Surfshark Review

Surfshark was built for a problem that most VPN providers quietly ignore: your household has more devices than any subscription reasonably covers. A laptop, two phones, a tablet, a smart TV, a router and a gaming console. Most VPNs cap you at five or six connections and leave the rest exposed.

Surfshark removes that limit entirely. One account, unlimited simultaneous connections, no exceptions. For families, shared apartments, small teams or anyone who is tired of rationing which device gets protection, that single decision changes the entire value calculation.

The unlimited device policy would be enough to put Surfshark on a shortlist. What makes it more interesting is that the service doesn’t stop there. It posts competitive speed results, works across 100+ countries, includes tools like MultiHop double-VPN routing, Camouflage Mode for bypassing deep packet inspection and a built-in ad and malware blocker called CleanWeb. The entry price on a two-year plan sits at $1.99 per month, which is among the lowest of any full-featured VPN on the market.

This review tests those claims against real-world performance. We cover security, speed, streaming, pricing, and the nuances you actually need to know before committing.

Surfshark History & Ownership

Understanding who operates a VPN service matters as much as what the app can do. A logging policy is only as meaningful as the organization behind it.

Founding and Background

Surfshark launched in 2018, entering a crowded market with two deliberate differentiators: unlimited simultaneous connections and aggressive long-term pricing. Both were unusual at the time. The service grew quickly by targeting users who felt underserved by per-device caps and inflated monthly rates.

Within a few years, Surfshark had built a server network spanning 100+ countries and released apps across every major platform. The service developed a reputation for shipping features quickly, including MultiHop, a rotating IP tool and a Camouflage Mode designed for environments where VPN traffic is actively blocked.

Nord Security Acquisition

In 2022, Surfshark merged with Nord Security, the parent company of NordVPN. This is the detail that generates the most questions and deserves a direct answer.

The two services operate independently. Separate apps, separate server networks, separate brands. NordVPN is positioned at the premium end; Surfshark competes on value. There is no sign of infrastructure consolidation or shared logging systems.

The legitimate concern is conflict of interest. If the same corporate parent controls two major VPN products, is there an incentive to steer users toward one or suppress honest comparison? Nord Security’s track record suggests not. Both services have maintained their individual roadmaps and pricing structures post-merger. NordVPN has not been artificially slowed down, and Surfshark has not been hollowed out to avoid cannibalizing the flagship product.

“The merger brought shared security expertise and engineering resources without combining the actual products. For users, that means Surfshark benefits from Nord Security’s infrastructure knowledge while remaining a genuinely separate service.”

The more useful frame is this: Nord Security now has relevant experience auditing VPN infrastructure at scale. Surfshark has access to that knowledge. That is a net positive for security, even if it introduces questions about competitive independence that are worth keeping in mind.

Jurisdiction

Surfshark is incorporated in the Netherlands, an EU member state. This is a meaningfully different legal position from VPNs based in Panama (NordVPN) or the British Virgin Islands (ExpressVPN). The Netherlands participates in the Fourteen Eyes intelligence-sharing alliance and has data retention frameworks.

The practical impact is limited by Surfshark’s no-logs architecture. If no data is retained, legal requests for it return nothing. Surfshark has been independently audited by Cure53 to verify this claim. Still, jurisdiction matters for threat modeling. Users in high-risk environments should weigh EU legal reach against a provider based entirely outside surveillance alliances.

Independent Audits

Surfshark has published multiple third-party audits, including a no-logs policy audit by Cure53 and an infrastructure review covering its server architecture. These are publicly accessible and in line with what the best-reviewed VPN providers make available. The audit results confirmed no user-identifiable data is stored on Surfshark’s servers.

Security Architecture

Surfshark’s security stack is solid across the components that matter most for everyday users. No meaningful gaps appeared during testing.

Encryption and Protocols

All Surfshark connections use AES-256-GCM encryption with RSA-2048 for handshakes and SHA-512 HMAC for data authentication. These are the same standards used by NordVPN and ExpressVPN at their respective price points.

Protocol support is broad:

• WireGuard — the default and fastest option. Surfshark’s implementation performed well in speed testing, achieving 695 Mbps on a 1 Gbps fiber line, ranking fourth in our speed lab across all tested providers.
• IKEv2/IPSec — reliable on mobile, handles network switching cleanly between Wi-Fi and cellular.
• OpenVPN (UDP/TCP) — slower but extremely stable. Used as a fallback in environments where WireGuard is blocked.

The protocol defaults are sensible. Most users will never need to change them.

Kill Switch and Leak Protection

A kill switch is standard. Both an app-level kill switch (blocks traffic only from the VPN app) and a system-level kill switch (blocks all internet if the VPN disconnects) are available. Testing confirmed the system-level kill switch engaged correctly under forced disconnect scenarios on Windows and macOS.

IPv4, IPv6, DNS and WebRTC leak tests returned clean results across all tested configurations. No traffic escaped the tunnel during normal use or kill switch stress tests.

No-Logs Policy

Surfshark does not log IP addresses, browsing history, session timestamps, bandwidth usage or connection metadata. The Cure53 audit verified that the server architecture is designed to prevent this data from being retained, not just to avoid writing it intentionally.

RAM-only server infrastructure is being rolled out across Surfshark’s network. On RAM-only servers, no data survives a reboot. This limits the window for any hypothetical physical server seizure.

MultiHop (Double VPN)

MultiHop routes your connection through two separate VPN servers in different countries before reaching the open internet. This adds an additional layer of encryption and makes correlation attacks significantly harder. If one server is somehow compromised, an attacker still cannot see both your origin and destination.

MultiHop is available in the standard app interface without additional fees. Server pair options are limited compared to some specialty providers, but the core functionality is sound.

Camouflage Mode

Camouflage Mode obfuscates VPN traffic to look like standard HTTPS. This matters in countries like China, Iran and Russia where deep packet inspection is used to identify and block VPN protocols. Surfshark activates Camouflage Mode automatically when using OpenVPN — no manual toggle required.

Effectiveness in highly restrictive environments varies and no VPN guarantees 100% bypass success. That said, Surfshark’s approach is technically legitimate and has reported success in markets where bare WireGuard connections are reliably blocked.

Speed Performance

Surfshark ranked fourth in our speed lab, behind only ExpressVPN, NordVPN and one other competitor, with a peak of 695 Mbps on WireGuard over a 1 Gbps fiber connection. Average latency on nearby servers was 20ms.

Speed Lab Results

Test	Result
Speed Lab Rank	#4 overall
Peak Download (WireGuard, fiber)	695 Mbps
Average Latency (nearby servers)	20ms
Server Count	3,200+
Countries	100+

695 Mbps is genuinely fast. For context, 4K streaming requires roughly 25 Mbps and a 10 GB file download at 695 Mbps completes in about two minutes. The speed ceiling is not a bottleneck for any common consumer use case.

Performance on distant servers was acceptable. US-to-Asia connections dropped to approximately 120 Mbps on WireGuard, which remains sufficient for HD streaming and video calls. Latency on long-haul routes climbed to 180–220ms, which is noticeable in latency-sensitive gaming but acceptable for most other tasks.

Speed held consistent across repeated test runs on different days and times. There were no sudden collapses or anomalous swings that would suggest server congestion problems.

Protocol Comparison

• WireGuard delivered the highest throughput and lowest latency in all conditions. This is the recommended protocol for most users.
• IKEv2/IPSec performed within 10–15% of WireGuard and handled mobile network transitions cleanly.
• OpenVPN UDP ran roughly 20–25% slower than WireGuard, consistent with expected OpenVPN overhead.

Speed loss compared to a no-VPN baseline averaged 12% on nearby servers and 28% on distant servers. These are competitive figures.

Streaming Performance

Surfshark successfully unblocked content on nine or more streaming platforms during testing. This places it in the middle tier of streaming-focused VPNs — reliable for most platforms but not flawless across all regions on all services.

Platforms Tested

The following services were verified as accessible through Surfshark servers during our testing period:

• Netflix US, UK, Canada, Australia
• BBC iPlayer
• Disney+
• Hulu
• Amazon Prime Video
• HBO Max
• DAZN
• Peacock

Surfshark does not maintain a published list of streaming-optimized servers. Server selection for streaming is done manually, which requires some trial and error when a specific platform fails to load. Some providers offer clearly labeled streaming server lists; Surfshark’s app does not. This is a real usability gap for streaming-focused users.

Netflix unblocking was consistent on US servers. BBC iPlayer worked reliably on UK servers throughout testing. DAZN access was less predictable — some server locations succeeded while others did not, with no in-app guidance on which to choose.

For a comprehensive breakdown of which VPNs perform best across the widest range of streaming services, see our guide on the best VPN for streaming.

Smart DNS

Surfshark includes a Smart DNS feature for devices that cannot run a VPN app directly, such as smart TVs, game consoles and Apple TV. Smart DNS routes only DNS queries through Surfshark’s servers, which means it does not encrypt traffic but can bypass geographic restrictions. This is useful for streaming on devices where app installation is not possible.

Pricing and Plans

Surfshark’s pricing structure is one of its strongest arguments. The monthly rate is among the highest in the category, but the two-year plan at $1.99/month is a genuine outlier for a full-featured VPN.

Plan Comparison

Plan	Monthly	1-Year	2-Year
Starter	$15.45/mo	$2.99/mo	$1.99/mo
Starter+	$15.45/mo	$3.99/mo	$2.99/mo
One	$17.95/mo	$4.49/mo	$3.19/mo
One+	$20.65/mo	$6.49/mo	$5.09/mo

All plans include unlimited simultaneous connections, access to the full server network, WireGuard support, MultiHop, Camouflage Mode and CleanWeb.

What each tier adds:

• Starter — Core VPN with CleanWeb (ad/tracker/malware blocker)
• Starter+ — Adds Alternative ID (masked email and identity generator) and data breach alerts
• One — Adds Surfshark Search (private, no-log search engine) and Surfshark Alert (real-time breach notifications)
• One+ — Adds antivirus and device security scanning

The Starter plan at $1.99/month covers everything most users actually need. The One+ antivirus bundle competes with standalone security suites at a fraction of the combined cost.

Money-Back Guarantee and Trial

Surfshark offers a 30-day money-back guarantee with no stated restrictions on refund eligibility. Customer support, which we tested independently, resolved refund requests within 24 hours. There is no free trial in the traditional sense, but the 30-day guarantee functions as a risk-free trial period.

A 7-day free trial is available on iOS and Android through the respective app stores.

Payment Methods

Accepted payment options include credit cards, PayPal, Google Pay, Amazon Pay and cryptocurrency (Bitcoin, Ethereum, Ripple). Cryptocurrency payments allow subscription without providing a name or address, which is worth noting for privacy-conscious users.

Who Should Use Surfshark

Surfshark is a strong match for:

• Families and shared households — Unlimited device connections make per-device counting irrelevant. One subscription covers everyone.
• Budget-focused users — At $1.99/month on a two-year plan, Surfshark offers more features per dollar than almost any comparable provider.
• Users in censorship-heavy environments — Camouflage Mode and MultiHop give meaningful options for bypassing DPI-based blocks.
• Users who want bundled security tools — The One+ tier adds antivirus, breach alerts and private search at a price that undercuts buying each tool separately.
• Streamers who use multiple platforms — Nine-plus verified streaming services covers the majority of use cases without needing a streaming-specialized VPN.

Surfshark is less ideal for:

• Users who need maximum speed above all else — At rank four in our lab, Surfshark is fast but not the fastest. ExpressVPN and NordVPN both lead it on raw throughput.
• Users in the highest-risk threat environments — Netherlands jurisdiction, while mitigated by no-logs architecture, is a real consideration compared to providers based outside surveillance alliances.
• Users who want granular streaming server selection — The lack of labeled streaming servers creates more trial-and-error than alternatives like ExpressVPN.

Limitations

No VPN review is complete without naming what does not work as well.

Speed ceiling. Surfshark ranked fourth, not first. The gap between it and the top two providers is measurable. For most users it is irrelevant, but if you are running a use case where every megabit per second counts, it matters.

Netherlands jurisdiction. EU membership means Surfshark operates within a legal framework that includes data retention directives and intelligence-sharing arrangements. The no-logs architecture neutralizes most of this risk, but the jurisdiction is objectively less favorable than Panama or the British Virgin Islands for pure privacy posture.

No labeled streaming servers. Competing services offer clearly marked servers optimized for specific platforms. Surfshark’s app does not. Users who frequently switch between streaming services will encounter more manual trial and error.

Nord Security ownership perception. Even if the services are operationally separate, users comparing Surfshark and NordVPN may reasonably question whether independent product decisions will remain independent indefinitely. This is speculative but not unreasonable to track over time.

Server count. 3,200+ servers is respectable but smaller than NordVPN’s 8,900+ or ExpressVPN’s global network. In practice, server count rarely limits performance for typical users, but it is a fair data point.

For scoring methodology and how these factors are weighted, see our VPN review methodology.

Frequently Asked Questions

Is Surfshark trustworthy given the Nord Security merger?

Yes, with appropriate nuance. The merger brought Surfshark under the same corporate parent as NordVPN, but both services have continued operating independently with separate infrastructure, pricing and roadmaps. Surfshark has maintained its own audit program and no-logs architecture. The concern worth monitoring is long-term product independence, not current technical integrity.

Can Surfshark actually handle unlimited devices simultaneously?

Yes. Surfshark places no limit on simultaneous connections. In testing, we connected 15 devices under a single account without performance degradation beyond normal network constraints. The unlimited policy is technically real, not a soft limit enforced elsewhere.

Does Surfshark work in China?

Surfshark’s Camouflage Mode and obfuscation capabilities are designed to bypass DPI-based VPN blocks. Users report mixed results in China, as the effectiveness of any VPN in that environment fluctuates with enforcement cycles. Surfshark is among the more credible options for censorship circumvention, but no VPN guarantees reliable access in China.

How does Surfshark’s $1.99/month price hold up at renewal?

The $1.99/month rate applies to the initial two-year billing period. Renewal rates are higher — typically in the $3.99–$4.99/month range depending on current pricing and promotions. This is standard practice across the VPN industry. Always confirm the renewal rate before purchasing and set a calendar reminder before the initial term expires.

Is CleanWeb actually effective as an ad blocker?

CleanWeb operates at the DNS level and blocks known ad, tracker and malware domains before connections are established. It is effective against most display advertising and known tracking infrastructure. It does not block all advertising (YouTube ads, for example, are largely unaffected because they share Google’s infrastructure with content). For users who do not want a separate browser extension, CleanWeb provides meaningful protection with no configuration required.

Bottom Line

Surfshark earned an 85/100 in our scoring framework — a strong result that reflects genuine capability, not just competitive pricing.

The unlimited device policy is the clearest differentiator in the VPN market. No major competitor matches it. For any household with more than five or six devices, the math is straightforward: Surfshark costs less and covers more. At $1.99/month on a two-year plan, the entry price is the lowest among full-featured providers we have reviewed.

Speed at 695 Mbps is genuinely fast. Streaming coverage across nine-plus platforms handles the majority of use cases. The security stack — WireGuard, AES-256, kill switch, MultiHop and Camouflage Mode — is complete and tested clean for leaks.

The limitations are real but manageable. Netherlands jurisdiction is less favorable than Panama or BVI. The Nord Security ownership question is worth monitoring. Streaming server selection requires more manual effort than competing services.

What Surfshark delivers is an honest, capable VPN at a price point that makes it accessible to more people than most competitors. That combination — reliability, unlimited devices, low cost — is a strong value proposition for families, budget-focused users and anyone who has been paying for VPN protection on a per-device basis.

If maximum raw speed or pure jurisdictional privacy posture is the top priority, NordVPN edges ahead. If value per dollar and unlimited household coverage are what you are optimizing for, Surfshark is difficult to beat at this price.