An outright ban on virtual private networks is far rarer than most sales pages claim. Only three governments have closed the door entirely on private use: North Korea, Turkmenistan and Belarus. None of them is a normal tourist destination, and that fact matters more than it first appears - because the vast majority of warnings travellers encounter online describe a different, much milder kind of restriction.
The distinction is not academic. A licensing scheme, a blocked-provider list and an outright ban are three separate things, and conflating them has produced a sprawling, inaccurate mythology about where VPNs are supposedly illegal. A genuine ban means there is no lawful route to private use at all - no approved list, no licence, nothing. That is an extreme position, and almost no state takes it. Even readers who will never visit these three countries benefit from understanding the difference, since the same confusion shapes everyday decisions elsewhere - including basic questions like how to get a VPN running on a Chromebook for ordinary travel or remote work. how to get a VPN running on a Chromebook
North Korea is the simplest case precisely because it is the least informative one. There is no open internet for the public to reach in the first place; ordinary citizens operate on a sealed domestic network, while the wider web remains reserved for a small, approved elite. Banning a tool that reaches past a wall is a hollow gesture when the wall has no gate to begin with.
Turkmenistan's Enforcement Targets People, Not Platforms
Turkmenistan's approach is unusually well documented and notably more aggressive than simple domain blocking. Human Rights Watch, in its 2025 World Report, recorded that more than 122,000 domains are blocked nationwide. But the state has gone further, targeting users directly rather than merely the infrastructure they rely on.
- In February 2024, local officials disconnected internet service to households where someone had used a VPN repeatedly.
- Service was restored only after residents signed written undertakings promising to stop.
- Security forces searched hundreds of phones, and police reportedly searched pupils' phones in schools.
- Flagged households were given a formal unreliable designation - a label with consequences well beyond internet access.
This is enforcement aimed squarely at behaviour, not just technology. It treats VPN use as a marker of suspicion that follows a household, which is a materially different posture from simply filtering traffic at the network level.
Belarus and the Limits of What Is Actually Confirmed
Belarus moved earliest among the three. In February 2015, the Ministry of Communications issued a decree instructing internet providers to restrict access to listed sites at the state's request, explicitly adding anonymising services to that restricted category once identified. The obligation falls on providers, not directly on individual users - a structural detail that matters for anyone trying to assess personal risk.
Reporting since 2015 describes blocking at the infrastructure level rather than prosecutions of individual VPN users by name or case number. That gap is worth stating plainly rather than papering over: the law creates a closed door for the population, but the public record of penalties aimed at individuals remains thin.
Why the Rest of the World Looks Different
Countries like China, Russia and Iran occupy a separate tier entirely - they permit approved, licensed services while blocking unauthorised ones, which is a market-management approach rather than a prohibition. Turkey, the UAE, Egypt and Pakistan sit a tier further out still, managing providers commercially while leaving private use largely untouched. Most of the world imposes no restriction on VPN use whatsoever.
One principle holds across every tier: using any privacy tool while committing an unrelated offence remains an offence regardless of jurisdiction. The tool itself is never a legal shield. For travellers, the practical task is simple - identify which tier a destination actually falls into before assuming the worst, since genuine outright bans remain the exception, not the rule.