Yes, a VPN works on most in-flight Wi-Fi, and with airlines moving to Starlink it finally works well. You should use one: plane Wi-Fi is a shared network with a few hundred strangers, and the airline and its connectivity provider can see which sites you visit. The trick is connecting in the right order (portal first, VPN second) and using a protocol that handles satellite handoffs.

Why in-flight Wi-Fi is changing

For years, airline Wi-Fi was slow, expensive and barely worth protecting. That’s changing fast. United chose Starlink for free in-flight Wi-Fi across its fleet, and Qatar Airways promotes Starlink connectivity on board. Other carriers are following. Low-orbit satellite connections are fast enough for video calls, streaming and real work at 35,000 feet.

More speed means more people doing more things on the plane network: logging into work tools, email, banking. That’s exactly when a VPN earns its keep.

Why you should use a VPN on a plane

It’s public Wi-Fi. Every passenger is on the same network. Modern websites use HTTPS, which protects the content of your traffic, but a shared network still exposes metadata, and a badly configured app or an old device can leak more. A VPN encrypts everything between your device and the VPN server. Our guide to public Wi-Fi safety explains the real risks without the scare stories.

The airline sees your destinations. Without a VPN, the onboard provider can log which domains you connect to. With one, it only sees encrypted traffic to a VPN server.

Your location jumps around. Your IP address depends on the satellite provider’s ground station, which may be in a different country from both your departure and destination. Banks, work tools and streaming apps react badly to that. A VPN gives you a stable location, usually your home country.

Fake hotspots exist. Someone can set up a hotspot called “Airline_Free_WiFi” from their seat. A VPN protects you even if you connect to the wrong one, though you should still check the official network name on the seat card.

The best VPNs for in-flight Wi-Fi

What matters on a plane: fast reconnection, a protocol that can get through restrictive networks, a reliable kill switch, and apps that don’t choke on captive portals.

VPNOverall scoreSpeedObfuscation1-year plan
NordVPN4.63 / 55 / 5Yes
ProtonVPN4.24 / 55 / 5Stealth protocol
Surfshark4.08 / 55 / 5Yes
ExpressVPN3.72 / 55 / 5Yes

NordVPN: best overall for flying

NordLynx, NordVPN’s WireGuard-based protocol, reconnects almost instantly after the brief drops that happen when a satellite link hands over. NordVPN scores 4.63/5 overall, has obfuscated servers for networks that try to block VPNs, and an audited no-logs policy. Get NordVPN before your next flight.

ProtonVPN: best for restrictive networks

Proton’s Stealth protocol wraps VPN traffic so it looks like ordinary HTTPS, which helps on networks that block standard VPN handshakes. It scores 4.24/5 overall and is based in Switzerland. The free plan is a useful backup on your phone if your main VPN struggles on a particular airline. See ProtonVPN plans.

Surfshark: best for travelling families

Unlimited devices means every family member’s phone and tablet can be protected on one account. Surfshark scores 5/5 on speed and 4.08/5 overall, and has obfuscation built in.

ExpressVPN: fast and simple, but pricier

ExpressVPN’s Lightway protocol is designed for quick reconnection, and the apps are among the easiest to use. It costs $99.95 for the first year, the most in this list.

Want to compare all VPNs side by side? Check our full VPN comparison table with scores across 18 criteria.

In almost every case, yes. Using a VPN is legal in the EU, the UK, Switzerland, the US, Canada and most countries airlines fly between. The rules that matter on board are the airline’s own terms of use for its Wi-Fi, which generally allow VPNs for work and privacy but forbid using the service for illegal activity or to get around paid tiers. The grey area is flights to or over countries that restrict VPNs themselves. The onboard connection is provided by the airline, but once you land, local law applies to you and your devices. If you’re heading somewhere with strict rules, read our VPN legality guide before you fly, and don’t count on being able to install a VPN app after arrival.

Set it up before you leave home

Install and log into your VPN at home, not at the gate. App stores can be slow or blocked on airline Wi-Fi, and some countries restrict VPN apps in their local stores. Test the connection once on your home network, note which protocol works, and save your login in a password manager so you’re not locked out at 35,000 feet.

How to connect to a VPN on a plane (the right order)

This is where most people get stuck.

  1. Turn off your VPN’s “always on” or auto-connect before boarding. Otherwise it tries to connect before you’ve accepted the airline’s terms, and nothing loads.
  2. Join the official network (check the name on the seat card or in the airline app).
  3. Open a browser and complete the captive portal: accept the terms, log in with your loyalty number or pay. If the page doesn’t appear, visit a plain http site to trigger it.
  4. Now connect your VPN. Choose WireGuard or the provider’s WireGuard-based protocol.
  5. If it won’t connect, switch to an obfuscated or Stealth option, or to OpenVPN over TCP port 443, which looks like web traffic.
  6. Turn the kill switch on, so apps don’t send data unprotected during a satellite handoff.

A useful trick for streaming, from StarlinkFlights’ inflight VPN guide: connect to a server in your home country on the airport Wi-Fi before boarding, so your streaming apps settle on that region before you’re in the air.

Which protocol works best at 35,000 feet?

Satellite links are fast but a bit jittery, and planes add frequent handoffs. That favours lightweight UDP protocols that renegotiate quickly:

  • WireGuard and derivatives (NordLynx, Surfshark’s WireGuard): best all-round choice. See our WireGuard vs OpenVPN comparison.
  • Lightway (ExpressVPN): also built for fast reconnection.
  • Stealth or obfuscated modes: use them only if the standard protocol is blocked, since they add some overhead.
  • OpenVPN TCP: a last resort. It gets through almost anything but is the slowest over a lossy link.

Things a VPN won’t fix on board

Data caps and throttling. Many airlines limit free Wi-Fi to messaging or cap bandwidth per passenger. A VPN doesn’t bypass that, and trying to use it to get paid tiers for free breaks the airline’s terms.

Blocked services by design. Some airlines restrict video calls or large downloads. A VPN may hide what you’re doing, but the bandwidth limit still applies.

Latency for gaming. Even on Starlink, you’re adding satellite latency plus VPN routing. Fine for browsing and video, not for competitive online games.

For the rest of your trip, our guides to hotel Wi-Fi and the best VPN for travel cover what to do on the ground.

Our verdict

A VPN works on most in-flight Wi-Fi, and Starlink-equipped airlines make it properly usable. Connect to the airline's portal first, then start the VPN with a WireGuard-based protocol and the kill switch on. NordVPN is our top pick for flying thanks to NordLynx and obfuscated servers, with ProtonVPN's Stealth protocol as the best fallback on restrictive networks.