Best-of list
The best VPNs for Android
Mullvad has the most Android-specific evidence: two independent assessments of its Android app and an audit of the WireGuard code inside it. Proton VPN and IVPN also publish their Android code, and Proton adds a free plan.
Mullvad VPN
NCC Group (2025) and Leviathan (2026) assessed its Android app, and Assured audited the WireGuard implementation it uses. The app is open source under GPL-3.0.
Proton VPN
Open-source apps for Android, Android TV and Chromebook, a kill switch in every app and a free plan with no data cap on one device.
IVPN
An open-source Android app from a provider audited by Cure53 every year, with no email needed to sign up. Five devices on the Standard plan.
NordVPN
Android and Android TV apps with post-quantum encryption since 2025, and six no-logs assurance reports. The app code isn't public.
Surfshark
SecuRing tested its mobile apps in 2025, and one subscription covers unlimited devices. It shares a parent company with NordVPN.
Private Internet Access (PIA)
Its Android app is open source under GPLv3, it allows unlimited devices and its no-logs claim held in US court cases. No published app audit.
What we didn't test. We have not measured speeds, streaming access or leak behavior on our own devices. This page is built from the providers' own documents, independent audits, court records and reputable reporting, each linked below. How we review.
The short answer
Android makes it easy to publish a VPN app, which is why the Play Store is full of them. Research into free Android VPN apps has found missing encryption, tracking libraries and traffic leaks; see are free VPNs safe?. For an Android VPN, two kinds of evidence matter most: an independent audit of the Android app itself, and source code that anyone can read.
Mullvad has both, and more Android-specific audits than anyone else in our files. Proton VPN and IVPN publish their Android code. NordVPN, Surfshark and PIA fill out the list. We haven't tested these apps; platform facts come from the providers' own pages and the sources listed below.
How we ranked Android VPNs
We started from each provider's overall verdict in its review, then weighed Android-specific evidence: published security assessments of the Android app, whether the Android code is open source, and Android features the provider documents. The method is explained on how we review.
| Provider | Android app audit | Open-source Android app | Devices | Verdict |
|---|---|---|---|---|
| Mullvad | NCC Group 2025, Leviathan 2026; GotaTun audit 2026; X41 D-Sec 2024 (all platforms) | Yes (GPL-3.0) | 5 | Strong |
| Proton VPN | No Android-specific audit in our files | Yes | 10 (free: 1) | Strong |
| IVPN | Cure53 audits cover its systems, not the Android app specifically | Yes | 5 | Strong |
| NordVPN | VerSprite app assessment 2021 (platforms not stated) | No | 10 | Strong |
| Surfshark | SecuRing 2025 (web, desktop and mobile apps) | No | Unlimited | Strong |
| PIA | None published | Yes (GPLv3) | Unlimited | Good |
1. Mullvad for Android
Mullvad has had its Android app assessed twice against MASA, a security standard for mobile apps: by NCC Group in 2025 and by Leviathan Security Group in 2026. In 2026 Assured Security Consultants also audited GotaTun, the WireGuard implementation the Android app uses. X41 D-Sec's 2024 audit covered the app on all platforms and reported three high, two medium and one low finding. The code is open source on GitHub.
The kill switch is on by default and can't be switched off. You sign in with an account number, not an email address. The limits: five devices, WireGuard only, and a 14-day refund.
2. Proton VPN for Android
Proton lists apps for Android, Android TV and Chromebook, and all its apps are open source. Every app has a kill switch, and Proton's Stealth protocol wraps WireGuard inside ordinary-looking TLS traffic for networks that block VPNs. Securitum has audited the no-logs claim yearly since 2022. The free plan works on Android on one device, with no data cap according to Proton.
3. IVPN for Android
IVPN's Android app is open source, like all its apps. Cure53 audits IVPN every year, though the scopes in our files cover its web systems and its Unlinked Access feature, not the Android app specifically. IVPN offers multi-hop, its AntiTracker blocklist and V2Ray obfuscation. Its founder owns the company outright, and sign-up needs no email.
4. NordVPN for Android
Nord Security's post-quantum rollout in May 2025 covered its Android and Android TV apps along with its other platforms. NordWhisper, its protocol for restrictive networks, is meant to make VPN traffic look like web traffic. VerSprite carried out an application security assessment in 2021. Six no-logs assurance reports back the service, but the Android source code isn't public.
5. Surfshark for Android
Surfshark says SecuRing's 2025 assessment covered its web, desktop and mobile apps, with no critical findings, and Surfshark links the report. One subscription covers unlimited devices, which suits families with several Android phones. Deloitte checked its no-logs claim in 2023 and 2025.
6. Private Internet Access for Android
PIA's Android app code is on GitHub under GPLv3, according to Wikipedia's summary of its pia-foss repositories. It has unlimited devices, an Advanced Kill Switch and split tunneling. PIA's no-logs claim held in US court cases in 2016 and 2018. We found no published audit of its apps, and it's US-based.
Other Android options
- Windscribe (Good) has an open-source Android app, a free plan with 10 GB a month and decoy traffic on Android, a feature that adds fake background traffic. Its audit record is thin.
- CyberGhost (Good) has Android and Android TV apps but no published app audit.
- Opera VPN Pro (Mixed) covers six Android and desktop devices, but runs on an unnamed partner's servers and Opera hasn't published its audits. Tunnelcheck isn't affiliated with Opera.
Check the kill switch after you install
Google's Android help describes an Always-on VPN switch under Settings, then Network & internet, then VPN, then the gear icon next to a VPN. It also notes that the option may not appear for a VPN set up through an app. Either way, turn on the app's own kill switch and run a leak test. For TV boxes, see VPN on a smart TV.
Questions people ask
What is the best VPN for Android?
On the evidence, Mullvad. Its Android app has had two independent assessments (NCC Group 2025, Leviathan 2026), the WireGuard code it uses was audited in 2026, and the app is open source.
Is there a good free VPN for Android?
Proton VPN Free works on Android on one device, with no data cap according to Proton. Windscribe Free gives 10 GB a month. See best free VPNs.
Why does an open-source Android app matter?
Anyone can read the code to check what the app does with your data. It isn't the same as an audit, but it means problems can be found by people outside the company.
Do Android VPNs work on Android TV?
Proton, NordVPN, CyberGhost and Windscribe list Android TV apps. See VPN on a smart TV for setup.
Sources
- Successful security assessment of our Android app (Mullvad blog, NCC Group, 2025) (mullvad.net) · read November 13, 2026
- 2026 security assessment of our Android app (Mullvad blog, Leviathan) (mullvad.net) · read November 13, 2026
- A security audit of GotaTun is now available (Mullvad blog, 2026) (mullvad.net) · read November 13, 2026
- The report for the 2024 security audit of the app is now available (Mullvad blog, Dec 11, 2024) (mullvad.net) · read November 13, 2026
- Mullvad VPN app source code (GitHub) (github.com) · read November 13, 2026
- Proton VPN features (protonvpn.com) · read November 13, 2026
- Proton VPN free VPN page (protonvpn.com) · read November 13, 2026
- Proton VPN no-logs audits, 2022 to 2026 (Proton VPN blog) (protonvpn.com) · read November 13, 2026
- IVPN blog: audit tag (ivpn.net) · read November 13, 2026
- What VPN protocols do you offer? (IVPN help) (ivpn.net) · read November 13, 2026
- NordVPN launches post-quantum encryption across all its applications (Nord Security, May 22, 2025) (nordsecurity.com) · read November 13, 2026
- NordVPN (Wikipedia) (en.wikipedia.org) · read November 13, 2026
- Surfshark VPN review (Surfshark's own product overview: protocols, devices, audits) (surfshark.com) · read November 13, 2026
- pia-foss on GitHub (PIA open-source code) (github.com) · read November 13, 2026
- Private Internet Access (Wikipedia) (en.wikipedia.org) · read November 13, 2026
- Windscribe on GitHub (github.com) · read November 13, 2026
- Opera VPN Pro page and pricing (opera.com) · read November 13, 2026
- Android Help: Connect to a virtual private network (VPN) on Android (support.google.com) · read November 13, 2026