Best VPN for Journalists

Published March 2026 · Last updated March 2026

Mullvad is the best VPN for journalists. It keeps no logs, accepts cash and cryptocurrency for anonymous payment, uses the fast WireGuard protocol, and has been independently audited. But a VPN is not anonymity. It hides your traffic from your ISP and local network — nothing more. For actual anonymity, you need Tor. This guide explains when you need each and what to avoid.

What a VPN does (and doesn't do)

A VPN creates an encrypted tunnel between your device and a server operated by the VPN provider. Your ISP sees that you connected to the VPN server but cannot see which websites you visit. The websites you visit see the VPN server's IP address instead of yours.

A VPN does:

  • Encrypt traffic between your device and the VPN server
  • Hide your browsing from your ISP, employer, or Wi-Fi operator
  • Mask your IP address from websites you visit
  • Bypass geographic content restrictions and censorship

A VPN does not:

  • Make you anonymous (the VPN provider can see your traffic)
  • Protect you from malware or phishing
  • Prevent tracking via cookies, browser fingerprinting, or account logins
  • Replace the need for HTTPS (though most sites use it now)

When journalists need a VPN

Use a VPN in these situations:

  • Public or hotel Wi-Fi. Anyone on the network can potentially monitor traffic. A VPN encrypts everything.
  • Researching sensitive topics. Your ISP logs which domains you visit. If you're investigating a local utility, your ISP (which may be the same company) shouldn't see that research.
  • Working in countries with surveillance. Some countries monitor, filter, or block internet access. A VPN bypasses censorship and hides your activity from local ISPs.
  • Preventing IP-based identification. If you're researching a subject who monitors their own server logs, a VPN prevents them from seeing your real IP address.

VPN vs Tor

Feature VPN (Mullvad) Tor Browser
Purpose Privacy from local network Anonymity from everyone
Trust model Trust the VPN provider Trust no single entity
Speed Fast (5-15% overhead) Slow (3 relay hops)
Cost $5.50/month Free
Protects all apps Yes (system-wide) Browser only (unless using Tails)
Blocked by some sites Rarely Often
Best for Daily privacy, public Wi-Fi Anonymous research, high-risk work

Use a VPN for everyday work when you want privacy from your local network. Use Tor when the person or organization you're researching could identify you through your IP, or when you're handling information where anonymity is critical.

Our recommendations

Best VPN for journalists

Mullvad VPN — $5.50/month. No email required to sign up — you get a random account number. Accepts cash (mail an envelope) and cryptocurrency for fully anonymous payment. Uses WireGuard and OpenVPN protocols. Independently audited by Cure53 and Assured AB. Based in Sweden. Mullvad's servers were seized by police in 2023 and contained no user data — the no-logs policy held under real-world pressure.

Self-hosted option for newsrooms

Outline VPN (Jigsaw) — Free, open-source VPN server you run yourself. Created by Jigsaw (a Google subsidiary focused on press freedom). Deploy on any cloud server in minutes. Your newsroom controls the server, so there's no third party to trust. Good for teams working in censored environments.

For anonymity (not a VPN)

Tor Browser — Free. Routes traffic through three independent relays. No single point of trust. Use for anonymous research, accessing .onion sites (like SecureDrop instances), and situations where a VPN isn't enough. Slower but provides actual anonymity rather than just privacy.

What to avoid

The VPN market is full of products that undermine the privacy they claim to provide.

  • Free VPNs. If you're not paying, your data is the product. Hola VPN sold users' bandwidth. Many free VPNs log and sell browsing data. Some inject ads into your traffic.
  • VPNs that claim "military-grade encryption." Marketing buzzword. Look for specific protocol support (WireGuard, OpenVPN) and independent audits.
  • VPNs based in 14 Eyes countries (US, UK, Canada, Australia, New Zealand, and EU members) may be subject to data-sharing agreements. Mullvad (Sweden) is in this group but mitigates it by keeping no logs — nothing to share. The logging policy matters more than jurisdiction.
  • VPNs that require personal information. If a VPN needs your name, email, and credit card, it has data it can be compelled to hand over. Mullvad's account-number system avoids this.
  • Browser-only VPNs and proxy extensions. These protect only browser traffic, not other applications. They're often proxies, not encrypted VPN tunnels.

Setup guide

Mullvad VPN

  1. Go to mullvad.net and click "Generate account." You'll get a 16-digit account number. Save it in your password manager.
  2. Add time to your account. For maximum privacy, mail cash to Mullvad's address in Sweden, or pay with cryptocurrency. Credit card works too but links your identity.
  3. Download the Mullvad app for your platform. It's available for Windows, macOS, Linux, iOS, and Android.
  4. Enter your account number and connect. The app defaults to WireGuard, which is the fastest protocol.
  5. Enable "Always require VPN" in settings to prevent traffic leaks when the VPN disconnects.

Outline VPN (self-hosted)

  1. Set up a cloud server (DigitalOcean, AWS, or any VPS provider). $5-6/month for a basic instance.
  2. Install the Outline Manager on your computer and follow the setup wizard to deploy the server.
  3. Generate access keys for your team. Each key is a unique connection credential.
  4. Team members install the Outline client and enter their access key. One click to connect.

Frequently asked questions

Do I need a VPN as a journalist?

Yes, in specific situations: on public or hotel Wi-Fi, when researching sensitive topics from your home or office network, when working in countries with internet surveillance or censorship, and when you don't want your ISP to log which sites you visit. A VPN is not a general-purpose security tool — it solves specific problems related to network-level surveillance.

Is a free VPN safe for journalism?

Almost never. Free VPNs need revenue, and most get it by logging and selling your browsing data — exactly the data you're trying to protect. Some inject ads. Some have been caught selling bandwidth (Hola VPN). Some are operated by companies with ties to governments known for surveillance. Pay for a reputable VPN like Mullvad, or use Tor for free anonymity.

What's the difference between a VPN and Tor?

A VPN encrypts your traffic and routes it through one server operated by the VPN company. You trust the VPN provider not to log. Tor routes your traffic through three independent relays run by volunteers — no single relay sees both who you are and what you're accessing. Tor provides anonymity; a VPN provides privacy from your local network. Use a VPN for everyday privacy, Tor when you need anonymity.

Can I use a VPN and Tor together?

You can, but it's usually unnecessary and can reduce anonymity. Connecting to a VPN before Tor (VPN → Tor) hides Tor usage from your ISP but adds a fixed entry point. Connecting to Tor before a VPN (Tor → VPN) is complex and rarely needed. For most journalists, use one or the other based on your threat model.

Will a VPN protect me from government surveillance?

A VPN protects your traffic from your ISP and local network observers. It does not protect you from a government that compels the VPN provider to log traffic, from malware on your device, from browser fingerprinting, or from services that identify you through logins. For state-level threats, use Tor or Tails OS, not just a VPN.

What about the VPN built into my browser?

Browser-based VPNs (Opera, some Chrome extensions) typically only encrypt browser traffic, not other applications. Many are proxies, not true VPNs. Some log data or are run by companies with poor privacy records. Use a standalone VPN application like Mullvad that encrypts all traffic from your device.

Does a VPN slow down my internet?

Yes, but modern VPNs like Mullvad using the WireGuard protocol have minimal overhead — typically 5-15% speed reduction. Tor is significantly slower because traffic passes through three relays. For most journalism work (research, email, messaging), VPN speed impact is negligible.