Switching VPN providers seems simple until you either get double-billed for overlapping subscriptions or leave a gap where a router-level config quietly stops encrypting your traffic. Here’s the order that avoids both.
Why People Switch
The usual triggers are a price hike at renewal, a provider getting acquired or hit by a trust/audit controversy, needing a feature the current plan doesn’t offer (dedicated IP, more simultaneous connections, better streaming server coverage), or persistent speed problems on a specific network. Whatever the reason, the migration mechanics are the same.
Step 1: Audit Everything Currently Running the Old VPN
Before touching anything, list every place the old VPN is configured — not just the phone and laptop apps people remember, but router-level VPN setups, streaming boxes (Fire TV, Roku, Apple TV), any split-tunneling or custom DNS rules, and dedicated-IP or port-forwarding add-ons tied to the account. Router-level configs especially get forgotten, since they run silently in the background with no app icon to remind you.
Step 2: Check the Renewal Date and Refund Window
Turn off auto-renew before your next billing date so you don’t get charged for a cycle you won’t use. If you’re still inside the provider’s money-back window, request a refund before fully canceling — policies vary:
Refund Policy Comparison
| Provider | Money-Back Window | Refund Processing Time |
|---|---|---|
| NordVPN | 30 days | Up to 10 business days |
| ExpressVPN | 30 days | Within about a week |
| Surfshark | 30 days | Full refund if canceled within 30 days; no refund after, but no further charges |
If you originally subscribed through the Apple App Store, Google Play, or another app store rather than the provider’s own site, cancellation has to go through that store’s subscription settings, not the provider’s website.
Step 3: Set Up the New Provider Before Fully Canceling the Old One
Sign up with the new provider, verify the account, and get it working on your main devices before canceling the old subscription — this avoids a window where you have no VPN protection at all. A day or two of overlap costs little; a gap in coverage on public Wi-Fi or in a censored region can cost a lot more.
Step 4: Rebuild Router-Level and Device-Specific Configs
If the old VPN was configured at the router (common for covering smart TVs and consoles that can’t run a VPN app), that setup needs to be rebuilt from scratch with the new provider’s config files — router VPN setups don’t migrate automatically. Reinstall on streaming devices individually too, since those apps are often lower priority and get missed.
Step 5: Verify Before Fully Cutting Over
Once the new provider is live, check for DNS leaks (a quick DNS leak test site confirms your requests are routing through the new VPN’s servers, not your ISP’s) and confirm the kill switch is enabled if you rely on it. Only cancel the old subscription once this checks out clean.
Common Mistakes
- Canceling the old plan before the new one is confirmed working — leaves devices briefly unprotected.
- Forgetting router-level or streaming-device configs — these don’t carry over and silently keep using the old (now-inactive) VPN.
- Missing the refund window by a few days — set a calendar reminder well before the 30-day cutoff if a refund matters to you.
- Not revoking old device sessions — if the old account had shared logins, remove old devices from that account’s dashboard as a cleanup step.
FAQ
Will I be charged twice if I overlap subscriptions briefly?
Yes, for the overlap period — but a day or two of double payment is a small cost next to avoiding a coverage gap, and most people cancel the old plan within the same week.
Can I get a refund after canceling instead of before?
Policies vary by provider, but it’s safer to request the refund first, then cancel — some support flows process both at once, so check the provider’s specific cancellation page.
Do I need to uninstall the old VPN app?
Not strictly required, but uninstalling avoids accidentally reconnecting to an expired account and getting a false sense of protection.
What about a dedicated IP or port forwarding I paid extra for?
These add-ons are usually non-transferable and tied to the old account — factor the cost of re-purchasing an equivalent add-on with the new provider into your comparison before switching.
The Verdict
The safe migration order is: audit everywhere the old VPN runs, secure a refund if eligible, get the new provider working and verified everywhere before canceling, then cancel the old plan last. Skipping the “verify before cutover” step is how people end up thinking they’re protected on public Wi-Fi when a forgotten router config or streaming-device app is quietly still pointed at a dead account.
