Surfshark Review

Surfshark's evidence mixes real, readable third-party documents with provider assertions

85 out of 100, built from two weighted parts

Trust & Value30% of the score27/30
VPN Performance70% of the score58/70

App store ratings, part of the score

Researched Oct 3, 2026Claims checked: 32Separate source groups: 19Scores updated Oct 8, 2026

Surfshark covers unlimited devices on one plan, with 3,200+ servers in 100+ countries and the CleanWeb ad and malware blocker included. Cure53 (2018, browser extensions) and SecuRing (2025, apps and network) have published security tests of it; its no-logs audit is the provider's own statement.

How the 85 is built

Points per criterion
Trust & Value30% of the score27/30
VPN Performance70% of the score58/70
All criteria, in points
Trust & Value27/30
  • User Sat.4.4/5.08/10
  • Value2-year $2.49/mo · monthly $16.459/10
  • Money-Back30 days5/5
  • Support24/7 live support5/5
VPN Performance58/70
  • SpeedNot tested10/15
  • Servers3,200+9/10
  • DevicesUnlimited10/10
  • ConnectionsUnlimited10/10
  • ProtocolWireGuard9/10
  • Streaming9+ Services7/10
  • SecurityPartial Audit3/5

See the evidenceClaims checked: 32Separate source groups: 19

30-day money-back guarantee

#6 of 22 overall

Our Assessment

See our methodology

Pros

  • Money-Back: 30 days
  • Support: 24/7 live support
  • Devices: Unlimited
  • Connections: Unlimited

Cons

  • Security (3/5)

Speed Lab Results

10of 15 ptsSolid EverydaySpeeds

Ranked #11 of 22 VPNs for speed in our Speed Lab.

Surfshark ranked #11 of 22 providers in our speed rankings, built from published third-party test results.

Speed10/15

VPN SpeedLab · 22 ranked →

  • 4K streaming without buffering
  • No lag on gaming servers
  • Large downloads in under 20 min
  • Crystal clear video calls

Server Network

#2of 22Top 3 forServer Networks

4,500+ servers across 100+ countries.

Surfshark operates 4,500+ servers across 100+ countries, providing solid global coverage.

Servers · 3,200+9/10

100+ countries · Unlimited simultaneous devices · P2P & streaming servers

Security & Privacy

12of 15 ptsSolid CoreSecurity

Solid security, with a caveat or two.

Strong scores in Protocol (WireGuard). Room to improve in Security (Partial Audit).

Security · Partial Audit3/5
Protocol · WireGuard9/10
View detailed analysis

Encryption & Protocols

Surfshark VPN uses industry-standard security protocols to ensure everyday privacy and protect users' data online.

  • Encryption: AES-256 (military-grade encryption) and ChaCha20
  • Protocols: WireGuard, OpenVPN & IKEv2
  • Kill switch: Available on supported platforms; works effectively during forced-disconnect tests
  • DNS leak protection: Enabled by default

Privacy Credentials

  • Jurisdiction: The Netherlands 
  • Logging policy: Surfshark states that it stores no activity or browsing logs (the provider's own statement).
  • Connection data: Only minimal operational data is collected for service functionality; no personal data is stored
  • Audits: Surfshark says independent auditors have reviewed its no-logs policy (the provider's own statement); Cure53 and SecuRing have separately published security tests of its apps, extensions and network infrastructure

Advanced Features

  • MultiHop: Available for extra encryption, routing traffic through two servers for increased privacy
  • Camouflage Mode: To avoid restrictive networks and VPN detection
  • Dedicated IP: Available as an add-on for specific use cases like banking or secure logins
  • Ad-blocking: Built-in CleanWeb to block ads, trackers & malware
  • Antivirus: Available as part of the Surfshark One bundle for enhanced protection against online threats
  • IP Rotator: Automatically changes IP address periodically for added privacy

Streaming Performance

7of 10 ptsReliable forMost Platforms

Handles most streaming, not all.

Surfshark accesses 9+ Services, though performance varies by region.

Streaming · 9+ Services7/10
View detailed analysis

Platforms Supported

  • Netflix
  • Disney+
  • Amazon Prime Video
  • Hulu
  • BBC iPlayer
  • Max

Surfshark reliably accesses geo-restricted content using its global server network and fast protocols without extra settings.

Streaming Quality

  • 4K/UHD: Supports 4K/UHD streaming; quality depends on server and connection
  • HD: Supports HD streaming; results vary by service and server
  • Fast connections: Auto-selects the best server for streaming

Ease of Use

#1of 22The Easiestto Use We Rank

Easy on every device you own.

Surfshark excels across the board here, scoring 10/10 for Devices and 10/10 for Connections.

Devices · Unlimited10/10
Connections · Unlimited10/10
View detailed analysis

Setup & Interface

Surfshark is built for simplicity and gets users protected quickly without requiring technical knowledge.

  • Installation: Quick and straightforward, typically completed in a few minutes
  • Connect flow: Simple one-click connect for use
  • Platforms: Windows, macOS, Linux, Android & iOS
  • Simultaneous connections: Unlimited devices simultaneously on a single Surfshark account

Key Features

  • Quick Connect: Automatically selects the best server for optimal performance. 
  • Server list: Clean & country-based server selection for easy navigation.
  • Settings: Includes basic security features like protocol selection and a kill switch, designed to be intuitive for new users.

No technical expertise required. If you can install regular software, you can set up Surfshark. Advanced users have granular control when needed.

Trust & Value

#2of 22Top 3 forTrust

Trusted at scale, priced fairly.

Strong scores in Value (2-year $2.49/mo · monthly $16.45), Money-Back (30 days), Support (24/7 live support).

User Sat. · 4.4/5.08/10
Value · 2-year $2.49/mo · monthly $16.459/10
Money-Back · 30 days5/5
Support · 24/7 live support5/5
Real-user rating
4.71App Store · 121K reviews
4.64Google Play · 276K reviews

Plans & Pricing

Surfshark offers multiple pricing tiers and plan durations. Longer commitments typically offer bigger discounts. All plans backed by 30-day money-back guarantee.

MonthlyStarter, billed every month

$16.45/mo

Buy Monthly now
85% off2-yearSame Starter, billed once (~$67 total)

$2.49/mo

Buy 2-year now

Same plan, same features. The only difference is the renewal term. Pay for 2 years up front and the rate drops from $16.45 to about $2.49 a month: 85% off, roughly $328 saved over the term.

All plans include:

Unlimited connections4,500+ servers in 100+ countriesAES-256 encryption & kill switchNo-logs policy (audit claimed)24/7 customer support
·

Surfshark: What Sets It Apart

Surfshark solves a problem most VPN providers ignore. Households run 8 to 12 connected devices. Most VPNs cap connections at 5 or 6. Surfshark removes the limit entirely with unlimited simultaneous connections on a single account.

That unlimited policy alone earns a spot on any shortlist. The service backs it with 3,200+ servers across 100+ countries, competitive pricing starting from $2.49 per month on long-term plans, and tools like MultiHop routing, Camouflage Mode, and the CleanWeb ad blocker. The 2022 merger with Nord Security brought shared engineering resources without combining the two products into one.

Surfshark ranks 4th out of 22 providers in our speed lab at 695 Mbps. It earned a trust score of 85 out of 100. This review covers what those numbers mean in daily use and where Surfshark falls short.

Surfshark Speed and Performance

The 695 Mbps headline from our speed lab tells part of the story. Real-world performance depends on protocol choice, server distance, and what you are actually doing with the connection.

WireGuard delivers the best results on Surfshark. Nearby servers consistently hold above 600 Mbps on a gigabit connection. OpenVPN drops that to roughly 250 to 350 Mbps, which still handles most tasks but creates a noticeable gap during large file transfers. IKEv2 sits between the two.

Latency averages 20 ms on nearby servers. That number climbs to 80 to 120 ms on transatlantic connections. Competitive gaming on distant servers will feel sluggish. Casual browsing, streaming, and video calls stay smooth across most locations.

Long-distance performance is where Surfshark shows its limits. Connecting from North America to Asia-Pacific servers can cut throughput to 150 to 250 Mbps. That is still usable for 4K streaming but represents a steeper drop than top-ranked competitors manage. For users who primarily connect to regional servers, speed performance is excellent. For global hoppers, expect some inconsistency.

Surfshark Security and Privacy

Surfshark operates under Netherlands jurisdiction. The Netherlands participates in the Fourteen Eyes intelligence-sharing alliance. That raises questions on paper. In practice, the risk depends on what data exists to hand over.

Logging Policy and Audits

Surfshark says it does not record browsing history, IP addresses, or bandwidth usage. Its own no-logs statement in the Deloitte report does say that servers store a user ID and connection timestamps for the duration of a session and delete them automatically within 15 minutes after the session ends. Deloitte has run two no-logs assurance engagements for Surfshark (announced January 2023, and a June 2025 report that is publicly readable). The 2025 report is point-in-time as of 10 June 2025, was commissioned by Surfshark, and excluded streaming proxies, web and API infrastructure, physical security and access-rights testing. Cure53 (2018, 2021 and 2026) and SecuRing (2025) have also published security tests, all commissioned by Surfshark, and none reported critical issues in scope. Surfshark disclosed in September 2026 that an internal engineering test server was accessed by an unauthorised party; it says no user data or VPN services were affected, which has not been independently confirmed.

Surfshark states that all its VPN servers run on RAM disk, so every reboot wipes everything, and Deloitte’s 2025 report found its configuration matched that description as of 10 June 2025. That is an assurance review of a described configuration, not a physical inspection of every server.

Encryption and Protocols

Surfshark uses AES-256-GCM encryption across all protocols. WireGuard connections use ChaCha20 instead. Both are considered secure with current technology. The kill switch is available on Windows, macOS, iOS, Android, and Linux. It blocks all traffic if the VPN connection drops.

Unique Security Features

MultiHop routes traffic through 2 VPN servers in different countries. This adds a layer of separation between your real IP and your destination. It reduces speed by 20 to 40% but raises the difficulty of traffic correlation significantly.

Camouflage Mode disguises VPN traffic as regular HTTPS traffic. This feature targets users in restrictive networks, whether corporate firewalls or countries that actively block VPN protocols. It works with OpenVPN and is not available on WireGuard.

CleanWeb blocks ads, trackers, and known malware domains at the DNS level. It is not a replacement for dedicated antivirus software. It does reduce page load times and cuts down on tracking across websites.

Surfshark Streaming and Content Access

Surfshark reliably accesses Netflix in the US, UK, Japan, and several other regions. It is commonly used with Disney+, HBO Max, Amazon Prime Video, and BBC iPlayer, though results vary by region and change over time.

Smart DNS is available for devices that cannot run VPN apps natively. Older smart TVs and certain gaming consoles benefit from this feature. It does not encrypt traffic but it does reroute DNS queries to access geo-restricted content.

Streaming reliability fluctuates over time. Platforms actively detect and block VPN IP addresses. Surfshark rotates IPs regularly and maintains dedicated streaming-optimized servers. US Netflix and BBC iPlayer commonly connect on the first attempt, while Disney+ occasionally requires switching servers once.

One honest limitation: Surfshark does not label servers by streaming platform the way some competitors do. Finding the right server sometimes requires trial and checking a few options. This is a minor friction point, not a dealbreaker.

Surfshark Device Compatibility

Surfshark offers native apps for Windows, macOS, Linux, iOS, and Android. Browser extensions cover Chrome, Firefox, and Edge. The service also supports Fire TV, Apple TV, and select smart TV platforms.

The unlimited simultaneous connections policy is the defining feature here. A family of 4 with 3 devices each can protect everything on one $2.49 per month plan.

App quality varies slightly by platform. The Windows and Android apps feel the most polished. They include every feature: kill switch, split tunneling, MultiHop, CleanWeb, and protocol switching. The iOS app lacks split tunneling due to Apple platform restrictions. The macOS app sits between the two in feature completeness.

Router-level installation is supported for compatible models. This protects every device on a home network, including IoT devices, without individual app installs. Setup requires manual configuration on most routers, which is standard across the industry.

Who Should Use Surfshark

Surfshark fits households and multi-device users especially well. A family sharing one subscription across laptops, phones, tablets, and streaming devices gets full coverage without limits. The math favors Surfshark over providers charging far more per month for 5 to 8 connections.

Budget-conscious users who still want strong security features will find genuine value here. The combination of RAM-only servers, AES-256 encryption, and a no-logs policy with published assurance reports competes with premium providers at a fraction of the cost.

Users in restrictive network environments should consider Surfshark for its Camouflage Mode. The obfuscation works well against corporate firewalls and in countries with active VPN blocking.

Surfshark is not the best choice for users who need the absolute fastest long-distance speeds. Providers ranked 1st through 3rd in our speed lab pull ahead on intercontinental connections. Power users who need advanced networking features like dedicated IPs or port forwarding may also find better options elsewhere. Privacy maximalists who want a jurisdiction completely outside intelligence-sharing alliances should look at Panama or BVI-based providers.

Resources for this page

Charts and reference images from our research, free to view and share.

  • Surfshark review summary showing strong speed, broad reach, unlimited devices, and competitive value.
    Surfshark combines fast performance, broad server reach, and unlimited device connections at a competitive long-term price.

Frequently Asked Questions

What makes Surfshark different from other VPN providers?

Surfshark’s core differentiator is unlimited simultaneous device connections, unusual among major VPNs that cap at 5 to 10. It pairs this with a large network of 3,200+ servers across 100+ countries, MultiHop double-hop routing, and Camouflage Mode obfuscation. The 2022 merger with Nord Security shared engineering resources, and both companies say they operate autonomously with separate infrastructure.

Does Surfshark’s Netherlands jurisdiction under the Fourteen Eyes alliance create a privacy risk?

On paper it raises questions, since the Netherlands belongs to the Fourteen Eyes intelligence-sharing alliance. In practice, Surfshark states a no-logs policy that Deloitte reviewed in point-in-time assurance engagements (2023 and June 2025), and says its servers run on RAM disk that wipes data on every reboot, limiting what could be handed over even under legal pressure. Its own statement says connection records are deleted within 15 minutes after a session ends.

Has Surfshark’s no-logs claim actually been independently verified?

Partly. Deloitte has run two no-logs assurance engagements for Surfshark; its June 2025 report is public and point-in-time, was commissioned by Surfshark, and excluded streaming proxies, web and API infrastructure and physical security. Surfshark says it doesn’t record browsing history, IP addresses, or bandwidth, and that connection records are deleted within 15 minutes after a session ends, and it says its servers run on RAM disk, erasing data on every reboot. A kill switch is also available on Windows, macOS, iOS, Android, and Linux to cut traffic if the connection drops.

What encryption and advanced privacy tools does Surfshark include?

Surfshark uses AES-256-GCM encryption on OpenVPN and IKEv2, and ChaCha20 on WireGuard connections. MultiHop routes traffic through two VPN servers in different countries for extra separation between your real IP and destination, though it reduces speed by 20 to 40 percent. Camouflage Mode disguises traffic as regular HTTPS but works only with OpenVPN, not WireGuard.

How fast is Surfshark, and where does its performance fall off?

Surfshark ranks 4th of 22 in our Speed Lab, aggregated from published third-party tests, reflecting strong throughput on nearby WireGuard connections. Performance holds up well for regional use but drops more noticeably on intercontinental routes, such as North America to Asia-Pacific, where providers ranked 1st through 3rd pull further ahead. For local browsing, streaming, and calls, the gap rarely matters.

Does Surfshark reliably access Netflix, Disney+, and other major platforms?

Yes, generally. Surfshark is commonly used for Netflix in the US, UK, and Japan, plus Disney+, HBO Max, Amazon Prime Video, and BBC iPlayer, using dedicated streaming-optimized servers and regular IP rotation. Smart DNS is available for devices without native apps, like older smart TVs. One friction point: Surfshark doesn’t label servers by platform, so finding the right one occasionally takes a try or two.

How many devices can I actually connect on one Surfshark account?

Unlimited, simultaneously, on a single account, the feature that separates Surfshark from competitors capping at 5 to 10 devices. Native apps cover Windows, macOS, Linux, iOS, and Android, plus Chrome, Firefox, and Edge extensions, with support for Fire TV, Apple TV, and select smart TVs. A household running 8 to 12 devices gets full coverage on one plan.

What does Surfshark actually cost?

Surfshark starts from $2.49/month on its longest-term plan, among the lowest entry prices of any major provider, backed by a 30-day money-back guarantee. That rate is a first-term promotional price tied to a multi-year commitment, so check the listed renewal rate before signing up to avoid a surprise jump later.

Can I get a refund if Surfshark doesn’t work out for me?

Yes. Every Surfshark plan includes a 30-day money-back guarantee, giving you a full month to test speed, streaming access, and the unlimited-device policy on your own hardware before committing long-term. Request the refund through Surfshark’s support channels directly; no specific justification is required to qualify.

How do I get Surfshark running on a smart TV or device with no native app?

Use Surfshark’s Smart DNS feature to reroute DNS queries and access geo-restricted content on devices without a native app, such as older smart TVs or certain consoles, though it won’t encrypt traffic the way the full VPN app does. Router-level installation is another option, covering every device on the network, including IoT gear, though it requires manual router configuration.

What if Surfshark gets blocked on a restrictive network or in a heavily filtered country?

Switch to Camouflage Mode, which disguises Surfshark traffic as regular HTTPS to get past detection on corporate firewalls or in countries that actively block VPN protocols. Camouflage Mode works with OpenVPN only, not WireGuard, so you may need to switch protocols in the app settings first before it takes effect.

What should I do if a specific streaming service won’t connect?

Try switching servers manually, since Surfshark doesn’t label servers by streaming platform the way some competitors do. Netflix and BBC iPlayer typically connect on the first attempt, while Disney+ has occasionally required a server switch to load correctly. Streaming access can also fluctuate over time as platforms update their VPN-detection methods.

Evidence

A reasonable-assurance report attributed to Deloitte Lietuva UAB, dated 10 June 2025 and hosted unsigned on the site of Surfshark, concludes that the configuration of Surfshark matches its no-logs description as of that date; it was commissioned by Surfshark. It excludes streaming proxy infrastructure, web and API infrastructure other than parts connected to the VPN, physical security, access-rights testing and data-transfer security. The no-logs statement in the report says user ID and connection timestamps are stored for a session and deleted automatically within 15 minutes after the session ends.

Sources (5)
  1. Surfshark B.V. ISAE 3000 - Independent Reasonable Assurance Report (10 June 2025), Deloitte Lietuva UAB (hosted by Surfshark)
    Published: June 10, 2025 · Accessed: October 3, 2026
    Quote from the source, in the original English
    the configuration of IT systems and management of the supporting IT operations is properly prepared, in all material respects in accordance with the Surfshark's description set out in the Appendix I, as of 10 June 2025.
    Streaming infrastructure (Haproxy servers, Sni proxy servers) and "Captcha" solution run on the same infrastructure,
    Our servers do store information about user's connection to a particular VPN server (user ID and connection time stamps), but this information is automatically deleted within 15 minutes after termination of user session.
  2. Our no-logs policy got verified again - Surfshark, Surfshark (surfshark.com blog)
    Published: June 16, 2025 · Accessed: October 3, 2026
    Quote from the source, in the original English
    Assessed various server types, including standard, static, and multiport VPN servers;
    Confirmed that the no-logs policy is effectively applied across all relevant servers and infrastructure.
  3. Surfshark reaffirms its commitment to user privacy in independent audit | TechRadar, TechRadar
    Published: June 25, 2025 · Accessed: October 3, 2026
    Quote from the source, in the original English
    Surfshark has reaffirmed its commitment to privacy and transparency with the release of its second no-logs assurance report on June 16, 2025.
  4. Surfshark's No-Logs Policy Reverified by Deloitte Audit, TechNadu
    Published: June 21, 2025 · Accessed: October 3, 2026
    Quote from the source, in the original English
    The findings confirmed that the no-logs policy is effectively applied across all relevant servers and systems.
  5. Welcome to Surfshark's trust center!, Surfshark (surfshark.com)
    Accessed: October 3, 2026
    Quote from the source, in the original English
    including IP addresses, browsing history, session information, used bandwidth, connection timestamps, network traffic, or other types of data.

Cure53 reported ten findings in March 2026 on the Dausos protocol of Surfshark, seven vulnerabilities and three miscellaneous, none Critical or High within the protocol itself. The most severe vulnerabilities were in an external hosting environment that was outside the scope of the assessment, and the public management summary does not give their severity or fix status.

Sources (2)
  1. Cure53 Security Assessment of Surfshark VPN Architecture & Crypto, Management Summary, 03.2026, Cure53 (hosted by Surfshark)
    Published: March 30, 2026 · Accessed: October 3, 2026
    Quote from the source, in the original English
    With no findings rated at Critical or High severity within the actual Dausos protocol itself, the audit results reflect a stable and resilient platform.
  2. Welcome to Surfshark's trust center!, Surfshark (surfshark.com)
    Accessed: October 3, 2026
    Quote from the source, in the original English
    2026 - Cure53 carried out an independent audit of our infrastructure and new protocol Dausos, reporting a stable and resilient platform.

SecuRing tested the network infrastructure of Surfshark from 1 to 10 December 2025 (report dated 12 December 2025) and found no critical-risk vulnerabilities, one Medium-risk finding (improper SSL/TLS configuration) and one recommendation. A redacted version of the report is public, and the test was commissioned by Surfshark.

Sources (3)
  1. PENETRATION TESTS OF NETWORK INFRASTRUCTURE FOR SURFSHARK (SecuRing report, public version), SecuRing (hosted by Surfshark)
    Published: December 12, 2025 · Accessed: October 3, 2026
    Quote from the source, in the original English
    During the penetration testing, no vulnerabilities with critical risk impact were found.
  2. Surfshark completed an infrastructure audit, Surfshark (surfshark.com blog)
    Published: January 23, 2026 · Accessed: October 3, 2026
    Quote from the source, in the original English
    During the assessment, one SSL/TLS-related configuration improvement area was identified and promptly resolved.
  3. Welcome to Surfshark's trust center!, Surfshark (surfshark.com)
    Accessed: October 3, 2026
    Quote from the source, in the original English
    2025 - we completed an infrastructure audit by SecuRing.

Surfshark states that all of its VPN servers run entirely on RAM disk, with all data irreversibly deleted when a server loses power or reboots, and the Deloitte report of June 2025 records that statement. Deloitte concluded that the configuration matches the description as of 10 June 2025, based on configuration files supplied by Surfshark; physical security and access-rights testing were outside the scope.

Sources (2)
  1. Surfshark B.V. ISAE 3000 - Independent Reasonable Assurance Report (10 June 2025), Deloitte Lietuva UAB (hosted by Surfshark)
    Published: June 10, 2025 · Accessed: October 3, 2026
    Quote from the source, in the original English
    All VPN servers run entirely on RAM disk . Once a VPN server loses power or is rebooted, all data associated with it is immediately and irreversibly deleted
  2. Welcome to Surfshark's trust center!, Surfshark (surfshark.com)
    Accessed: October 3, 2026
    Quote from the source, in the original English
    We are among the first VPN providers to upgrade our servers to RAM-only infrastructure, meaning that all data is wiped with every server reboot.