Quick answer
ExpressVPN is the best travel VPN in 2026 because it handles captive portals and flaky hotel networks better than anything else, and reconnects almost instantly when the connection drops. NordVPN is faster and has obfuscation for restrictive countries, and Surfshark is the best value for a family travelling with six devices between them.
The best travel VPNs at a glance
- ExpressVPN – best on unreliable hotel networks
- NordVPN – fastest, obfuscation for restrictive countries
- Surfshark – best value, unlimited devices
- Proton VPN – best privacy, Stealth protocol, free tier
- Windscribe – cheapest for short trips
- Mullvad – best anonymity for sensitive travel
What actually goes wrong on public Wi-Fi
The classic warning is that someone on the same network is reading your traffic. That risk has fallen since almost every site moved to HTTPS, which encrypts the content regardless of the network. But it has not disappeared, and several other risks remain.
Evil twin networks. An attacker sets up a hotspot named something plausible – the hotel’s name, or Airport Free WiFi – and anyone who connects routes all their traffic through the attacker’s equipment. This remains common and is trivially easy to do.
DNS manipulation. Even with HTTPS, the network sees which domains you request and can redirect them. Hotel and cafe networks routinely log this, and some inject advertising.
Captive portal weaknesses. The login pages that hotels and airports use are frequently unencrypted and occasionally request more information than they need.
Device discovery. On an open network your laptop may be visible to every other device on it, and file sharing left enabled from a home network becomes a genuine exposure.
A VPN addresses all of these by encrypting everything between your device and the VPN server, so the network operator and anyone on it sees only an encrypted tunnel.
How we tested
We used each provider across a month of travel on hotel Wi-Fi in four countries, three airport networks, trains and cafes. We recorded how each handled captive portal logins, how quickly tunnels re-established after the kind of brief dropouts common on shared networks, whether the kill switch left us without connectivity at awkward moments, and whether obfuscation was needed to connect at all.
1. ExpressVPN – best for real travel conditions
ExpressVPN handled the messy realities of travel better than any rival. Captive portals were detected properly rather than being blocked by the kill switch, which is a frustration several competitors still cause, and Lightway reconnected within a second or two of the sort of brief dropouts hotel Wi-Fi produces constantly.
Its apps are identical across platforms, so setting up a partner’s phone in an airport lounge takes a minute. Support is 24/7 and genuinely knowledgeable, which matters when you are troubleshooting in a different timezone.
Price: from $4.99/mo, 8 devices.
2. NordVPN – fastest, with obfuscation when you need it
NordVPN is the fastest of the group and the better choice if your travels include countries that filter VPN traffic. Its obfuscated servers disguise the connection as ordinary HTTPS, and Threat Protection blocks malicious domains, which is useful on networks you did not choose.
Auto-connect rules let you mark your home network as trusted and have the VPN activate automatically everywhere else, which is the setting that turns a VPN from something you forget into something that just works.
Price: from $3.39/mo, 10 devices.
3. Surfshark – best value for families
Travelling as a family means four phones, two laptops and a tablet. Surfshark’s unlimited device policy covers all of them for about $2.19 a month, which is less than any rival charges for a fraction of that coverage.
NoBorders mode adjusts automatically on restrictive networks, and the apps are simple enough to set up on a child’s device without explanation.
Price: from $2.19/mo, unlimited devices.
4. Proton VPN – best privacy on the road
For travel where confidentiality matters – journalists, researchers, anyone carrying sensitive work – Proton VPN’s Swiss jurisdiction, open-source audited apps and Stealth protocol make it the strongest option. Secure Core adds another layer by routing through a hardened data centre first.
The free tier has no data cap, which makes it a reasonable backup to install on a second device before a trip.
Price: free, or from $4.99/mo.
5. Windscribe – cheapest for a short trip
If you need a VPN for a two-week holiday rather than permanently, Windscribe’s Build a Plan lets you pay $1 per location per month. Two countries for a fortnight costs less than a coffee at the airport.
The free 10GB tier is enough for email, maps and messaging across a short trip if you are not streaming.
Price: free 10GB, or from $2/mo.
6. Mullvad – for sensitive travel
Mullvad requires no email address and accepts cash, so there is no account linking your identity to your connections. Its QUIC obfuscation helps on filtered networks, and its apps are open source and audited.
No streaming support and email-only support make it a specialist choice rather than a general travel recommendation.
Price: EUR 5/mo flat.
How to use a VPN safely while travelling
Install and test everything before you leave. Provider websites are blocked in some countries, and app stores may be restricted, so arriving without the app installed can mean arriving without a VPN at all.
Turn on auto-connect for untrusted networks and mark your home Wi-Fi as trusted. Enable the kill switch, but learn where the off switch is, because captive portals sometimes need a brief window to load before the tunnel comes up.
Disable file sharing and network discovery on laptops before you travel, and turn off automatic connection to known network names – this is what makes evil twin attacks effective, since your phone will happily rejoin anything called the same thing as a network you used before.
Choose servers close to where you actually are for speed, and switch to a home-country server only when you need to reach home banking or streaming. Note that banks sometimes flag foreign IP addresses, so connecting to your home country before logging in often prevents an account lock.
Hotel, airport and cafe networks compared
Hotel Wi-Fi is usually the weakest: shared across hundreds of rooms, often with outdated equipment and aggressive captive portals. Expect low speeds in the evening and intermittent drops, which is why reconnection quality matters more than peak throughput.
Airport networks are typically faster but more heavily monitored, often with time limits and mandatory registration. Some filter VPN protocols, in which case an obfuscated mode usually gets through.
Cafe networks vary enormously and are the most common venue for evil twin attacks, simply because the legitimate network name is easy to guess. Mobile data, where you have it, is almost always safer than any of the three.
Frequently asked questions
Do I really need a VPN on public Wi-Fi?
HTTPS covers much of what people worry about, but a VPN still protects your DNS queries, hides which services you use from the network operator, and defends against evil twin hotspots. On a network you do not control, it is a reasonable precaution.
Why does my VPN block the hotel login page?
The captive portal must load before the tunnel comes up, and a strict kill switch can prevent that. Connect to the Wi-Fi, complete the login with the VPN off, then enable it immediately. Good apps detect portals automatically.
Should I use a VPN on mobile data abroad?
If you are roaming on a foreign carrier, that carrier can see your traffic patterns just as your home ISP would. A VPN is worth keeping on, and the battery cost is small.
Can a VPN help with airline or hotel pricing?
Occasionally, since some booking sites vary prices by region, but the effect is inconsistent and often tied to your account and payment card rather than your IP address. Clear cookies and compare rather than assuming a VPN will save money.
Which countries restrict VPN use?
China, Russia, Iran, Turkmenistan and a handful of others restrict or block unapproved VPNs, and rules in the UAE and Turkey have specific conditions. Check before travelling, and install an obfuscation-capable provider in advance.
Travel router: the alternative worth knowing about
A pocket travel router is one of the more useful pieces of kit for frequent travellers. You connect the router to the hotel Wi-Fi, run the VPN on the router, and all your devices join the router’s own network. Everything is protected automatically, you only complete the captive portal login once, and devices that cannot run VPN apps – a streaming stick, a games handheld – are covered too.
Models from GL.iNet are the usual recommendation, cost well under the price of a year’s VPN subscription, and support OpenVPN and WireGuard configurations from most providers. They also solve the common hotel problem of a device limit on the network, since the router presents as one device.
The trade-off is one more thing to pack and a small speed ceiling imposed by the router’s processor, which on cheap models can be noticeable.
Banking and payments while abroad
Banks increasingly flag logins from unexpected countries, and a VPN cuts both ways here. Connecting to a server in your home country before logging into online banking usually prevents a security hold. Conversely, logging in from a foreign IP while your card is being used domestically can trigger a freeze.
Some banking apps also refuse to run over a VPN entirely, because they detect data-centre IP addresses as suspicious. Split tunnelling solves this: exclude the banking app so it uses your normal connection while everything else stays encrypted.
Notify your bank of travel dates where that option exists, and carry a second payment method. No VPN configuration helps if your only card is frozen.
Keeping devices secure beyond the VPN
A VPN protects traffic in transit and nothing else. Before travelling, enable full-disk encryption on laptops, set a strong device passcode rather than a four-digit PIN, turn on remote wipe, and make sure your password manager is not set to stay unlocked indefinitely.
Update everything before you go, since patching over hotel Wi-Fi is slow and you may defer it. And back up before departure – the most common data loss while travelling is a stolen or dropped device, not an intercepted connection.
Verdict
ExpressVPN is the travel VPN we would pack, because it deals with the practical annoyances – captive portals, dropped connections, unfamiliar networks – better than anything else. NordVPN is the pick if your itinerary includes a country that filters VPN traffic, and Surfshark is the obvious choice if you are covering a whole family’s devices.