ExpressVPN is also one of the best VPNs for streaming. Whether you are using a VPN with Kodi or streaming Netflix with a VPN, ExpressVPN offers great apps for streaming devices and high-capacity bandwidth for HD videos and downloads. Their customer service is also top-notch, with 24/7 live chat support and a 30 day money-back guarantee with all subscription plans. [Learn more >]
Some users will also want to research a VPN provider’s peer-to-peer (P2P) file-sharing policies. There are VPNs that block torrents. Others turn a blind eye to them, but will sell you out in a heartbeat should you be up to no good. P2P is not our main focus here, but we will note in each review whether a particular provider allows file sharing or not.
We summarize the protocols above, and look at them in detail in VPN Encryption: The Complete Guide. Although L2TP/IPsec is fine for most purposes, we only really recommend OpenVPN and IKEv2. OpenVPN is very secure if properly configured. Indeed, Edward Snowden’s documents showed that even the NSA can’t crack well-implemented OpenVPN. It is also supported by almost every provider. But it is relatively slow. The newer IKEv2 is much faster and is considered secure, but has not been battle-tested in the way that OpenVPN has. It is not as well supported at present, although it is increasingly popular with providers thanks to its speed advantages over OpenVPN.
Some VPNs offer “split tunneling,” which routes all traffic through your VPN except specific services or sites that you allow. For example, you might want to send your Web traffic through your VPN but stream Netflix on your fast, domestic connection. But these types of rules are complicated to implement without also leaking other important information, and we didn’t assess how effective they were in practice.
Routers – When you install the VPN on your router, all the devices that connect to your router will be using the encrypted VPN tunnel – without the need to install VPN software on each device. The router will only count as one VPN connection under your subscription, even if there are numerous devices using the router’s encrypted VPN connection. There are some important considerations before you do this – see my popular VPN router guide for setup tips.
VPNs also only do so much to anonymize your online activities. If you really want to browse the web anonymously, and access the dark web to boot, you'll want to use Tor. Unlike a VPN, Tor bounces your traffic through several server nodes, making it much harder to trace. It's also managed by a non-profit organization and distributed for free. Some VPN services will even connect to Tor via VPN, for additional security.
You don't have this same level of choice when it comes to your ISP, which controls your home's gateway to the entirety of the internet. While there are alternatives to Google and Facebook, most Americans have limited home ISP alternatives. Some areas have only one ISP offering wired internet access. That makes recent changes that allow ISPs to sell data from their customers all the more troubling. It's one thing to opt into a shady system, it's quite another to have no choice in the matter.
Whereas most providers say they log nothing, that’s not always the case. Some record very little data like the day you subscribed, the amount of data you’ve consumed, and delete those logs when you end the session. Other providers log your IP address, the servers you used, and store those logs. If they’re based in the US, UK or any other country with data retention laws, they can be compelled to hand over that data to law enforcement.
Yes! The fact that using a VPN will protect you when torrenting is one of the most popular reasons to use a VPN. Anyone monitoring a torrent will only see the IP address of the VPN server – not your real IP address. And your ISP cannot see what you are downloading or block you from accessing torrent sites. The only thing to be aware of is that some VPN services do not permit torrenting (or only permit legal torrenting). And you may get into trouble for doing so. So if you want to torrent, then make sure the provider you choose is happy about it. Most are, although many only permit torrenting on selected servers located in places where they are less likely to be hassled by copyright holders. For an in-depth discussion on this subject, please see our Best VPNs for Torrenting article.
When we talk about privacy, PureVPN is fairly decent choice among competitors. Not only does it offer high-end encryption but also has a no-logging policy. In regards to DNS leaks and such, not only that PureVPN has IPv6 covered as well as the more commonly used protocols, but you are guaranteed to get your money back, in case something goes amiss.
Obfuscation – Obfuscation is a key feature if you are using a VPN in China, schools, work networks, or anywhere that VPNs may be blocked. However, if you are not in a restricted network situation, obfuscation is generally not necessary and may impact performance. (See the best VPN for China guide for a great selection of VPNs with built-in obfuscation features.)
Yes. Although Netflix is now available almost everywhere, some places – notably the United States – enjoy a much larger catalog of titles than everywhere else. And some people want to access regional catalogs. In theory, all you need do to watch a local version of Netflix from somewhere else is connect to a VPN server in that country. You can sign into any regional Netflix page with any active Netflix account, no matter where that account is registered. The snag is that due to pressure from its content producers, Netflix now tries to ban IP addresses that it knows belongs to VPN and proxy services. Many VPN services have found sneaky ways around this ban, but it is a cat and mouse game. Please see our best Netflix VPNs for a list of services which still work with Netflix (most of the time).
Some VPNs offer great service or pricing but little to no insight into who exactly is handling them. We considered feedback from security experts, including the information security team at The New York Times (parent company of Wirecutter), about whether you could trust even the most appealing VPN if the company wasn’t willing to disclose who stood behind it. After careful consideration, we decided we’d rather give up other positives—like faster speeds or extra convenience features—if it meant knowing who led or owned the company providing our connections. Given the explosion of companies offering VPN services and the trivial nature of setting one up as a scam, having a public-facing leadership team—especially one with a long history of actively fighting for online privacy and security—is the most concrete way a company can build trust.
Since we're living in a connected world, security and privacy are critical to ensure our personal safety from nefarious hacks. From online banking to communicating with coworkers on a daily basis, we're now frequently transferring data on our computers and smartphones. It's extremely important to find ways of securing our digital life and for this reason, VPNs have become increasingly common.