Surfshark: The 2026 NZ Guide

What Surfshark is and why it matters for NZ users

Surfshark is a commercial VPN service that encrypts your internet traffic, routes it through servers in other countries, and masks your real IP address from websites, your ISP, and anyone monitoring your connection. For New Zealand users specifically, it is one of the more relevant options because it offers servers in Auckland and Sydney, supports the streaming services most Kiwis actually use, and prices its unlimited-device plan competitively against rivals when converted to NZD.

New Zealand sits in an awkward position for VPN users. You are geographically remote, a member of the Five Eyes intelligence alliance, and covered by the Privacy Act 2020 — a law with real teeth but one that does not prevent your ISP from logging metadata under the Telecommunications (Interception Capability and Security) Act 2013. Surfshark’s no-logs policy, independently audited, addresses part of that concern. The Five Eyes membership means any VPN provider incorporated in a Five Eyes country — including New Zealand itself — could be compelled to hand over data. Surfshark is incorporated in the Netherlands, which is outside Five Eyes, though it operates under EU data rules. That jurisdictional difference matters if you take privacy seriously.

This guide covers how Surfshark works technically, how to set it up on common NZ configurations, what to expect from performance on Chorus fibre and mobile connections, how it handles NZ and international streaming, and how it compares to the main alternatives available here.

How Surfshark works

At its core, Surfshark creates an encrypted tunnel between your device and one of its servers. Your traffic exits from the server’s IP address rather than your own, so a website in the US sees a US IP, not a Christchurch one. The encryption prevents your ISP — whether that is Spark, One NZ, 2degrees, or a smaller regional provider — from reading the content of your traffic, though they can still see that you are connected to a VPN server.

Surfshark supports three main protocols. WireGuard is the default on most platforms and the one you should use on NZ connections — it is lightweight, fast, and well-suited to the latency conditions between New Zealand and overseas servers. OpenVPN (UDP and TCP variants) is the legacy standard, more compatible with older routers but slower. IKEv2 is useful on mobile because it reconnects quickly when you switch between Wi-Fi and cellular, relevant if you are moving between Spark 5G and a home connection.

Beyond the basic tunnel, Surfshark includes a feature called NoBorders mode, which activates automatically in restrictive network environments and obfuscates VPN traffic to look like regular HTTPS. There is also MultiHop, which chains two VPN servers together for additional anonymity at the cost of speed — useful for journalists or activists, less so for streaming. The Nexus feature, introduced in recent versions, routes your traffic through an SD-WAN-style network of nodes rather than a single server, which can improve stability on long-haul connections like NZ to Europe.

The kill switch — called Kill Switch in the app — cuts your internet if the VPN drops. On a Chorus Hyperfibre connection where speeds are high and latency is low, brief VPN reconnections are less noticeable, but the kill switch remains important if you are doing anything sensitive. Enable it by default.

Recommended setup for NZ users

The following steps apply to the Surfshark desktop app on Windows or macOS, which covers the majority of NZ home users. Mobile setup is similar but with fewer configuration options.

1. Download the Surfshark app from the official website or your device’s app store. Avoid third-party APKs.
2. Open Settings and navigate to the VPN Settings or Protocol section. Set the protocol to WireGuard unless you have a specific reason to use another.
3. Enable the Kill Switch before connecting for the first time.
4. For NZ-based use — privacy on local browsing, ISP obfuscation — connect to the Auckland server. Surfshark lists this under New Zealand in the server list.
5. For Australian streaming services or lower-latency international connections, use Sydney. Expect roughly 25–30ms round-trip from most NZ cities to Sydney servers, consistent with the physical distance and undersea cable routing.
6. For US streaming (Netflix US, Hulu, etc.), connect to a US server. Los Angeles or Seattle tend to perform better from NZ than East Coast options, given the Pacific cable routes. Expect latency in the 140–160ms range from Auckland — this is a floor set by physics, not Surfshark’s infrastructure, and applies to every provider.
7. If you are on a mobile connection (Spark, One NZ, or 2degrees), switch the protocol to IKEv2 for better reconnection behaviour when moving between towers or switching to Wi-Fi.

If you want to protect your whole home network — smart TVs, consoles, devices that do not support VPN apps natively — you can configure Surfshark on a compatible router. This requires a router that supports OpenVPN or WireGuard client mode. Most ISP-supplied routers in New Zealand (the standard Spark or One NZ gateway units) do not support this. You would need a third-party router such as an Asus or GL.iNet device running custom firmware, connected behind your ONT on a Chorus fibre line.

NZ-specific considerations

ISP and infrastructure

New Zealand’s fibre rollout — predominantly through Chorus, Enable in Christchurch, and Ultrafast Fibre in the Waikato and Bay of Plenty — means a large proportion of NZ homes now have 100Mbps–4Gbps connections. On a standard 300/100 fibre plan, WireGuard on Surfshark should not be a meaningful bottleneck for typical use. On a Hyperfibre 4Gbps line, you will hit the limits of single-core VPN encryption before you hit the line speed — expect usable throughput in the 500Mbps–1.2Gbps range depending on your CPU, which is still more than sufficient for any real-world task.

Our methodology for performance assessment: we reference baseline latency figures derived from known cable distances and routing (NZ to AU via Southern Cross Cable: approximately 28ms; NZ to US West Coast: approximately 138ms minimum). Actual VPN overhead adds 5–15ms on top of those floors. We do not publish single-session benchmark numbers as representative figures — connection quality varies by time of day, server load, and your specific ISP routing.

Mobile users on Spark 5G or One NZ 5G will find VPN performance more variable. 5G mmWave coverage in NZ is limited; most 5G here is sub-6GHz, which has good range but lower peak speeds than mmWave. VPN overhead is less noticeable on mobile because the bottleneck is usually the radio link, not the encryption.

Jurisdiction and the Five Eyes

New Zealand is a founding member of the Five Eyes signals intelligence alliance alongside Australia, the UK, Canada, and the United States. This means NZ intelligence agencies can share surveillance data with partner agencies, and ISPs can be compelled to retain and disclose metadata under domestic law. A VPN does not make you invisible to intelligence agencies — it reduces what your ISP can see, but a determined state-level actor has other tools. What a good VPN with a verified no-logs policy does is remove the ISP as a source of detailed traffic data.

Surfshark’s no-logs policy has been audited by Deloitte. The company is registered in the Netherlands and subject to GDPR, which provides some structural protection against casual data requests. That said, no VPN provider can guarantee protection against a lawful order from a court with jurisdiction over their infrastructure or staff.

Data caps

Most NZ fibre plans are now unmetered, but some rural fixed wireless and satellite plans (including Starlink’s lower tiers) have soft data caps or fair-use policies. VPN encryption adds a small overhead — typically 5–15% depending on protocol and packet size — which is worth factoring in if you are on a metered connection. WireGuard has lower overhead than OpenVPN in this respect.

Surfshark and NZ streaming services

One of the most common reasons NZ users run a VPN is to access geo-restricted content, or to ensure their local streaming services work when travelling overseas. Surfshark’s performance on both fronts is relevant.

TVNZ+ and ThreeNow are geo-restricted to New Zealand IP addresses. If you are travelling — say, in Australia or the UK — connecting to Surfshark’s New Zealand server should restore access. This works reliably in our experience, though streaming platforms periodically update their IP blocklists and brief outages are possible.

Neon and Sky Sport Now operate similarly. Both are NZ-only services. Surfshark’s Auckland server restores access from abroad. Note that Sky Sport Now’s live sports streams are more aggressive about VPN detection than on-demand content — if you encounter a block, try a different NZ server IP if Surfshark offers multiple Auckland endpoints.

Whakaata Māori (formerly Māori Television) streams are also NZ-restricted and respond well to the same approach.

For accessing international libraries — Netflix US, BBC iPlayer, Disney+ US — Surfshark maintains a list of optimised servers. US servers in Los Angeles work consistently for Netflix US in our experience. BBC iPlayer requires a UK server; Surfshark’s London servers have historically been reliable for this, though iPlayer’s VPN detection is among the most aggressive of any streaming service globally.

Surfshark pricing in NZD

Surfshark does not publish NZD prices directly — it bills in USD or EUR and your bank or card provider applies the conversion. As of mid-2026, the approximate NZD equivalents based on current exchange rates are shown below. Prices fluctuate with the NZD/USD rate, which has ranged between 0.57 and 0.64 over the past 12 months.

All Surfshark plans include unlimited simultaneous device connections, which is a genuine differentiator — most competitors cap at 5–10 devices. For a household with multiple phones, laptops, smart TVs, and a tablet, this matters. Surfshark also offers a 30-day money-back guarantee, which functions as a practical trial period.

For a detailed breakdown of features, server counts, and independent test results, see our full Surfshark VPN review.

How Surfshark compares to alternatives

The main competitors NZ users consider are ExpressVPN, NordVPN, Mullvad, and ProtonVPN. Each has a different profile.

Mullvad and ProtonVPN have stronger privacy reputations among technical users — Mullvad accepts cash and does not require an email address to sign up, which is a meaningful privacy distinction. ExpressVPN is faster on some long-haul routes in independent tests but costs roughly double Surfshark on a per-month basis. NordVPN is the closest competitor to Surfshark on price and feature set; the choice between them often comes down to interface preference and which happens to be running a better promotion at the time you subscribe.

For most NZ households — families with multiple devices, users who want streaming access plus basic privacy — Surfshark’s unlimited device policy and competitive pricing make it the practical choice. For users with a specific threat model (journalists, activists, people in high-risk situations), Mullvad or ProtonVPN’s stronger anonymity features are worth the higher cost.

FAQ

Is Surfshark legal to use in New Zealand?

Yes. Using a VPN is entirely legal in New Zealand. There is no legislation that prohibits VPN use for individuals. The Privacy Act 2020 actually reinforces your right to take steps to protect your personal data. What you do while using a VPN remains subject to NZ law — a VPN does not provide legal immunity for illegal activity.

Will Surfshark slow down my Chorus fibre connection?

On a standard 100–300Mbps fibre plan, the speed reduction from WireGuard encryption is typically small enough to be imperceptible for streaming, browsing, and video calls. On a Hyperfibre line (1Gbps or 4Gbps), you will see a more noticeable reduction because single-core encryption becomes the bottleneck rather than the line itself — but throughput in the hundreds of megabits per second is still achievable, which is more than any current streaming or download use case requires. Latency to Australian and US servers is governed by physical cable distance, not Surfshark’s infrastructure.

Can I use Surfshark to watch TVNZ+ while overseas?

In most cases, yes. Connect to Surfshark’s New Zealand server before opening the TVNZ+ app or website. Your traffic will appear to originate from a NZ IP address, which satisfies the geo-restriction check. This also works for ThreeNow, Neon, Sky Sport Now, and Whakaata Māori. Streaming platforms do update their VPN detection periodically, so occasional brief failures are possible — reconnecting or trying a different server usually resolves them.

Does Surfshark keep logs of my activity?

Surfshark’s published policy states it does not log browsing activity, connection timestamps, session duration, bandwidth used, or IP addresses. This policy has been independently audited by Deloitte. The company is incorporated in the Netherlands and subject to GDPR, which creates legal obligations around data minimisation. No VPN provider can be verified with absolute certainty, but an independent audit of the no-logs claim is a meaningful step above self-attestation.

Does being in the Five Eyes affect Surfshark’s privacy protections for NZ users?

New Zealand’s Five Eyes membership means NZ intelligence agencies participate in shared surveillance programmes, and NZ ISPs can be compelled to retain metadata under domestic law. Surfshark itself is not subject to NZ jurisdiction — it is a Netherlands-registered company. However, if you are a NZ user, your traffic originates in a Five Eyes country. The VPN reduces what your NZ ISP can see, but does not insulate you from intelligence-level surveillance if you are a specific target. For most users, the practical privacy benefit of removing ISP-level visibility is the relevant consideration.

How many devices can I connect with one Surfshark subscription?

Surfshark allows unlimited simultaneous device connections on all its plans. This is one of its clearest differentiators from competitors like ExpressVPN (8 devices) and Mullvad (5 devices). A household with multiple phones, laptops, a smart TV, and a tablet can all run Surfshark concurrently on a single subscription without needing to manage which devices are connected.

What is the best Surfshark server for NZ users?

For general privacy on local browsing, use the New Zealand (Auckland) server — your traffic stays in-region and latency is minimal. For Australian content or lower-latency international access, Sydney is the logical next choice at roughly 25–30ms from Auckland. For US streaming, Los Angeles or Seattle servers typically perform better from NZ than East Coast US options, because Pacific cable routes favour the West Coast. For European content (BBC iPlayer, etc.), London servers are the standard choice, though expect 280–320ms latency — adequate for streaming but not for gaming.

Bottom line

Surfshark is a well-rounded VPN that suits the specific conditions NZ users face: geographic isolation that makes server location and latency important, Five Eyes membership that makes jurisdiction relevant, a fibre-heavy infrastructure that can actually take advantage of WireGuard’s speed, and a mix of local and international streaming services worth protecting or accessing from abroad. Its unlimited device policy removes the household management headache that affects most competitors, and its pricing — roughly NZ$4–6 per month on a two-year plan — is among the lowest in the market for a service with a credible audit trail. It is not the most privacy-hardened option available; Mullvad and ProtonVPN hold that ground. But for the majority of NZ users whose primary concerns are streaming access, ISP privacy, and basic security on public Wi-Fi, Surfshark delivers on all three without requiring technical expertise to configure.