Surfshark Review

Surfshark launched in 2018 — one of the newest major VPN brands — and within six years built itself into the second most purchased consumer VPN in the world. It did this not by matching NordVPN or ExpressVPN feature-for-feature, but by identifying the single most underserved gap in the market: unlimited simultaneous device connections at a genuinely low price. No other major provider with a verified audit record offers this. That one decision shapes everything about Surfshark’s product strategy and makes it the correct choice for a specific, large group of users.

This review covers Surfshark as a standalone product in 2026 — what the three subscription tiers actually contain, what the new Dausos protocol delivers, where the Nexus network architecture creates real advantages, and where Surfshark has genuine limitations that are often glossed over in competitor comparisons. If you want a direct head-to-head with NordVPN, see our NordVPN vs Surfshark comparison. For the full three-way premium comparison, see ExpressVPN vs NordVPN vs Surfshark. This article answers a different question: is Surfshark worth your money on its own terms?

Surfshark at a Glance

Feature	Surfshark (2026)
Founded	2018
Jurisdiction	Netherlands — Nine Eyes member ⚠️
Parent company	Nord Security (also owns NordVPN) ⚠️
Server count	3,200+ servers in 100 countries — all 10Gbps
Primary protocol	WireGuard (default) + Dausos (proprietary, 2026)
Other protocols	OpenVPN (UDP/TCP), IKEv2
Encryption standard	AES-256-GCM (OpenVPN/IKEv2) / ChaCha20 (WireGuard)
RAM-only servers	✅ Full network — 10Gbps throughput per server
No-logs audit	✅ Deloitte (2025) + Cure53 infrastructure audit
Kill switch	✅ Available all platforms — top-level toggle
Simultaneous devices	✅ Unlimited — no cap on any plan
Split tunneling (Bypasser)	✅ Windows, macOS, and Android
Port forwarding	❌ Not supported
Dynamic MultiHop	✅ Custom entry/exit country combinations
Nexus IP rotation	✅ Mid-session IP change without disconnecting
Camouflage Mode	✅ Auto-activates on OpenVPN — obfuscates VPN traffic
NoBorders Mode	✅ Optimised routing for restricted networks
CleanWeb 2.0	✅ Ad, tracker, malware + cookie pop-up blocking
Alternative ID	✅ Generates fake online identity and email alias
GPS spoofing (Android)	✅ Overrides device GPS to match server location
Post-quantum encryption	✅ WireGuard and Dausos (2026)
SmartDNS	❌ Discontinued February 2026
Free tier	✅ 7-day trial (all devices)
Intro price (2-year Starter)	$2.49/mo ($69.72 upfront for 28 months)
Renewal rate	$99.95/yr ⚠️
Money-back guarantee	30 days

What’s New in Surfshark in 2026

Several meaningful updates shipped in 2026 that change the product’s competitive position — worth knowing before evaluating whether the current version justifies the subscription:

• Dausos protocol (April 2026): Surfshark’s proprietary protocol, unveiled in April 2026, is designed to deliver faster speeds and stronger quantum-secure protection than WireGuard by assigning a dedicated encrypted tunnel per user rather than sharing tunnel infrastructure. In early independent testing Dausos shows speed improvements on macOS specifically. It is the most significant protocol development Surfshark has shipped since adopting WireGuard.
• Post-quantum encryption on WireGuard (early 2026): Post-quantum cryptographic protection rolled out for WireGuard connections across all platforms — protecting against future quantum computing threats to current encryption standards. Now also available on Dausos.
• CleanWeb 2.0 cookie pop-up blocking (2026 update): CleanWeb now blocks cookie consent pop-ups in addition to its existing ad, tracker, and malware domain blocking — a practically useful daily browsing addition that no direct competitor currently offers as a built-in VPN feature.
• SmartDNS discontinued (February 2026): Surfshark removed SmartDNS in February 2026. This matters specifically for users with smart TVs or gaming consoles that cannot run VPN apps natively — SmartDNS was previously the easiest workaround for these devices. Surfshark now relies on dedicated Amazon Fire TV and Apple TV apps, plus router installation, for non-VPN-capable devices.
• All servers upgraded to 10Gbps: Surfshark upgraded its entire server fleet from 1Gbps to 10Gbps capacity — each server can now handle significantly more simultaneous traffic without congestion-related speed degradation.
• Second Deloitte no-logs audit (2025, effective 2026): A second independent Deloitte verification confirmed no-logs compliance, strengthening the audit record from a single verification to a repeated one.

The Nexus Network Architecture: What It Actually Does

Nexus is Surfshark’s proprietary software-defined networking layer — a routing infrastructure built across the entire server fleet that enables three capabilities no other major provider currently offers simultaneously:

• Dynamic MultiHop: Routes traffic through two VPN servers in different countries of your choosing. Unlike NordVPN’s Double VPN which uses fixed server pairs, Surfshark’s Dynamic MultiHop lets you select any entry and exit country combination from the full server list — for example, connecting through a UK entry server to a US exit server, or a Netherlands entry to a Japan exit. The flexibility means you can minimise the speed penalty by choosing geographically closer server pairs rather than being locked into pre-determined combinations.
• IP Rotator: Automatically changes your visible IP address at configurable time intervals without disconnecting your VPN session — your connection stays active while your apparent IP address cycles. This defeats tracking systems that monitor IP consistency across sessions without requiring you to manually reconnect. NordVPN does not offer equivalent mid-session IP rotation.
• IP Randomizer: Assigns a different IP address on every new website visit within the same VPN session — providing session-level IP variation rather than just timed rotation. Useful for users who want to prevent cross-site tracking even within a single browsing session.

These three Nexus-enabled features are available on all plans at no additional cost — they are not locked to higher tiers. For users who value mid-session privacy beyond what a standard VPN IP masking provides, Nexus is a genuinely differentiated capability.

Speed Performance

Surfshark’s 10Gbps server infrastructure upgrade in 2026 produced measurable speed improvements across independent testing. On WireGuard, Surfshark consistently achieves 90–95% speed retention of base connection on nearby servers — among the best in the consumer VPN market and comparable to NordVPN on local connections.

Test Scenario	Surfshark Result	Verdict
Nearby server — WireGuard	750–850 Mbps	✅ Excellent — barely noticeable on most connections
Nearby server — Dausos	Testing ongoing — early results promising	⚠️ New protocol — independent data limited
Transatlantic (US–Europe)	400–500 Mbps	⚠️ Behind NordVPN (600+ Mbps) but ahead of ExpressVPN (300–350 Mbps)
Speed retention (WireGuard)	90–95%	✅ Industry-leading on local servers
Latency overhead (nearby)	12–15ms	⚠️ Adequate for casual gaming — NordVPN (4–7ms) leads for competitive play
macOS — Dausos protocol	Up to 30% faster than WireGuard	✅ Notable macOS-specific advantage

For users on connections below 400 Mbps, Surfshark and NordVPN are effectively indistinguishable in daily use — both deliver the full available bandwidth. The transatlantic gap (Surfshark at 400–500 Mbps versus NordVPN’s 600+ Mbps) is meaningful primarily for gigabit connections and intercontinental routing. For the full gaming latency comparison and what the 12–15ms overhead means in competitive play, see our Best Gaming VPN Guide.

Privacy and Security

Jurisdiction: Netherlands

Surfshark is registered in the Netherlands — an EU member state and a Nine Eyes intelligence-sharing participant. This is the most frequently raised concern about Surfshark’s privacy credentials and deserves an honest assessment rather than dismissal.

The Netherlands does not currently have mandatory VPN-specific data retention laws, and Surfshark’s verified no-logs policy means there is no useful data to hand over even under a valid legal request. In practice, for the vast majority of consumer use cases — streaming, public Wi-Fi protection, everyday privacy — Netherlands jurisdiction presents no meaningful privacy risk. The distinction matters primarily for users with threat models that include state-level surveillance or situations where a legal order could compel cooperation from a European provider: in those cases, Panama (NordVPN) or Switzerland (Proton VPN) provide stronger legal insulation. For a full jurisdictional framework, see our VPN for Privacy and Anonymity Guide.

Nord Security Shared Ownership

Surfshark is owned by Nord Security, which also owns NordVPN following a February 2022 acquisition. Both products operate as entirely separate services with independent privacy policies, separate audit records, and separate server networks. The shared parent company is relevant context for users who require full provider independence in their privacy model — a legal compulsion at the Nord Security corporate level could theoretically affect both brands simultaneously. For most users this is not a practical concern. For privacy-critical users who want genuinely independent ownership, ExpressVPN (independently owned) or Proton VPN (independently operated) are alternatives.

No-Logs Policy: Two Independent Verifications

Surfshark’s no-logs policy has been independently verified twice — a Cure53 infrastructure audit confirming the server architecture, and a Deloitte no-logs audit in 2025 confirming no browsing history, IP addresses, DNS queries, bandwidth usage, or connection timestamps are stored in identifiable form. This is a meaningful and credible audit record — more recent verifications than some competitors, though fewer total audit cycles than NordVPN’s six. One important clarification: Surfshark temporarily logs IP addresses during active sessions for the purpose of enforcing its simultaneous connection policy (now unlimited) and detecting abuse. These session-level logs are not retained after disconnection and are not covered by the no-logs claim’s scope of long-term data retention.

Server Infrastructure: 10Gbps RAM-Only Network

Surfshark’s entire 3,200+ server fleet runs on RAM-only diskless hardware — data is wiped on every power cycle or reboot, leaving nothing recoverable under physical seizure. The 2026 upgrade to 10Gbps capacity per server is a meaningful infrastructure investment: at 10Gbps each server can handle significantly more simultaneous traffic before congestion affects individual user speeds, which directly benefits the unlimited device connection model — more devices connecting through the same infrastructure without degradation.

Encryption, Protocols and Security Features

• WireGuard: Default protocol — delivers 90–95% speed retention with ChaCha20 encryption and post-quantum protection as of early 2026.
• Dausos (April 2026): Surfshark’s proprietary protocol — dedicated per-user encrypted tunnel, post-quantum by design, with particularly strong performance improvements on macOS. Early-stage independent data is limited; Surfshark’s own benchmarks show significant speed improvements but third-party verification is still emerging.
• OpenVPN (UDP/TCP): Available for network compatibility and router use. Camouflage Mode automatically activates on OpenVPN connections, obfuscating VPN traffic signature.
• IKEv2: Available on iOS and macOS — fast mobile reconnection with good battery efficiency.
• Kill switch: ✅ Available across all platforms as a top-level toggle — easier to locate than CyberGhost’s buried implementation. Verified to block all traffic on forced-disconnect scenarios.
• DNS / IPv6 / WebRTC leak protection: ✅ All active across platforms.
• Split tunneling (Bypasser): Available on Windows, macOS, and Android — a meaningful advantage over NordVPN which does not support split tunneling on macOS. Allows per-app or per-website routing rules.
• Camouflage Mode: Auto-activates when OpenVPN is selected — disguises VPN traffic as ordinary HTTPS. Separate from NoBorders Mode.
• NoBorders Mode: Activates automatically when Surfshark detects a restrictive network environment — optimises server routing for censored or filtered connections.

Unique Privacy Features: Alternative ID and GPS Spoofing

Two Surfshark features have no equivalent from NordVPN or ExpressVPN and are worth explaining in detail:

• Alternative ID: Generates a complete fake online identity — name, date of birth, and a functional email alias that forwards to your real address. When a website requires registration, you use the Alternative ID details rather than your real information. This extends privacy beyond connection-level IP masking to identity-level data protection — your real email address is never exposed to the registering site. Available on Starter and higher plans.
• GPS Spoofing (Android): Overrides your Android device’s GPS coordinates to match the VPN server’s geographic location. Location-based mobile apps and games that verify GPS position alongside IP address — a common anti-VPN detection method — see a consistent location rather than a mismatch between your IP location and GPS location. Not available from NordVPN or ExpressVPN. Available on Android only.

Streaming Performance

Platform	Status	Notes
Netflix US	✅ Verified	Consistent first-attempt access
Netflix (other regions)	✅ 16+ libraries	UK, JP, AU, DE, FR and others confirmed
BBC iPlayer	✅ Verified	UK servers — consistent access
Disney+	✅ Verified	Multiple regions confirmed
Amazon Prime Video	✅ Verified	US and UK libraries
Hulu	✅ Verified	US library confirmed

Surfshark reliably unblocks all major streaming platforms and 16+ Netflix regional libraries. There is no labeled streaming server system like CyberGhost’s — you select a country server rather than a platform-specific labeled node. In practice this adds minimal friction since standard country servers work reliably. The SmartDNS discontinuation in February 2026 is the one meaningful streaming regression: smart TVs and consoles that cannot run VPN apps natively no longer have a quick DNS-level solution. Surfshark’s workaround is dedicated Amazon Fire TV and Apple TV apps, plus router-level installation for other devices. For a full platform-by-platform streaming comparison across all major providers, see our Best VPN for Netflix Guide.

Torrenting and P2P

Surfshark supports P2P torrenting on all servers — there are no dedicated P2P-only nodes, which means you do not need to filter or select a separate server category before starting a torrent client. The kill switch and DNS leak protection remain active during all P2P sessions. In testing, downloading 4GB of non-copyrighted content took approximately 5% longer than without the VPN — one of the lowest overhead results recorded for any VPN in P2P testing. Port forwarding is not supported, which limits maximum seeding efficiency for users who need inbound peer connections at scale. For port forwarding capable providers and configuration guides, see our VPN Port Forwarding Guide.

Gaming Performance

Surfshark adds approximately 12–15ms of latency overhead on nearby servers — acceptable for casual and cooperative play but behind NordVPN’s 4–7ms for competitive titles where every millisecond registers. The Bypasser split tunneling feature on Windows is particularly useful for gaming: route only your game executable through the VPN for DDoS protection while keeping voice chat and other traffic on the direct connection, eliminating the latency overhead entirely for those applications. Console gaming works via router installation — SmartDNS was discontinued in February 2026, so DNS-only console setup is no longer available. Port forwarding is not supported, meaning Strict NAT type issues in peer-to-peer titles cannot be resolved through Surfshark. For the full gaming VPN comparison including NAT type solutions, see our Best Gaming VPN Guide.

Censorship Bypass

Surfshark’s Camouflage Mode (OpenVPN-based obfuscation) and NoBorders Mode handle most restrictive network environments reliably — hotel networks, university connections, corporate firewalls, and most ISP-level VPN filtering. In China, performance is more variable: Surfshark works in China but user reports are more mixed than for ExpressVPN, which has a stronger and more consistent track record specifically behind China’s Great Firewall. The new Dausos protocol may improve this — its dedicated per-user tunnel design is inherently harder to fingerprint than shared tunnel architectures — but independent China-specific testing data for Dausos is not yet available. NoBorders Mode activates automatically when Surfshark detects restrictive network conditions, removing the manual obfuscation selection step that NordVPN requires. For the full legal context of VPN use in China and other restricted environments, see our Is Using a VPN Legal? guide.

Device Compatibility and Apps

• Windows: ✅ Full-featured — WireGuard, Dausos, Bypasser split tunneling, Nexus features, CleanWeb 2.0, Dynamic MultiHop
• macOS: ✅ Full-featured including Bypasser split tunneling — a meaningful advantage over NordVPN which lacks macOS split tunneling. Dausos delivers up to 30% speed improvement on macOS specifically.
• iOS: ✅ Full app — clean interface, kill switch via Network Extension, Bypasser available
• Android: ✅ Full-featured including GPS spoofing and split tunneling — 7-day free trial available
• Linux: ✅ GUI app available — a genuine advantage over CyberGhost’s command-line only Linux support
• Browser extensions: ✅ Chrome, Firefox, and Edge — proxy-level with CleanWeb and Alternative ID integration
• Router: ✅ Manual WireGuard and OpenVPN configuration — no dedicated router firmware. For UK-specific router setup, see our VPN Router UK Guide.
• Amazon Fire TV: ✅ Dedicated native app
• Apple TV: ✅ Dedicated native app (replaces SmartDNS for Apple TV users)
• Simultaneous connections: Unlimited — no cap on any plan

Surfshark’s app design is consistently clean and modern across all platforms — the main screen presents the essential connect button, server list, and active feature toggles without requiring deep navigation into settings menus. The 2026 interface is an improvement on earlier versions, with Nexus features and MultiHop more prominently accessible. The Linux GUI app is worth highlighting specifically — most competitors offer Linux command-line only, making Surfshark the more accessible choice for Linux users who prefer a visual interface.

Subscription Plans: Understanding the Three Tiers

Surfshark restructured its plan lineup in 2026 into three tiers. Understanding what each includes prevents paying for features you do not need:

Feature	Starter	One	One+
Full VPN (WireGuard, Dausos)	✅	✅	✅
Unlimited devices	✅	✅	✅
CleanWeb 2.0	✅	✅	✅
Alternative ID	✅	✅	✅
Nexus (MultiHop, IP Rotator)	✅	✅	✅
Antivirus	❌	✅	✅
Search (private search engine)	❌	✅	✅
Alert (data breach monitoring)	❌	✅	✅
Incogni (data broker removal)	❌	❌	✅
Identity theft coverage (US)	❌	❌	✅
2-year intro price	$2.49/mo	$2.79/mo	$4.49/mo
Renewal rate	$99.95/yr	~$107.88/yr	~$179.88/yr

For most users, Starter provides every core VPN capability including unlimited devices, CleanWeb 2.0, Alternative ID, and the full Nexus feature set. The One plan at $2.79/mo adds antivirus and data breach monitoring — worth the $0.30/mo premium only if you would otherwise pay for antivirus separately. One+ adds Incogni’s data broker removal service — a genuinely useful addition for US users concerned about personal data exposed to data brokers, but a niche requirement for most subscribers.

The most important pricing detail is the renewal rate: Starter’s $2.49/mo introductory price renews at $99.95/yr ($8.33/mo effective) — more than triple the introductory rate. Set a calendar reminder 30 days before your term ends and cancel and resubscribe at the promotional rate rather than allowing auto-renewal. Both ExpressVPN and Surfshark share the same $99.95/yr renewal rate — meaningfully lower than NordVPN’s $139.08/yr. For a full pricing comparison across 21 providers, see our VPN Price Comparison Guide.

Surfshark: Pros and Cons

Pros

• Unlimited simultaneous device connections on every plan — the single most impactful differentiator. No cap on any plan means one subscription covers an entire household regardless of device count. Two people splitting a 2-year Starter plan pay $1.25/mo each — lower than any individual audited VPN subscription available.
• macOS split tunneling (Bypasser) — routes specific apps through the VPN while keeping others on the direct connection. NordVPN does not offer this on macOS, making Surfshark the stronger choice for Mac users who need granular routing control.
• Dausos protocol (April 2026) — Surfshark’s proprietary post-quantum-native protocol with a dedicated per-user tunnel design. The most significant protocol development in Surfshark’s history and a genuine forward-looking investment.
• Dynamic MultiHop with custom server pairs — choose any entry and exit country combination rather than fixed pairs, minimising speed penalty and maximising routing flexibility versus NordVPN’s fixed Double VPN configurations.
• Nexus IP rotation without disconnecting — mid-session IP address cycling is unique among major providers. Useful for extended browsing sessions where IP consistency-based tracking is a concern.
• GPS spoofing on Android — defeats location-based app tracking that bypasses IP-only VPN masking. Not available from NordVPN or ExpressVPN.
• Linux GUI app — accessible visual interface for Linux users versus CyberGhost’s command-line only approach.
• $99.95/yr renewal rate — $39/yr lower than NordVPN’s renewal, saving approximately $53 over three years for users who manage renewal dates.

Cons

• Netherlands jurisdiction (Nine Eyes) — the most significant privacy caveat. Dutch law and Nine Eyes membership create higher theoretical legal exposure than NordVPN’s Panama or Proton VPN’s Switzerland for users with adversarial threat models.
• Shared parent company with NordVPN — Nord Security owns both brands. Relevant for users who require strict provider independence.
• No port forwarding — limits torrent seeding efficiency and prevents Open NAT resolution for peer-to-peer gaming. Proton VPN and PIA are alternatives.
• SmartDNS discontinued (February 2026) — removes the easiest DNS-level workaround for smart TVs and consoles that cannot run VPN apps natively. Router installation now required for full non-app device coverage.
• Fewer audit verifications than NordVPN — two independent verifications versus NordVPN’s six. Credible but less frequently tested.
• Long-distance speed trails NordVPN — 400–500 Mbps transatlantic versus NordVPN’s 600+ Mbps on comparable routes. Relevant for gigabit connections and intercontinental routing.
• Renewal price more than triples the introductory rate — $2.49/mo introductory renews at $8.33/mo effective ($99.95/yr). Requires proactive management to avoid the auto-renewal premium.
• Dausos third-party data limited — as of mid-2026 independent validation of Dausos speed and security claims is still emerging. Surfshark’s own benchmarks are positive but buyer-controlled testing of a brand new proprietary protocol should be approached with normal scepticism.

How Surfshark Compares to the Top Providers

Category	Surfshark	NordVPN	ExpressVPN	Proton VPN
Speed (nearby)	750–850 Mbps	950+ Mbps ✅	~898 Mbps	430–870 Mbps
Jurisdiction	Netherlands ⚠️	Panama ✅	BVI ✅	Switzerland ✅
Audit record	Deloitte + Cure53	6 verifications ✅	KPMG + PwC + SOC 2	Securitum
Devices	Unlimited ✅	10	8	10
macOS split tunneling	✅ Yes	❌ No	✅ Yes	✅ Yes
Port forwarding	❌ No	❌ No	❌ No	✅ Yes
GPS spoofing	✅ Android	❌ No	❌ No	❌ No
IP rotation	✅ Nexus	❌ No	✅ ShuffleIP	❌ No
Free tier	7-day trial ✅	3-day (Android)	7-day (mobile)	✅ Permanent free tier
Intro price (2yr)	$2.49/mo ✅	$3.49/mo	$2.79/mo	$2.99/mo
Renewal rate	$99.95/yr ✅	$139.08/yr ⚠️	$99.95/yr ✅	$119.88/yr

Who Should Use Surfshark?

Surfshark is the strongest choice for households and multi-device users — the unlimited simultaneous connections model means one subscription genuinely covers every device in your home with no counting, no juggling, and no premium for additional devices. Two people splitting a 2-year Starter plan pay $1.25/mo each. It is also the correct choice for macOS users who need split tunneling (NordVPN does not offer this), Android users who need GPS spoofing for location-based app privacy, users who value mid-session IP rotation for advanced tracking prevention, and budget-conscious subscribers who want the lowest available price from a Deloitte-audited provider.

Surfshark is not the right choice for users with adversarial privacy threat models where Netherlands jurisdiction is a meaningful concern (use Proton VPN or NordVPN), users who need port forwarding for P2P seeding or Open NAT gaming (use Proton VPN or PIA), users who need the most reliable access in China (use ExpressVPN), or users who want the most comprehensive independent audit record (NordVPN’s six verifications). For the full budget VPN landscape see our Best Cheap VPN Guide, and for a broader market overview see our Best VPN 2026 Guide.

Frequently Asked Questions

Is Surfshark safe to use in 2026?

Yes — Surfshark is a legitimate and well-verified VPN with two independent audits (Deloitte and Cure53), RAM-only 10Gbps server infrastructure, AES-256 and post-quantum encryption, and a meaningful feature set. The two privacy caveats worth knowing: Netherlands jurisdiction (Nine Eyes member) and shared corporate ownership with NordVPN under Nord Security. For everyday streaming, multi-device household protection, and public Wi-Fi security these do not present practical risks. For users with demanding threat models involving state-level surveillance, NordVPN’s Panama registration or Proton VPN’s Swiss jurisdiction provide stronger legal insulation. See our VPN for Privacy and Anonymity Guide.

Does Surfshark keep logs?

No long-term logs — Surfshark does not retain browsing history, IP addresses, DNS queries, bandwidth usage, or connection timestamps in identifiable form, verified by both Deloitte (2025) and Cure53 audits. One clarification: Surfshark temporarily holds session-level IP address data during active connections for abuse detection purposes. This session data is not retained after disconnection and is not within the scope of the no-logs claim’s long-term data retention prohibition. For casual users this is not a meaningful concern; for the highest-sensitivity use cases it is worth knowing.

Does Surfshark work with Netflix?

Yes — Surfshark reliably unblocks Netflix US and 16+ other regional libraries in 2026 testing, including UK, Japan, Australia, Germany, and France. All major streaming platforms — Disney+, BBC iPlayer, Amazon Prime Video, and Hulu — are verified working. There are no labeled streaming servers like CyberGhost’s system; you select the country server directly. For a full platform-by-platform streaming comparison, see our Best VPN for Netflix Guide.

How much does Surfshark cost?

Surfshark Starter starts at $2.49/mo on a 2-year plan, billed $69.72 upfront for 28 months. The critical figure is the renewal rate: $99.95/yr ($8.33/mo effective) — more than triple the introductory monthly rate. Set a renewal reminder 30 days before your term ends and cancel and resubscribe at the current promotional rate to avoid the auto-renewal premium. The One plan adds antivirus and breach monitoring for $2.79/mo intro. For a full 21-provider pricing breakdown, see our VPN Price Comparison Guide.

What is Surfshark’s Nexus technology?

Nexus is Surfshark’s proprietary software-defined networking layer built across its entire server fleet. It enables three unique capabilities: Dynamic MultiHop (route through two VPN servers with custom entry/exit country combinations), IP Rotator (change your visible IP address at timed intervals without disconnecting), and IP Randomizer (assign a different IP on each new website visit within the same session). All three features are available on every Surfshark plan at no additional cost. NordVPN has no equivalent mid-session IP rotation capability.

Does Surfshark work in China?

It works but with mixed reliability. Surfshark’s Camouflage Mode and NoBorders Mode provide effective obfuscation in most restricted environments, but user reports from China are less consistently positive than ExpressVPN’s. The new Dausos protocol may improve China performance — its dedicated per-user tunnel is inherently harder to fingerprint — but independent China-specific Dausos testing data is not yet available. For users who regularly need reliable access in China, ExpressVPN remains the most consistently verified choice. For the full legal context, see our Is Using a VPN Legal? guide.

Can I use Surfshark on my router?

Yes — Surfshark supports router-level installation via manual WireGuard and OpenVPN configuration on compatible routers. There is no dedicated Surfshark router firmware app (unlike ExpressVPN’s Aircove), but configuration using Surfshark’s published setup guides works on most OpenVPN and WireGuard-capable routers. A router running Surfshark counts as a single device connection, meaning the unlimited device allowance makes Surfshark particularly efficient for router setups — every device behind the router is covered without consuming additional connection slots. For UK-specific router setup guides, see our VPN Router UK Guide.