Free VPNs that still work in 2026, and their real cost
I installed fourteen free VPNs over six months. Proton, Windscribe, hide.me, TunnelBear and WARP — what you get, what you give up, and which ones I deleted within a fortnight.
Short version, so you do not have to scroll:
Abroad, and you just want encryption on café Wi-Fi? Proton VPN's free tier. No data cap, costs nothing.
Inside mainland China? These international brands will not connect. Different approach entirely — covered here.
Using it daily, for video or AI tools? Free will grind you down. That is how I ended up paying.
How I tested
February through August 2026. Fourteen apps installed; six were gone within two weeks, either because they never connected or because the ads made them unusable.
The setup:
- 500 Mbps residential fibre, Windows 11 and an iPhone
- A second 300 Mbps line at a friend's place, to rule out one ISP's quirks
speedtest-cliagainst a fixed Tokyo endpoint, cross-checked with fast.com- Everything measured between 8 and 10 pm on a weekday
That last point matters more than the rest. Daytime numbers on a shared free server tell you nothing.
The ones worth keeping
Proton VPN free — the only one I would put on a relative's phone
From the Proton people, the encrypted-mail company. The unusual part of their free tier: no data cap. Everyone else gives you 2 GB or 10 GB a month.
| Data | Unlimited |
| Locations | Around five (US, NL, JP, RO, PL — this changes) |
| Speed | Noticeable queueing at peak; I saw a 6 Mbps low |
| Ads | None |
| Simultaneous devices | 1 |
It is slow. At 9 pm on the Netherlands server I measured 8.4 Mbps down and 260 ms latency, which buffers on 1080p.
But it does not serve ads, does not log, and has published third-party audits. In free-VPN terms that combination is the ceiling.
Windscribe free — 10 GB, and 10 GB is 10 GB
Canadian. 10 GB a month once you confirm your email; 2 GB if you do not. More locations than Proton.
To put 10 GB in perspective: a month of browsing and social media, or two 1080p films. Not both.
R.O.B.E.R.T., their DNS-level blocker, works on the free tier with the basic rule sets. Speeds ran better than Proton for me — around 20 Mbps on the Hong Kong server in the evening.
hide.me free — no account needed, which is the point
10 GB a month, no signup. They do not even have your email address, which is a genuine privacy advantage rather than a marketing line.
Fewer locations (around eight), and you cannot pick a specific server.
TunnelBear — 2 GB, so, emergencies
2 GB a month is a demo. But the client is the simplest I have used — one switch. If you need to change your IP once a month to check something, install it and forget it.
Cloudflare WARP (1.1.1.1) — not the thing you think it is
This one needs its own paragraph because so many people have it wrong.
WARP encrypts your traffic and routes it into Cloudflare's network faster. It is not a censorship-circumvention tool. The free version does not change your country; your exit IP stays regional.
On café Wi-Fi abroad, fine, it does its job. Inside a heavily filtered network its UDP traffic is distinctive and gets disrupted; it works sometimes, which is worse than never.
The category to walk away from
Search "free VPN" in any app store and you get a screen full of them. All promising the same three things: unlimited data, no signup, completely free.
Servers cost money. Bandwidth costs more. So who is paying?
- Ads. The honest version. You will be worn down rather than harmed.
- Your device becomes an exit node. Other people's traffic leaves through your home connection, under your IP. Hola was caught doing exactly this in 2015 and never recovered its reputation.
- Data sales. DNS queries, domains visited, timestamps, device fingerprints, sold on to brokers.
- Straightforward malware. Academic scans of Android VPN apps keep turning up permission abuse, embedded trackers, and traffic that is not encrypted at all.
What the free option actually costs
I kept a log for six months:
- Hunting for a working server or node: 1.5 times a week, 10–20 minutes each
- Reconnecting after a drop: about 8 times a month
- Videos abandoned mid-buffer: lost count
- One real loss: an 800 MB file transfer that died at 80%, costing two hours and a client's evening
Two hours a month, give or take. Multiply by whatever your time is worth.
That is the arithmetic that eventually moved me: a paid plan runs about ¥29 a month — roughly four dollars — and I was burning two hours to avoid it, while carrying the risk of dropping out at exactly the wrong moment.
Which one, in three lines
- Abroad, light use → Proton VPN free tier. Install it, done.
- In mainland China → free nodes instead, start here
- Daily use, video, AI tools → stop optimising and pay for one. The entry tier costs less than a takeaway.
Read next
- How free VPNs make money — the long version of section three
- Free VPN vs paid service: same day, same line — with the full numbers
- Using ChatGPT over a free VPN
- Is using free nodes safe?
Questions people keep asking
Is any free VPN genuinely free?
Two different things get called free. Proton, Windscribe, hide.me and TunnelBear run free tiers funded by their paying customers — they limit data, locations and speed, but they are not selling you. The other kind is the app store special that promises unlimited data with no signup; that one has to make its money somewhere else, and the options are ads, your bandwidth, or your data.
Which free VPN is the safest?
Proton VPN's free tier has the best case. Swiss company, no ads, independently audited no-logs claim, and the only free tier I know of with no data cap. The price you pay is roughly five countries to choose from, no P2P, and real queueing at peak hours.
Can a free VPN unblock Netflix?
Almost certainly not. Free tiers use shared datacentre IPs that the streaming services blacklisted long ago. You get an error page or a 480p fallback. In six months of testing I never got a free option to play 4K.
Do these work from inside China?
Mostly no, and not for the reason people assume. The websites are unreachable, so you cannot even download the client, and the server ranges are blocked. There is a separate approach that does work there — see the free node section.