What Is a VPN?
Using your Android tablet or phone to access the free Wi-Fi at the local coffee shop is a lot more dangerous than you might think. First, you have no way of knowing if the network has been configured incorrectly, allowing others on the network to see your data. Second, it's entirely possible that nefarious parties have simply set up an innocent-looking wireless network to trick naive coffee drinkers; they can be very difficult to tell from the real thing. That's why you need a VPN.
In both of the scenarios above, someone could monitor your network traffic. Everything you send, from emails to passwords, would be open to them. That's a lot of private information you'd probably rather keep private. One example of a classic man-in-the-middle attack is to use a bogus network to intercept victims' web traffic and replace legitimate sites with fake ones. When a victim goes to enter their information (everything from passwords to credit card numbers) on the site, the attacker gets it all.
VPNs are still a good investment even when you know the network is safe. Recent legal changes allow ISPs to sell anonymized user metadata to advertisers and other third-parties. Lots of other companies, like Facebook and Google, have benefited from access to user data, and ISPs have successfully argued that they should also get a piece of the tasty data pie. But, to my mind, it's a trickier issue because you can conceivably opt out of using Facebook but accessing the internet without an ISP is all but impossible.
Speaking of advertisers, they use advanced trackers that correlate your movements between websites. By placing trackers on a variety of sites and watching for requests from the same IP address, advertisers can get a sense of your habits. This is still true when you browse the web on your Android. What's more, many mobile apps still transmit data without encryption, letting various three-letter organizations keep an eye on you.
You might not think anyone would be interested in your data, but it's not always individuals that are targeted for surveillance or attack. While attending the Black Hat security conference, I saw some 35,000 devices connecting to a malicious Wi-Fi network, all without the knowledge of their owners. The malicious network was configured to mimic whatever Wi-Fi request was made of it. You can bet that many of those devices were mobile phones merely seeking a familiar Wi-Fi network.
When you connect through a VPN service, you interact differently with the internet. Your data is sent through an encrypted tunnel to a VPN server, either nearby or in a far-flung location. Anyone monitoring your network connection only sees the gibberish of an encrypted connection. Because your traffic exits onto the open web from the VPN server, advertisers and spies see the IP address of the VPN server and not your device. It's a smart and simple way to keep your information and identity secure.
What a VPN Isn't
As important as it is to understand what a VPN is, it's also important to know what it isn't. It isn't a true anonymization service, and you can't use it to connect to hidden websites on the Dark Web. For both of those activities, you'll want to use the Tor anonymization network. There are Tor client Android apps in Google Play, so you'll have no trouble connecting, no matter where you are.
While some VPN services claim to protect you against malware and phishing sites, standalone antivirus utilities definitely do a better job. Some VPN services also block ads—an especially useful feature on Android, where ad blockers are a rarity.
When you're connected to the VPN, your data is, indeed, encrypted. But that's not the case once it leaves the VPN server. If your browser or app doesn't secure your information, then it will be entirely readable to someone with the will and the means to try. Manually encrypting your files is one way to ensure that they aren't read. There are also apps, like Signal, that send encrypted text messages, keeping each message secure even if part of the journey to its intended recipient is unsecure.
VPNs Can Fool Dictators, Netflix
A common use of VPNs is location spoofing. By sending your web traffic through an encrypted tunnel to a remote server, you cause it to appear to originate from the VPN server and not your actual location. Journalists and activists have used this to get around restrictive internet controls imposed by various governments.
But for most people, this feature will probably be used to watch region-locked streaming content. If you live in the US and want to watch the free video streams from the BBC, you're out of luck. But with a VPN, you can fool the BBC website into believing you're a noble UK citizen. The same is true for sporting events, such as official MLB streams.
That said, companies and content providers are starting to get wise. Netflix in particular has begun blocking VPN connections. I've noticed that Hulu, too, frequently blocks access when I'm using a VPN. Note that streaming companies are well within their rights to block VPN users. Just because you're paying to watch Netflix in the US doesn't mean you are allowed to view UK Netflix.
There are some VPNs that work with Netflix. But in my experience, their effectiveness can change on a day-to-day basis as the streaming companies and VPN services play a cat-and-mouse game of spoofing and blocking.
Android VPNs and Performance
It's not surprising that rerouting your connection to other, perhaps distant, servers can have a negative impact on your web browsing speed. Usually, a VPN greatly increases your latency, and reduces the speed of download and uploads. How annoying the impact is will depend on the location of the VPN servers and the network infrastructure the VPN provider can access, among other things.
Very rarely, a VPN service may actually improve your web browsing. Generally, that's because the VPN provider has access to higher bandwidth internet in other countries. But it is, as I've said, a rare thing.
Note that most VPNs can also protect you when you're connected to cellular networks as well. This might seem like overkill, but there are exotic attacks to intercept cellphone data. One such attack involves jamming the LTE and 3G bands, forcing nearby phones to attempt to connect via a 2G connection, the encryption of which has long been broken. The attackers use a portable cell tower, similar to a Femtocell, and trick nearby phones into connecting.
In my testing, I don't look at VPN performance over cellular connections. That's because I can't control how or when the phone connects with cell towers. By restricting my testing to Wi-Fi, I can control more variables and emulate the circumstances most people will probably experience.
The biggest hurdle to using a VPN on a mobile device is maintaining a connection. Annecdotally, I've found that it takes longer to establish connections when a VPN is engaged, and that dropped connections are more common with VPN than without. That's just my impression, however, and I know that VPN companies are working to ensure that their products don't intrude too much on your daily usage. I definitely recommend taking advantage of free trials with VPN services, so you can get a sense of how the product will work in your life firsthand.
What Makes a Good Android VPN?
Although Android phones and tablets are radically different in form factor than desktops and laptops, what I look for in a VPN remains the same.
The question I am asked the most is "which is the fastest VPN?" But I've found that speed is far from the most important metric when measuring value in a VPN plan. The number and distribution of available VPN servers provided by the company is far more important than speed. Lots of servers in lots of places means that you'll have an easier time finding a nearby server while traveling. When you're in a foreign country and you're desperate to get information (directions or translation, perhaps), you probably won't be worried about whether or not the Wi-Fi connection you've found is secure. VPNs give you some assurance in these situations.
The location of the VPN company is also important. Depending on where the company has its corporate headquarters, local laws may require the company to retain user data. That's not a good thing, especially if maintaining your privacy is your primary concern. Reading the company's terms of service is a great way to figure out the logging and data retention policies. Nearby servers are good, since they generally provide better speed and performance. A surfeit of servers also means that you'll have many options when spoofing your location, should you desire it.
You're also likely to find the VPN service's statement about P2P file sharing and BitTorrent in its terms of service. Most VPN services don't allow either, since it's a drain on resources and opens a legal can of worms. A few services allow file sharing on specific servers, and even fewer will allow them on any server. While I seriously doubt many people will be using their Android phones for Torrenting, be sure to respect the rules for your chosen VPN service. Breaking them can sometimes mean being banned without a refund.
Finally, price and licenses are a very important factor to consider. VPN services range from free to incredibly expensive, and you'll want to make sure you can connect all your devices to the VPN service. In my experience, the average price of a VPN is just under $10 per month. Most companies allow five or six devices to connect at a time. You'll want to make sure you have enough licenses to cover all your computers and mobile devices. If you're looking at a service that falls outside this range, be sure that it's offering something unique to make up for it.
Get a VPN for Your Android!
Whether you're a globe-trotting business magnate, or a humble homebody, a VPN service is a worthy investment. Your data will be more secure, and you'll have much more flexibility in how your mobile traffic moves across the web, even when you're using your smartphone or tablet. It won't protect you from every threat, of course, but it's a simple way to be much more secure.
Featured Android VPN App Reviews:
NordVPN (for Android) Review
$11.95 MSRP
%displayPrice% at %seller% NordVPN for Android is an excellent way to keep your mobile traffic secure, thanks to its friendly interface, many servers (including specialized servers), and speedy performance. Read the full review-
Private Internet Access VPN (for Android) Review
$6.95 MSRP
%displayPrice% at %seller% Private Internet Access has about the sparsest interface you can find, but it's one of the most powerful Android VPN services, thanks to its advanced features and thousands of servers around the world. Read the full review -
TorGuard VPN (for Android) Review
$9.99 MSRP
%displayPrice% at %seller% The TorGuard VPN Android app provides access to a fast, robust VPN service with plenty of servers around the world. Just don't expect a lot of hand-holding. Read the full review -
ExpressVPN (for Android) Review
$12.95 MSRP
%displayPrice% at %seller% ExpressVPN has 1,000 servers spread across the globe, making it a strong competitor, but it's undercut by a comparably high price and few additional features. Read the full review -
KeepSolid VPN Unlimited (for Android) Review
$4.99 MSRP
%displayPrice% at %seller% KeepSolid VPN Unlimited is an affordable Android VPN that secures your traffic and offers additional protection to boot. It offers good speeds and a strong server selection, making it an excellent choice. Read the full review -
Hide My Ass VPN (for Android) Review
$9.99 MSRP
%displayPrice% at %seller% Hide My Ass is an easy-to-use virtual private network (or VPN) Android app with a fun interface, but it delivers only middling speed and lacks some advanced features offered by the competition. Read the full review -
Norton WiFi Privacy (for Android) Review
$29.99 MSRP
%displayPrice% at %seller% Norton WiFi Privacy delivers a reasonably compelling VPN service, but it can be an expensive proposition. Read the full review -
Speedify VPN (for Android) Review
$8.99 MSRP
%displayPrice% at %seller% Hence the name, Speedify is all about speed, bundling your Wi-Fi and cellular data into one super-connection, and encasing the whole thing in a privacy-enhancing VPN. It might mean fast browsing, but it doesn't offer much in the way of features. Read the full review -
PureVPN (for Android) Review
$4.99 MSRP
%displayPrice% at %seller% PureVPN has excellent features but is hampered by awkward design and problematic performance. Read the full review -
Spotflux VPN (for Android) Review
$4.99 MSRP
%displayPrice% at %seller% The Spotflux VPN Android app delivers decent speeds and privacy protection, but its Android experience is hampered by few servers, and a sluggish and unreliable interface. Read the full review