How much a VPN should slow you down
Some speed loss is the cost of encryption and distance. A lot of it is the wrong server, the wrong protocol or a congested exit — and those are settings you can change in under a minute.
A VPN sends your traffic through an encrypted tunnel to a server somewhere else before it goes on to the website you asked for. That extra step always costs something. The question is how much, and whether the loss you're seeing is the unavoidable part or the fixable part.
On a decent connection with sensible settings, most people barely notice a VPN for browsing and streaming. If yours feels noticeably sluggish, the cause is usually one of a handful of settings rather than the VPN itself.
Where the slowdown comes from
Encryption. On a modern laptop or phone this is cheap. On an older router running the VPN for the whole house, the processor can become the bottleneck.
Distance. Your data travels to the VPN server and then on to the website. A server in the next city adds very little. A server on another continent adds real delay, which you feel as slower page loads and laggy video calls even when the download speed looks fine.
Server load. A server shares its connection among everyone using it, so busy servers at busy times slow down.
Protocol. The method used to build the tunnel makes a real difference, as the next section explains.
The first two are the unavoidable costs. The last two are where most avoidable slowdown lives.
Pick the right protocol
Most VPN apps let you choose a protocol in their settings, often under Connection or Advanced. If yours is set to "Automatic", that's usually fine, but it's worth knowing the options.
| Protocol | Speed | Notes |
|---|---|---|
| WireGuard | Usually fastest | Modern, lightweight code; reconnects quickly. Some providers use it under their own name |
| IKEv2/IPsec | Fast | Handles switching between Wi-Fi and mobile data well; common on phones |
| OpenVPN (UDP) | Moderate | Mature and widely supported; slower than WireGuard on most devices |
| OpenVPN (TCP) | Slowest | Useful on restrictive networks that block other options; otherwise avoid |
If you've been stuck on OpenVPN over TCP, switching to WireGuard is often the biggest single improvement available.
Pick the right server
Choose the nearest server that does the job. If you only want the VPN for privacy on public Wi-Fi, a server in your own country is the obvious choice. Only pick a distant location when you actually need to appear there.
If a nearby server is slow, try another in the same region; many apps show a load figure for each. The "quickest server" option measures only at the moment you connect, so reconnect if things slow down later.
Watch out for extras. Features such as multi-hop (routing through two servers), obfuscation or "stealth" modes and some specialty servers deliberately add work to disguise your traffic. They have genuine uses, but leave them off unless you need them.
Measure it properly
A fair comparison takes two minutes:
- Disconnect the VPN and run a speed test. Note download, upload and ping (latency).
- Connect to your nearest server and run the same test straight away.
- Repeat once more each way. Single results jump around.
Ping tells you more than download speed about how browsing feels. A rise of a few milliseconds is normal; a rise of a hundred or more means the server is far away or overloaded.
If your speed is poor without the VPN too, the VPN isn't the problem. Weak Wi-Fi is the most common culprit: try the test again next to the router, or on a wired connection, before blaming anything else.
Other settings worth checking
- Split tunnelling. Many apps let you exclude certain apps or sites from the tunnel. Large game downloads or local streaming services can go direct while your browser stays protected.
- One VPN at a time. A VPN in your browser plus another in the system, or a VPN on both the router and the laptop, doubles the work. Keep one.
- Update the app. Protocol and performance improvements arrive through updates, and old versions sometimes default to older protocols.
- Security software interaction. Some firewalls and web filters inspect VPN traffic in ways that slow it down. If speeds drop only with a particular feature enabled, check that product's settings for a VPN exception.
When it's the service, not your settings
If you've tried a nearby, lightly loaded server on WireGuard, tested on a good connection, and the loss is still large at most times of day, the provider's network may simply be congested. That's worth raising with the provider's own support, since only they can see their server capacity.
If it doesn't improve and you're weighing whether to keep paying, a security subscription audit is a useful way to decide. Billing, cancellation and refund questions go to the company that bills you for the VPN.