Disclosure: The NordVPN links on this page are affiliate links through CJ, and Purplelink earns a commission if you buy through one. Purplelink has also applied to Proton's partner program. That application was pending when I wrote this, so the Proton links earn nothing yet. I study cybersecurity for a living, but I did not test any VPN for this guide. Prices and policies come from each provider's own page, read October 14, 2026, and the free options come first because they are enough for most readers.
The short answer
In the week of October 11, 2026, at least 96% of pages loaded in Chrome on a Mac used HTTPS (Google Transparency Report). HTTPS encrypts what you send and receive, so a coffee-shop network cannot read your password or your data. The FTC now says that using public Wi-Fi is usually safe (FTC). The EFF makes the same point, and adds that a VPN is not a tool for anonymity, because the VPN provider can see the traffic it carries (EFF Surveillance Self-Defense). A VPN still helps in two situations: hiding which sites you visit from a network you do not trust, and reaching services that the country you are in blocks.
Your university VPN is a different tool
A university VPN connects your laptop to the campus network. It exists so you can reach university systems and library databases from home. It is not a privacy tool. Your traffic goes to the university, which runs the VPN and can see what passes through it.
- Split tunnel versus full tunnel. Many campus VPNs send only campus traffic through the VPN by default. The University of Illinois, for example, says its default sends only university traffic to campus, and that library resources need the "Tunnel All" setting (Illinois VPN profiles).
- Library access may not use the VPN at all. NC State's libraries say journal sites bypass the campus VPN, and that you reach databases through the library website instead (NC State University Libraries).
- Use it when you travel. It is often the most reliable way to reach your university email and files from abroad (see the travel section below).
When a commercial VPN helps
- A network you do not trust. On hotel, conference or airport Wi-Fi, HTTPS protects the content, but the network can still see which sites you visit. A VPN hides that from the network and shows it to the VPN provider instead.
- Travel to a country that blocks your tools. Imperial College London's guidance says many apps and websites are blocked in mainland China, including productivity, search and messaging services (Imperial College London). Check your university's own guidance first.
- Sensitive fieldwork. If your research puts you or participants at risk from a local network operator, talk to your university's information security office. A consumer VPN is one part of that plan, not the plan.
What a VPN does not do
- It does not stop phishing. A fake login page works the same with or without a VPN. Two-factor sign-in and a password manager matter more.
- It does not make you anonymous. Logged-in accounts, cookies and browser fingerprinting still identify you, as the EFF guide explains.
- It does not protect a compromised laptop. Keep macOS updated and turn on FileVault, which encrypts your disk if the laptop is lost or stolen.
Options compared
From each provider's own page, read October 14, 2026. Prices are in US dollars unless noted. Many providers charge a lower price for the first term and a higher one at renewal, so both are listed where the provider shows them.
| Option | Price | Best for | Worth knowing |
|---|---|---|---|
| Your university VPN | Free to you | Campus systems, library access, travel | Not private from your university. Install it before you travel. |
| iCloud Private Relay | Included with iCloud+ | Everyday browsing in Safari | Covers Safari, not other apps. Apple says it is not available in every country. It is not a full VPN. |
| Proton VPN Free | Free | Occasional use on untrusted Wi-Fi | No data limit, one device, servers in 10 countries assigned for you. Apps are open source. Proton says its no-logs policy has passed five annual independent audits, the latest by Securitum in 2026 (Proton). |
| Proton VPN Plus | $9.99 a month, or $83.76 for the first 24 months, then $83.88 a year | Regular travel, more devices and countries | Based in Switzerland. Same audited no-logs policy as the free plan. |
| NordVPN Basic(paid link) | $94.23 for the first 27 months, then $139.08 a year | Many devices and server locations | Up to 10 devices at once and a 30-day money-back guarantee. The renewal price is much higher than the first term, so set a reminder before it renews. |
| Mullvad | €5 a month, flat | Paying without an email address | Same price however long you pay for. Sign-up uses a random account number instead of an email. No affiliate program, which is why it is here. |
Before you travel
- Install your university VPN on every device before you leave. The University of Minnesota tells travellers to China to set it up before departure, because downloading it there may not be possible (University of Minnesota).
- Ask your IT and export-control offices. Some universities lend a clean laptop for certain destinations, and some research data or software needs an export license.
- Set up email forwarding or a second way to reach collaborators, in case your usual service is blocked.
- Encrypt the laptop. FileVault on a Mac protects data if the device is lost.
Frequently asked
Is my university VPN private?
No. It sends your traffic to the university network, so the university can see it. It exists to give you campus and library access from elsewhere.
Do I need a VPN on conference or hotel Wi-Fi?
Usually not for safety. Most sites use HTTPS, which encrypts what you send. A VPN also hides which sites you visit from whoever runs the network. If that matters to you, a free option is enough for occasional use.
Will a VPN protect me from phishing?
No. A VPN changes the route your traffic takes. It does not stop you from typing your password into a fake login page. Two-factor sign-in and a password manager do far more against phishing.
Can I use a VPN in China?
Universities that send researchers to China tell them to set up the university VPN before they leave, because downloading it there may not be possible. Ask your IT office and export-control office before you travel, since some universities lend a separate laptop.
Is a free VPN safe?
Some are, some are not. A VPN provider can see the traffic it carries, so choose one with a published no-logs audit. Proton VPN's free plan has no data limit and its apps are open source.
Related guides
- Full Disk Access, Input Monitoring and Accessibility on a Mac: what each permission lets an app see.
- Before you paste client notes into ChatGPT or Claude: five checks before sensitive text leaves your Mac.
- How to run Windows-only research software on an Apple silicon Mac, Mac utility guides and all guides.