TunnelBear Review

About TunnelBear

TunnelBear was founded in 2011 in Toronto, Canada. Is Canada a good place to start a VPN company? Well, Canada is one of the founding members of Five Eyes, an international surveillance alliance that could force VPNs to hand over people’s data. Okay, so it’s not an ideal location for a VPN, but don’t give up hope. As I’ll discuss below, TunnelBear has a no-logging policy which means they shouldn’t have any data to hand over.

With servers in 48 countries worldwide, TunnelBear offers solid coverage for most everyday users. Keep in mind that internet speed is closely tied to how far you are from the nearest server. However, they still don’t publicly disclose how many total servers they operate. That matters because too many users per server can slow down your speeds. To find out if this will be an issue for you, I ran speed tests while connected to TunnelBear so you can judge for yourself. First, let’s dig into the features.

TunnelBear Features

Basically, TunnelBear works by creating a virtual private network when you’re connected to the Internet on your home connection or when you’re using Wi-Fi in public. This means your Internet Security Provider will only see you accessing the VPN servers, and not what websites you’re going to. Plus, your IP address will be hidden, as well.

Will TunnelBear Log My Data?

The answer to this question is always complicated. VPNs have to log some data in order to verify payment, send you emails, and help you with customer support. Besides basic information like email address and payment details, TunnelBear also collects:

• Which operating system you use
• Which months you used TunnelBear
• Total amount of data used in the current month
• Operational events, such as when you created your account, made a payment, etc.

This puts TunnelBear squarely in the middle of the pack — some VPNs collect less, others collect more. Whether that’s acceptable is ultimately your call. It’s good enough for us since it won’t log your web traffic, keeping your internet habits private.

Does TunnelBear Have A Kill Switch?

A kill switch, also known as a network lock feature, is an application feature that “kills” your internet if your VPN connection is lost. This feature could save your skin if you’re a journalist or downloading a torrent that might be copyrighted content. Without a kill switch, a momentary outage could expose your private IP address. Luckily, TunnelBear does have a kill switch, called VigilantBear, on Windows, Mac, and Android.

Does TunnelBear Offer Split Tunneling?

Split tunneling is a feature that allows you to route some web traffic to your Internet Service Provider (ISP) and some through an encrypted VPN tunnel. For example, this feature would let you watch Netflix through your ISP unencumbered, while you are surfing the web with your VPN at the same time. TunnelBear does have split tunneling, but only on Android. They call this feature SplitBear.

Can I Use Netflix with TunnelBear?

Using a VPN to access different countries’ media libraries is an interesting quirk of these systems, and some folks actively seek out VPNs that do a good job of unlocking global content. Is TunnelBear one of them? We found it to be hit-and-miss. Netflix has become more aggressive about detecting and blocking VPN traffic, and TunnelBear is no exception. In our testing, it occasionally punched through, but not reliably enough to make it your go-to for streaming.

Can I Torrent with TunnelBear?

Torrenting with TunnelBear is technically possible — the service no longer blocks P2P traffic the way it once did. That said, TunnelBear doesn’t optimize any of its servers specifically for torrenting, so speeds and reliability can be inconsistent. If you torrent regularly, you’ll be better served by a VPN that’s built for it, with dedicated P2P servers and a proven no-logs policy like NordVPN.

TunnelBear Encryption

With all your data being transported through that shiny, new VPN tunnel, you might be wondering how secure that tunnel is. At least I would hope so! If you can’t trust the encryption of your VPN, then it’d be better to stick with your regular ISP. TunnelBear uses AES-256 for data encryption, SHA256 for data authentication, and 2048-, 3072-, or 4096-bit DH group for handshake encryption. Here’s a brief summary of this technical jargon means.

AES-256

Advanced Encryption Standard (AES) is an encryption algorithm used to encrypt data with a 128-, 192-, or 256-bit key lengths. AES-256, AES with a 256-bit key, is ubiquitous in the encryption field because it’s fast, secure, and doesn’t use much computing power. The United States uses AES-256 to encrypt top-secret information, which is why sometimes you will see this advertised as “military-grade encryption”.

SHA256

SHA, or Secure Hash Algorithm, creates a “hash” of unique characters that can be compared to authenticate passwords or keys. This is done rather than sending sensitive information in plain text across the internet. SHA256 is 256-bit SHA and is considered secure by the information security (infosec) community.

Diffie-Hellman Exchange

The Diffie–Hellman (DH) key exchange is a way of sending cryptographic keys over a public channel. The higher the number of bits, the more secure the key exchange. TunnelBear uses 2048-bit DH for Windows, 3072-bit DH for MacOS and iOS, and 4096-bit for Android.

TunnelBear Protocols

Internet protocols determine how data packets travel across a network, and the protocol a VPN uses has a direct impact on its security and speed. TunnelBear supports WireGuard and OpenVPN on Windows, macOS, Android and iOS. They also support IKEv2 on Windows, macOS and iOS. We prefer WireGuard as it offers strong security and excellent speeds. That said, all of these protocols are considered highly secure by the infosec community. You can find more details on each below.

OpenVPN

OpenVPN is an open-source VPN protocol used to make secure tunnels for your web traffic. OpenVPN is sometimes referred to as the gold standard when it comes to VPN protocols, and rightly so because it offers a good balance of speed and security. It offers up to 256-bit encryption using the Open SSL library and many other security features that can be configured as desired with protocols such as PPTP, L2TP, IKEv2/IPSec, SSTP, and more.

IKEv2

Internet Key Exchange version 2 is a widely used VPN protocol that automatically re-establishes your connection with your VPN after you’re disconnected from the Internet. This comes in handy when you would like to switch between Wi-Fi and mobile hotspots, which happens all the time when you’re on a mobile phone.

WireGuard

WireGuard is known for its simplicity and performance. It uses state-of-the-art cryptography and is designed to be faster than traditional protocols like OpenVPN and IPSec.

IPSec

IPSec, or Internet Protocol Security, is a collection of internet protocols to securely send data over an internet connection. These protocols can authenticate and encrypt the packets of data sent. As I mentioned, IPSec can use a variety of ciphers and algorithms, so its strength depends on the algorithms used.

Testing TunnelBear

Now that we’ve covered TunnelBear’s features, it’s time to put the service to the test. A good VPN needs to do two things well: stay fast and never leak your IP address. Here’s how TunnelBear holds up across different platforms.

Speed Test

Whichever VPN you choose, you’ll have to accept the fact that it will slow down your Internet at least marginally. The extra protection from VPN security protocols comes at a price. Please note that your Internet speed is determined by many factors— time of day, location, Internet Service Provider, VPN server distance, and of course the VPN service provider. So TunnelBear may be faster or slower for you. I’m testing TunnelBear in Warsaw, Poland on a Macbook Pro and Lenovo ThinkPad.

Download Speed Tests

When it came to download speeds, TunnelBear performed better on my Mac than on my Windows computer, with a 45% decrease on my Macbook Pro and a 53% decrease on my Windows computer. For percentages, these are pretty average. But I will say that I’m surprised that my Mac download speed stayed above 250 Mbps.

Upload Speed Tests

For upload speeds, TunnelBear slowed down my upload speed significantly more on the ThinkPad than on the Macbook Pro, with a difference of about 82% compared to 15% on the Macbook Pro. This time the difference was massive, with my Mac performing remarkably better.

Ping Speed Tests

And finally, I want to take a look at ping, or latency. This time, my Windows computer came out ahead. While TunnelBear increased latency by 182% on my Windows, my ping increased 467% on my Mac. That’s pretty bad for my Mac, considering the server I was connecting to was close to me. Overall, TunnelBear performed well on my Mac, and was mediocre on my Windows laptop.

DNS Leak Test

DNS stands for Domain Name Server, which is the address of the sites you visit on the internet converted to numbers, “198.105. 232.4” for example. Sometimes, even after connecting to a VPN, your computer will continue to use your ISP’s DNS addresses instead of the VPN’s. This DNS leak will give away your private IP address and make your VPN useless. I performed DNS leak tests on both my Mac and Windows computers and found that TunnelBear passes DNS leak tests.

WebRTC Leak Test

Are you going to use your VPN with web browsers like Chrome, Firefox, Microsoft Edge, or Opera? If so, you need to know about WebRTC leaks. WebRTC, otherwise known as Web Real-Time Communication Test, allows web browsers to communicate directly with each other rather than going through an intermediate server. WebRTC makes for faster speeds for video chat, live streaming, and file transfers. You’re probably waiting for the bad news.

Well, any two devices that are communicating with WebRTC need to know each others’ private IP addresses. So theoretically, a website or third party could use WebRTC to detect your real, private IP address. That’s no good. What’s the point of an encrypted VPN tunnel if your browser will give away your private IP address anyways? I tested TunnelBear and luckily, TunnelBear doesn’t allow WebRTC leaks.

TunnelBear Subscription Information

Now that you know how TunnelBear performs, let’s talk about cost. One thing I genuinely appreciate about TunnelBear is that you can try it for free. The free plan gives you 2 GB of data per month — enough to get a feel for the interface and performance, but not enough for streaming or heavy browsing. If you want to use it daily, you’ll need to step up to a paid TunnelBear subscription.

Personal Subscription Options

Team Subscription Options

TunnelBear’s pricing is pretty competitive, running from about $3 to $10 a month depending on your plan. Team plans come in at $5.75 per user per month. For comparison, even one of our top picks, ExpressVPN plans range between $3.49 and $12.99 a month. You can pay for TunnelBear using a credit card or Bitcoin — and once upon a time, you could apparently pay with a jar of honey. No, seriously.

Options

You’ll be able to connect unlimited devices simultaneously on one subscription. You can also use the same protocol across multiple devices without issues. With any subscription, you’ll be able to switch between an unlimited number of servers.

Manual Configurations

Apps are nice and all, but what if you want to connect TunnelBear on a device that doesn’t use iOS, Android, Mac, or Windows. In that case, you’ll need to manually configure TunnelBear.  You can only manually configure TunnelBear on Linux. You’re out of luck if you were hoping to connect TunnelBear with eReaders, Windows mobile devices, AppleTV or AndroidTV, game systems, or on routers.

Supported Browsers

TunnelBear has browser extensions for Chrome, Firefox, and Opera, in case you’re someone who doesn’t like to bother with apps.

TunnelBear Customer Support

If you’re having trouble connecting to TunnelBear or with your account, that’s where customer support comes in. Let’s see if TunnelBear’s customer support is there when you need it.

Features

TunnelBear offers help through email support tickets 24/7/365. I’m glad they are always available, but I wish they had a customer service phone number or even live chat support. Waiting on an email can be frustrating when your VPN cuts out during the season finale of Stranger Things. I will say they have an extensive FAQ that should be able to answer most of your questions without getting customer support involved at all.

Customer Support Ratings

TunnelBear’s app has hundreds of thousands of reviews across the Google Play Store and the Apple App Store. When we looked for reviews mentioning customer support, the picture was mixed. Some users praised the team’s friendliness and sense of humor, while others flagged slow response times and unresolved technical issues.

The TunnelBear App

TunnelBear has mobile apps for both iOS and Android, so you can stay protected on the go. Both are well-reviewed — the Android app holds 3.7 stars on the Google Play Store, and the iOS version sits at 4.7 stars on the App Store. Vera Stieler wrote in a recent five-star review,

“Been using Tunnelbear for years on several devices now and have no complaints whatsoever. A huge shoutout to the customer service who recently helped me with a question I had. You guys rock! ??”.

Recap of TunnelBear

In summary, I think TunnelBear is a good VPN with a few disadvantages, namely its spotty Netflix capabilities, being located in a Five Eyes country, and slower speeds on Windows. However, you know what they say: “different strokes for different folks”. So let’s break down TunnelBear to see if it will be a good fit for you.