Internet Law · SEARCHES

Is It Illegal to Use a VPN?

By Javaria Sagheer · Updated October 2026
TL;DR No — it is not illegal to use a VPNVPN (virtual private network): a service that encrypts your internet traffic and routes it through its own server, so websites see that server’s address instead of yours. in the United States. We found no federal law that bans VPNs, and no state law we verified punishes a person just for turning one on. What a VPN never does is change the rules underneath it: pirating movies, hacking, fraud, and harassment are exactly as illegal with a VPN running as without one. Using one to get around a streaming region lock or a school filter usually breaks a terms of serviceTerms of service: the contract you accept when you create an account. Breaking it usually costs you the account — it is not usually a crime. agreement or a school policy, not a criminal law. And a VPN is not invisibility: the company running it can be served with a subpoenaSubpoena: a formal legal demand for records. Internet providers, apps, and VPN services can all receive one. or a warrant like any other company.

A VPN Hides Your IP Address — It Doesn’t Change the Law

You’re on airport Wi-Fi with forty minutes before boarding. You tap the VPN app, a small key icon appears at the top of your screen, and the network you’re sitting on can no longer read your traffic. Ordinary, legal, and exactly what the tool is for. Then a friend leans over: “You’ve got a VPN? Then you can download anything. Nobody can tell it’s you.” Those are two different claims. One is about a privacy tool. The other is about what the law lets you do while the tool is on — and the law doesn’t look at the tool at all. Here’s what’s legal, what stays illegal, what only breaks a contract or a school rule, and what to do if a notice shows up.

Is It Illegal to Use a VPN? The Short Answer

Using a VPN is legal in the United States. A VPN encrypts your traffic and routes it through the VPN company’s server, so the sites you visit see that server’s IP addressIP address: the number that identifies your connection on the internet. Your internet provider assigns it and keeps records of who had it and when. instead of yours. We found no federal statute that bans using one. The Federal Trade Commission’s consumer guidance describes VPN apps as one way to protect information sent over public Wi-Fi and gives tips for choosing one. The law cares about what you do, not which IP address you did it from. Copyright infringement is the main one: a court can award $750 to $30,000 per work in statutory damages, and up to $150,000 per work if the infringement was willful (17 U.S.C. § 504(c)). Hacking falls under the Computer Fraud and Abuse Act (18 U.S.C. § 1030) and state computer-crime laws. Fraud and online stalking have their own federal statutes (18 U.S.C. §§ 1343 and 2261A). None has a VPN exception. In between sits a third category that isn’t crime at all: contracts and policies — a streaming service’s terms, a school’s acceptable-use policy, an employer’s IT rules. Break those and the usual consequence is a blocked stream, a closed account, discipline, or a lost job. This topic is mostly federal law and private contracts, so the answer barely changes from state to state. The two places state law does show up are covered below.

VPN Situations, One by One

Situation 1 · Streaming Using a VPN for Netflix — a terms-of-service problem, not a crime we could findNetflix’s Terms of Use say you may access its content “primarily within the country in which you have established your account” and only where it has “licensed such content.” Its help pages add that with a VPN on, you may only be shown titles it holds worldwide rights to. The same terms let Netflix “terminate or restrict” your service if you violate them.

That makes getting around a region lock a contract issue — the same kind of problem as sharing your Netflix password. We found no federal criminal statute aimed at a paying subscriber who watches through a VPN, and no court decision punishing one. That is a report of what we found, not a guarantee.

Situation 2 · Piracy Downloading, torrenting, or streaming pirated movies — illegal with or without a VPNThe U.S. Copyright Office puts it plainly: “Uploading or downloading works protected by copyright without the authority of the copyright owner is an infringement of the copyright owner’s exclusive rights of reproduction and/or distribution.” The owner can sue for $750 to $30,000 per work, or up to $150,000 if willful, plus attorney’s fees. A VPN changes none of those numbers.

Willful infringement can also be a federal crime — for example, copying or distributing works worth more than $1,000 at retail within any 180-day period, or infringing for commercial advantage (17 U.S.C. § 506; 18 U.S.C. § 2319). The Protecting Lawful Streaming Act of 2020 (18 U.S.C. § 2319C) added a felony for people who offer commercial pirate streaming services to the public. It is written for operators, not the audience — but that doesn’t make a pirate stream authorized.

Situation 3 · School and work Using a VPN at school or work — a policy violation firstThe network belongs to the school or the employer, and the rules sit in the acceptable-use policy you or a parent agreed to. Under the Children’s Internet Protection Act, schools that take federal E-rate internet discounts must certify that they filter the internet and monitor minors’ online activity (47 U.S.C. § 254(h)(5)). A VPN that tunnels past the filter breaks the policy, and the usual result is discipline. At a job, it can get you fired — see when you can be fired for no reason.

Is it a crime? Usually not. In Van Buren v. United States (2021), the Supreme Court read the federal hacking law narrowly: a person “exceeds authorized access” by entering parts of a computer that are off limits to him, not by misusing access he legitimately has. A broader reading, the Court warned, would make “millions of otherwise law-abiding citizens” criminals for breaking computer-use policies. The caveats: the Court left open whether a written policy alone can put part of a computer off limits, the ruling covers only the federal statute, and state computer-crime laws are worded differently.

Situation 4 · Police Can a VPN hide you from police? Less than the ads suggestA VPN moves your traffic out of your internet provider’s view and into the VPN company’s. Under the Stored Communications Act, the government can use a subpoena to require a communications provider to hand over a subscriber’s name, address, session times, “any temporarily assigned network address,” and “means and source of payment” (18 U.S.C. § 2703(c)(2)). Other records take a court order or a warrant. A provider can only produce what it keeps — so “no logs” is an advertising claim, not a legal shield.

A VPN also does nothing about the accounts you sign in to or your phone’s connection to cell towers — location records with their own rules, covered in can police track your phone.

Situation 5 · State laws State age-verification laws that mention VPNs — aimed at websites, not usersIn Free Speech Coalition v. Paxton (2025), the Supreme Court upheld a state law requiring certain adult websites to verify that visitors are 18 or older. Lawmakers have since started writing VPNs into similar laws and bills. Three we verified:

Utah — S.B. 73 took effect May 6, 2026. It treats a visitor as being in Utah if the person is actually located there, even when a VPN makes it look otherwise (Utah Code § 78B-3-1002(3)). The duties fall on websites. On September 24, 2026, a federal judge preliminarily blocked the state from enforcing that rule.

Wisconsin — Assembly Bill 105, as introduced, would have made covered sites block visitors from known VPN addresses. Lawmakers removed that language in February 2026, and the governor vetoed the bill in April 2026.

Michigan — House Bill 4938, introduced September 11, 2025, would require internet providers to block “circumvention tools,” defined to include VPNs. Its bill page shows no action after it went to committee.

None of the three, as we read them, punishes an ordinary person for simply using a VPN.

Where state law really differs: unauthorized access. Each law below punishes getting into a computer or network without permission. None of these sections mentions VPNs, but the starting penalty varies:
  • New York — Penal Law § 156.05: class A misdemeanor.
  • Florida — Fla. Stat. § 815.06(2)(a) and (3)(a): third-degree felony.
  • Texas — Penal Code § 33.02(a) and (b): Class B misdemeanor at the base level, and a state jail felony if the computer or network is owned by the government.
  • Illinois — 720 ILCS 5/17-51(a)(1): Class B misdemeanor.
  • Ohio — R.C. 2913.04(B): fifth-degree felony at the base level.
  • Washington — RCW 9A.90.050: gross misdemeanor.
To find your own state’s rule, search your state’s name plus “unauthorized access to a computer” and open the result on your state legislature’s official website.

What to Say and Do When a VPN Lands You in Trouble

Turn it off, keep the paper, bring in an adult
When a streaming app shows a VPN or proxy error:

Turn the VPN off and reload. The service is enforcing its terms, and there is nothing to argue.

When a teacher or IT administrator asks about a VPN on the school network:

“I’ve turned it off. Can you show me which part of the acceptable-use policy covers this?” Then tell a parent the same day.

When a police officer or investigator asks about your online activity:

“I’d like to talk to a lawyer before I answer questions.” If you’re under 18, add: “I want my parent here.”

None of these moments calls for an argument or a cover story. For police questions, see can police question a minor without a parent.
What to Do If You Get a Copyright Notice From Your Internet Provider
  1. Check that it’s real. Scammers copy these notices. Don’t click links in the message or pay anything through it. Sign in to your provider account the way you normally do. Report a fake at ReportFraud.ftc.gov.
  2. Tell the account holder. The notice goes to whoever pays for the internet — often a parent. They need to know the same day.
  3. Stop the activity and find the source. Check every device on the network for file-sharing apps. If nobody can account for it, change the Wi-Fi password.
  4. Save everything. Keep the notice. Write down the date you got it, the title it names, and the date and time it lists.
  5. Count the notices. Federal law protects providers that have a policy for terminating repeat infringers “in appropriate circumstances” (17 U.S.C. § 512(i)). Repeated notices can end with your service cut off.
  6. Know which papers carry deadlines. A forwarded notice is an allegation, not a lawsuit. Three things are different: a letter saying a court subpoena seeks your identity (check it for a response date); a Copyright Claims Board notice, which gives you 60 days after you are served to opt out at ccb.gov; and a federal summons and complaint, where the general deadline to answer is 21 days after you are served (Federal Rule of Civil Procedure 12(a)). Any of the three means a parent and a lawyer, right away.

VPNs: What You Can vs. Can’t Do

✓ YOU CAN LEGALLY

  • Install and use a VPN anywhere in the United States
  • Use one to protect your data on public Wi-Fi
  • Use one at home, on your own network and devices
  • Use the VPN your school or employer gives you for remote access

✗ A VPN DOESN’T LET YOU

  • Download or share pirated movies, music, or games
  • Get into accounts, networks, or devices without permission
  • Run a scam or harass someone — those laws don’t ask which IP address you used
  • Break a streaming service’s terms without risking your account
  • Bypass school or work filters without risking discipline or your job
  • Avoid a valid subpoena or warrant served on the VPN company
The trade you’re making: a VPN doesn’t erase your browsing trail — it hands it to a different company. That’s why the FTC’s tips are about the provider: research the app before you install it, review the permissions it asks for, confirm that it encrypts your information, and check whether it shares your information with third parties.

VPN Myths, Busted

Myth: “VPNs are illegal in the United States.”
False. We found no federal statute banning VPN use, and the FTC publishes consumer tips for choosing one.
Myth: “If my VPN is on, torrenting is legal.”
False. Copyright law has no VPN exception. Downloading or uploading a copyrighted work without permission is infringement, at $750 to $30,000 per work.
Myth: “A VPN makes me anonymous to police.”
False. A VPN company can receive a subpoena, court order, or warrant, and can turn over whatever records it keeps.
Myth: “Watching a pirate stream is fine because the 2020 streaming law only targets the sites.”
Overstated. That felony is aimed at people who run commercial pirate services. It doesn’t make the stream authorized, and downloading from one is ordinary infringement.
Myth: “Some states have banned VPNs.”
Not as of October 2026, in anything we verified. Utah’s 2026 law puts duties on certain websites, not on VPN users, and a federal judge blocked its actual-location rule in September 2026.

VPN Questions People Actually Ask

Tap a question to open it.
Is it illegal to use a VPN for Netflix?
It isn’t a crime under any law we found, but it does break Netflix’s Terms of Use. The terms limit viewing to the country where you set up your account and to places where Netflix has licensed the content, and they let Netflix terminate or restrict your service for violations.
Is it illegal to use a VPN at school?
Usually it’s against school rules, not against the law. Most acceptable-use policies ban tools that get around the school’s filter, and the usual consequence is discipline. State computer-crime laws are written broadly, though, so treat the school network as someone else’s property. Whether the school can also look through your device is a separate question — see can schools search your phone.
Is it illegal to download or stream pirated movies?
Yes for downloading: the U.S. Copyright Office says downloading or uploading a copyrighted work without the owner’s permission is infringement. For streaming, the 2020 federal felony targets people who run commercial pirate services, not viewers — but the stream still isn’t authorized. We did not find a court decision that squarely settles a viewer’s liability for only watching, so treat pirate streams as legal risk with no legal protection.
Can you get in trouble for torrenting?
Yes, if the file is a copyrighted work shared without permission. Copyright owners can sue individual users for $750 to $30,000 per work, up to $150,000 if willful, and your internet provider may end service for repeat infringers. Sharing files you have the right to share is legal.
Can a VPN hide you from police?
No, not reliably. Federal law lets the government demand subscriber records from communications providers with a subpoena, and other records with a court order or warrant. What comes back depends on what the VPN company keeps. A VPN also doesn’t hide the accounts you sign in to or your phone’s cell-tower location.
Has any state banned VPNs?
No state law we verified bans using a VPN as of October 2026. Utah’s S.B. 73 makes certain websites responsible for visitors physically in Utah even when they use a VPN, and a federal court blocked that provision on September 24, 2026 while the case continues. Wisconsin removed VPN-blocking language from a bill that was then vetoed.
Is a VPN legal in other countries?
Not everywhere, so check before you travel. The U.S. State Department’s travel information for China warns: “Use of a VPN in China is illegal in most cases and may result in confiscation of your device, a fine, or detention.” Look up your destination on travel.state.gov first.

VPN Law: Key Terms, Explained

VPN (virtual private network) — a service that encrypts your traffic and routes it through its own server.
IP address — the number that identifies your internet connection; your provider keeps records of who had it and when.
Terms of service — the contract you accept to use an app or site; breaking it risks your account.
Copyright infringement — copying or distributing a copyrighted work without the owner’s permission.
Statutory damages — a set range of money a court can award for infringement without proof of actual loss.
Acceptable-use policy — the written rules for a school or workplace network.

The Law Behind VPNs, Piracy, and Online Privacy

The linked case has its own full breakdown in our case library — tap the card for the whole story.
17 U.S.C. §§ 501, 504, and 506 — copyright infringementAnyone who violates a copyright owner’s exclusive rights is an infringer. Statutory damages run $750 to $30,000 per work, up to $150,000 if willful, and willful infringement is a crime in set circumstances.
18 U.S.C. § 1030 and Van Buren v. United States (2021)The federal hacking law punishes accessing a computer without authorization or exceeding authorized access. Van Buren held that the second phrase means entering areas of a computer that are off limits — not misusing access you were given.
Cox Communications, Inc. v. Sony Music Entertainment (2026)Decided March 25, 2026. The Supreme Court held that an internet provider is liable for its users’ infringement only if it intended its service to be used for infringement — by inducing it or by offering a service tailored to it. The ruling is about the provider’s liability, not the user’s.
Carpenter v. United States (2018)The Supreme Court required a warrant for a long run of cell-site location records held by a phone company — and called its own decision “a narrow one.”Read the full case →
Aylo Freesites Ltd v. Utah Division of Consumer Protection (D. Utah 2026)On September 24, 2026, a federal judge preliminarily blocked Utah’s actual-location rule for VPN users, writing: “It is undisputed that geolocation perfection is not presently possible.” The age-verification requirement itself was not blocked.

VPN Law That’s Still Moving

The edges to watch as of October 2026:
  1. Utah’s VPN provision in court — the September 24, 2026 order is a preliminary injunction, not a final ruling. The case continues.
  2. More state bills — Wisconsin’s bill was vetoed in April 2026 and Michigan’s House Bill 4938 has not left committee. Other legislatures may try their own versions.
  3. Internet providers after Cox — the Supreme Court narrowed when a provider is liable for its users’ piracy. How providers handle copyright notices from here is worth watching. Nothing in the ruling protects the individual user.
When these move, this article gets updated.
One important note: this topic is mostly federal law and private contracts, so the core answer is the same in every state. State law enters in two places — computer-crime statutes and age-verification laws — and here’s how federal and state law fit together. To check your state, search your legislature’s official bill tracker for “virtual private network.”

The Bottom Line on Whether It Is Illegal to Use a VPN

A VPN is a lawful privacy tool, and using one in the United States breaks no law we could find. What it can’t do is change what happens inside the tunnel. Piracy is still infringement at $750 to $30,000 a work. Hacking, fraud, and harassment are still crimes. A streaming service can still close your account, a school can still discipline you, and a VPN company can still be handed a subpoena. If a notice ever arrives, save it, tell a parent, and watch the deadlines. Now you know.
The tracking questionCan police track your phone? → More copyrightCan you get sued for a meme? → The whole subjectExplore Internet Law →

Sources

Primary sources: Secondary sources:

LawJustic is for educational purposes only and does not provide legal advice. Internet law mixes federal statutes, private contracts, and state laws that are changing quickly. If you receive a subpoena notice, a Copyright Claims Board notice, or court papers, talk to a parent and contact a licensed attorney right away. Last reviewed: October 2026.

Keep reading

INTERNET LAW
Is It Illegal to Make a Deepfake of Someone?
INTERNET LAW
Is Doxxing Illegal?
INTERNET LAW
Can You Go to Jail for What You Post Online?