In this guide, we’re going to talk about VPNs that have ad blockers built into them. In many cases, using an ad-blocking VPN is an excellent way to go, offering some great advantages over traditional ad blockers.
Here’s how an ad blocker VPN compares to other approaches to killing pesky ads and trackers:
Ad blocking browser extensions are a great solution… if all you need to protect is your web browsing.
Installing an ad blocker on your router protects everything… but can be difficult to set up and can be a real problem if the blocker conflicts with sites or services you need access to.
A VPN with ad blocking can protect your entire network… but gives you the ability to avoid blocking for sites or services that would conflict with the ad blocker.
Finding a quality VPN with a built-in ad blocker can be a time-consuming, annoying task. So we did it for you.
First, we’ll give you a quick overview of each VPN, with particular emphasis on their ad-blocking capability. We’ll also include links to our in-depth review of each VPN if you want to learn more before investing your money.
Here are the best VPN ad blockers:
1. NordVPN – All-around VPN excellence with effective DNS-based ad blocking
|Logs||No logs (audited)|
|Support||24/7 Live chat|
NordVPN is one of our favorite VPN services. They do everything you would expect of a great VPN, and are always hard at work implementing the latest in VPN technology. Most recently, they rolled out a custom VPN protocol (NordLynx) that provides full support for the super-fast, and super-secure WireGuard VPN protocol. In our testing with NordLynx, NordVPN significantly outperforms their previous benchmark speeds.
One of the best features of NordVPN, however, is CyberSec. CyberSec goes beyond just blocking ads. It also blocks trackers, malware, and phishing domains that could infect your device. When your browser queries the NordVPN DNS servers, CyberSec consults a list of websites (domains) known to host ads, malware, spyware, trackers, and filters (blocks) them from loading on your device.
When you visit a website that may be hosting questionable domains, such as ads and trackers, these domains will automatically be blocked from loading. CyberSec is extremely easy to enable and disable, which you can do directly in the NordVPN settings area of the VPN app:
Now that we have covered how Nord VPN blocks ads, let’s examine some other features of this leading VPN service. Here are some of NordVPN’s best privacy and security features, that we haven’t already covered:
- Double VPN servers, which pass traffic through two servers for additional security
- Tor-over-VPN servers that add an extra layer of protection through Tor’s anonymity
- Obfuscated servers, which make your VPN traffic look like HTTPS traffic to avoid notice by censors. (This is a great feature if you need a VPN for China and anywhere else that blocks VPNs.)
- 100% RAM-disk servers, to enhance your security by ensuring no user data is available on any VPN server.
- Leak-free and secure VPN apps, thanks to built-in leak protection (kill switch).
NordVPN has conducted independent audits of their security and their compliance with their published no-logs policy. NordVPN’s encryption is very strong, featuring an AES-256-GCM cipher and DHE-4096 key exchange for Perfect Forward Secrecy.
NordVPN is our top-rated VPN for torrenting, an area where CyberSec’s defensive capabilities are particularly welcome. NordVPN is also an excellent VPN for streaming content from major services like Netflix, Hulu, and BBC iPlayer. You can use the NordVPN app if you need a VPN for Firestick, TV boxes, or Smart TVs, or any other streaming device.
NordVPN has over 5,200 servers in 59 countries. They give you 24/7 live chat Customer Support, a very low price, and a 30 day money-back guarantee on all plans.
NordVPN sounds almost too good to be true. Are there any drawbacks? Yes, a couple:
- The discounted prices (there was a 68% discount when we wrote this) are only available with a multi-year subscription
- They don’t offer a dedicated router app, although many routers offer NordVPN support, such as the VPN-optimized VILFO, which has NordVPN support built in
See our NordVPN review for more test results and analysis.
2. Surfshark – High-end VPN and ad blocking performance for a low price
|Based in||British Virgin Islands|
|Support||24/7 Live chat|
Not yet three years old, Surfshark has all the trappings of a premium VPN service. It is equipped with all the features you would expect from top-tier VPN services: tons of servers, high-end security, a solid no-logs policy, automatic leak protection, the ability to unblock major streaming services, and a variety of specialized servers and advanced capabilities.
And did we mention that Surfshark is really inexpensive and one of the only VPNs around to support an unlimited number of simultaneous connections, 24/7 live chat customer support, and a 30 day money-back guarantee?
Now let’s examine how Surfshark VPN blocks ads with the CleanWeb feature, which is similar to NordVPN’s CyberSec.
Of particular interest to us here is CleanWeb, the Surfshark ad blocker.
Like NordVPN’s CyberSec, CleanWeb maintains a huge list of websites (domains) known to be malicious, or simply to be serving ads. When your device makes a DNS query, CleanWeb checks to see if the domain is on the bad-boy list. If so, it blocks content from that site to protect you from whatever foulness is lurking there. Anything using the VPN automatically gets protected like this, so apps running on your device (and using the VPN) are protected, not just web browsers.
By default, CleanWeb is turned off. You’ll need to dip into the Features section of the Surfshark client and turn CleanWeb on to start blocking ads and trackers with the VPN:
In addition to killing ads and malware with CleanWeb, Surfshark keeps your connection secure by using the strong AES-256-GCM cipher and your choice of the OpenVPN or IKEv2 VPN protocols.
While Surfshark offers decent performance, speeds are not quite on par with ExpressVPN or NordVPN. Nonetheless, Surfshark’s speeds are more than sufficient for streaming HD content. Speaking of streaming content, Surfshark does a great job unblocking all types of media websites. It is one of the best VPNs for Netflix, BBC iPlayer, Amazon Prime, and many other streaming sites.
As of today, Surfshark has over 1,700 servers spread between 63 countries.
Even in head-to-head testing in the NordVPN vs Surfshark comparison, Surfshark still did well in many categories. And like our other top picks, Surfshark provides 24/7 live chat support and a full 30 day money-back guarantee with all plans.
See our Surfshark review for more test results and analysis.
3. Perfect Privacy – Extra intense privacy and ad blocking
|Support||Email & forum|
If the highest levels of privacy and security are your goal, Perfect Privacy merits consideration. Like NordVPN and Surfshark, Perfect Privacy has a strict no-logs policy, a kill switch, strong encryption, and several specialized features, including the intriguing NeuroRouting feature.
But what we are really interested in right now is TrackStop, the Perfect Privacy ad blocker, tracker killer, and kid protector built into their service. TrackStop works like the other VPNs featured here, in that it checks for malicious sites and advertising domains when anything on your device makes a DNS query. But as you can see below, it does a lot more than just blocking ads:
But TrackStop goes even further, with built-in Parental Controls, and customizable filters so you can decide which filters you want active on your device. While each of our featured VPNs blocks ads and malware, TrackStop gives you more control over exactly how these things are done.
Another interesting feature of the Perfect Privacy VPN is its full support for IPv6. While most VPN services still don’t support IPv6 at all, Perfect Privacy has been doing so for years. IPv6 isn’t yet a “must have” feature, but it is clearly the wave of the future as the number of devices connected to the internet explodes. When IPv6 becomes urgent, Perfect Privacy users will be ready.
If you are looking for specialized servers, Perfect Privacy offers Stealth VPN, which disguises VPN traffic as normal HTTPS traffic, and Multi-hop VPN, which passes your traffic through up to FOUR (4) VPN servers for a massive amount of encryption.
While Perfect Privacy has many advantages that put it on this list, it does have a few drawbacks.
- Above-average prices
- It isn’t a strong competitor when it comes to unblocking streaming media services; if this is important to you, consider one of our other recommended VPNs
- Their server network is sophisticated and secure, but small, with 60+ server locations in 28 countries
- Unlike the competition, they do not offer 24/7 live chat support, and their refund window is only 7 days, instead of 30
See the Perfect Privacy review for more test results and analysis.
Other VPN ad blockers (not recommended)
The VPNs above are not the only ones offering ad blocking. There are a few other examples, but I wouldn’t recommend them. Here are two examples:
CyberGhost ad blocker (traffic manipulation)
CyberGhost is an interesting case, but not in a good way. Instead of filtering ads and malicious
content via DNS requests, they actually look inside the traffic and modify requests to certain domains so they display content from Cyberghost instead.
This is problematic for a few reasons. First, manipulating traffic is something a trustworthy VPN provider should not do – even with good intentions. Secondly, this only works over http since https connections are encrypted and Cyberghost cannot (easily) access that content.
Looking into this issue a bit more, there is some interesting history to this. Back in 2016, CyberGhost made headlines because it was installing their own root certificate on a user’s computer, effectively doing a man-in-the-middle attack on all https traffic. Not only was the traffic processed locally, it was also sent back to a CyberGhost server that decided what to change.
Here’s an excerpt from when this controversy originally surfaced in 2016 [original source now appears to be offline]:
A VPN that installed a root certificate in your computer (like the [CyberGhost 5] version) will be able to attack all your SSL-encrypted traffic. This is otherwise known as a Man-in-the-Middle attack. CyberGhost can intercept and decrypt all of the data that goes through the encrypted link – even sensitive information such as email addresses, passwords, and bank account details. And it can re-encrypt the data and pass it to the website like nothing happened.
With the CyberGhost version tested for this article, there is no root certificate being installed. But because they are still using the same methods to filter traffic, that means their “ad blocker” does not effectively work on HTTPS websites. Basically, CyberGhost’s ad blocker is barely working, especially since it will be ineffective on all HTTPS websites.
PureVPN’s ad blocker (does it even exist?)
PureVPN promises an ad-blocker on their website:
PureVPN’s ad-blocker removes all kinds of ads and online litter while you’re browsing online. In doing so, it improves your browsing speeds by blocking images from consuming bandwidth, and analytics codes and scripts running in the background of the page you’re browsing online.
But when you open up the PureVPN app, you see that there are no specific settings for ad blocking.
Meanwhile, the website claims, “Every subscription plan includes PureVPN’s Content Filtering features without any extra cost.”
When testing the PureVPN client on various news sites, all ads and tracking were getting through. Nothing was getting blocked.
At this point it was necessary to clarify with PureVPN what exactly was going on. Here is a transcript of the chat:
Visitor: Hello. I have a question about the ad-filter. Do i need to activate it, because it does not seem to be working
Visitor: for instance, i still see ads on theregister.co.uk and other sites
O’Brien: Well we do not provide add blocker with our service now
Visitor: huh? but it is advertised on your website? it says all plans include that
O’Brien: Could you please share with us the screen shot of that advertisement. It was offered in the past but not now
Visitor: sure one sec
O’Brien: Let me check – This is the content filtering and it does not
blocks any paid ad
Visitor: what does it block then?
O’Brien: This blocks the content which you don’t want to access.
It was clear that “O’Brien” was not going to provide any answers, so the chat was ended.
To follow-up on this pointless chat, the below questions were emailed to PureVPN support:
How do you define “Ads” in the context of your content filtering webpage?
What kind of content is being blocked, how is it determined?
How is the blocking of any content implemented technically?
PureVPN replied with a canned response and a random link that has absolutely nothing to do with ad blocking. PureVPN’s reply:
Thanks for contacting us. Ads can be quite annoying. Not only online popup advertisements ruin your browsing experience but they also end up leading you to malicious or spam URLs. Luckily, you can now block ads before they appear on your browser with PureVPN. Learn how to use content filtering and prevent ads.
At this point, the only conclusion I could reach is that there is no ad blocking feature and PureVPN is carrying out false advertising and fraud. Of course, this is not surprising at all given PureVPN’s history. See my review of PureVPN for more information.
Best VPNs with ad blockers – FAQ
Here are some Frequently-Asked Questions related to VPNs with built-in ad blocking:
Why do ads track my online activities?
Most ads these days have two main functions: to sell you something, and to track your online activities. The “sell you something” function is annoying, but can serve a legitimate purpose. For many sites, their only source of income is those ads.
The “track your online activities” function of online ads is a threat to your privacy. Ads are usually fed to a site from third-party advertising domains. Unfortunately for us, when ads get sent to our devices, so do bits of code called trackers. The trackers allow the company that put them on your device to track where you go and what you do online.
This data about your browsing habits and preferences is used to send you highly-targeted ads. The better an ad is targeted to you, the greater the chance you will buy something. And when you do, both the advertiser and the website make money, giving both huge incentives to keep pushing the ads (and the associated trackers) at you.
How do ads track my online activities?
It isn’t actually the ads that track you; it is the tracker code that comes along with the ads. They use three main approaches to gather data about you: cookies, beacons, and fingerprinting.
Cookies are small files stored in your browser that help websites you visit identify you. Cookies can record data that helps you navigate a site, but they can also store your data.
Beacons are transparent images that get loaded when you load an ad. They are often 1 pixel by 1 pixel, making them unnoticeable to humans. Beacons can show a website how many times you loaded a page, and help advertisers find their ad impressions for monitoring the results of their ad campaigns.
Fingerprinting is done by recording information about your web browser and device settings. The ad company uses this information to identify you without even having to store anything on your device. (We have a guide on how to mitigate browser fingerprinting.)
Will a VPN ad blocker protect all my online activities?
No. The VPN ad blocker will protect anything that passes its data through the VPN “tunnel.” In addition, no ad blocking system is perfect, so some ads will always get through, even if all your traffic passes through the tunnel.
How does a VPN with ad blocking protect my privacy?
A VPN with ad blocking protects your privacy by preventing third-party ad domains from installing trackers on your device when they display their ads. By blocking the trackers, the VPN prevents the ad domains from collecting data about you.
How does an ad-blocking VPN keep me secure?
A VPN with ad blocking keeps you secure by preventing third-party ad domains from installing trackers on your device when they display their ads. By blocking the trackers, the VPN prevents the ad domains from installing malicious trackers or malware on your device. Sometimes this is done intentionally by the ad company. Other times, the bad stuff is added to an ad domain by hackers.
Best VPNs with Ad Blockers – Conclusion
The internet is getting clogged with annoying ads, trackers, and junk of every type. Go to any major website and while you are looking at the content, your device will quietly be getting bombarded with junk of every type in the background. For example, I just popped over to CNN.com, where uBlock Origin reported that it blocked 33 ads or trackers trying to get into my computer.
In the fight against the endless flood of junk advertisers are trying to ram onto your device, a VPN with ad blocking built in is a powerful weapon. It can protect every browser, and every app on your device at once. While no ad blocker is perfect, any of the three VPNs we featured here make a great first line of defense. Add on a browser-based ad blocker like uBlock Origin, and you will be able to stop the vast majority annoying ads and dubious junk trying to sneak onto your device.
VPN Ad Blocker Comparison Table
(30 day refund)
(30 day refund)
(7 day refund)