TunnelBear Review

TunnelBear collects some information to maintain its service: your email address, device information (OS version and app version), whether you’ve been active in the previous month, and total data used (deleted at the end of each month).

This level of data collection is relatively common for a VPN service and can be justified, but it holds TunnelBear back from being a top-rated no-logs VPN, like PIA or Perfect Privacy.

TunnelBear is also based in Canada, which is an awful location for user privacy. However, its logging policy means that it’s unable to provide the IP addresses and browsing history of its users, even if it were forced to.

TunnelBear operates its own zero-log DNS servers, and it doesn’t record any of the websites you visit. This also ensures your ISP isn’t able to monitor your web browsing activity.

Who Owns TunnelBear?

TunnelBear was established in 2011 by Daniel Kaldor and Ryan Dochuk. In 2018, it was acquired by antivirus software company McAfee.

The VPN company still operates a separate team within McAfee, meaning the same employees continued to work on the VPN post-acquisition.

McAfee was also previously owned by Intel, but was sold to a number of private equity firms in March 2022, including Advent International and Permira.

Cooperated with Authorities to Help Confirm a User

In 2020, TunnelBear cooperated with US authorities by confirming a user’s account via their email address. Crucially, no further identifiable information was handed over to the authorities.

While it’s a good sign that TunnelBear didn’t share any activity or connection logs, this incident highlights the drawbacks of a Canadian jurisdiction.

Moreover, TunnelBear used to issue an annual transparency report detailing any government requests for user data. Since the incident, the company hasn’t released any further transparency reports.

That means it’s impossible to know whether it’s received more requests for user data, and whether it has confirmed more users with accounts.

Subject to Canadian & US Data Laws

While TunnelBear’s headquarters are in Toronto, its new ownership means that it’s also subject to US data laws.

Both the US and Canada form an integral part of the Five Eyes data-sharing alliance, an organization designed for powerful nations to collect and share surveillance intelligence.

Moreover, both jurisdictions are known to prosecute for minor copyright violations, which is important information if you want to use a VPN for torrenting.

While TunnelBear can be subpoenaed by Canadian and US authorities, it has a robust logging policy that prevents your IP address and browsing history from being leaked.

TunnelBear Is Not Completely Private

To summarize, we trust TunnelBear to protect our activity logs and IP address, but you shouldn’t trust it if you need to hide your VPN usage from the authorities.

Its privacy policy is better than the average VPN. TunnelBear doesn’t record any activity logs or identifying data, but it’s not a zero-logs VPN. Furthermore, its privacy-unfriendly Canadian jurisdiction, corporate ownership, and lack of a warrant canary work against it.

If you prioritize maximum privacy, an alternative no-logs VPN that has never confirmed a user’s identity is Private Internet Access (PIA).

TunnelBear is a mixed bag when it comes to streaming. Its paid version does work to unblock region-restricted content on US Netflix, HBO Max, and BBC iPlayer.

However, the VPN service’s free version only unblocks a couple of UK streaming services and Max. There are other free VPNs that are much better at bypassing geo-restrictions — try Windscribe and PrivadoVPN instead.

Tested: TunnelBear Unblocks US Netflix

In our tests, TunnelBear VPN unblocked American Netflix on nine of its 13 US servers. A majority of servers worked with Netflix, but you might have to cycle through a few if you find one that doesn’t work.

TunnelBear’s paid version worked reliably with US Netflix in our streaming tests.

The following TunnelBear server locations were immediately blocked by Netflix: Dallas, New York, San Jose, and Seattle. We weren’t even able to login with these IP addresses.

TunnelBear Unblocks Disney+ & HBO Max

TunnelBear also works with a handful of other US streaming services. Using it, we managed to stream geo-restricted content on Disney+, HBO Max, and YouTube.

However, we weren’t able to stream Amazon Prime Video — TunnelBear was detected and blocked on multiple US servers.

We used a Miami server to watch The Mandalorian with TunnelBear VPN.

TunnelBear Free Doesn’t Unblock US Streaming Platforms

In our streaming tests, TunnelBear Free didn’t perform as well as its paid version, which is to be expected.

Its free version was blocked from accessing most US streaming services, including US Netflix, Disney+, and Hulu. However, it still works with Max.

When connected to TunnelBear Free’s US server, we were blocked from logging into Netflix.

It does work well with UK services, including BBC iPlayer, All4 and ITVX.

The worst thing about streaming with TunnelBear Free is that it has a 2GB monthly data cap, which won’t let you stream for long.

Using a 100Mbps internet connection to gather VPN speed data, we tested TunnelBear Premium’s speeds on six continents. Here are our results:

As you can see, TunnelBear’s speeds are very impressive on local connections, only dropping to 95Mbps. You can expect similar results when connecting to nearby servers wherever you’re located.

We tested TunnelBear on our unbiased speed test tool.

TunnelBear’s international speeds are also impressive. We experienced an average international speed of 88Mbps when connecting to countries abroad.

These speeds are more than enough for browsing, streaming full HD 1080p video content, and mobile gaming.

You can compare TunnelBear’s local and international speeds to other leading VPNs in the bar chart below:

TunnelBear Free Speed Tests

TunnelBear Free is very fast for a free VPN. Connected to the nearest server in New York, we measured a local speed loss of just 5% – identical to the paid version.

TunnelBear Free performs only slightly worse than its paid counterpart in speed tests.

It’s similarly good for long-distance connections. For example, our normal internet speed only dropped by 26% when connecting to Australia – 10,000 miles away.

One major advantage to TunnelBear Free is that you get access to its entire paid server network, which is extremely rare for a free VPN.

Low Ping for Lag-Free Gaming

Both TunnelBear’s paid and free apps are ideal for mobile gaming. It performed exceptionally well in our ping tests — even beating ExpressVPN, the top-rated VPN for gaming.

TunnelBear VPN Free excelled in our ping tests.

While connected to a local VPN server, we recorded consistent ping times below 6ms, which is excellent for a free service.

That said, we did experience occasional disconnects from the TunnelBear server while mobile gaming, which could be improved.

Although its speeds are exceptional, TunnelBear Free only offers 2GB of monthly data, which simply isn’t enough for regular gaming.

Despite its playful design, TunnelBear takes its security seriously. This is a secure VPN — for the most part.

Both the free and paid versions use the AES-256 cipher for Windows, macOS, iOS and Android.

The OpenVPN protocol is used by default and the WireGuard, IPSec, and IKEv2 protocols are also available on iOS and Windows.

Both WireGuard and OpenVPN are secure and reliable VPN protocols, though WireGuard is the current industry-standard and our preferred protocol.

Worrying HTML5 Geolocation leaks

IP and DNS leaks can expose personal information like your IP address, physical location, and browsing activity.

Using our IP and DNS leak test tool, we found TunnelBear passed our IPv4/IPv6 leak tests, DNS leak test, and WebRTC test, but it failed to mask our geolocation.

We’re extremely disappointed that even when using TunnelBear’s web browser extension, our HTML5 geolocation was exposed. All top-tier VPNs have some sort of leak-protection or geolocation spoofing in browser extensions and clients to prevent this from happening.

TunnelBear should not leak geolocation details.

Leaking HTML5 geolocation information is very concerning, but it’s not as severe as leaking your IP address or DNS requests. As a worst case scenario, it means users will be blocked from more streaming services and won’t perform well in regions with online censorship.

Ultimately any sort of information leak disqualifies Tunnelbear from ever being a top-tier VPN.

However, it’s not completely beyond salvaging, as you can deny permission for websites to collect your HTML5 geolocation.

TunnelBear Owns its Bare-Metal Servers

All TunnelBear servers are physical (bare-metal), rather than virtual. They are physically located where you expect them to be.

Furthermore, TunnelBear owns its entire server network, including private DNS servers, so no additional third parties are involved in the maintenance of its servers.

Controlling your server infrastructure goes a long way in preventing security incidents. The NordVPN hack proved that using third-party data centers can pose significant risks.

A report by the Center for Democracy & Technology revealed that each TunnelBear server is protected by full disk encryption, malware scans, and intrusion protection software.

Not many VPNs own their entire server network, let alone an entire bare-metal server network based in the correct locations, which makes TunnelBear stand out among other mid-tier VPNs.

Effective VigilantBear (Kill Switch)

TunnelBear’s VPN kill switch is called “VigilantBear.” It blocks web traffic if the VPN connection gets disrupted. This prevents your true IP address from being exposed, and is an essential feature of any top-tier VPN.

TunnelBear passed our kill switch test on macOS.

VigilantBear is available on Windows, Mac, and Android devices, but not on iOS devices.

This is common due to Apple’s strict guidelines, but it’s still disappointing as it’s not impossible and VPNs like PIA and NordVPN offer a kill switch on iOS.

Regular Security Audits Keep TunnelBear Safe

To prove its commitment to transparency and user safety, TunnelBear has undergone multiple independent security audits.

TunnelBear commissioned cybersecurity company Cure53 to carry out five yearly independent security audits since 2017. These audits looked into TunnelBear’s apps, code, and infrastructure.

In 2019, Cure53 discovered 12 vulnerabilities of varying severity, and helped TunnelBear fix them and future-proof them. The audit concluded that TunnelBear is “a clear frontrunner among its VPN competitors when it comes to security.”

In 2020, there were “two low, two medium and one high-risk vulnerability” identified. TunnelBear claimed to fix the high-risk vulnerability immediately.

In 2021, Cure53 found four low, nine medium, three high, and three critical-risk vulnerabilities – many more vulnerabilities than the year before.

Importantly, the critical vulnerabilities were found in TunnelBear’s admin platform. They would’ve let attackers hijack admin accounts to “create a new administrator and thereby fully access both the TunnelBear and PolarBear admin portal.”

Cure53 also found one unresolved low risk vulnerability that they had previously reported on in 2018 but was still present in 2021.

While it’s great that TunnelBear commissions regular security audits and addresses most issues quickly, we are concerned that the Cure53 continues to find more critical, high risk, and medium risk vulnerabilities each year.

Missing Technical Features We’d Like to See

TunnelBear is missing some security features we’ve come to expect from premium VPN services. Here are some featured we’d like TunnelBear to add:

TunnelBear’s server network is smaller than its competitors, though still adequate for the average user. Ultimately, if you want a large number of locations then we don’t recommend it.

TunnelBear did not disclose the exact number of servers it operates for years, but it eventually revealed that it runs 5,000 individual servers. This is a well-sized server network covering 47 countries.

It’s also the only top-tier free VPN that gives you access to the same number of countries as the paid version. It’s the best free VPN for Singapore and it’s the only free VPN to offer free Indonesian IP addresses.

TunnelBear has servers in 47 countries, almost as many as IPVanish.

However, with the free version you can only access one server for each country, meaning connections can get congested and slow.

TunnelBear removed its India servers after the country introduced a law demanding VPNs log user data as well as its Ukraine server following the Russian invasion. We’re glad to see this because it shows the VPN refuses to share activity logs with authorities and can quickly adapt to new legislation while protecting its users’ privacy.

If you want lots of server locations to choose from, then we don’t recommend choosing TunnelBear. It’s not terrible, but we’ve tested top VPNs that operate servers in upwards of 100 countries. For example, Private Internet Access has servers in 91 countries.

City-Level Servers in the US & Canada

TunnelBear has city-level choices in the US and Canada only. In comparison, ExpressVPN offers a choice of cities in 11 countries.

TunnelBear’s city servers are an improvement, as it used to have no choices at all. But a large country like Australia would also benefit from city-level options.

TunnelBear has three city-level servers in Canada and 13 in the US.

We found it very easy to install and set up TunnelBear on our test devices: a Samsung Galaxy S9, iPhone 11, Lenovo T480, and Apple MacBook Pro.

You can download the app and create a free account with your email address and password. After verifying your email address, you can immediately start using TunnelBear for free.

Here’s a more detailed look at the interface of each TunnelBear application:

Desktop & Laptop (Windows & Mac)

Both desktop options have quick connection features, where you can easily open the app and click the ‘on’ button to connect to the ‘Fastest’ server.

The main problem we have with TunnelBear’s macOS app is that you can’t change protocols. This is very disappointing and is a feature that should be available on any serious VPN.

In contrast, you have the option to switch between WireGuard, OpenVPN, and IKEv2 on Windows. In settings, you can enable and disable several useful features, including:

• GhostBear
• VigilantBear
• Trusted Networks
• TCP override

Overall, TunnelBear’s desktop clients aren’t bad. If you’re a VPN beginner, you might find this is the perfect way to encrypt your connection without any hassle.

However, there’s lots of scope for improvement and the client’s interface and basic feature list could disappoint more experienced users.

Mobile (iPhone & Android)

TunnelBear’s design is consistent across both iPhone and Android devices:

There are some subtle differences between the two apps, though. On both mobile apps, you can split tunnel apps with TunnelBear, enable VigilantBear, and turn on Bear Sounds.

On iOS, you can change VPN protocol and choose between OpenVPN, IKEv2, IPSec, and WireGuard. Whereas you can’t switch protocols on Android, but you can use GhostBear obfuscation to bypass low to mid-level firewalls.

On iPhone, you also have the added bonus of customizing your TunnelBear icon.

Ideally, we’d like to see both mobile apps have access to the same technical features and at least let you switch protocols.

TunnelBear is an extremely unreliable VPN for torrenting. We tested both paid and free versions with qBittorrent and servers in seven different countries (recommended by TunnelBear).

In each test, our download was either stalled or slower than the average VPN.

TunnelBear recorded an average bitrate of only 2.8MiB/s. This is poor compared to IPVanish’s download bitrate of 9.9MiB/s, and ExpressVPN’s download bitrate of 9.4MiB/s.

Despite TunnelBear claiming to allow torrenting on all of its servers, we suspect torrenting traffic might be throttled or suspended on specific servers. In an email, TunnelBear confirmed that some locations ‘may have stricter ports for security reasons’.

There was only one server and settings combination that worked for torrenting files: a Sweden server and OpenVPN protocol, with VigilantBear disabled (though we advise enabling a kill switch whenever you torrent a file).

We often weren’t able to download our test file while connected to TunnelBear servers.

Unlike other VPNs, which offer a faster download speed for a paid service, TunnelBear Free was actually 1.4 MiB/s faster while torrenting than its paid counterpart. But the 2GB/month data allowance prevents you from downloading many files.

Even worse, TunnelBear doesn’t support port forwarding on any of its servers, which would make uploading or ‘seeding files’ faster.

If you’re planning to purchase or use a free VPN for torrenting, we highly recommend checking out PIA or Windscribe Free instead.

TunnelBear comes with native VPN apps for Windows, macOS, iOS, and Android devices. The VPN can also be manually installed on Linux devices, too.

Both the free and paid versions of TunnelBear allow you to use up to five simultaneous devices using just one subscription, which is the standard limit for VPN services.

No Router or Games Console Support & No Fire TV Stick App

It’s impossible to set up TunnelBear on a router. There are also no VPN apps for Amazon Firestick or Android TV, and no Smart DNS tool.

Basically, you won’t be able to use TunnelBear on games consoles, Apple TV, Roku and Smart TVs. This disappointing lack of compatibility clashes with its user-friendly image.

We recommend more plug-and-play VPN solutions for your PlayStation, Xbox, like ExpressVPN’s MediaStreamer feature or Surfshark’s Smart DNS.

Browser Extensions

Both browser add-ons are easy to add to your browser, with no manual configuration necessary.

There used to be an Opera extension, but that was removed. While Opera is technically capable of supporting Chrome extensions, it didn’t work when we tried TunnelBear’s.

Remember that browser extensions only encrypt web traffic from your browser, while the full VPN client encrypts all traffic to and from your device.

It’s a shame that TunnelBear’s browser extensions don’t include any extra features like an ad-blocker, for example. However, the company operates a standalone ad-blocker extension, simply called Blocker.

Additional Security Features

A useful feature is TunnelBear’s GhostBear protocol. It’s designed to mask your VPN traffic as ‘normal’ HTTPS traffic, making it harder for governments, businesses, and ISPs to detect and block your VPN connection. It will slow your traffic, though.

TunnelBear’s additional features are easy to navigate.

There’s also RememBear (password manager) and SplitBear (split tunneling) for Android.

No 24/7 Live Chat Support

TunnelBear doesn’t offer live chat support. There used to be an automated chatbot, but we haven’t been able to access it in 2024.

The best way to contact customer support is to email via an online form. But you have to be an already existing TunnelBear customer. The good thing is you can sign up for a free account and use that to contact support.

For a VPN aiming to provide a simple experience for beginners, the inability to provide immediate customer support or answer questions is disappointing.

Many premium VPN services like ExpressVPN offer 24/7 live chat to help troubleshoot user queries.