Surfshark

What is Surfshark?

Surfshark is a commercial VPN service that encrypts your traffic and routes it through its servers, hiding your real IP from the sites you visit and protecting your connection from whoever controls the local network (for example, public Wi-Fi). It is known for allowing unlimited simultaneous devices on one subscription, which is uncommon among paid VPNs, and for having apps for Windows, macOS, Linux, Android, iOS, browsers and some TVs.

Since 2022 it has been part of the same corporate group as NordVPN (Nord Security), although both services still operate separately.

What a VPN like Surfshark is for

• Protecting your traffic on untrusted networks: hotels, airports or coffee shops.
• Privacy from your ISP, which no longer sees which domains you visit (the VPN provider does instead, so trust shifts).
• Separating your network identity when doing open-source research (OSINT) without exposing your home or company IP.
• Protecting every device in the household thanks to unlimited connections.

What a VPN does not do: it does not make you anonymous, it does not protect you from malware or phishing, and it does not replace good password hygiene and 2FA.

Main features

• Protocols: WireGuard, OpenVPN (UDP/TCP) and IKEv2.
• Kill switch: cuts internet if the tunnel drops so your real IP does not leak.
• CleanWeb: blocks ads, trackers and malicious domains.
• Bypasser (split tunneling): choose which apps or sites go outside the VPN.
• MultiHop: chain two servers.
• Camouflage mode and NoBorders: obfuscation for networks that block VPNs.
• RAM-only servers and a no-logs policy that has passed independent audits; check the reports on their site.

How to get started

1. Buy a plan on the official site and download the app for your system.
2. Sign in, choose WireGuard as the protocol (usually the fastest) and enable the kill switch.
3. Connect to the nearest server for everyday use; use other countries only when you need to.
4. Check for IP and DNS leaks.

Practical example: Surfshark on Linux with WireGuard

Besides its Linux app, Surfshark lets you generate manual configurations from your account dashboard. With a downloaded WireGuard file you can connect from the terminal, which is handy on pentesting machines or headless servers:

# Install WireGuard (Debian, Ubuntu, Parrot, Kali)
sudo apt update && sudo apt install wireguard-tools resolvconf

# Copy the configuration generated in the dashboard
sudo cp ~/Downloads/surfshark-uk.conf /etc/wireguard/surfshark.conf

# Bring the tunnel up and check it
sudo wg-quick up surfshark
sudo wg show
curl https://ifconfig.me

# Disconnect
sudo wg-quick down surfshark

If the IP returned by curl belongs to the Surfshark server, the tunnel works. To check for DNS leaks, run a leak test in your browser with the VPN connected.

Pro tips

• Mind your lab VPN: if you use OpenVPN for Hack The Box or TryHackMe, set up split tunneling or disconnect Surfshark to avoid routing conflicts.
• A VPN authorizes nothing: testing other people's systems is still illegal even if you hide your IP. Use it for privacy, not to dodge accountability.
• Check the renewal price: introductory prices are usually promotional; see what renewal costs before buying.
• Pair it with a privacy-oriented OS such as Parrot OS if you do OSINT work.

Pros and cons

• Pros: unlimited devices, fast WireGuard, good cross-platform apps, obfuscation features, published no-logs audits.
• Cons: it is a paid service (no permanent free plan), renewal prices are higher than promotional ones, and like any commercial VPN it requires trusting the provider.

Alternatives

• Parrot OS: includes AnonSurf to route traffic through Tor, a free alternative for specific anonymity needs.
• Other well-known commercial VPNs, such as NordVPN, ProtonVPN or Mullvad, are common choices; compare jurisdiction, audits and price.

Frequently asked questions

Is Surfshark free?

No. It is a paid service with several plans and a money-back guarantee for the first days; check current prices and terms on the official site.

Is it legal to use Surfshark?

Using a VPN is legal in most countries. Some countries restrict them; check local regulations. Illegal activity remains illegal, with or without a VPN.

Does Surfshark keep logs?

It states a no-logs policy and has published independent audits. Check the most recent reports on its site.

Is Surfshark useful for ethical hacking?

It helps protect your privacy while researching or working on public networks, but it is not a hacking tool and does not replace client authorization.

If you want to understand how encryption, networking and tunnels work under the hood, practice at the Hackers en Acción Academy.