VPN on a 5G Network: Do You Need One and Does It Slow You Down?

Yes, a VPN works on a 5G network exactly as it does on Wi-Fi or 4G, and it’s still worth using if you want to keep your browsing away from your carrier. Expect some extra latency and a bit less throughput. On a decent 5G signal with a nearby server and a modern protocol, most people won’t notice the difference in everyday use.

The rest of this guide covers what 5G already protects, what it leaves exposed, how a VPN changes speed, and how to set things up so you keep most of your 5G performance.

What 5G already encrypts (and what it doesn’t)

A lot of people assume 5G is “encrypted, so I don’t need a VPN.” That’s partly true, but it’s a different kind of protection.

Your identity on the radio link

Older networks sometimes sent your permanent subscriber ID (the IMSI) over the air, which is what “IMSI catchers,” or fake cell towers, exploit. 5G added a fix: your permanent identifier (now called the SUPI) is encrypted into a one-time Subscription Concealed Identifier (SUCI) before it’s sent. Carriers like Verizon point to this when they say 5G encrypts customers’ identifying information.

There are caveats:

• It’s optional for operators. NIST’s CSWP 36A (final version published March 2026) describes SUCI as an optional capability in the 5G standards. It recommends operators enable it on both the network and subscriber SIMs with a non-null protection scheme. A “null” scheme means the identifier isn’t actually encrypted.
• It isn’t bulletproof. Researchers at Ruhr-Universität Bochum showed in a 2021 paper that if an attacker already knows who you are, they can still probe a 5G standalone network to check whether you’re nearby.

The important point for this guide is that a VPN does nothing for any of this. SUCI and fake-tower attacks happen at the radio and SIM level, below your VPN tunnel.

Your traffic once it leaves the tower

5G encrypts the link between your phone and the cell tower. After that, your traffic passes through your carrier’s core network and out to the internet. Your carrier handles all of it, so the radio encryption doesn’t hide anything from the carrier itself.

What your carrier can see, and why a VPN changes that

Most sites now use HTTPS, so your carrier can’t read page contents or form data. It can still see metadata: which IP addresses you connect to, often which domain names you look up, and when and how much data you send.

That data isn’t just theoretical. In October 2021 the FTC published a staff report based on orders sent to six ISPs, including AT&T Mobility, Verizon Wireless and T-Mobile, which together cover about 98% of the US mobile internet market. It found that some of these providers use web browsing data to target ads, combine app usage and browsing data, and share real-time location data with third parties. Policies may have changed since then, so check your own carrier’s current privacy settings.

With a VPN switched on, your carrier sees an encrypted connection to one VPN server and nothing about where you go after that. The VPN provider now sits in that position instead. That’s why the provider’s logging policy and independent audits matter more than its marketing.

Quick comparison

Does a VPN slow down 5G?

Some slowdown always happens, for three reasons:

1. Extra distance. Your traffic goes to the VPN server first and then on to the site. A far-away server adds latency, which you’ll feel most in video calls and online games.
2. Encryption and headers. Every packet is encrypted and wrapped in extra headers, which costs a little throughput and a little extra data.
3. The server itself. A busy VPN server can be slower than your 5G link, especially on fast mmWave or mid-band connections.

There’s a fourth factor that’s specific to mobile and fixed-wireless 5G: the carrier’s network setup. On carrier forums, some Verizon and T-Mobile 5G Home Internet users report VPN speeds far below their normal speeds. A few suspect throttling. These are anecdotal reports, not confirmed carrier policy. They usually come down to the specific VPN, protocol or server. Carrier-grade NAT (CGNAT) and smaller packet sizes also play a part. One 2021 WireGuard mailing-list thread discusses jitter and an MTU of 1420 on T-Mobile’s 4G/5G home service, for example. If you see a big drop, troubleshoot before you blame either side.

How to set up a VPN for the best 5G performance

These steps work with any reputable VPN that has official apps for iOS and Android. Always install from the App Store, Google Play or the provider’s own website.

1. Pick the closest server unless you specifically need another location. Shorter distance means lower latency.
2. Use WireGuard (or your provider’s WireGuard-based protocol) as your default. It’s generally the fastest modern option, and several providers say it’s more battery-efficient and handles roaming better than OpenVPN.
3. Try IKEv2 if you hop between Wi-Fi and mobile data a lot. Windscribe, which runs both protocols, recommends IKEv2 for frequent network switching and WireGuard for most other uses. Test both on your own phone, since results vary.
4. Turn on the kill switch / “always-on VPN.” On Android there’s a system-level always-on VPN option in the VPN settings (the exact menu path varies by manufacturer). On iOS it’s usually a setting inside the VPN app. This stops apps from sending traffic outside the tunnel during the brief drop when your phone switches cells or networks.
5. Run a speed test with the VPN on and off on the same spot and signal. If the gap is large, change server first, then protocol.
6. Use split tunneling sparingly. Excluding a latency-sensitive game or a banking app that blocks VPNs can help. Anything you exclude goes back to being visible to your carrier.

If you use your phone as a 5G hotspot

A VPN app on your phone typically protects the phone’s own traffic. Whether tethered laptops go through the tunnel depends on your OS and VPN app, and it isn’t consistent. The simplest reliable approach is to run the VPN app on each connected device too.

When you can skip the VPN

You don’t need a VPN switched on every second you’re on 5G. It makes the most sense when:

• you don’t want your carrier building an ad profile from your browsing,
• you want to hide your IP address from sites and apps,
• you regularly switch to public Wi-Fi and want the protection to follow you automatically.

If your main worry is fake cell towers or SIM-level tracking, a VPN isn’t the tool. How well you’re protected there depends largely on how your operator has configured SUCI, as NIST’s guidance points out, so keep your phone and SIM up to date and ask your carrier if this matters to you.

As of October 2026, none of this is unique to any one carrier or phone. Carrier privacy settings, VPN app features and protocol defaults do change, though, so re-check them after major OS or app updates.