Getting a new MacBook Pro? You still need a VPN — here's why.

With an ideal blend of features and user-friendliness, our favorite overall VPN — ExpressVPN — is an obvious No. 1 pick for Mac users, too. It's pricey, sure, but you definitely get what you pay for (and then some): One subscription gets you a kill switch, split tunneling, an ideal BVI jurisdiction, 24/7 support from real human beings (via chat), and a huge server network spread across almost eight dozen countries. Our only gripe is that ExpressVPN doesn't offer dedicated IPs, but that's no biggie since its servers are rotated regularly, making individual users tough to trace.

More experienced VPN users can take full advantage of NordVPN's large network and jam-packed suite of security tools, which includes double encryption; a built-in ad and malware blocker; a kill switch; and an option to route your traffic through the Onion network. (You can add a dedicated IP address and 10GB of secure cloud storage to your plan, too, but they'll cost you an extra $5 a month each.) Plus, its app connects automatically when your Mac boots up so you'll never accidentally start browsing sans protection.

Note: NordVPN suffered a minor security breach in March 2018 when a hacker exploited an insecure remote management system at a Finnish data center where the company was renting servers. However, we still think it's a strong contender in the VPN space.

Read Mashable's in-depth review of NordVPN.

Surfshark is the new kid on the block at just 3 years old, which gives us a little pause — VPNs that have had a few more years to prove themselves are way easier to trust. (A validated no-logs policy would also help.) But so far, it's got a ton going for it: It's based in the BVI; its decent-sized server network is growing fast; it offers 24/7 live chat support; and it comes with tons of security features at little to no extra cost, including a kill switch, split tunneling, multihop, and data breach protection with a private search mode. Support for unlimited simultaneous connections is the cherry on top.

A favorite among Redditors, Mullvad VPN is primarily known for two things: One, its charges its users a flat rate of €5 a month — or about $6.11 at the time of writing — so you don't have to be locked into a long-term contract to get a great price. (Pro tip: You'll score a 10% discount if you pay with Bitcoin or Bitcoin Cash.) Two, it's all-in on protecting your right to online privacy: It doesn't ask for any of your personal information (not even an email address); encourages cash and cryptocurrency payments to cover users' tracks; and undergoes independent audits of its app on the regular. Better yet, all of its software is open-source — meaning anyone can view and sift through the source code to make sure Mullvad isn't hiding anything. Just don't even think about using it for streaming — it can't unblock Netflix, and a small server network (combined with a lack of split tunneling for Mac and iOS) can make it a tad slow. 

Private Internet Access, or PIA, is a simple and easy-to-use VPN whose two-year plan starts at just $2.69 (including two bonus months), with free email breach monitoring and an ad blocker to boot. Its biggest asset is an absolutely gigantic network — it's got over 30,400 servers across almost 80 countries worldwide, which means you can always count on a speedy, stable connection. The downside is that it's not great at circumventing Netflix's geo-restrictions (shame), but if you just need a VPN for basic web-surfing or file-sharing, this time-tested provider offers a very solid solution.

Note: PIA's first independent audit was in the works at the time of writing, and it'll probably pass with flying colors — its no-logs policy has previously been held up in court twice.

Read Mashable's in-depth review of PIA.

Thanks to an attractive interface, unlimited bandwidth, and a large, globally diverse network, it's a cinch to avoid streaming geo-restrictions with CyberGhost VPN. Accessing Netflix content is definitely its forte — there are specially designed streaming servers for the platform — but it also capable of unblocking the full libraries of Disney+, Hulu, Amazon Prime Video, HBO Max, ESPN, Showtime, YouTube TV, and Crunchyroll (among many others). And if for any reason you run into issues during your Mandalorian marathon, you can fall back on some A1 customer service — CyberGhost's in-house support team has earned it the highest TrustPilot rating of all major VPN providers.

Owned by the security giant McAfee, TunnelBear is the VPN we recommend for anyone who isn't especially tech-savvy. While most VPN services' interfaces can easily overwhelm the uninitiated, TunnelBear makes it super easy to understand what's happening with your connection at any given moment with cheesy-but-cute animations of — what else? — bears traveling through tunnels. While its server network is a bit small and it doesn't have as many features as most of the other providers on this list, it's a stellar "starter VPN" for casual users — plus, regular security audits offer extra peace of mind.

Read Mashable's in-depth review of TunnelBear.

Developed by the same MIT and CERN researchers behind ProtonMail (the world's largest encrypted email service), ProtonVPN is an open-source service that's aggressively dedicated to protecting your data. Not only did it partner with Mozilla for a thorough review of its technology, but it puts all of its apps through independent security audits on an ongoing basis. (It's also stashed some of its critical infrastructure in a former Swiss army fallout shelter located 1,000 meters underground, if that tells you anything.) Users are free to peruse all of the law enforcement requests it's received in the interest of transparency — spoiler: it's never complied with any requests for user connection logs since it doesn't keep any logs — and can make good use of advanced features like Tor over VPN with a Plus or Visionary plan. (No wonder our friends over at PCMag like it so much.