25 VPN Facts Every Traveller Should Know

That's roughly 1 in 3 internet users worldwide. VPN adoption has grown over 300% since 2017, driven by censorship concerns, remote work, and travel. In some countries like Indonesia and India, over 40% of internet users have used a VPN in the last month.

AES-256 (Advanced Encryption Standard with 256-bit keys) is used to protect classified government data and financial transactions. A brute-force attack against AES-256 would take longer than the age of the universe, even with the most powerful computers available today.

WireGuard (released 2019) uses just ~4,000 lines of code vs OpenVPN's 600,000+. The result is faster handshakes, lower latency, and better battery life on mobile. Most top-tier VPN providers (NordVPN, ExpressVPN, Surfshark) now use WireGuard as their default protocol.

Early VPN protocols were noticeably slow. Modern providers using WireGuard are fast enough for 4K streaming, video calls, and gaming with minimal perceptible delay. Speed loss is higher with free VPNs — often 40–80% slower than your base connection speed.

The Great Firewall of China blocks Google, YouTube, Gmail, Facebook, Instagram, WhatsApp, Telegram, Twitter/X, BBC, New York Times, and thousands more. This affects every foreign visitor with a smartphone. Set up your VPN before you land — VPN download sites are also blocked inside China.

VPN use is legal for individuals in over 150 countries, including all EU nations, the US, UK, Australia, Canada, Japan, and most of Asia. Only a handful of countries (China, Russia, North Korea, Belarus, Turkmenistan) officially restrict or ban them.

Chinese law targets VPN providers operating without a licence, not individual foreign visitors. Enforcement primarily affects Chinese citizens and businesses. Millions of tourists use VPNs in China annually without legal issue — but always install and test before you arrive.

In March 2022, when Russia restricted access to Facebook and Instagram, VPN downloads in Russia exploded. App stores reported daily download numbers 10–20× above normal. Similar surges have occurred in Turkey, Iran, and Kazakhstan during political crises. See our <a href="/vpn/countries-with-vpn-support" style="color:var(--brand-primary);font-weight:600;">country-by-country VPN guides</a> for current restrictions.

Hotspot Shield was caught injecting JavaScript tracking code into users' browsing sessions. Hola VPN sold users' idle bandwidth to a botnet — your IP address was used to deliver cyberattacks. SuperVPN exposed 360 million user records in a data breach. All three had tens of millions of downloads.

Since 2017, US ISPs have been permitted to collect and sell customer browsing data without explicit consent. A VPN encrypts your traffic before it reaches your ISP, making your browsing history invisible to them. Similar laws exist in the UK and several other countries.

A VPN hides your IP address and encrypts your traffic from network observers and your ISP. It does not block browser fingerprinting, cookies, or tracking pixels. If you log into Google, Facebook, or any account while using a VPN, those services still know who you are. Read more common misconceptions in our <a href="/vpn/vpn-myths" style="color:var(--brand-primary);font-weight:600;">VPN myths guide</a>.

Without a kill switch, a momentary VPN disconnection (switching Wi-Fi networks, waking from sleep) can briefly expose your real IP and unencrypted traffic. A kill switch disables your internet connection entirely if the VPN fails, so your traffic is never sent unprotected.

Split tunneling lets you choose which apps use the VPN and which connect directly. Work email, Slack, and banking go through the VPN. Netflix and gaming bypass it for maximum speed. This is a standard feature on NordVPN, ExpressVPN, and Surfshark.

The US Netflix library has 5,000+ titles. UK: ~3,800. Germany: ~2,400. Japan: ~3,500. A VPN connected to a US server gives access to the US library from anywhere — as long as the VPN works around Netflix's VPN detection, which premium providers handle automatically.

IKEv2 (Internet Key Exchange version 2) automatically reconnects when you switch between Wi-Fi and mobile data — perfect for travel. It's built into iOS and many Android devices and is the default protocol for several major VPN providers on mobile.

NordVPN: 10 simultaneous connections. Surfshark: unlimited devices. ExpressVPN: 8 devices. This means one subscription covers your phone, laptop, tablet, and those of a travelling partner — no extra cost.

Airports concentrate high-value targets — business travellers, frequent flyers, executives — in one place with shared, unencrypted Wi-Fi. Security researchers at major airports have demonstrated the ability to intercept credentials from unprotected devices in minutes. Always use a VPN at airports.

When you connect to a VPN server in Germany, all websites and services see your traffic as coming from Germany. This is why VPNs work for accessing region-locked content, bypassing censorship, and appearing to be a local user even when abroad.

Reputable providers including NordVPN, ExpressVPN, Mullvad, and Surfshark have undergone third-party no-log audits by firms including Deloitte, KPMG, and PwC. This verifies that the provider genuinely keeps no logs of user activity — not just a claim in their privacy policy.

Your eSIM provides the cellular data connection. A VPN app encrypts the traffic that travels over that connection. Whether your data arrives via eSIM, physical SIM, or Wi-Fi is irrelevant to the VPN. Running a VPN on a <a href="/esim" style="color:var(--brand-primary);font-weight:600;">travel eSIM</a> is the recommended setup for serious travellers.

In the UAE, WhatsApp voice and video calls are blocked — a regulatory rule that protects local telecoms. Using a VPN allows travellers to use WhatsApp calls normally. Personal VPN use is legal in the UAE, but using one to commit a crime carries heavy penalties.

On 2-year plans: Surfshark is $2.29/month, NordVPN is $3.09/month, ExpressVPN is $6.67/month. A single coffee at Heathrow or JFK costs £4–£6. You get 30 days of VPN protection for the price of one espresso.

Apple's iCloud Private Relay and Android's Private DNS are not VPNs — they offer partial privacy features only. A real VPN requires downloading and configuring a third-party app. Always set up your VPN at home before travelling, not at the airport.

Without a VPN, your data may travel through dozens of intermediate servers and ISP nodes, visible at each hop. With a VPN, every packet is encrypted before it leaves your device and decrypted only at the VPN server — an intermediate observer sees only encrypted noise.

In China, Russia, and Iran, VPN app stores and download sites are blocked. If you arrive without a VPN already installed, you cannot easily get one. Download and test your VPN at home, confirm it connects to servers in your destination country, and keep it on your device before you fly.