Using a VPN is legal in the large majority of countries, including all of the EU, the UK, the US, Canada, Australia and Japan. A smaller group regulates VPNs: use is allowed, but providers must be licensed, or using a VPN for something illegal carries extra penalties. A few countries block most VPN services and restrict use in practice. Laws change and enforcement varies, so treat this as orientation, not legal advice, and check official sources for any country you are about to enter.
Three categories, not two
Legal and unregulated. Most of the world. You can install, use and pay for a VPN freely. Anything illegal remains illegal whether or not a VPN is involved.
Legal with conditions. VPN use is permitted, but the state licenses providers, blocks unlicensed ones, or attaches penalties to using a VPN for prohibited content. In these countries the tool is not the crime; the act is. This is where most of the confusion lives.
Effectively banned. VPN use by individuals requires permission or is treated as an offense, and most services are blocked. Even here enforcement often targets providers and specific acts rather than ordinary use, but the legal exposure is real.
Country notes
Russia. Using a VPN is not illegal for individuals. Since 2017 providers are required to connect to the state blocking system, and unlicensed services are blocked at the network level; since September 2025 advertising VPNs as tools for accessing blocked content is prohibited. In practice: use is legal, many apps are blocked or unreliable, and recognizable protocols are throttled.
China. Only state-approved VPNs are permitted, and unapproved services are blocked by the national firewall. Individuals using unapproved VPNs have occasionally been fined, though enforcement mostly targets sellers. Install everything before arrival, and expect only protocols that mimic HTTPS to work.
United Arab Emirates. VPN use for legitimate purposes is legal and widespread in business. Federal Decree-Law 34 of 2021, article 10, penalizes using a false or third-party network address to commit a crime or evade detection, with heavy fines. The tool is legal; the act is what is punished. Separately, internet calling is regulated and some apps do not work normally.
Turkey. Legal. Some networks throttle known VPN protocols during periods of restricted access to particular platforms, but there is no prohibition on use.
India. Legal. Since 2022 VPN providers operating servers in India must keep user records for five years, which is why most foreign providers removed their Indian servers rather than comply. Users are not penalized.
Iran, Iraq, Oman, Belarus, Turkmenistan, North Korea. Restricted to varying degrees: licensing requirements, blocking of most services, and in some cases penalties for individual use. Check current rules before travel.
Saudi Arabia, Qatar, Kuwait, Egypt, Pakistan, Indonesia. Legal for individuals, with many VPN websites or apps blocked at the network level and penalties for accessing prohibited content by any means.
What "restricted" means in practice
Three things usually happen in a country with restrictions. App stores hide VPN apps from users located there, so you need to install before you go. Networks block or throttle protocols they recognize, so WireGuard and OpenVPN often fail while protocols that look like ordinary HTTPS, such as VLESS with Reality, keep working. And the law attaches to acts, not tools: banking, work and email through a VPN are not what the penalties are written for, while accessing prohibited content is.
None of that changes the principle: you are bound by the law of the country you are in. A VPN does not exempt you from it, and no provider can promise otherwise.
Before you travel
- Check your destination's current rules from an official or reputable source; this article is a starting point, not the final word.
- Install and sign in to the VPN app before departure, and confirm it connects. The checklist in do I need a VPN when traveling covers the rest.
- Make sure the app supports a protocol that blends in with normal traffic; the differences are explained in WireGuard vs OpenVPN.
- Keep the app updated. Blocking techniques change, and so do the countermeasures.
- Use the VPN for what it is for: protecting your connection and your accounts. Do not assume it makes any activity legal that is not.
The short version
Legal almost everywhere. Regulated in a group of countries where the act, not the tool, is what carries penalties. Effectively banned in a few, where you should read current rules carefully. Everywhere, local law applies to what you do through the tunnel.
404 VPN provides VLESS with Reality and WireGuard, selects between them based on the network, and operates servers across Europe, the Americas, Asia and the Middle East. It is a privacy tool, and its use is subject to the laws of wherever you are. Details on the security page; get started here.