The best VPN for cruise ship Wi-Fi is NordVPN: it scores 5/5 on speed and 4/5 on getting through restrictive networks in our database, which is what you need on a crowded satellite connection. And yes, you should use one. Ship Wi-Fi is a single shared network for thousands of passengers, and you’ll probably log in to your bank, email and booking apps on it.

Cruise Wi-Fi has changed

A few years ago, cruise internet was a slow, expensive way to check email. Most of the big lines have since moved to low-orbit satellite internet, mainly SpaceX’s Starlink. Cruise Critic keeps a list of the ships and lines using Starlink, and it now covers most mainstream fleets.

The result: you can stream, video call and work from a cruise ship in 2026. That’s great. It also means people now do everything on ship Wi-Fi that they’d do at home, including things they really shouldn’t do on a shared network without protection.

Why ship Wi-Fi needs a VPN

It’s one big public network. Every passenger who buys a package joins the same network. You don’t know who’s on it, and you can’t check how it’s configured.

Fake hotspots are easy to set up. Someone can create a network called “Ship-WiFi-Free” with a phone. If you connect to it by mistake, they can see your traffic. A VPN encrypts everything before it leaves your device, so even a fake hotspot sees only scrambled data.

You’ll handle sensitive things. Shore excursion bookings, bank transfers, flight check-ins for the trip home, work email. All the things that make a stolen session expensive.

Your home services may not recognise you. Banking apps and streaming services see a satellite IP address that may geolocate to another country. A VPN server at home gives them a familiar location.

Do VPNs work on cruise ships?

Generally yes, with caveats. VPN results vary by line, ship and Wi-Fi package. A roundup of passenger reports by GigSky, an eSIM company, gives this picture:

Cruise lineVPN on ship Wi-Fi (passenger reports)
DisneyAllowed; some users say it needs the Premium plan
Royal CaribbeanAllowed on Voom; streaming over VPN may be restricted
Norwegian (NCL)Supported on Premium plan, not guaranteed
CarnivalWorks, speed depends on package
CelebrityGenerally allowed, speeds inconsistent
MSCPermitted, some success on basic package
PrincessMixed results

Treat this as a guide, not a promise. The cheapest packages are often “social media” plans that only allow certain apps, and a VPN can’t get around that: the ship sees encrypted traffic going to an unknown server and may block it. If you plan to use a VPN, buy a full internet or streaming package.

One more rule to know before you pack. Several lines ban personal networking gear. Royal Caribbean added “satellite dishes, routers, and other networking equipment” to its prohibited items, and Carnival tightened its rules on portable routers in 2024, Cruise Hive reported. Bring your VPN as an app on your devices, not on a travel router.

The best VPNs for cruise ship Wi-Fi

What matters at sea: speed (satellite links add latency, so you don’t want the VPN adding much more), the ability to get through restrictive networks, and good apps on phones.

VPNOverallSpeedBypassing restrictive networksMoney-back
NordVPN4.63/55/54/560 days
Private Internet Access3.63/54/54/530 days
Surfshark4.08/55/52/530 days
Proton VPN4.24/55/52/530 days
ExpressVPN3.72/55/53/530 days

1. NordVPN: best overall at sea

NordVPN combines 5/5 speed with obfuscated servers, which disguise VPN traffic as ordinary web traffic. That’s the feature most likely to help if a ship’s network gets fussy about VPN connections. It runs on RAM-only servers with a PwC-audited no-logs policy, and its 60-day guarantee covers even a long cruise.

Pack NordVPN for your cruise

2. Private Internet Access: flexible and cheap

PIA supports Shadowsocks and obfuscation (4/5 on bypassing restrictive networks) and its 1-year plan is $39.95 in our pricing data. Speed is 4/5. Its apps have a lot of settings, which helps if the first connection attempt doesn’t work.

3. Surfshark: best for a family cabin

Surfshark scores 5/5 on speed and 5/5 on device availability. If the whole family has phones, tablets and a laptop, it’s the easiest choice. Obfuscation is available, but its bypass score is lower (2/5).

4. Proton VPN: privacy first

Proton VPN scores 4.24/5 overall, with 5/5 on speed and a Swiss jurisdiction. Its free plan is useful as a backup on a second device.

Try Proton VPN

5. ExpressVPN: simple and fast

ExpressVPN scores 5/5 on speed and offers obfuscation (3/5 on bypass). It’s more expensive than the others here: $99.95 for a year in our data.

Want to compare all VPNs side by side? Check our full VPN comparison table with scores across 18 criteria.

How to set up your VPN before you sail

Do this at home, not on embarkation day:

  1. Install and log in on every device you’ll bring. Downloading a VPN app over ship Wi-Fi uses your paid data and can be slow.
  2. Turn on the kill switch, so nothing leaks if the satellite link drops, which it will now and then.
  3. Pick a protocol. WireGuard-based protocols (like NordLynx) reconnect faster after drops. Keep an obfuscated or TCP option as a backup.
  4. Save a favourite server in your home country for banking and streaming, and one nearby for general browsing.
  5. Test it on your home Wi-Fi so you know what “working” looks like.

On board, connect to the ship’s Wi-Fi, log in to the captive portal (the page where you enter your cabin number), and only then switch on the VPN. Turning it on before the portal loads is the most common reason people think “the VPN doesn’t work at sea.”

Satellite latency: set your expectations

Even with Starlink, a ship’s connection travels further than your home fibre, and the bandwidth is shared with everyone on board. Evenings, when everyone’s streaming in their cabin, are slower. A VPN won’t make the connection faster. Choose a VPN server close to where the ship’s traffic exits, or in your home country if you’re streaming.

Mobile data at sea is another story. When the ship’s own cellular network is active, roaming charges can be huge; switch your phone to airplane mode with Wi-Fi on. Our guide to VPNs and travel eSIMs covers data for port days.

What a VPN won’t fix on board

A VPN can’t unlock a cheaper Wi-Fi package. If you paid for a messaging-only plan, the ship’s network decides which apps work, and an encrypted VPN tunnel is more likely to be blocked than let through. It also can’t make streaming work on a package that excludes it. And it won’t stop the ship from seeing how much data you use, only what’s inside it.

What it does protect is the content of everything you send and receive, which is the part that matters when you log in to your bank from deck 9.

Port days and roaming

In port, your phone switches back to a local mobile network. Within the EU and some other regions, roaming rules keep that cheap; elsewhere, charges can be high. A travel eSIM with a local data plan is often the cheaper option for port days. Your VPN works on it the same way, and it’s worth keeping it on, because you’ll probably check bookings and pay for excursions while you’re ashore.

Ports and onshore Wi-Fi

Port cafés and terminal Wi-Fi are classic public networks. Keep the VPN on there too. Our guides to hotel Wi-Fi and in-flight Wi-Fi cover the other legs of the trip.

Our verdict

Use a VPN on cruise ship Wi-Fi: it's a shared network with thousands of strangers, and you'll do banking and bookings on it. NordVPN is our pick, with 5/5 speed, obfuscated servers and a 60-day guarantee. Buy a full internet package rather than a social-media-only plan, install the VPN at home, and connect only after the ship's login page.