NordVPN vs ExpressVPN vs Surfshark: Speed and Value 2026

NordVPN, ExpressVPN and Surfshark are all fast enough that speed alone won’t decide it for you. On a modern WireGuard-based connection to a nearby server, each typically keeps 70 to 90 percent of your base download speed, and the difference between them on any given day is smaller than the difference between two servers in the same city. What separates them is price per device, how their apps behave, how their audits and logging policies hold up, and which one fits what you actually want a VPN for. This guide explains how to compare speed fairly, what each service does differently, and how to decide without relying on anybody’s marketing.

Key takeaways

• All three use WireGuard-based protocols (NordLynx, Lightway, WireGuard) that are far faster than OpenVPN. Make sure the app is set to that protocol before judging speed.
• Surfshark allows unlimited devices, NordVPN allows ten, ExpressVPN eight. For a family this matters more than any speed test.
• All three have published independent audits of their no-logs claims. Read the audit scope, not just the headline.
• Test speed yourself: same server location, same time of day, three runs each, with the VPN off as a baseline. Anything else is noise.
• Prices swing with long-term promotions. Expect the equivalent of a few dollars a month on two-year plans and considerably more month to month, at the time of writing.

How VPN speed really works

A VPN encrypts your traffic and sends it through a server elsewhere before it reaches the internet. That adds three costs: encryption overhead, the extra distance, and the load on that server. Protocol matters most. OpenVPN, the older standard, is CPU-heavy and often halves throughput. WireGuard is a lean protocol that runs close to line speed; the WireGuard project publishes its design and performance rationale. NordVPN’s NordLynx and Surfshark’s default protocol are WireGuard implementations. ExpressVPN built its own protocol, Lightway, with similar goals and now offers a version using the same cryptographic building blocks.

Three practical rules follow:

• A server in your own country or a neighbouring one will always be faster than one across an ocean. Distance adds latency that slows every connection.
• Server load varies by hour. A speed test at 9 p.m. on a Friday says nothing about Tuesday morning.
• Your own connection is the cap. On a 100 Mbps line, all three will hit 80 to 95 Mbps to a nearby server. Differences only show up on gigabit connections.

How to test speed yourself

1. Close downloads and streaming on every device in the house.
2. Run a speed test with the VPN off. Note download, upload and ping. Run it three times and take the middle result.
3. Connect to the VPN using the fastest protocol in settings, to a server in your nearest city.
4. Run the same test three times. Take the middle result.
5. Repeat for a server in another country you’d actually use, such as one for streaming.
6. Repeat the whole thing at a different time of day.

Compare the percentage of baseline retained, not raw numbers. A service keeping 85 percent on a nearby server is doing well. Under 60 percent on a nearby server with WireGuard suggests a bad server pick; try another in the same city.

The three services compared

Ownership is worth knowing. NordVPN and Surfshark merged under one parent company in 2022 and still operate separately. ExpressVPN was bought by Kape Technologies in 2021, which also owns Private Internet Access and CyberGhost. None of this changes how the apps work, but it explains why the market has fewer truly independent providers than it looks.

NordVPN

The largest server network of the three and the most features in the app. Threat Protection blocks ads, trackers and malicious downloads even when the VPN is off. Meshnet links your own devices into a private network, which is handy for reaching a home PC from a laptop. The app is busier than the others, and the browser extensions and desktop app occasionally drift apart in features. If you want one subscription that does the most, it’s this one.

ExpressVPN

The most polished apps and the easiest to explain to a relative: open, press the big button, done. It’s the only one of the three with its own router firmware, which makes protecting a whole home simple; the VPN router guide covers that route. It costs the most and allows the fewest devices, so it’s a poor fit for a large household.

Surfshark

The value pick. Unlimited devices on one account, a clean app, and a price on long plans that undercuts the other two. The server network is smaller and speeds to distant locations are less consistent, but for nearby servers it holds its own. If you have a family with a dozen devices, this is the obvious choice.

What a VPN does and doesn’t do

Worth being clear before paying. A VPN hides your traffic from the network you’re on (a hotel or café Wi-Fi, your ISP) and hides your real IP address from the sites you visit. It’s useful on public Wi-Fi, for reaching services locked to a region, and for keeping your ISP out of your browsing history. It does not make you anonymous: you’re logged in to your accounts, your browser has a fingerprint, and the VPN provider itself can see your traffic, which is why the no-logs audits matter. It doesn’t stop malware or phishing on its own, and it won’t protect a phone from SIM swap attacks or a weak password. For that, start with the password manager guide.

Settings that fix most speed complaints

• Switch protocol to WireGuard, NordLynx or Lightway. Automatic mode sometimes picks OpenVPN on certain networks.
• Pick a specific nearby server rather than “fastest”, which is sometimes a stale ranking.
• Turn off double VPN or multi-hop unless you need it. It halves speed by design.
• Enable split tunnelling for apps that don’t need the VPN, such as a game or a work app that blocks VPN traffic.
• On a router, expect lower speeds because consumer router CPUs struggle with encryption. A dedicated VPN router or a mini PC solves that.

Common mistakes

• Choosing by a single published speed test. Those numbers depend on the tester’s location and the day.
• Paying month to month. Long plans cost a fraction of the monthly rate; if you’ll keep it a year, buy the year.
• Leaving the kill switch off. If the VPN drops, your traffic goes out unprotected without it.
• Expecting a VPN to fix slow home internet. It can only make things slower, never faster, except where an ISP throttles specific traffic.
• Using a free VPN. Free services have to pay for servers somehow, and your data is the usual answer.

Who this is not for

If your goal is strong anonymity, none of these is the right tool; Tor and careful operational habits are. If you only want to block ads and trackers, a Pi-hole or a browser extension does that without slowing every connection. If you never use public Wi-Fi and don’t need region switching, you may not need a VPN at all, and that’s a fine conclusion. A VPN earns its fee for travellers, remote workers on other people’s networks, people in households with many devices on shared Wi-Fi, and anyone who wants their ISP out of their browsing. Pick the one whose device limit and price fit, set it to WireGuard, and stop reading speed charts.

Frequently asked questions