Servers in country

VPNs with servers in Afghanistan

Providers with exit locations in Afghanistan: a server here gives you an address in the country. The register’s table records no mandate for VPN operators here; the briefing below sets out what the law asks of providers.

3 providersOrdered by securityUpdated 21 October 2026

The HushFleet teamRegister of 21 October 2026

Providers with exit locations in a country — a fact about a network, kept deliberately apart from where the company is registered. Only providers whose country list has a source appear: a provider that publishes nothing simply does not show up, which is a criterion already in the data rather than an editorial one.

In Afghanistan internet providers are licensed by the Afghanistan Telecom Regulatory Authority. On 29 September 2025 mobile and fibre internet were suspended nationwide, and service returned from 1 October 2025, after about 48 hours.

The Afghanistan Telecom Regulatory Authority (ATRA) is the licensing authority. In the text of the Telecommunications Services Regulation Law available in English, article 13(1) provides that no person may offer telecommunications services unless licensed by ATRA, except devices operated for private use. A communications ministry notice, undated but recording fines for the Afghan year 1389 (2010–11), applied that rule to internet companies operating without a licence.

What the law requires of a provider standing here

Under the same text, operators and service providers must give courts and other competent bodies the information they require and immediate access to their network services (article 52). User-specific information must be retained for a prescribed period where that law or another requires it, and ATRA may decide what is collected and for how long (article 53(4)).

The ministry notice also says internet companies and internet cafés had to filter and block illegal websites, and records fines on cafés that did not. Whether a VPN operator needs a licence under that law is not established.

What is restricted

On 29 September 2025 the de facto authorities suspended mobile and fibre internet nationwide “until further notice”; NetBlocks recorded activity below 1% of normal levels. Service returned from 1 October 2025. Officials gave the aim as preventing “immoral acts” and later attributed outages to ageing fibre cables, denying a ban. In May 2026 the regulator reportedly ordered residential fibre in Kabul disconnected; this was not officially confirmed.

The Law on the Propagation of Virtue and the Prevention of Vice, published in the Ministry of Justice’s Official Gazette no. 1452, dated 31 July 2024, directs in article 17 that those working for the press and news organisations publish no reports that contradict Islamic law and religion, deride or humiliate Muslims, or contain pictures of any animate object.

Whether posting can be prosecuted

The virtue law is enforced by the Ministry for the Propagation of Virtue and the Prevention of Vice. Under article 24 an enforcer may punish a wrongful act committed in plain sight by stages: exhortation, a reminder of divine displeasure, strong words, a fine, detention in a public prison for one to 24 hours or for one to three days.

The enforcer may also impose any punishment he considers appropriate that is not the exclusive prerogative of a court. A perpetrator who does not mend his ways is referred to a court (article 25).

What it means for the rows below

The 2004 Constitution’s article 24 declares liberty a natural right limited only by the freedom of others and the public interest as regulated by law. The instruments that now apply to telecommunications are the regulator’s licence regime, a law published by the de facto Ministry of Justice in 2024 and orders issued through the regulator. The order of the rows is the security score, and a server’s location is not a recommendation.

Afghanistan

Ranked by security

Only a provider that publishes a country list appears here at all — 41 of the 77 on file. The other 27 are not missing research: they publish no list, and U02_server_countries is unknown for them rather than filled from the number their marketing claims.

A provider that says “100+ countries” and enumerates none gets no page on any of them, and the count printed on its own record is the length of the list, never the claim. With 41 providers behind 180 countries, the long tail of these pages carries one or two rows.

What moved

Changes to the country lists and mandate postures of the providers listed here

Every row is the record’s own history[], filtered to U02_server_countries and P04_mandate_response; the whole log holds every field.

29 Aug 20261 changes

NordVPNResponse to a national logging mandateP04_mandate_response

not on the record changed to withdrew_physical

Acceptable
1
Proton VPN
Commercial VPNSwitzerland
Coverage147countries
Paying monthly$9.99monthly
Paying yearly$53.88yearly total
Free tierYeslimited free plan
Devices10at once
70 out of 100
Security
78 out of 100
Usability
Visit Review
Insufficient
2
NordVPN
Commercial VPNPanamaNord Security
Coverage149countries
Paying monthly$14.99monthly
Paying yearly$139.08yearly total
Free tierNopaid plans only
Devices10at once
17 out of 100
Security
70 out of 100
Usability
Visit Review
Not recommended
3
VeePN
Commercial VPNPanama
Coverage168countries
Paying monthly$11.99monthly
Paying yearly$47.84yearly total
Free tierYeslimited free plan
Devices5at once
7 out of 100
Security
77 out of 100
Usability
Visit Review

VPNs with servers in Afghanistan

Ranked by security

The other 179 countries

Changes to the country lists and mandate postures of the providers listed here

Proton VPN

NordVPN

VeePN