What a VPN actually does
Encryption is what a VPN is genuinely for. It puts your traffic beyond the reach of the network you are sitting on, so the hotel, the cafe or whoever runs the hotspot cannot see what is inside. It also gives you a choice of where your connection comes from, with servers in dozens of countries on either of our picks, your home country included.
That second part matters more than people expect: appearing online from your own country helps with the services that work better from a home connection, which is a quiet, everyday reason travellers keep a VPN switched on.
When you probably do need one
When you travel. On any trip you live on hotel Wi-Fi, cafe networks, airport hotspots and mobile data, and you will join a lot of them without ever knowing how they are run. A VPN keeps logins, banking and work between you and the sites you are using, and one subscription covers every device you are carrying, on Wi-Fi and on a travel eSIM alike.
The same logic covers working from anywhere that is not your desk: if the network is not yours, the VPN is what makes that not matter. And things break at inconvenient hours when you are abroad. Both of our picks run 24/7 support over live chat and email, so there is help at 2am: NordVPN and Surfshark both answer around the clock.
When you honestly do not
If you are at home, on your own connection, doing ordinary things, a VPN adds a layer you may simply never notice. Your browser already encrypts most traffic to most sites. A VPN still hides which sites you visit from your network, and that is worth something to plenty of people, but it is a preference, not a necessity. Do not buy one out of vague fear; buy one when the way you use the internet gives it a job to do.
What a VPN will not do
Two things a VPN does not do. It does not make a connection faster: a VPN will not make slow Wi-Fi faster. Encryption adds a small overhead, so a struggling connection will struggle slightly more with a VPN on. You buy one for protection, not performance. And it does not guarantee that any particular site or service will behave the way it does at home. It will not make you anonymous either: sites you log in to still know exactly who you are. The 30-day money-back guarantees on NordVPN and Surfshark are the honest way to find out whether one earns its place in your life.
If you land on yes
Two picks cover almost everyone. NordVPN is best for short trips and month-by-month plans: one plan covers 10 devices, and the apps are simple to run. Surfshark is best for long stays and unlimited devices: every device you own, and everyone you travel with, on one subscription. Both run plans by the month, the year or over two years, and both carry a 30-day money-back guarantee.
Whichever you pick, set it up at home before you need it: install NordVPN or Surfshark, sign in, connect once, and turn on the kill switch and auto-connect in the settings.
Final word
Need is the wrong word for most people at home, and exactly the right one for most people on the road. If your year includes airports, NordVPN or Surfshark will spend most of it earning its keep. If it does not, keep your money, and come back to this page the week before you fly.