Yes, a VPN usually slows your internet down a little, and sometimes a lot. How much depends on four things: how far away the server is, how busy it is, which protocol you use, and what your device has to do to encrypt the traffic. On a good setup the difference is barely noticeable for browsing and video calls. On a bad one, pages crawl and downloads take twice as long.

The good news is that almost all of the slowdown is fixable. Once you know where the speed goes, you can get most of it back without changing provider.

Where the speed goes

A VPN changes two things about your connection. First, every packet is encrypted before it leaves your device and decrypted on the server. Second, the packet takes a detour: instead of going straight from your ISP to the website, it goes to the VPN server first, and the reply comes back the same way.

  • Encryption overhead. Modern ciphers such as AES-GCM and ChaCha20 are fast, and phones and laptops made in the last several years handle them without breaking a sweat. On a modern device this is the smallest part of the slowdown. It only becomes the bottleneck on weak hardware, most often a home router running a VPN on its own CPU.
  • Distance to the server. This is the big one. Every request has to travel to the server and back before it even reaches the website. A server in the same country adds a few milliseconds; a server on another continent adds a hundred or more. You feel this as pages that take longer to start loading, not as slow downloads.
  • Server load. A server shared by too many people at once has less bandwidth per user. Same server, different time of day, different speed.
  • Protocol. Some protocols are designed for throughput, others for looking like ordinary traffic. The difference between the best and the worst can be several times.

Latency versus bandwidth

People say "slow" about two different things, and a VPN affects them differently.

Latency is the delay before something happens: the pause before a page starts to render, the lag in a game, the half-second before someone hears you on a call. Bandwidth is how much data moves per second: download speed, video quality, how long a large file takes.

A VPN almost always adds latency, because of the detour. It does not have to reduce bandwidth much, as long as the server has capacity and the protocol is efficient. So if your speed test shows nearly the same download number but browsing feels slower, the problem is distance, and the fix is a closer server.

When a VPN can be faster

Occasionally a VPN makes things quicker, which surprises people. It happens when your ISP's route to a particular service is congested or takes a long path, and the route through the VPN server happens to be shorter or less crowded. Some ISPs also manage traffic by type during peak hours; inside an encrypted tunnel every packet looks the same, so it is treated the same. This is not something to count on, but it explains why a speed test through a nearby server can occasionally beat the direct connection.

Protocol matters more than you think

  • WireGuard is built for speed: a small codebase, modern cryptography, and very little overhead per packet. On most connections it is the fastest choice and the easiest on your battery.
  • OpenVPN is older and heavier. It is reliable and works almost everywhere, but it moves data through more layers and is noticeably slower on the same hardware, especially in TCP mode.
  • VLESS is a lightweight protocol from the Xray family. Its purpose is to make VPN traffic look like ordinary HTTPS, and it does that with a small overhead, so speed is usually close to WireGuard. It is a good choice on networks that treat WireGuard's traffic badly.
  • IKEv2/IPsec is fast on phones and reconnects quickly when switching between Wi-Fi and mobile data, which is why operating systems ship it built in.

If your app lets you choose, try WireGuard first, VLESS second, and keep OpenVPN as a fallback.

How to measure properly

A single speed test with the VPN on tells you very little. Do it this way:

  1. Run a speed test without the VPN and note download, upload, and ping. Use a wired connection or sit next to the router; Wi-Fi noise can be bigger than the VPN's effect.
  2. Connect to the nearest server and run the same test on the same site within a few minutes.
  3. Try one or two other nearby servers. Load varies from server to server.
  4. Switch protocol and repeat once.
  5. Check the What Is My IP page to confirm you were actually connected during the tests.

Compare ping first, then download. A ping that went from 15 ms to 40 ms with the same download speed is a healthy VPN connection. A ping that went to 300 ms means you are routing through the wrong part of the world.

Fixing a slow VPN: a checklist

  • Pick a closer server. Distance is the most common cause. Auto-select is usually right; if not, choose the nearest country by hand on the server list.
  • Switch protocol. WireGuard or VLESS instead of OpenVPN can double throughput on the same server.
  • Try another server in the same country. If one is busy, its neighbor may not be.
  • Turn off multi-hop or double VPN unless you specifically need it. Two servers mean two detours.
  • Check the router. If the VPN runs on your router, its CPU is probably the limit. A phone with the app will often be faster than a budget router doing the encryption for the whole house.
  • Use the app's split tunneling for traffic that does not need the VPN, such as a game or a local backup.
  • Test on another device. If only one device is slow, the problem is that device: an old app version, an antivirus inspecting traffic, or a browser extension.
  • Look at IPv6. Some connections fall back to slow paths when IPv6 is half-configured. Disabling IPv6 for the VPN connection sometimes fixes strange slowness; the IPv6 leak test shows whether IPv6 traffic is escaping the tunnel at all.

When traveling

Hotel and airport networks are slow before any VPN is involved, and they often throttle each device. On these networks the VPN's own overhead is a small part of the picture. Connect to a server in the country you are in, not in the country you came from, and use WireGuard or VLESS; both handle lossy Wi-Fi better than OpenVPN. If a connection keeps dropping, that is the network, not the tunnel, and a protocol that reconnects quickly helps more than raw speed.

404 VPN uses VLESS and WireGuard, picks the fastest available server automatically, and lets you choose a location by hand from servers across Europe, the Americas, and Asia. The app shows latency and load for each server, so you can see why one is faster than another before you connect. You can read how the connection works on the how it works page or get started on the home page.