Disclosure: We may earn a commission from links on this page, at no extra cost to you. How we earn

This article contains affiliate links. If you make a booking through these links, we may earn a commission at no extra cost to you. About & Affiliate Disclosure

Quick Answer

You need a VPN when traveling in three situations, and you can skip it in the rest. First, when you have to open banking, work email or other confidential data over hotel, airport or café Wi-Fi: Germany’s federal cyber security office, the BSI, advises doing that only through a VPN, while the US Federal Trade Commission says public Wi-Fi is usually safe because most sites encrypt traffic. Second, when you are outside the EU and want your home streaming library, because since 1 April 2018 EU rules already let paid subscribers keep it inside the EU without a VPN. Third, when you visit a country that blocks apps or VPNs, where you need an obfuscation mode installed before you land. If you only use your own mobile data or an eSIM, a VPN adds little. Where it does help, NordVPN costs €3.89 a month on its two-year Basic plan and covers 10 devices.
Key takeaways
  • Public Wi-Fi: the FTC calls it usually safe thanks to HTTPS; the BSI says use a VPN if you must open confidential data on a foreign network.
  • Streaming inside the EU: no VPN needed. Paid services must let you keep your home content while temporarily in another EU country (Regulation 2017/1128, since 1 April 2018).
  • Streaming outside the EU: the catalogue follows your location, and Netflix answers a detected VPN with an error asking you to turn it off.
  • Blocked apps: some countries restrict apps or VPNs. Install before you go and know your provider’s obfuscation setting.
  • Own mobile data or eSIM: the main Wi-Fi risk disappears, so a VPN becomes optional.

When do you actually need a VPN abroad?

The honest answer depends on the connection you use and what you do on it. This table covers the situations travellers ask about most.

SituationNeed a VPN?Why
Banking or work email on hotel, airport or café Wi-FiYes, recommendedThe BSI advises opening confidential data on a foreign network only through a VPN
Casual browsing and maps on public Wi-FiOptionalThe FTC says public Wi-Fi is usually safe because most sites use encryption
Everything on your own mobile data or an eSIMRarelyYou are not sharing a local network with strangers
Netflix or another paid streaming service in another EU countryNoEU portability rules give you your home content at no extra cost
Streaming your home library outside the EUYes, if you want itCatalogues follow your location; expect VPN detection errors
Messaging or social apps in a country that blocks themYes, and install before arrivalProvider sites and app listings can be blocked once you are there

Most of the yes rows are about two things: who controls the network you are on, and which country the sites you use think you are in.

Is hotel and airport Wi-Fi dangerous without a VPN?

Less than it used to be, and the two official answers show why. The US Federal Trade Commission writes that “because of the widespread use of encryption, connecting through a public Wi-Fi network is usually safe.” Its advice centres on HTTPS, strong passwords, two-factor login and automatic updates, and it does not mention VPNs at all. It does warn that scammers create fake websites and encrypt them so they look safe.

Germany’s Federal Office for Information Security (BSI) is stricter. It warns that on a shared network data can be intercepted or malware slipped onto your device, advises not to open confidential data over someone else’s Wi-Fi, and says that if it cannot be avoided, you should do it only through a VPN.

Both are right about different things. HTTPS protects the content of most sites. A VPN also covers apps that handle encryption badly, hides which services you use from the network operator, and protects you on a hotspot you cannot vouch for. Our public Wi-Fi guide goes through fake hotspots, captive portals and what HTTPS does not hide.

Do you need a VPN for streaming abroad?

Inside the EU, no. Regulation (EU) 2017/1128 has applied since 1 April 2018: paid online content services must let subscribers who live in an EU member state use the same content and features when they are temporarily in another member state, at no extra cost. Free services may opt in. So a Netflix subscriber from Germany on holiday in Spain gets the German library without doing anything.

Outside the EU the rule does not apply, and services show the catalogue for the country you are in. That is where travellers connect to a server at home. Services push back: Netflix’s help centre lists the error “You seem to be using a VPN or proxy. Please turn off any of these services and try again.” The full picture, including the terms-of-service side, is in our guide to streaming abroad.

Do you need a VPN on mobile data or an eSIM?

Rarely for security. On your own SIM or a travel eSIM you are not on a local network shared with other guests, so the fake-hotspot risk falls away, and that is the scenario both the FTC and the BSI are addressing. Buying a data eSIM is often the simpler fix for a traveller who only wants to avoid hotel Wi-Fi.

A VPN on mobile data still earns its place in two cases: in a country that blocks apps or websites, and when you want a home IP address for a streaming service or a banking app that reacts badly to foreign logins.

Do you need a VPN in countries that block apps or VPNs?

This is where a VPN stops being optional and becomes hard to get. Some countries restrict VPNs or the messaging and social apps travellers rely on, and the rules and how strictly they are enforced differ a lot. Check our VPN rules by country before you go.

None of the big providers promises on its own site that it works in China. NordVPN says VPNs can work there but a stable connection is difficult, that only services with strong obfuscation tend to work with any consistency, and that it is best to get the VPN running before you arrive. Its obfuscated servers, reached through the NordWhisper protocol, are built to hide the fact that you are using a VPN.

What a VPN does not fix

  • Card and cash fees. A VPN changes nothing about foreign transaction fees or ATM charges. See our guide to Revolut fees abroad.
  • Phishing. A VPN encrypts the connection, not the site at the other end. The FTC’s warning about fake encrypted websites applies with or without one.
  • Bank security checks. Some banking apps react badly to logins from shared VPN addresses. Test yours at home before you rely on it abroad.

Which VPN if you decide you need one?

For most travellers, NordVPN: €3.89 a month on the two-year Basic plan, 10 devices, 7,800+ servers across 225+ locations, obfuscated servers and six independent no-logs reviews by PwC and Deloitte. If you only need hotel Wi-Fi covered for a short trip, Proton VPN’s free plan (1 device, servers in 10 countries, no data cap) is enough. Our best travel VPN comparison sets NordVPN, Surfshark, ExpressVPN and Proton VPN side by side.

Frequently asked questions

Do I really need a VPN when traveling?

Only in three situations: when you have to open banking, work email or other confidential data over hotel, airport or café Wi-Fi; when you are outside the EU and want your home streaming library; and when you visit a country that blocks apps or VPNs. If you use your own mobile data or an eSIM and nothing is blocked where you are going, a VPN adds little.

Is hotel and airport Wi-Fi safe without a VPN?

Usually, for ordinary browsing. The US Federal Trade Commission says connecting through public Wi-Fi is usually safe because of the widespread use of encryption. Germany’s cyber security office, the BSI, is stricter: it advises against opening confidential data over a foreign Wi-Fi network and, if that is unavoidable, doing it only through a VPN.

Do I need a VPN to watch my streaming services abroad?

Not inside the EU. Since 1 April 2018, Regulation (EU) 2017/1128 obliges paid online content services to give subscribers resident in an EU country the same content when they are temporarily in another EU country, at no extra cost. Outside the EU the catalogue follows your location, which is where travellers use a VPN, and where services such as Netflix show a VPN or proxy error when they detect one.

Do I need a VPN on mobile data or an eSIM?

Rarely. Your own mobile data or a travel eSIM does not put you on a network shared with strangers, which removes the main public Wi-Fi risk. A VPN on mobile data still matters in countries that block apps or websites, and when you want a home IP address for streaming or banking.

Should I install a VPN before I travel?

Yes. Some countries block VPN provider websites and app store listings, and NordVPN’s own China guide advises getting the VPN running before you arrive. Install it on every device at home, sign in, and connect once to check that your banking app still works through it.

The short version

If you stay on mobile data, stream inside the EU and travel somewhere with an open internet, you can leave the VPN at home. If you work from hotel Wi-Fi, stream outside the EU or head somewhere that blocks apps, install one before you leave and use the 30-day money-back window to check it works with your bank.

NordVPN: our pick for travel
Encrypts hotel and airport Wi-Fi and lets you reach your home apps, banking and streaming abroad.
  • Up to 10 devices on one account
  • Obfuscated servers for networks that block VPNs
  • 30-day money-back guarantee
See NordVPN plans