KotoVPN

Country briefs

25 countries where the legal position, the filtering, or the retention regime changes what you should pick. Everywhere else, the main ranking is the answer.

There are about 195 countries. We publish 25 pages, not 195. In most of the world a VPN is legal, ordinary and unfiltered, and a page saying so with a place name in the title would be a permutation rather than a resource.

CountryStatusWhat decides it thereQualify
ChinaOnly approved services permittedObfuscation or open-source clients that can be inspected for detectable fingerprints.5/11
IranOnly approved services permittedObfuscation, and ideally a free tier — payment card access to foreign services is itself restricted.2/11
PakistanOnly approved services permittedObfuscation that survives protocol-level disruption.5/11
RussiaOnly approved services permittedObfuscation, plus a provider incorporated outside the jurisdiction so it is not subject to local filtering orders.2/11
EgyptLegal, with restrictions on useObfuscation, and the client installed before you arrive.5/11
IndiaLegal, with restrictions on useA provider incorporated outside India with an audited no-logs position, so the retention directive does not reach it.6/11
IndonesiaLegal, with restrictions on useA provider with its own DNS resolver, since local ISP DNS is where the filtering happens.11/11
Saudi ArabiaLegal, with restrictions on useA provider incorporated outside the region with no local licensing obligation.7/11
TurkeyLegal, with restrictions on useObfuscation, and apps already installed before you need them.5/11
United Arab EmiratesLegal, with restrictions on useA provider incorporated outside the Fourteen Eyes, with no local presence subject to regulatory orders.7/11
VietnamLegal, with restrictions on useA provider with no local entity subject to data localisation requirements.7/11
AustraliaLegal and unrestrictedA provider incorporated outside the Fourteen Eyes and outside the reach of assistance notices.7/11
BrazilLegal and unrestrictedA provider outside Brazilian retention obligations.7/11
CanadaLegal and unrestrictedA provider outside the Fourteen Eyes with a kill switch that fails closed.7/11
FranceLegal and unrestrictedA kill switch, and a provider outside the Fourteen Eyes.7/11
GermanyLegal and unrestrictedA verified kill switch and an audited no-logs position — a dropped tunnel is what produces an enforcement letter here.10/11
ItalyLegal and unrestrictedA kill switch, and a provider whose addresses are not themselves caught in blocking orders.11/11
JapanLegal and unrestrictedA network large enough to have local capacity rather than routing you through Singapore.8/11
NetherlandsLegal and unrestrictedA provider incorporated outside the Fourteen Eyes — worth noting that several popular providers are themselves Dutch.7/11
NigeriaLegal and unrestrictedLow cost or a free tier, since foreign card access is a real constraint.3/11
South KoreaLegal and unrestrictedModern protocol support — line speed here is high enough that the protocol becomes the bottleneck.9/11
SpainLegal and unrestrictedA kill switch and a provider outside the blocking jurisdiction.7/11
SwitzerlandLegal and unrestrictedAn audited provider — jurisdiction is already favourable, so the differentiator is evidence.10/11
United KingdomLegal and unrestrictedA provider incorporated outside the Fourteen Eyes, so a UK notice does not reach your VPN records.7/11
United StatesLegal and unrestrictedA provider incorporated outside the United States with an audited no-logs position, if your concern includes domestic legal process.6/11