Searching for a free VPN and landing on Surfshark sets up a small collision. The installer costs nothing, and the app does nothing at all until a paid account sits behind it. Surfshark is a subscription VPN from Surfshark B.V. with apps for Windows, Mac, Android, and iOS, built around one number its rivals will not match: how many devices a single plan protects at once. Whether that number is worth paying for is the question to settle before you download.
Is Surfshark worth downloading for a household full of devices?
The unlimited-connections policy is the reason most people shortlist Surfshark, and it holds up in daily use: one plan covers every phone, laptop, tablet, and TV in a home with no device counter to manage. Nearly every rival caps connections, so a family that would need two subscriptions elsewhere needs one here. The limitation arrives immediately after. There is no Surfshark free version and no permanently free tier to fall back on, so the app is a locked shell until an account is active. Recent work has gone into a proprietary connection protocol alongside WireGuard and OpenVPN, plus post-quantum protection arriving with that protocol, so the current release targets speed and future-proofing rather than new interface panels.
What a Surfshark plan covers before the extras
The base plan is the VPN itself: encrypted tunnels across servers in around a hundred countries, CleanWeb filtering, Bypasser split tunneling, MultiHop, a kill switch, and Alternative ID for generating a throwaway identity and email address. Higher tiers bundle antivirus, data-breach alerts, a private search tool, and a data-removal service. The app you install is the same either way; the tier only changes which panels light up inside it. Trials are offered, though which platforms qualify has shifted over time, and sign-up asks for payment details before the trial starts. Anyone testing rather than committing should note the renewal date.
The Surfshark settings you will actually touch
Four or five settings decide the experience on any VPN, and the rest sit unused. These are the ones that change how Surfshark behaves day to day.
CleanWeb and the blocking that runs outside the browser
CleanWeb filters ads, trackers, and known malicious domains at the network level, so it also cleans traffic from apps that never open a browser. It earns its place on Android, where in-app advertising is heaviest and browser extensions cannot reach. The gap is visibility: nothing counts what was blocked or when, so a broken page is hard to pin on CleanWeb or on anything else.
Bypasser split tunneling and its platform limits
Bypasser pulls chosen apps or sites out of the tunnel, which is how a banking app or a local printer keeps working while everything else stays encrypted. The depth is not equal across platforms:
Website-level exclusion is the useful half of the feature and the half that does not travel everywhere, so check what your main device gets before assuming.
MultiHop, NoBorders, and the kill switch
MultiHop routes traffic through two servers and lets you choose both ends yourself rather than accepting a fixed pair, which is uncommon. NoBorders detects a restricted network and surfaces the servers most likely to work on it, and it is the setting that rescues connections on hotel, campus, and office Wi-Fi. The kill switch cuts internet access if the tunnel drops. None of the three is on by default, and a VPN judged on its default settings is being judged at its weakest.
The two things Surfshark leaves out
Port forwarding is absent, and the company frames that as a deliberate security choice rather than a missing feature, though seeders and some game hosts will feel it. The larger omission is IPv6. Surfshark does not support it, and its own Windows troubleshooting pages tell users to switch IPv6 off when connections fail, a detail that appears nowhere in the marketing and explains connection failures that otherwise look random on a modern home network.
The no-logs record and the parent-company question
Surfshark is registered in the Netherlands and runs its fleet on RAM-only servers, so a powered-down server keeps nothing. The Netherlands sits inside the wider European intelligence-sharing group, so it is the audit record rather than the address doing the reassuring here. The no-logs policy has been examined more than once by an independent Big Four auditor, with separate infrastructure security audits on top of that. Audits are snapshots rather than guarantees, but a company that repeats them builds a record it can be held to, which is more than much of the category offers. The other half of the trust question is ownership. Surfshark now sits under the same parent group as NordVPN while keeping separate infrastructure, teams, and roadmaps, and nothing about the app changed when that happened. It matters in one specific place: when you weigh the two head to head and treat them as independent rivals, because they are not.
Surfshark versus NordVPN, Proton VPN, and CyberGhost
NordVPN is the closest match on features and the steadier performer for streaming, but it caps simultaneous connections per plan, and the shared parent group means choosing between the two is no longer choosing between two independent companies. Proton VPN is the pick for anyone who wants a real free tier before paying, and its Swiss base and open-source apps suit users who want the privacy story readable rather than only audited. CyberGhost leans on preconfigured servers labelled by streaming service and by task, which helps people who would rather not pick a server, though its Linux support is command-line only where Surfshark ships a graphical app.
| Product | Simultaneous devices | Free tier | Jurisdiction |
|---|---|---|---|
| Surfshark | Unlimited | None | Netherlands |
| NordVPN | Capped per plan | None | Panama |
| Proton VPN | Capped per plan | Yes | Switzerland |
| CyberGhost | Capped per plan | None | Romania |
Surfshark wins for households and for anyone tired of counting devices, Proton VPN wins if you need to try a VPN without paying at all, and NordVPN wins if streaming reliability outranks device count.
Protocol choice and the speed you actually get
Some speed loss is normal on any VPN, and Surfshark documents that expectation openly instead of promising an invisible tunnel. WireGuard is the fast path, and the automatic setting does not always land on it. Distance costs more than anything else, and what degrades first on a far server is consistency rather than peak throughput. Four things are worth doing on the first run. Set Protocol to WireGuard instead of Automatic in the VPN settings, switch the kill switch on so a dropped tunnel cannot leak traffic, turn NoBorders on if restricted networks such as campus or office Wi-Fi are part of your week, and test two or three nearby locations rather than trusting the fastest-server button once.
The case for installing Surfshark, and when to skip it
If you have a house full of devices and want one audited VPN covering every one of them, Surfshark is worth the download; if you came looking for a free VPN, stop here, because nothing in the app works without a paid account. The people who get the least from it are seeders who need port forwarding and anyone whose priority is unblocking a niche streaming service, where NordVPN is steadier. For everyone else the unlimited device count is the reason Surfshark beats rivals that make you decide which gadgets deserve protecting.
