Why we bother with a VPN at all
At home Tom leaves the VPN switched off, and I would not spend a second thinking about it. On the road the maths changes. Hotel, airport, café and campground networks belong to somebody else, and we have no idea who set them up or who else is sitting on them.
Most sites encrypt their traffic these days, so this is far less dramatic than it was ten years ago. A VPN adds one more encrypted tunnel between the device and the provider, which narrows what the local network can see or interfere with. On a network we do not control, that feels like a reasonable extra layer rather than paranoia.
What we want from a travel VPN is almost boring: connect fast, stay out of the way, and let me finish uploading the photos.
TunnelBear or NordVPN?
We have used both, and here is the boring truth: neither ever let us down. Both apps are easy to operate, both brought the tunnel up every time we asked, and neither slowed ordinary browsing enough for me to notice. Tom cannot name a winner from experience, and I would be sceptical of anyone who claims a dramatic one between these two.
So the honest tiebreaker is what the two actually offer. NordVPN covers far more server countries and gives you more to adjust when a destination or a device needs it. TunnelBear covers a much shorter list and hides almost every setting, which is a genuine feature if you want to press one button and stop thinking about it.
Many more server countries and more to adjust when the route asks for it.
A shorter country list and almost nothing to configure. Ideal if you want one button.
Where a VPN stops helping
A VPN is a tunnel, not a bodyguard. A weak password stays weak, a convincing phishing page still catches people, an outdated device stays outdated, and an account whose password and second factor have both been taken is simply gone. Worth knowing before the little icon makes you feel invincible.
It also shifts trust rather than removing it: away from the café network and towards the VPN company. That is exactly why we stay with services whose business model we understand, instead of a free VPN that has to earn its money somewhere we cannot see.
- Keep the operating system and browser updated.
- Use unique passwords and two-factor authentication.
- Stick to HTTPS even while the VPN is running.
- Take browser certificate warnings seriously.
When we switch it on
The trigger is simple: an unfamiliar or public network. Accommodation Wi-Fi, cafés, airports, anywhere the convenience is obvious but the operator is anonymous. Both apps live on the Mac and on our phones before we leave home, because downloading a security app over the exact network you distrust is a poor plan.
Sometimes mobile data is the easier answer for one sensitive task, and we use it that way without ceremony. The goal is a dependable extra layer within reach, not a ritual performed at every coffee shop.
Our verdict
Because “it depends” is a useless answer, here is ours: for most people heading off with a laptop and a phone, we would take NordVPN. Not because TunnelBear let us down, it did not, but because the country coverage is the difference you are most likely to actually run into on a long route, and it is the one thing between these two that is genuinely measurable.
If you already know you want a single button and a handful of countries, TunnelBear does exactly that and we would not talk you out of it. Both work. The gap between them is smaller than any comparison site will tell you.
Affiliate links: we may receive a commission if you subscribe through one of these links, at no additional cost to you.