Surfshark is a relative newcomer in the VPN market when compared to some other competitors, launching in 2018. Despite its short history, it has gained a reputation for offering robust security features, unlimited device connections, and competitive pricing. Its headquarters in the Netherlands ensures adherence to the GDPR’s strict privacy regulations, further boosting its credibility in protecting user data.
Features
Unlimited Devices
Unlike many competitors, Surfshark allows unlimited simultaneous connections per subscription, making it a cost-effective choice for families or small teams.
Bypasser
Bypasser, also known as split tunneling, allows users to selectively route certain traffic outside the VPN tunnel. It works by defining IP ranges or specific applications that should bypass VPN encryption. This feature is particularly useful for accessing local services that may block VPN connections or require a direct ISP-assigned IP address. It operates on an inclusion or exclusion basis, allowing users to specify either what should go through the VPN or what should be excluded.
IP Rotator
IP Rotator enhances anonymity by changing the user’s exit IP address at predefined intervals without disconnecting from the VPN server. Unlike traditional VPN services that require reconnecting to obtain a new IP, Surfshark’s implementation dynamically assigns new IPs within the same server cluster. This prevents tracking techniques that rely on long-term IP association without affecting session continuity.
Dedicated IP
Dedicated IP assigns users a unique, static IP address that is reserved exclusively for them. Unlike traditional VPN IPs that are shared among multiple users, a dedicated IP minimizes CAPTCHA prompts and reduces the likelihood of being flagged by websites that impose restrictions on VPN traffic. Surfshark offers dedicated IPs in multiple locations, allowing users to maintain a consistent online identity while benefiting from encrypted traffic.
Static Servers
Static Servers provide a consistent, unchanging IP address that is shared among multiple users. Unlike dedicated IPs, these addresses remain fixed but are not tied to a single user. This can be beneficial for online services that require a stable IP while still maintaining the anonymity of shared usage.
Invisible to Devices
Invisible to Devices enhances local network security by disabling device discoverability on LAN networks. This is accomplished by modifying ARP (Address Resolution Protocol) responses and preventing the device from responding to local network queries. As a result, it remains hidden from other devices on the same Wi-Fi or Ethernet network, mitigating the risk of local attacks such as ARP spoofing or man-in-the-middle (MITM) attacks.
CleanWeb
CleanWeb is an advanced ad-blocking and anti-tracking tool integrated directly into Surfshark’s VPN application. It functions by filtering DNS requests, preventing ads, trackers, and known malicious domains from loading. The system relies on continuously updated blacklists and works at the network level, which means it can block threats across all apps and browsers, not just specific extensions. Unlike browser-based ad blockers, CleanWeb operates without consuming additional system resources or requiring manual updates.
Cookie Pop-up Blocker
A setting of CleanWeb, Cookie Pop-up Blocker suppresses consent pop-ups that websites display due to GDPR and other privacy regulations. It achieves this by injecting JavaScript into web pages, automatically handling or dismissing pop-ups without user interaction. This ensures a seamless browsing experience while reducing the risk of unintentionally accepting intrusive tracking policies.
MultiHop
Dynamic MultiHop allows users to route their connection through two VPN servers instead of one. Unlike traditional multi-hop configurations with predefined server pairs, Surfshark’s dynamic system lets users choose any two locations. This enhances privacy by adding an extra layer of encryption and making it significantly more difficult for adversaries to trace the connection path.
NoBorders Mode
NoBorders Mode detects restrictive networks and automatically applies configurations that optimize VPN connectivity in such environments. It works by analyzing connection attempts and identifying interference patterns indicative of government or ISP-level censorship. When activated, it provides a curated list of servers that are more likely to bypass restrictions, often leveraging obfuscated servers or alternative routing methods such as TCP-over-443.
Override GPS Location
Override GPS Location is a unique privacy feature designed for Android devices. It spoofs the device’s GPS coordinates to match the location of the connected VPN server. This is achieved by modifying system location services through mock GPS settings, ensuring that apps reliant on GPS data (such as ride-hailing services or social media) reflect the user’s virtual location rather than the actual one.
Alternative ID
Alternative ID is a privacy tool that generates a fictitious online identity, complete with a name, email address, and other personal details. It is designed to reduce tracking by preventing users from providing their real information when signing up for services. The generated identities are sourced from a database of realistic yet unique entries, ensuring they appear authentic.
Performance
Speed
Speed is a critical factor when choosing a VPN. Surfshark delivers consistent performance across its 3,200+ servers in 100 countries. Independent tests have shown minimal drops in download and upload speeds, making it a reliable choice for streaming, gaming, and torrenting.
Small Packets is an optimization feature that reduces the size of transmitted data packets. This improves performance on unstable networks, such as mobile connections or restrictive ISP setups, where large packets may be throttled or fragmented. By lowering packet size, Surfshark enhances reliability and reduces latency.
Streaming
Surfshark excels at unblocking major streaming platforms like Netflix, Hulu, and Disney+. Its Smart DNS feature further enhances compatibility with devices that don’t natively support VPNs, such as smart TVs and gaming consoles.
Smart DNS is a DNS proxy service that enables users to access geo-restricted content on devices that do not support VPN apps, such as smart TVs and gaming consoles. Instead of encrypting traffic, Smart DNS reroutes DNS queries through Surfshark’s servers located in the desired region. This allows for unblocking streaming services without affecting general internet speeds, as there is no encryption overhead.
Privacy and Security
No-Logs Policy
Surfshark’s no-logs policy ensures that your online activities are never tracked or stored. This claim is backed by an independent audit conducted by Cure53, a renowned cybersecurity firm.
Encryption
Using AES-256-GCM encryption and support for WireGuard, OpenVPN, and IKEv2/IPSec protocols, Surfshark provides state-of-the-art security.
Protocol Selection allows users to choose from multiple VPN protocols, including WireGuard, IKEv2, and OpenVPN. WireGuard is the most modern option, offering high-speed performance with a lean codebase and ChaCha20 encryption. IKEv2 provides fast reconnections and stability, particularly on mobile networks. OpenVPN is a widely adopted standard that supports both UDP and TCP modes, making it versatile for various network conditions.
Kill Switch
Kill Switch is a critical security feature that monitors the VPN connection status in real time. If the VPN connection drops due to network instability or server issues, the Kill Switch automatically severs all internet connectivity to prevent unencrypted data from being transmitted. It operates at the system level, ensuring that no applications can bypass it. Surfshark offers both software-based and firewall-based Kill Switch implementations, with the latter providing a more robust failsafe by modifying system firewall rules.
Pause VPN
Pause VPN temporarily disables the VPN tunnel for a user-specified period (5, 30, or 120 minutes) while ensuring automatic reconnection afterward. This feature is implemented to prevent users from having to manually disconnect and risk forgetting to re-enable the VPN. It works by suspending the encryption process while preserving the session parameters for seamless reactivation.
Jurisdiction
Based in the Netherlands, Surfshark is outside the jurisdiction of the 14 Eyes Alliance, providing an additional layer of data privacy.
Pricing and Plans
Surfshark offers several plans that vary in price depending on features and duration. The best value is purchasing a Surfshark One Suite.
Surfshark One is a cybersecurity suite that extends beyond VPN functionality. It includes Antivirus for malware and ransomware protection, Alert for real-time monitoring of data breaches involving the user’s personal information, and Search, a private search engine that does not track queries. The antivirus component utilizes behavior-based detection and real-time cloud scanning, ensuring up-to-date protection against emerging threats.
Surfshark Starter Plan
- 2-Year Plan: $2.19 per month, billed one-time at $59.13
- 1-Year Plan: $3.19 per month, billed one-time at $47.85
- 1-Month Plan: $15.45 per month
Surfshark One Plan
- 2-Year Plan: $2.69 per month, billed one-time at $72.63
- 1-Year Plan: $3.39 per month, billed one-time at $50.85
- 1-Month Plan: $17.95 per month
Surfshark One+ Plan
- 2-Year Plan: $4.29 per month, billed one-time at $115.83
- 1-Year Plan: $6.09 per month, billed one-time at $91.35
- 1-Month Plan: $20.65 per month
Customer Support
Surfshark offers 24/7 customer support through live chat and email. The support team is responsive, knowledgeable, and able to resolve most issues promptly.
Summary
Surfshark combines robust security, exceptional value, and a feature-rich platform to meet the needs of most VPN users. While it may not be as fast as some premium competitors, its affordability, no-logs policy, and unlimited device connections make it a strong contender in the market.
If you’re looking for a VPN that balances performance, security, and value, Surfshark is worth considering. With its 30-day money-back guarantee, you can try it risk-free to see if it meets your needs.
James (J.T.) Moore
Systems Engineer and Lead Analyst