Best cheap VPN: top services up to $3/month

Best cheap VPN: top services under $3/month

If you are looking for the best cheap VPN service that really works in Russia, welcome to the reality where things are more complicated than they seem. Most Western rankings are compiled by people who have never dealt with Roskomnadzor's blocking and DPI from "Rostelecom". They compare server speeds in Amsterdam and app designs. But you just want to access Instagram.

Here is an honest breakdown: which protocols really help, how much it costs, and what not to waste money on.

Why a cheap VPN is not always bad (and what to check)

The price of a VPN is almost unrelated to its functionality in Russia. ExpressVPN at $8/month may simply not open YouTube in Moscow, while a little-known service works reliably. The reason: not the server power, but the protocol and whether the service can mask traffic as regular HTTPS.

Works where VPNs are blocked

Need a VPN that just works?

1. Download the NvoVPN app
2. Sign in with Google or email
3. Tap “Connect” — you’re done

Download for Windows Other devices →

• from 0.06 € a day
• card or crypto
• 14 servers online

What distinguishes a working budget VPN from junk

Three things that are really important for a Russian user: support for obfuscating protocols (Shadowsocks, VLESS, Obfs4), the availability of servers in countries with low ping to Russia (Finland, Netherlands, Germany), and a proper kill-switch — so that if the VPN disconnects, traffic does not leak into the open network.

Everything else — "military encryption," 10,000 servers, an app with a beautiful interface — is marketing. Sometimes this is found in good services, sometimes in bad ones. By itself, it says nothing.

Protocols that bypass DPI: Shadowsocks, VLESS/XRay, Amnezia

DPI (deep packet inspection) is a technology that providers use to analyze traffic. Classic protocols WireGuard and OpenVPN have recognizable signatures. Roskomnadzor's blocking can recognize them and slow down or block them — this is how YouTube throttling worked since 2023.

Shadowsocks masks traffic as random encrypted streams. VLESS with the Reality plugin (part of the XRay project) mimics TLS traffic from legitimate sites — this is currently one of the hardest protocols to detect. Amnezia VPN is a Russian open-source project that modifies WireGuard and OpenVPN to remove their signatures.

If your provider actively uses DPI — without one of these protocols, there will be no normal VPN, regardless of how much you pay.

Which VPNs do not work in Russia even for money

NordVPN, ExpressVPN, Surfshark — three of the most popular Western services from all reviews. All three work in Russia with varying success: sometimes they connect normally, sometimes there are constant disconnections and speeds of 1-2 Mbps on YouTube. The reason: they mainly use WireGuard and OpenVPN, which are easily detectable.

NordVPN added obfuscated servers, but they are not always stable. ExpressVPN promotes the Lightway protocol — it has a stealth mode, but support for Russian conditions is unstable and depends on the specific provider.

Top 5 cheap VPN services: comparison for users

from Russia

Below is an honest selection, where there are no "paid" top spots. One criterion: what really works against Russian blocks at minimal costs.

Selection criteria: price, protocols, performance under blocks

Price — up to $3/month with an annual subscription. Protocols — must include something other than simple WireGuard/OpenVPN. Performance under blocks — does it open YouTube, Instagram, TikTok from Russian IP providers in Moscow and regions. And a no-logs policy — at least formally.

Comparison table: price / protocols / platforms / speed

Speed — I do not specify exact figures because it depends on your provider, region, and time of day. The actual range: from 10 to 150 Mbps on the same server at different times. Trust those who say "it depends," not those who promise "300 Mbps guaranteed."

NvoVPN is a budget option with support for VLESS and Amnezia

NvoVPN is focused on the Russian market — this is noticeable. It supports VLESS with Reality and AmneziaWG out of the box, without unnecessary hassle and manual configuration. See current prices on the website.

Disadvantage — fewer servers than Western giants. But for bypassing blocks, this is rarely critical: one stable server in Germany is usually enough.

Mullvad — anonymity for a fixed price

Mullvad — €5/month fixed, with no annual discounts or marketing tricks. Accepts cash and Monero — maximum payment anonymity. Passed an independent security audit. But it works unstably in Russia without obfuscation — sometimes you need to manually enable

obfuscation mode in the settings.

Outline/self-hosted server — the cheapest option for advanced users

VPS in Finland on Hetzner or DigitalOcean costs $3–4/month. Install Outline Manager on it (5 minutes), get a Shadowsocks server. You can share the same key with 5–10 people — the total cost per person comes out to less than 50 rubles. This is honestly the best cheap VPN service for those who are not afraid of the terminal.

Disadvantage: you need to monitor the server yourself, troubleshoot on your own. If you are not ready for this — use a ready-made service.

Real tests: what works with YouTube, TikTok, Instagram, and Telegram

How to check VPN operation with YouTube restrictions

To independently check the operation of VPN with YouTube restrictions, you can use the following methods:

• Measure internet speed without VPN on speedtest.net and fast.com.
• Connect VPN and repeat measurements on the same sites.
• Check the ping to youtube.com and 8.8.8.8 via terminal before and after connecting VPN.
• Check the stability of the connection at different times of the day by conducting tests several times.
• Use dnsleaktest.com and ipleak.net to check for DNS and WebRTC leaks.
• Make sure that the necessary services and applications open with the VPN connected.

Results by platforms: YouTube, Instagram, TikTok, Twitter/X, WhatsApp

YouTube — restricted via DPI, not completely blocked. Regular WireGuard does not always help: the provider may limit WireGuard traffic if it has learned to recognize it. Shadowsocks and VLESS with REALITY help stabilize it — YouTube works in 4K without buffering.

Instagram and Facebook — completely blocked by Roskomnadzor. Any working VPN can access them, the protocol here is less critical — basic WireGuard is sufficient.

TikTok — not officially blocked in Russia yet, but it occasionally works slowly. A VPN helps stabilize the connection.

Twitter/X — blocked, accessible through any working VPN.

WhatsApp — works without a VPN. Telegram — works, but sometimes has outages in certain regions. A VPN is not currently necessary for them.

How to check if the VPN works with your specific provider

After connecting to the VPN, go to ipleak.net — it will show your real IP, VPN IP, and DNS servers. If you see your provider's addresses in the DNS section (for example, 195.34.x.x from "Rostelecom") — this is a DNS leak, the VPN is configured incorrectly.

Additionally: dnsleaktest.com → Advanced test. All DNS servers should belong to your VPN provider or neutral services like Cloudflare (1.1.1.1), but not your internet provider.

What to do if the VPN is connected but websites still do not open

First — check that the traffic is indeed going through the VPN (ipleak.net). Second — try another protocol: switch from WireGuard to Shadowsocks or VLESS. Third — change the server: sometimes a specific IP is already blocked by the provider.

If nothing helps and you are in a region with aggressive filtering (some operators in Chechnya, some corporate networks) — you need VLESS with REALITY on a non-standard port (443 or 80). This is the most difficult option to block today.

Setting up a cheap VPN on Android, iPhone, Windows, and router

Android: connect via WireGuard and v2rayNG (for VLESS)

1. Download the official WireGuard app from Google Play.
2. Import the configuration file (.conf) from your VPN provider — via QR code or file.
3. Press the switch — done. Typical mistake: kill-switch is not enabled. Go to tunnel settings → enable "Always On" and "Block connections without VPN."

For VLESS/XRay on Android use v2rayNG (available on GitHub, may not be in Google Play). You import the vmess/vless link from the provider, select the server, and press the start button. That's it.

iPhone/iOS: setup via Streisand or the official app

The problem is that many VPN apps have been removed from the Russian App Store at the request of Roskomnadzor. The solution: register a foreign Apple ID (American or Kazakh) and download from there.

1. For VLESS/XRay on iOS: the Streisand or FoXray app — both are free in the App Store (with a foreign account).
2. Import the configuration via QR code or link.
3. Allow the addition of the VPN profile in system settings — iOS will automatically ask for this.

Typical mistake: the app is installed, the configuration is added, but the VPN does not start — check that in the "VPN and Device Management" section in iOS settings the profile is indeed active.

Windows: WireGuard and OpenVPN client — step-by-step instructions

1. Download WireGuard from the official website wireguard.com — the installer is about 10 MB.
2. "Add Tunnel" → "Import from file" → select the .conf file from the provider.
3. Click "Connect." Kill-switch on Windows via WireGuard: in tunnel settings add the lineDNS = 1.1.1.1 and enable "Block non-tunneled traffic."

For VLESS on Windows — client Nekoray (GitHub) or v2rayN. The interface is in English/Chinese, but it's easy to figure out: you add a server by importing the link, press "Start."

Router: why it is needed and which firmware supports VPN

A VPN on the router protects all devices on the network at once — Smart TVs, consoles, smart bulbs. VPN client support is provided by OpenWRT, Padavan (for routers with MediaTek chips), and DD-WRT firmware. Standard TP-Link or Asus firmware — also sometimes support WireGuard in new versions.

If your router does not support VPN at all — solution: Raspberry Pi 4 with OpenWRT acts as a VPN gateway for the entire network. Or GL.iNet router — they come with OpenWRT out of the box and start from $25.

Smart TV and Apple TV: workarounds via router or DNS

On Android TV, you can install the v2rayNG APK directly. On Apple TV — only via a router with VPN or through SmartDNS. SmartDNS (for example, NextDNS or your own Pi-hole) does not encrypt traffic but changes DNS — this is enough to unblock some services.

Pitfalls of cheap VPNs: what to avoid

Free VPNs: why they cost more than paid ones in the long run

A free VPN is a business. If you’re not paying with money, you’re paying with data. Some free VPNs sell browsing history to ad networks, while others inject ads directly into the traffic. Hola VPN even uses users' devices as exit nodes — your IP can be used by someone else.

For regular use, a paid service for around 100–200 per month is the right choice. It’s cheaper than a cup of coffee and incomparably safer.

VPNs with logs: how to check the privacy policy

Look for phrases in the documents like "we do not keep logs," "no-logs policy," and information about independent audits. If the privacy policy is written in three pages of vague legal text without specifics — that’s a bad sign. The best in the industry: Mullvad and ProtonVPN have published results of actual server audits, where it was impossible to extract user data precisely because there are no logs.

Low speed and a non-functional kill switch — critical issues

A kill switch is a feature that blocks all internet traffic when the connection to the VPN is lost. Without it, your real IP becomes visible immediately upon any reconnection. Many cheap VPNs either lack a kill switch or it does not work correctly at the system level.

It’s easy to check: connect to the VPN, go to ipleak.net, remember the IP. Then disconnect the VPN manually while the page is open. Refresh the page — if it shows your real IP, the kill switch is not working.

VPN services that are blocked by Roskomnadzor itself

Roskomnadzor has blocked the websites and infrastructure of several VPN providers: among them have been NordVPN, ExpressVPN, and IPVanish at different times. Apps may be removed from the Russian App Store and Google Play. Solution: download APKs directly from the official provider websites (for Android), for iOS — use a foreign Apple ID.

If you are looking for the best cheap VPN service specifically for use in Russia — check if the provider's website is accessible without a VPN and if it has mirrors.