VPN Reality Check
The risk
Why this matters
A VPN shifts trust from your ISP to the VPN provider. 'No-log' is marketing unless independently audited. If the VPN logs, you've just moved surveillance from one entity to another — and potentially a less regulated one.
Recommended tools
What to use
No accounts, no email, no logs. Audited. Accept cash by mail.
Transparent privacy-first VPN. Open-source clients. Audited.
Swiss jurisdiction. Free tier available. Audited no-log policy.
Mullvad network, Mozilla branding. Trusted non-profit backing.
Technically-oriented VPN. Open-source Eddie client. Italy-based.
Setup guide
How to set it up
- 1
Choose a VPN based on audits, not marketing: Mullvad, IVPN, or Proton VPN
- 2
Download the official client from the VPN's website (not app stores if avoidable)
- 3
Enable the kill switch to prevent leaks if the VPN drops
- 4
Understand what a VPN does NOT fix: browser fingerprinting, account-based tracking, DNS leaks outside the tunnel
Verify
Check your setup
Run an automated check from your browser to see if this practice is active.
Go further
For power users
Pay for your VPN anonymously through NullPay. Use WireGuard protocol for best performance. On mobile, keep VPN always-on.
Disclosure: NullPay is this site's product.