Using a VPN when you travel
For most trips a VPN is a sensible, legal extra for hotel and airport Wi-Fi. In a few countries it's restricted. Here's what the Australian government says, and what to set up before you leave.
Last updated 8 Oct 2026
The short version
- Smartraveller suggests a VPN on every device you'll use online while you're away, and treats public Wi-Fi as having no privacy at all.
- Install your VPN, sign in and test it before you leave: in some countries the apps are blocked or removed.
- China, the UAE and Russia have rules that touch on VPNs. Check Smartraveller's page for your destination before you go; this guide isn't legal advice.
Do you need a VPN overseas?
The Australian government's travel advice service, Smartraveller, says to "consider using a Virtual Private Network (VPN) on all devices that may be accessing the internet", and to have no "expectation of data privacy on public Wi-Fi, hotel Wi-Fi or in internet cafes" (Smartraveller). The Australian Cyber Security Centre's travel tips say that in airports and cafés you should "avoid using their Wi-Fi or use a VPN", and to "check local laws to make sure it is legal in your current location" (ACSC).
A VPN isn't the only answer. Smartraveller notes that your mobile network "is often more secure than public Wi-Fi", and the ACSC's current handbook suggests using your phone's hotspot where you can, and avoiding online banking on public networks (ACSC handbook). A VPN is most useful when you can't avoid hotel or airport Wi-Fi, and for reaching Australian services that work differently from overseas.
Before you leave
- Install and sign in to your VPN at home. Proton VPN's China help page says "the single most effective measure you can take is to set up Proton VPN before you arrive". NordVPN says its iOS app "is fully blocked in China". Mullvad says Apple removed its iOS app from the App Store in Russia.
- Test it on the devices you're taking, and note your VPN's support contacts in case it stops connecting.
- Update everything. Smartraveller: "Ensure your operating system is fully patched with the latest security updates."
- Take less. "If you don't need it, don't take it," says Smartraveller, which also suggests backing up your data before you go and leaving the backup at home, and considering a cheap phone for the trip if you'll use a local SIM.
- Think about face and fingerprint unlock. The ACSC notes that "some countries may force you to unlock your device if you use biometrics", and suggests a PIN or passphrase instead.
- Keep getting your bank's SMS codes. The ACSC reminds travellers to turn on international roaming to receive SMS overseas.
Banking from overseas
Banks watch for logins from unexpected places, and a VPN can make you look like you're somewhere you aren't. Westpac's error page asks customers using "a VPN or TOR network connection" to disconnect and try again, and says a sign-in from an unexpected location may bring extra security checks. ANZ warns you "may not be able to download the ANZ App from abroad". NAB, CommBank, ANZ and Westpac all block online banking in some sanctioned countries; NAB's list includes Russia (NAB). If your bank complains, switch the VPN off for banking, or connect to one of its Australian servers.
Countries with rules that touch on VPNs
What Smartraveller's page for each country said when we checked it on 8 October 2026. Laws and their enforcement change, and this is a summary, not legal advice: read the full page before you travel.
| Country | What Smartraveller says |
|---|---|
| China | "The use of services to bypass local internet restrictions may be illegal and can attract penalties, including imprisonment." Many foreign websites, apps and banking services may not work, and providers "can be requested to provide data to Chinese authorities". |
| United Arab Emirates | Lists "using a fake IP address, such as a Virtual Private Network (VPN), to commit or cover up a crime" among online behaviour that may be a crime, with fines, jail or deportation. Publishing or sharing unverified information online is illegal. |
| Russia | Smartraveller's advice is "do not travel". "Russia has banned a wide range of Virtual Private Networks (VPN)", and using VPNs, "even legal ones", to reach prohibited content is illegal. Border officials can inspect devices and installed software, and Australian bank cards don't work. |
| Türkiye | No mention of VPNs, but it's illegal to "insult" Türkiye, its flag, the President or the government, including on social media. A foreign phone used with a Turkish SIM must be registered within 120 days. |
| Indonesia | No mention of VPNs. Its electronic information law has "tough penalties" for defamation, hate speech, hoaxes and "immoral content" online, and applies to foreigners. |
| Thailand | No mention of VPNs. "Travellers have been arrested for things they've said on social media, including for posting negative reviews." |
| Qatar | No mention of VPNs. Commenting online on Qatari culture, government or businesses, including hotel and restaurant reviews, "could be considered slanderous or cyber-crime offences". |
A VPN doesn't change what's legal. Smartraveller puts it plainly: "VPNs are illegal in some countries. And even if using a VPN is legal, accessing a banned site can get you in trouble."
What VPN providers say about these countries
We can't test from these countries, so this is each provider's own claim, from its website, on whether it works there. "Doesn't say" means we found no claim either way.
| VPN | China | UAE | Russia | Türkiye | Obfuscation |
|---|---|---|---|---|---|
| Surfshark | Yes, by its own account | Yes, by its own account | Doesn't say | Yes, by its own account | Yes |
| NordVPN | Yes, by its own account | Not confirmed | Not confirmed | Not confirmed | Yes |
| Proton VPN | Yes, by its own account | Yes, by its own account | Yes, by its own account | Yes, by its own account | Yes |
| CyberGhost | Doesn't say | Yes, by its own account | Doesn't say | Doesn't say | No |
| Private Internet Access | Yes, by its own account | Yes, by its own account | Doesn't say | Yes, by its own account | Yes |
| ExpressVPN | Yes, by its own account | Yes, by its own account | Yes, by its own account | Yes, by its own account | Yes |
| Mullvad | Yes, by its own account | Doesn't say | Yes, by its own account | Doesn't say | Yes |
Obfuscation disguises VPN traffic as ordinary web traffic, which matters on networks that try to block VPNs. Each provider's page links to the source for every claim. To rank them for a trip, use the finder for travel, or for countries that block VPNs, where you can pick the country.
Coming home
Australian Border Force can examine your devices too. It says that "a 'document' includes information stored on mobile phones, SIM cards, laptops" and other devices (ABF).
Is using a VPN legal in Australia?
Yes. The eSafety Commissioner's Be Connected guidesays "Using a VPN is legal in Australia", and adds that "in other countries you should always follow local laws when it comes to using the internet".
We may earn a commission if you buy through links on this page. It doesn't affect the prices shown. How we make money