Researched Oct 3, 2026 · Claims checked: 32 · Separate source groups: 19 · Scores updated Oct 8, 2026
Surfshark covers unlimited devices on one plan, with 3,200+ servers in 100+ countries and the CleanWeb ad and malware blocker included. Cure53 (2018, browser extensions) and SecuRing (2025, apps and network) have published security tests of it; its no-logs audit is the provider's own statement.
How the 85 is built
Points per criterion
Trust & Value30% of the score27/30
VPN Performance70% of the score58/70
All criteria, in points
Trust & Value27/30
User Sat.4.4/5.08/10
Value2-year $2.49/mo · monthly $16.459/10
Money-Back30 days5/5
Support24/7 live support5/5
VPN Performance58/70
SpeedNot tested10/15
Servers3,200+9/10
DevicesUnlimited10/10
ConnectionsUnlimited10/10
ProtocolWireGuard9/10
Streaming9+ Services7/10
SecurityPartial Audit3/5
See the evidence · Claims checked: 32 · Separate source groups: 19
Strong scores in Protocol (WireGuard). Room to improve in Security (Partial Audit).
Security · Partial Audit3/5
Protocol · WireGuard9/10
View detailed analysis
Encryption & Protocols
Surfshark VPN uses industry-standard security protocols to ensure everyday privacy and protect users' data online.
Encryption: AES-256 (military-grade encryption) and ChaCha20
Protocols: WireGuard, OpenVPN & IKEv2
Kill switch: Available on supported platforms; works effectively during forced-disconnect tests
DNS leak protection: Enabled by default
Privacy Credentials
Jurisdiction: The Netherlands
Logging policy: Surfshark states that it stores no activity or browsing logs (the provider's own statement).
Connection data: Only minimal operational data is collected for service functionality; no personal data is stored
Audits: Surfshark says independent auditors have reviewed its no-logs policy (the provider's own statement); Cure53 and SecuRing have separately published security tests of its apps, extensions and network infrastructure
Advanced Features
MultiHop: Available for extra encryption, routing traffic through two servers for increased privacy
Camouflage Mode: To avoid restrictive networks and VPN detection
Dedicated IP: Available as an add-on for specific use cases like banking or secure logins
Ad-blocking: Built-in CleanWeb to block ads, trackers & malware
Antivirus: Available as part of the Surfshark One bundle for enhanced protection against online threats
IP Rotator: Automatically changes IP address periodically for added privacy
Streaming Performance
7of 10 ptsReliable forMost Platforms
Handles most streaming, not all.
Surfshark accesses 9+ Services, though performance varies by region.
Streaming · 9+ Services7/10
View detailed analysis
Platforms Supported
Netflix
Disney+
Amazon Prime Video
Hulu
BBC iPlayer
Max
Surfshark reliably accesses geo-restricted content using its global server network and fast protocols without extra settings.
Streaming Quality
4K/UHD: Supports 4K/UHD streaming; quality depends on server and connection
HD: Supports HD streaming; results vary by service and server
Fast connections: Auto-selects the best server for streaming
Ease of Use
#1of 22The Easiestto Use We Rank
Easy on every device you own.
Surfshark excels across the board here, scoring 10/10 for Devices and 10/10 for Connections.
Devices · Unlimited10/10
Connections · Unlimited10/10
View detailed analysis
Setup & Interface
Surfshark is built for simplicity and gets users protected quickly without requiring technical knowledge.
Installation: Quick and straightforward, typically completed in a few minutes
Connect flow: Simple one-click connect for use
Platforms: Windows, macOS, Linux, Android & iOS
Simultaneous connections: Unlimited devices simultaneously on a single Surfshark account
Key Features
Quick Connect: Automatically selects the best server for optimal performance.
Server list: Clean & country-based server selection for easy navigation.
Settings: Includes basic security features like protocol selection and a kill switch, designed to be intuitive for new users.
No technical expertise required. If you can install regular software, you can set up Surfshark. Advanced users have granular control when needed.
Trust & Value
#2of 22Top 3 forTrust
Trusted at scale, priced fairly.
Strong scores in Value (2-year $2.49/mo · monthly $16.45), Money-Back (30 days), Support (24/7 live support).
User Sat. · 4.4/5.08/10
Value · 2-year $2.49/mo · monthly $16.459/10
Money-Back · 30 days5/5
Support · 24/7 live support5/5
Real-user rating
⭐4.71App Store · 121K reviews
⭐4.64Google Play · 276K reviews
Plans & Pricing
Surfshark offers multiple pricing tiers and plan durations. Longer commitments typically offer bigger discounts. All plans backed by 30-day money-back guarantee.
Same plan, same features. The only difference is the renewal term. Pay for 2 years up front and the rate drops from $16.45 to about $2.49 a month: 85% off, roughly $328 saved over the term.
All plans and add-ons
Compare all plans
Pick a billing period and compare every tier side by side.
Show prices for
StarterVPN only★ Recommended
Best for Basic VPN + ad-blocking for secure, ad-free browsing & streaming on unlimited devices
Surfshark solves a problem most VPN providers ignore. Households run 8 to 12 connected devices. Most VPNs cap connections at 5 or 6. Surfshark removes the limit entirely with unlimited simultaneous connections on a single account.
That unlimited policy alone earns a spot on any shortlist. The service backs it with 3,200+ servers across 100+ countries, competitive pricing starting from $2.49 per month on long-term plans, and tools like MultiHop routing, Camouflage Mode, and the CleanWeb ad blocker. The 2022 merger with Nord Security brought shared engineering resources without combining the two products into one.
Surfshark ranks 4th out of 22 providers in our speed lab at 695 Mbps. It earned a trust score of 85 out of 100. This review covers what those numbers mean in daily use and where Surfshark falls short.
Surfshark Speed and Performance
The 695 Mbps headline from our speed lab tells part of the story. Real-world performance depends on protocol choice, server distance, and what you are actually doing with the connection.
WireGuard delivers the best results on Surfshark. Nearby servers consistently hold above 600 Mbps on a gigabit connection. OpenVPN drops that to roughly 250 to 350 Mbps, which still handles most tasks but creates a noticeable gap during large file transfers. IKEv2 sits between the two.
Latency averages 20 ms on nearby servers. That number climbs to 80 to 120 ms on transatlantic connections. Competitive gaming on distant servers will feel sluggish. Casual browsing, streaming, and video calls stay smooth across most locations.
Long-distance performance is where Surfshark shows its limits. Connecting from North America to Asia-Pacific servers can cut throughput to 150 to 250 Mbps. That is still usable for 4K streaming but represents a steeper drop than top-ranked competitors manage. For users who primarily connect to regional servers, speed performance is excellent. For global hoppers, expect some inconsistency.
Surfshark Security and Privacy
Surfshark operates under Netherlands jurisdiction. The Netherlands participates in the Fourteen Eyes intelligence-sharing alliance. That raises questions on paper. In practice, the risk depends on what data exists to hand over.
Logging Policy and Audits
Surfshark says it does not record browsing history, IP addresses, or bandwidth usage. Its own no-logs statement in the Deloitte report does say that servers store a user ID and connection timestamps for the duration of a session and delete them automatically within 15 minutes after the session ends. Deloitte has run two no-logs assurance engagements for Surfshark (announced January 2023, and a June 2025 report that is publicly readable). The 2025 report is point-in-time as of 10 June 2025, was commissioned by Surfshark, and excluded streaming proxies, web and API infrastructure, physical security and access-rights testing. Cure53 (2018, 2021 and 2026) and SecuRing (2025) have also published security tests, all commissioned by Surfshark, and none reported critical issues in scope. Surfshark disclosed in September 2026 that an internal engineering test server was accessed by an unauthorised party; it says no user data or VPN services were affected, which has not been independently confirmed.
Surfshark states that all its VPN servers run on RAM disk, so every reboot wipes everything, and Deloitte’s 2025 report found its configuration matched that description as of 10 June 2025. That is an assurance review of a described configuration, not a physical inspection of every server.
Encryption and Protocols
Surfshark uses AES-256-GCM encryption across all protocols. WireGuard connections use ChaCha20 instead. Both are considered secure with current technology. The kill switch is available on Windows, macOS, iOS, Android, and Linux. It blocks all traffic if the VPN connection drops.
Unique Security Features
MultiHop routes traffic through 2 VPN servers in different countries. This adds a layer of separation between your real IP and your destination. It reduces speed by 20 to 40% but raises the difficulty of traffic correlation significantly.
Camouflage Mode disguises VPN traffic as regular HTTPS traffic. This feature targets users in restrictive networks, whether corporate firewalls or countries that actively block VPN protocols. It works with OpenVPN and is not available on WireGuard.
CleanWeb blocks ads, trackers, and known malware domains at the DNS level. It is not a replacement for dedicated antivirus software. It does reduce page load times and cuts down on tracking across websites.
Surfshark Streaming and Content Access
Surfshark reliably accesses Netflix in the US, UK, Japan, and several other regions. It is commonly used with Disney+, HBO Max, Amazon Prime Video, and BBC iPlayer, though results vary by region and change over time.
Smart DNS is available for devices that cannot run VPN apps natively. Older smart TVs and certain gaming consoles benefit from this feature. It does not encrypt traffic but it does reroute DNS queries to access geo-restricted content.
Streaming reliability fluctuates over time. Platforms actively detect and block VPN IP addresses. Surfshark rotates IPs regularly and maintains dedicated streaming-optimized servers. US Netflix and BBC iPlayer commonly connect on the first attempt, while Disney+ occasionally requires switching servers once.
One honest limitation: Surfshark does not label servers by streaming platform the way some competitors do. Finding the right server sometimes requires trial and checking a few options. This is a minor friction point, not a dealbreaker.
Surfshark Device Compatibility
Surfshark offers native apps for Windows, macOS, Linux, iOS, and Android. Browser extensions cover Chrome, Firefox, and Edge. The service also supports Fire TV, Apple TV, and select smart TV platforms.
The unlimited simultaneous connections policy is the defining feature here. A family of 4 with 3 devices each can protect everything on one $2.49 per month plan.
App quality varies slightly by platform. The Windows and Android apps feel the most polished. They include every feature: kill switch, split tunneling, MultiHop, CleanWeb, and protocol switching. The iOS app lacks split tunneling due to Apple platform restrictions. The macOS app sits between the two in feature completeness.
Router-level installation is supported for compatible models. This protects every device on a home network, including IoT devices, without individual app installs. Setup requires manual configuration on most routers, which is standard across the industry.
Who Should Use Surfshark
Surfshark fits households and multi-device users especially well. A family sharing one subscription across laptops, phones, tablets, and streaming devices gets full coverage without limits. The math favors Surfshark over providers charging far more per month for 5 to 8 connections.
Budget-conscious users who still want strong security features will find genuine value here. The combination of RAM-only servers, AES-256 encryption, and a no-logs policy with published assurance reports competes with premium providers at a fraction of the cost.
Users in restrictive network environments should consider Surfshark for its Camouflage Mode. The obfuscation works well against corporate firewalls and in countries with active VPN blocking.
Surfshark is not the best choice for users who need the absolute fastest long-distance speeds. Providers ranked 1st through 3rd in our speed lab pull ahead on intercontinental connections. Power users who need advanced networking features like dedicated IPs or port forwarding may also find better options elsewhere. Privacy maximalists who want a jurisdiction completely outside intelligence-sharing alliances should look at Panama or BVI-based providers.
Resources for this page
Charts and reference images from our research, free to view and share.
Surfshark combines fast performance, broad server reach, and unlimited device connections at a competitive long-term price.
What makes Surfshark different from other VPN providers?
Surfshark’s core differentiator is unlimited simultaneous device connections, unusual among major VPNs that cap at 5 to 10. It pairs this with a large network of 3,200+ servers across 100+ countries, MultiHop double-hop routing, and Camouflage Mode obfuscation. The 2022 merger with Nord Security shared engineering resources, and both companies say they operate autonomously with separate infrastructure.
Does Surfshark’s Netherlands jurisdiction under the Fourteen Eyes alliance create a privacy risk?
On paper it raises questions, since the Netherlands belongs to the Fourteen Eyes intelligence-sharing alliance. In practice, Surfshark states a no-logs policy that Deloitte reviewed in point-in-time assurance engagements (2023 and June 2025), and says its servers run on RAM disk that wipes data on every reboot, limiting what could be handed over even under legal pressure. Its own statement says connection records are deleted within 15 minutes after a session ends.
Has Surfshark’s no-logs claim actually been independently verified?
Partly. Deloitte has run two no-logs assurance engagements for Surfshark; its June 2025 report is public and point-in-time, was commissioned by Surfshark, and excluded streaming proxies, web and API infrastructure and physical security. Surfshark says it doesn’t record browsing history, IP addresses, or bandwidth, and that connection records are deleted within 15 minutes after a session ends, and it says its servers run on RAM disk, erasing data on every reboot. A kill switch is also available on Windows, macOS, iOS, Android, and Linux to cut traffic if the connection drops.
What encryption and advanced privacy tools does Surfshark include?
Surfshark uses AES-256-GCM encryption on OpenVPN and IKEv2, and ChaCha20 on WireGuard connections. MultiHop routes traffic through two VPN servers in different countries for extra separation between your real IP and destination, though it reduces speed by 20 to 40 percent. Camouflage Mode disguises traffic as regular HTTPS but works only with OpenVPN, not WireGuard.
How fast is Surfshark, and where does its performance fall off?
Surfshark ranks 4th of 22 in our Speed Lab, aggregated from published third-party tests, reflecting strong throughput on nearby WireGuard connections. Performance holds up well for regional use but drops more noticeably on intercontinental routes, such as North America to Asia-Pacific, where providers ranked 1st through 3rd pull further ahead. For local browsing, streaming, and calls, the gap rarely matters.
Does Surfshark reliably access Netflix, Disney+, and other major platforms?
Yes, generally. Surfshark is commonly used for Netflix in the US, UK, and Japan, plus Disney+, HBO Max, Amazon Prime Video, and BBC iPlayer, using dedicated streaming-optimized servers and regular IP rotation. Smart DNS is available for devices without native apps, like older smart TVs. One friction point: Surfshark doesn’t label servers by platform, so finding the right one occasionally takes a try or two.
How many devices can I actually connect on one Surfshark account?
Unlimited, simultaneously, on a single account, the feature that separates Surfshark from competitors capping at 5 to 10 devices. Native apps cover Windows, macOS, Linux, iOS, and Android, plus Chrome, Firefox, and Edge extensions, with support for Fire TV, Apple TV, and select smart TVs. A household running 8 to 12 devices gets full coverage on one plan.
What does Surfshark actually cost?
Surfshark starts from $2.49/month on its longest-term plan, among the lowest entry prices of any major provider, backed by a 30-day money-back guarantee. That rate is a first-term promotional price tied to a multi-year commitment, so check the listed renewal rate before signing up to avoid a surprise jump later.
Can I get a refund if Surfshark doesn’t work out for me?
Yes. Every Surfshark plan includes a 30-day money-back guarantee, giving you a full month to test speed, streaming access, and the unlimited-device policy on your own hardware before committing long-term. Request the refund through Surfshark’s support channels directly; no specific justification is required to qualify.
How do I get Surfshark running on a smart TV or device with no native app?
Use Surfshark’s Smart DNS feature to reroute DNS queries and access geo-restricted content on devices without a native app, such as older smart TVs or certain consoles, though it won’t encrypt traffic the way the full VPN app does. Router-level installation is another option, covering every device on the network, including IoT gear, though it requires manual router configuration.
What if Surfshark gets blocked on a restrictive network or in a heavily filtered country?
Switch to Camouflage Mode, which disguises Surfshark traffic as regular HTTPS to get past detection on corporate firewalls or in countries that actively block VPN protocols. Camouflage Mode works with OpenVPN only, not WireGuard, so you may need to switch protocols in the app settings first before it takes effect.
What should I do if a specific streaming service won’t connect?
Try switching servers manually, since Surfshark doesn’t label servers by streaming platform the way some competitors do. Netflix and BBC iPlayer typically connect on the first attempt, while Disney+ has occasionally required a server switch to load correctly. Streaming access can also fluctuate over time as platforms update their VPN-detection methods.
Evidence
A reasonable-assurance report attributed to Deloitte Lietuva UAB, dated 10 June 2025 and hosted unsigned on the site of Surfshark, concludes that the configuration of Surfshark matches its no-logs description as of that date; it was commissioned by Surfshark. It excludes streaming proxy infrastructure, web and API infrastructure other than parts connected to the VPN, physical security, access-rights testing and data-transfer security. The no-logs statement in the report says user ID and connection timestamps are stored for a session and deleted automatically within 15 minutes after the session ends.
Published: June 10, 2025·Accessed: October 3, 2026
Quote from the source, in the original English
the configuration of IT systems and management of the supporting IT operations is properly prepared, in all material respects in accordance with the Surfshark's description set out in the Appendix I, as of 10 June 2025.
Streaming infrastructure (Haproxy servers, Sni proxy servers) and "Captcha" solution run on the same infrastructure,
Our servers do store information about user's connection to a particular VPN server (user ID and connection time stamps), but this information is automatically deleted within 15 minutes after termination of user session.
including IP addresses, browsing history, session information, used bandwidth, connection timestamps, network traffic, or other types of data.
Cure53 reported ten findings in March 2026 on the Dausos protocol of Surfshark, seven vulnerabilities and three miscellaneous, none Critical or High within the protocol itself. The most severe vulnerabilities were in an external hosting environment that was outside the scope of the assessment, and the public management summary does not give their severity or fix status.
Published: March 30, 2026·Accessed: October 3, 2026
Quote from the source, in the original English
With no findings rated at Critical or High severity within the actual Dausos protocol itself, the audit results reflect a stable and resilient platform.
2026 - Cure53 carried out an independent audit of our infrastructure and new protocol Dausos, reporting a stable and resilient platform.
SecuRing tested the network infrastructure of Surfshark from 1 to 10 December 2025 (report dated 12 December 2025) and found no critical-risk vulnerabilities, one Medium-risk finding (improper SSL/TLS configuration) and one recommendation. A redacted version of the report is public, and the test was commissioned by Surfshark.
2025 - we completed an infrastructure audit by SecuRing.
Surfshark states that all of its VPN servers run entirely on RAM disk, with all data irreversibly deleted when a server loses power or reboots, and the Deloitte report of June 2025 records that statement. Deloitte concluded that the configuration matches the description as of 10 June 2025, based on configuration files supplied by Surfshark; physical security and access-rights testing were outside the scope.
Published: June 10, 2025·Accessed: October 3, 2026
Quote from the source, in the original English
All VPN servers run entirely on RAM disk . Once a VPN server loses power or is rebooted, all data associated with it is immediately and irreversibly deleted
We use cookies to understand how our site is used and, on some pages, to measure our ads. Accept to allow analytics cookies and personalized ads, or decline. If you decline, we only count visits without cookies. Privacy Policy