For journalists and activists, a VPN hides your browsing from the local network and your internet provider, and hides your IP address from the sites you visit. It does not make you anonymous: the VPN provider can see your connections, and your accounts, phone and metadata can still identify you. Choose a VPN by ownership, logging policy and track record, and pair it with end-to-end encrypted messaging, a locked-down phone and, for the highest-risk work, Tor. Start with a threat model: who might target you and what they can do.
By Team Boycat
Reporters, researchers, organizers and human rights workers often need more privacy than the average user. A VPN helps, but it's easy to overestimate it. This guide is about what a VPN actually does for high-risk work, how to pick one, and what else you need.
Before choosing tools, answer four questions (the framework EFF uses in Surveillance Self-Defense):
A VPN is the right tool against some of these and the wrong tool against others.
| Check | Why it matters for you |
|---|---|
| Owner and legal entity | Decides who can be pressured or ordered to hand over data |
| Specific no-logs policy | No browsing, DNS, timestamps or source IPs stored |
| Track record | Court cases or raids where nothing was handed over |
| Payment and signup | Can you pay without linking your name? Some providers accept cash or don't require email |
| Kill switch / always-on | Stops traffic leaking if the VPN drops |
| Modern protocols | WireGuard or OpenVPN, never PPTP |
| Obfuscation | Helps on networks that block VPN traffic |
Examples of track records: Private Internet Access couldn't hand over logs in a 2016 FBI case (TorrentFreak); PureVPN's records helped identify a user in 2017 (TorrentFreak); Swedish police left Mullvad without customer data in 2023 (Mullvad). Mullvad, which doesn't require an email, is often recommended for high-risk users.
For sensitive research, many trainers recommend Tor Browser for the research itself and a VPN for everything else on the device. Know that using Tor or a VPN can itself be noticeable on a monitored network, and may be restricted in some countries.
Buycat VPN is a good everyday layer: one-tap connect, WireGuard, obfuscation on Plus and Pro, apps on every major platform, and it's independently owned by Boycat rather than a VPN conglomerate. For the highest-risk work, be honest with yourself about the threat model: use Tor for anonymity-critical research, and prefer providers with a long public track record under legal pressure.
A VPN is a useful baseline for journalists on shared or monitored networks and for hiding their IP address from research targets. It's one layer, not full protection.
No. It hides your traffic from the local network and your IP from websites, but the VPN provider, your accounts and your device can still identify you.
Tor for anonymity-critical work; a VPN for general privacy and speed. Many people use both for different tasks.
Clear ownership, a specific no-logs policy, a track record under legal pressure, private payment options, always-on/kill switch, and obfuscation.
Partly. It hides your browsing from the network, but your carrier still sees your phone's location. Lock your phone with a passcode and carry minimal data.
BuycatVPN
A no-logs VPN built around your privacy.
AES-256 encryption on iOS, Android, Mac, Windows and Linux. 30-day money-back guarantee.
Get BuycatVPN
