My design software has locked me out for "suspicious activity" twice now, both times from the same rented desk in Roma Norte, Mexico City, both times over the exact same shared VPN IP address. That's the unglamorous side of being a digital nomad that never makes it into anyone's caption. You can lose a chunk of a remote work day because a stranger three time zones away did something dodgy on an address you happen to be borrowing.
Quick disclosure while we're here: this site runs on affiliate links, and if you sign up for a VPN through one of mine I earn a small commission at no extra cost to you. I only mention services I've actually paid for and used on a real trip — NordVPN included — so nothing here is a guess dressed up as advice.
Here's the mechanism, in plain terms: a standard VPN puts you on a shared IP address with hundreds or thousands of other users, so when one of them trips a fraud filter, everyone sharing that address gets treated like a suspect. A friend of mine spends her Lisbon weekends surfing at Caparica beach and never thinks about any of this — she says work can wait until Monday. I've never managed to switch off that easily, so the lockouts land differently for me.
The Shared IP Problem Nobody Warns Digital Nomads About
Picture it less like an apartment block and more like a shared taxi queue — the driver doesn't know or care which passenger caused trouble last time, they just stop picking up from that corner altogether. I've had that happen while working from a coworking space in Lisbon, and it's happened from cafés, and it's happened from the flat I'm renting in Mexico City right now. The address gets blacklisted, not the person using it.
One fix that definitely didn't work: downloading a free VPN from the App Store during a bad week, thinking it would at least cover email until I sorted out something better. It capped out at 500 MB before lunchtime and dropped an iPlayer stream mid-episode, which is its own small heartbreak. Free tools are built for occasional use, not for someone logging into client servers daily from a different country each month.
Why Do CAPTCHAs and Lockouts Spike When You're Traveling?
CAPTCHAs are the smaller, more irritating cousin of the lockout. Google and plenty of other services get twitchy the moment an IP looks "busy" (and a shared VPN address looks busy by definition), so you end up clicking through blurry buses and traffic lights just to prove you're a person, sometimes several times an hour. My partner does video calls most of the day, and on one bad afternoon we were both on the same ExpressVPN connection — usually my pick for unblocking the BBC — and two devices hammering one shared address from the same room was enough to set off a fraud check on his end too.
Switching servers doesn't really fix it either — there's a small, satisfying click when you tap the toggle to jump to a new one (almost like flipping a light switch), but four or five countries logging into the same account inside an hour reads as fraud to most security systems, not as someone hunting for a faster connection.
A Dedicated IP Changes What Happens at the Login Screen
A dedicated IP is simply an address that's yours alone — you keep the VPN's encryption, you just stop sharing a reputation with strangers. The part that actually matters for remote work isn't the streaming side, though: it's that a consistent address stops your video calls and remote desktop logins from tripping your employer's security policies every time you connect from a different city, whether you're on the laptop or working off your phone from an airport lounge.
The Zero Trust Catch for Remote Workers
Plenty of companies now run on Zero Trust security, which assumes nothing is safe by default and checks your identity constantly. An IP address that changes every session makes that system nervous, and nervous firewalls mean more multi-factor prompts, more re-authentication, more explaining to an IT department why you appear to be logging in from three different countries in one week. Ask nicely and most IT teams will whitelist a single static address once you actually have one — try asking them to whitelist a VPN that reassigns itself hourly and you'll get a very different answer.
Weighing the Trade-Offs Before You Add One
None of this is free, and running two VPN subscriptions plus a dedicated-IP add-on is a genuinely redundant setup — I know that, and I do it anyway. NordVPN comes in noticeably cheaper than ExpressVPN once you commit to a longer plan, though ExpressVPN's apps feel more polished across phone, laptop, and smart TV, and its Lightway protocol reconnects fast when you hop from hotel wifi to airport wifi. ExpressVPN caps out at eight simultaneous devices, which sounds like plenty until phones, laptops, and a smart TV all want a slot at once; Surfshark, by contrast, doesn't cap device count at all, which matters more than people expect when you're traveling as a couple and both need the connection running. Setting any of this up on the road is fiddly enough that I've written separately about the best ways to use a travel router, which solves a related but different headache.
Measured against the time lost to CAPTCHAs and lockouts, the add-on isn't expensive in any way that matters — it's the kind of cost you stop noticing within a month, especially once you factor in how much of that lost time went to problems a dedicated address simply doesn't have. The geo-blocking that keeps iPlayer locked to the UK is a separate issue entirely, solved by server location rather than IP reputation, but the two get tangled together in most nomads' heads because they show up on the same login screen.
A Streaming Bonus, Almost by Accident
There's a side benefit I wasn't expecting when I first added the dedicated IP: streaming stopped being a fight too. Big broadcasters are efficient at blacklisting known VPN server ranges, but a lone dedicated address doesn't read as a VPN at all — it reads as one ordinary household in the UK. The University Challenge theme came through a café speaker in Bangkok once, mid-stream, with no buffering wheel spinning in front of it, and I actually felt my shoulders drop. Small thing. Still counts.
So Which Setup Actually Fits Your Work?
So which one do you actually need? If you're mostly streaming home shows and checking email from a beach hostel, a standard shared-IP VPN is still the simpler, cheaper choice — you don't need a static address just to watch television. But if you're logging into client servers, corporate Zero Trust systems, or design platforms that flag "suspicious activity" on sight, a dedicated IP stops being a luxury and starts being the thing that gets you through a workday without a support ticket. I ended up needing both, which says more about how I work than about VPNs in general.
If you're deciding where to start, NordVPN makes adding a dedicated IP fairly painless — no networking degree required, just an add-on toggle buried in the account settings. It won't fix a bad hotel router, and it won't make Zero Trust policies disappear, but it removes the one variable that was actually within my control, which turned out to be most of the problem.