Windscribe offers unlimited device connections. Yes you heard that right! The reason is that unlike the others above on this list, it doesn't offer unlimited data. So you're limited by bandwidth and data, not by devices. You get 10GB every month, and there's a free plan also but that only allows one device. There are apps for Windows, Mac and iOS but not Android, and the service also offers browser add-ons with useful features such as ad-blocking. Short range performance (to US sites) is good, but we noticed lag with transatlantic connections. However, if you’re looking to protect the data from a whole bunch of devices - an office, perhaps, or just a smart home - the support for unlimited connections is a real stand-out feature.
The theme running throughout this service is personal security. From protected DNS queries to automatic kill switches, NordVPN wants you to know that your information won’t fall into the wrong hands. It makes sense, then, that the company also accepts Bitcoin for payments. The company has recently improved its platform support, adding in iOS and Android and thus overcoming its one weakness.
IVPN goes further than the other leading candidates we considered by being transparent about who runs the service and is responsible for your privacy. The company lists its core team on its website, and its small team has an online presence on a variety of platforms. In contrast, only one employee at ExpressVPN has a public face: VP of marketing Harold Li gave us detailed answers to questions about policies and internal security, but couldn’t tell us much about who else worked there. (We discuss ExpressVPN in more detail in the Competition section—that company was almost our top pick but for this issue.)
ExpressVPN also offers custom VPN routers for maximum security and a dedicated app for Firestick. You even have support for devices like the Android TV box, PlayStation, Smart TVs and Apple TVs. All plans are backed with a 30-day refund guarantee. Other features you receive include 24/7 live chat support, ad/tracker blocking, zero-knowledge DNS for unblocking, and automatic kill switch to protect your identity upon VPN disconnection.
That said, there’s one provider that doesn’t compromise anything. Windscribe has the best free plan we’ve seen, with multiple options to upgrade to a paid plan in the future. You get 10GB of data transfer and access to a limited server network, but all the other features are left intact. That includes Windscribe’s range of privacy tools for browsers and its URL checker.
Though PIA doesn’t list its leadership on its website, that information isn’t hard to find. The founder, Andrew Lee, has been interviewed by Ars Technica; the CEO, Ted Kim, is also on the record; and privacy activist and Pirate Party founder Rick Falkvinge is listed as Head of Privacy on the company’s blog. PIA can also point to court records showing that when approached by law enforcement for detailed records, the company had nothing to provide. PIA boasts a huge network of servers and locations around the world, and though the PIA app isn’t as polished as those of some competitors, it is easy to use. Like our top pick, IVPN, its iOS app also added OpenVPN support in mid-2018. But in our speed tests, PIA was just okay, not great. When we averaged and ranked all of our speed tests, PIA came in fifth, behind our top picks as well as OVPN and ExpressVPN.
Some users will also want to research a VPN provider’s peer-to-peer (P2P) file-sharing policies. There are VPNs that block torrents. Others turn a blind eye to them, but will sell you out in a heartbeat should you be up to no good. P2P is not our main focus here, but we will note in each review whether a particular provider allows file sharing or not.
It usually relies on either Internet Protocol Security (IPsec) or Secure Sockets Layer (SSL) to secure the connection. However, SSL VPNs can also be used to supply secure access to a single application, rather than an entire internal network. Some VPNs also provide Layer 2 access to the target network; these will require a tunneling protocol like PPTP (Point-to-Point Tunneling Protocol) or L2TP (Layer 2 Tunneling Protocol) running across the base IPsec connection.
Think about it this way: If your car pulls out of your driveway, someone can follow you and see where you are going, how long you are at your destination, and when you are coming back. They might even be able to peek inside your car and learn more about you. With a VPN service, you are essentially driving into a closed parking garage, switching to a different car, and driving out, so that no one who was originally following you knows where you went.
Regarding privacy, ExpressVPN is a logless type of VPN and any traffic that goes through is considered safe from prying eyes. ExpressVPN also uses a strong encryption protocol with 256-bit ciphers, so even if traffic and communication data somehow get sniffed, they will be locked with the encryption algorithm and appear as gibberish symbols rather than bare text.
Before anything else, understand that if you want to use a VPN you should be paying for it. Free VPNs are either selling your browsing data in aggregated form to researchers and marketers, or giving you a paltry amount of data transfer every month. Either way, a basic rule of thumb is that a free VPN will not protect your privacy in any meaningful way.
Some VPNs are notoriously difficult to use — read our AirVPN review for an example — so those that offer a streamlined experience shouldn’t be overlooked. VPNs that exemplify good ease of use have a balance of power and usability, without sacrificing the core features that allow you to customize the experience. Read our TunnelBear review to see what oversimplified looks like.
In terms of general performance, Hide My Ass! around the average mark with a quick and stable 6.4MB/s (51.2Mbit/s) for FTP to 6.9MB/s (55.2Mbit/s) HTTP via UK endpoints, and 8.8MB/s (70.4Mbit/s) for FTP and 7.2MB/s (57.6Mbit/s) HTTP in the Netherlands. In other words, pretty good going. VPN connections to the U.S. are almost invariably slower than those to closer geographic endpoints, as you’d expect, the 2.12MB/s (16.96Mbit/d) we got with Hide My Ass this time around was definitely below average.
The main group of countries that can share information freely is called the Five Eyes. They come from the UKUSA agreement that, although began back in 1941, was only made public knowledge in 2005. The agreement is between Australia, Canada, New Zealand, the United Kingdom and the United States, hence the name Five Eyes. Those countries have agreed to collect, analyse and share information between each other, and much of this intelligence is believed to be related to internet activity these days.
Using Wi-Fi on the Windows laptops, we timed how long it took to connect to websites, measured latency times (how long it took a server to respond), and recorded upload and download speeds with Ookla's Speedtest meter, both with and without the VPN activated. We also timed how long it took to download a large video file, both with and without VPN activation.
For a VPN that services telecommuters, consider using a vendor that offers a firewall with separate zones for work and home machines that share an Internet connection. As Figure 2 shows, the firewall's trusted zone gives the telecommuter's work PC access to the Internet and VPN access to the corporate LAN, and an untrusted zone allows a personal machine access to the Internet only. SonicWALL and WatchGuard currently offer such firewalls, which aren't much more expensive than home routers and eliminate worries about the other computers on your telecommuters' home LANs. However, multizone home firewalls don't eliminate the need to continually verify the security of remote VPN clients.
There are different levels of security protocols, each with its own level of security and features. Some of the most common are IPSec, L2TP, IKEv2, OpenVPN, and PPTP. OpenVPN is a newer technology, but it is highly configurable and easily bypasses firewalls in any country. L2TP isn’t capable of encryption; it instead creates a tunnel, and it should be paired with IPSec, which takes care of encryption. PPTP is a protocol that has been around since the mid-1990s, but because it does not encrypt, you will want to be sure to use another protocol with it that covers encryption. IKEv2 is an IPSec-based tunneling protocol that will reestablish a VPN connection if a user temporarily loses Internet connection.
Hopefully, you’re not a candidate for government surveillance, but who knows. Remember, a VPN protects against your internet service provider seeing your browsing history. So you’re protected if a government agency asks your internet service provider to supply records of your internet activity. Assuming your VPN provider doesn’t log your browsing history (some VPN providers do), your VPN can help protect your internet freedom.
Another major concern with VPNs is speed. In general, using a VPN is going to increase your latency (or your "ping"), and decrease the speed at which you upload or download data. It's very difficult to say definitively which VPN will have the least impact on your browsing, but extensive testing can give you some idea which service is the fastest VPN.
This is when the VPN uses a gateway device to connect to the entire network in one location to a network in another location. The majority of site-to-site VPNs that connect over the internet use IPsec. Rather than using the public internet, it is also normal to use career multiprotocol label switching (MPLS) clouds as the main transport for site-to-site VPNs.