Our verdict
Our Surfshark review lands on a clear point: Surfshark is the VPN to choose when you want strong, independently checked privacy across every device in the house on a single subscription. It allows unlimited simultaneous connections, runs a network that it says is entirely RAM-only, has had its no-logs policy assessed twice by Deloitte, and publishes regular transparency reports. Its higher plans add an antivirus that AV-TEST has certified, data breach alerts and a data broker removal service. The weaknesses are commercial rather than technical: the monthly plan is expensive, long plans renew at a higher price than the introductory offer, and recurring payments are not refundable. For a household that wants one privacy tool for everyone, it is excellent value, provided you manage the renewal.
This is an editorial assessment based on Surfshark's own Trust Center, Terms of Service and plan pages, AV-TEST's published results for Surfshark Antivirus, and reviews from PCMag, Tom's Guide and CNET. NerdBible did not run its own connection or leak tests for this review, and any test results mentioned below belong to the outlet named.
What is Surfshark and who is it for?
Surfshark is a VPN and privacy service operated by Surfshark B.V., a company established in Amsterdam in the Netherlands. According to its Terms of Service, customer contracts are governed by the laws of the British Virgin Islands, where the company was originally registered before moving its headquarters. Surfshark merged with Nord Security, the owner of NordVPN, though both brands say they continue to operate independently with separate infrastructure.
A VPN encrypts the traffic between your device and the VPN server, which hides what you do from the local network and your internet provider and replaces your IP address with the server's. Surfshark suits people who use public Wi-Fi, families with many phones, laptops and tablets, and anyone who wants a privacy tool without counting device slots. It is not a tool for anonymity against a determined adversary, and no VPN makes illegal activity legal.
Key features
Unlimited devices
Surfshark states that one subscription can be used for unlimited simultaneous connections. That is its most distinctive feature, since many rivals cap a plan at a fixed number of devices.
Encryption, protocols and kill switch
Surfshark supports WireGuard, OpenVPN and IKEv2, and Tom's Guide reports that post-quantum encryption is now the default when using WireGuard. PCMag highlights Surfshark's own Dausos protocol, which Cure53 audited along with the infrastructure according to Surfshark's Trust Center. Surfshark's apps include a kill switch that cuts traffic if the encrypted connection drops.
Bypasser, MultiHop and other privacy tools
Bypasser is Surfshark's split tunnelling feature, letting you choose apps or sites that skip the VPN. CNET notes it is available on Windows, Android, macOS and iOS, which is wider support than many rivals manage. MultiHop routes traffic through two servers, and PCMag notes you can build your own pairings at the cost of speed. Rotating IP changes your address periodically during a session, and CleanWeb, included on every plan, blocks ads and trackers.
The wider One suite
Surfshark One adds Surfshark Antivirus with real-time protection and scheduled scans, Surfshark Alert for data breach notifications and scam protection. One+ adds Incogni, which asks data brokers to remove your personal information. Tom's Guide notes the antivirus engine is backed by Avira technology.
How much does Surfshark cost? Plans and pricing structure
Our page shows current prices from our own data. Structurally, Surfshark sells three plans. Starter includes the VPN, the ad and tracker blocker and Alternative ID, which generates alternative personal details and an email address for sign-ups. One adds the antivirus, Alert and scam protection. One+ adds Incogni. Each plan is offered on a one-month, twelve-month or twenty-four-month term, and the longer the term the lower the monthly equivalent. PCMag, Tom's Guide and CNET all single out the monthly plan as expensive and the increase on renewal as steep, so the long plans are where the value lies.
Is Surfshark safe? Audits, jurisdiction and lab results
No-logs audits
Surfshark's Trust Center lists two no-logs assurance engagements by Deloitte, with Deloitte's conclusion that Surfshark adheres to the commitments in its no-logs policy. The reports are available to customers in their Surfshark account. An assurance engagement is a point-in-time check of systems and processes, not a guarantee for every day afterwards, but two rounds by a Big Four firm is a stronger record than most VPNs can show.
Security assessments
The Trust Center also lists a Cure53 audit of Surfshark's infrastructure and Dausos protocol, an earlier Cure53 infrastructure study that found no significant concerns, a Cure53 audit of its browser extensions, and SecuRing assessments covering both its infrastructure and its web, desktop and mobile apps and browser extensions. Surfshark also runs a third-party bug bounty programme.
RAM-only servers and transparency
Surfshark says its servers are 100 percent RAM-only, so all data is wiped whenever a server reboots, and lists a network of more than 4,500 servers in 100 countries. It publishes a quarterly transparency report on data requests and a Digital Services Act report. On jurisdiction, Surfshark says Dutch law places no obligation on it to log or retain user data. CNET counts the Netherlands' membership of the Fourteen Eyes intelligence-sharing group as a downside; with an audited no-logs policy and RAM-only servers, there should be little user data to share, but privacy purists may still prefer a provider based outside that alliance.
Surfshark Antivirus in the lab
AV-TEST has tested Surfshark Antivirus on Windows several times. In the most recent round it scored the maximum 6 for protection and 6 for usability, but 4.5 for performance, enough for certification but not the TOP PRODUCT award it received in an earlier round. In short, the antivirus catches threats well but slowed the test machines more than the best suites.
Auto-renewal and refunds, as Surfshark states them
Surfshark's Terms of Service say paid services renew automatically at the end of each service period and charge your chosen payment method again unless you cancel automatic payments beforehand, which you can do at any time in your account or by contacting support. For subscriptions longer than one month, Surfshark says it will email you in advance of the renewal. The terms also say Surfshark may run a small pre-authorisation on your card before the period ends to check it is valid, reversed once verified.
The 30-day money-back guarantee applies only to your initial purchase and is limited to one refund per service. The terms state plainly that all recurring payments are non-refundable. Some purchases are excluded entirely, including those made through certain resellers, with prepaid or gift cards, the anonymous Dedicated IP option and Alternative ID purchases such as the Alternative Number feature. That is stricter than some antivirus vendors, so if you do not want to renew, switch auto-renewal off well before the date.
What other reviewers found
- PCMag gives Surfshark an Editors' Choice, crediting its server coverage and performance, a well-defined privacy policy, regular transparency reports and the Dausos protocol, with the high monthly price as its main complaint.
- Tom's Guide praises the stable, intuitive apps, post-quantum encryption by default and a versatile Bypasser, but recorded a minor kill switch issue under heavy testing without any IP leak, and objects to the size of the renewal increase and the lack of port forwarding.
- CNET scores it 8.6 out of 10, citing fast connections, unlimited devices, RAM-only servers and split tunnelling on all major platforms, while marking down the Fourteen Eyes jurisdiction and a renewal price increase.
- AV-TEST certified Surfshark Antivirus with full protection and usability scores in its latest round, but a lower performance score than in earlier rounds.
The reviewers agree on what Surfshark does well: device coverage, easy apps, speed and a privacy record built on audits and transparency reports. They also agree on the main drawback, which is pricing: monthly billing is poor value and renewals cost noticeably more. They differ on audit coverage. Tom's Guide argued that server infrastructure had not been specifically re-audited for some time, while Surfshark's Trust Center now lists newer infrastructure assessments by Cure53 and SecuRing, which suggests that criticism has since been addressed. CNET is the only one of the three to treat jurisdiction as a real negative. For a buyer, the consensus means Surfshark is a safe pick on privacy and features, and the decision mostly comes down to whether a long upfront term suits you.
What could be better
- Renewal pricing. Every major outlet flags the jump from introductory to renewal price.
- Refund terms. Only the first purchase is covered by the 30-day guarantee; renewals are non-refundable.
- Advanced settings. Tom's Guide notes there is no port forwarding and limited customisation for power users.
- Antivirus speed. AV-TEST's latest performance score for Surfshark Antivirus trails the best suites.
- Jurisdiction. A Dutch base inside the Fourteen Eyes alliance will not suit every privacy buyer, even with audited no-logs claims.
Who should choose something else
If you only need a VPN occasionally on one or two devices, a provider with a strong free tier or a cheaper short plan may be enough. If you need port forwarding or deep manual configuration, Tom's Guide's finding points you elsewhere. If jurisdiction outside the Fourteen Eyes alliance is a hard requirement, Surfshark's Dutch base rules it out regardless of its audits. And if you dislike committing to a long term, the monthly plan is expensive and the refund window covers only your first purchase, so a provider with more flexible billing may suit you better.
Is Surfshark worth it? The bottom line of our Surfshark review
For most households, yes. Surfshark combines unlimited devices, audited no-logs claims, RAM-only servers, a full set of privacy features and an optional security suite in one account, and the independent reviewers broadly agree it performs well. Its weak spots are the renewal price and the strict refund terms on recurring payments, both of which you can manage by choosing a long term and diarising the renewal. If you want one privacy subscription that covers everyone's devices without counting slots, it is one of the best value choices available.
Frequently asked questions
Is Surfshark safe to use?
Surfshark's no-logs policy has been assessed twice by Deloitte, its infrastructure and apps have been reviewed by Cure53 and SecuRing, and it says all servers run in RAM only, wiping data on every reboot. It also publishes quarterly transparency reports. No VPN can be proven perfect, but that is a stronger independent record than most consumer VPNs have.
How many devices can I use with Surfshark?
Surfshark says one subscription can be used for unlimited simultaneous connections, on all three plans. That means one account can cover every phone, tablet, laptop and desktop in a household. Most rival VPNs limit a subscription to a fixed number of devices, which is why Surfshark is often recommended for large families and people with many gadgets.
Does Surfshark renew automatically?
Yes. Surfshark's Terms of Service say paid plans renew automatically at the end of each period unless you cancel automatic payments first, which you can do at any time in your account or through support. For plans longer than one month, Surfshark says it emails you before the renewal. Renewal prices are usually higher than the introductory offer.
Can I get a refund from Surfshark?
Surfshark offers a 30-day money-back guarantee on your initial purchase, limited to one refund per service. Its terms state that all recurring payments are non-refundable, and some purchases are excluded, such as certain reseller or gift card orders and the anonymous Dedicated IP option. Cancel auto-renewal before the renewal date if you do not want to continue.
What is the difference between Surfshark Starter, One and One+?
Starter is the VPN with the ad and tracker blocker and Alternative ID. One adds Surfshark Antivirus, Alert data breach monitoring and scam protection. One+ adds Incogni, a service that asks data brokers to delete your personal information. All three plans include unlimited devices and come with the same 30-day money-back guarantee on the first purchase.