling your own traffic: routing other users' connections through your phone, making you an exit node. Your home IP address can end up associated with a stranger's activity. Before installing anything you cannot explain, read the permission list and ignore the app store rating, which reflects convenience far more than safety.
Speed: where free tiers cut corners
A VPN adds a hop. Your traffic leaves your device, travels to a server, then exits to the internet — and reverses on the way back. Free services economise on that hop by running fewer servers, packing more users onto each one, and throttling heavy users or capping monthly data.
Three factors usually explain a slow connection, roughly in order of impact:
- Server load and distance. A nearby, uncrowded server will usually beat a distant, empty one.
- Protocol. Modern WireGuard-family protocols generally outperform older OpenVPN setups on the same hardware, especially on phones.
- Local bottlenecks. Weak Wi-Fi or a congested mobile network can cost you more than the VPN does.
Test before blaming the tunnel: measure your speed with the VPN off, then on, using the same server at the same time of day. Repeat once. If the drop is small and stable, the service is doing its job.
Kill switches, leaks and the features free tiers skip
A kill switch blocks internet traffic when the encrypted tunnel drops. Without one, a brief reconnection can send requests in the clear, exposing your real IP to whatever page you had open. Kill switches come in levels. The strongest sit at the firewall layer and block everything except the tunnel. Weaker ones only stop the VPN app's own traffic, leaving every other app free to leak. Free plans often ship without one at all, and mobile apps are the worst offenders because Android and iOS make firewall-level blocking harder to implement.
Whatever you use, verify these four things yourself:
- DNS leaks. Connect, then check which resolver your requests actually use. If it is your ISP's, the tunnel is not doing what you think.
- IPv6. Some tunnels only cover IPv4. If your network runs IPv6 and the provider does not, traffic can bypass the VPN entirely.
- Kill switch behaviour. Connect, force-quit the app, then try loading a page. If it loads, the kill switch is not firewall-level.
- WebRTC. Browser voice and video features can reveal local addresses even behind a tunnel. Restrict them if that matters to you.
Matching the tool to your threat model
Different jobs need different tools, and paying for the wrong one is just as wasteful as trusting a free one that cannot do the work.
- Casual browsing on cafe Wi-Fi. HTTPS already protects most of what you send. A reputable free tier covers the main win here: hiding your IP from the local network.
- Keeping browsing away from your ISP. Paid, with a clear jurisdiction, a published audit and a kill switch you have tested.
- Streaming in another region. Paid, because free servers are usually blocked or too slow. Check the service's terms first.
- File sharing. Paid, and read the provider's stance explicitly. Free apps frequently ban it or leak under load.
- Signing in to work or banking remotely. Paid with a tested kill switch — or simply use your phone's hotspot, which is often the better answer.
- High-risk situations. A VPN is one layer of many. If you face state surveillance or a determined adversary, get guidance from a digital security organisation rather than a review site.
One practical note: VPN use is restricted or illegal in some countries, and the rules change. Check your local law before relying on any of this, and talk to a lawyer if your legal exposure is real.
A short checklist before you commit
Skip the feature charts and work through this instead.
- Write down what you are hiding and from whom. If you cannot answer, you probably do not need to pay.
- If you are paying, pay for what you can verify: audits, a firewall-level kill switch, protocol choice, a jurisdiction you are comfortable with.
- Use the refund window. Test speed, leaks and kill switch in week one, not month three.
- Read the permission list on the mobile app. A VPN needs network access; it does not need your contacts.
- Cancel anything you cannot explain in one sentence.
Free is a fair deal when the downside is a slow connection. It is a poor deal when the downside is your traffic. Pay for the part you can verify, and treat every no-logs claim as an invitation to test rather than a promise to believe.
Photo: iam hogir / Pexels
