No one-size-fits-all VPN exists. Ambiguity in the standards and differences in feature sets from vendor to vendor make the decision process fairly complex. Several factors, including your organization size, privacy requirements, and user sophistication, determine which VPN solution might suit your needs. The right product and operational procedures can securely open your network borders, increasing worker productivity while still letting you sleep at night. If you keep in mind these considerations when purchasing a VPN solution and follow a few recommendations about how to securely run it, you can achieve the Private in your Virtual Private Network without pulling out your hair in the process.
I have been using PIA for two years now. Actually, I was really skeptic when I first went to the website. It had a stock photo of a family, shady "we are the best" text all around. But hey, I subscribed to give it a try. And it worked wonderful. PIA has been an incredibly solid, fast and reliable VPN provider for me through 2 years. Never had an issue with them whatsoever.
TorGuard is incorporated in St. Kitts and Nevis, and operates out of offices mostly in the US. But most people shouldn’t be worried about the legal jurisdiction of their VPN’s offices—we detail the reach of government surveillance above. In short, we think a privacy-focused VPN with public leadership that can be trusted not to collect information about their customers is a better choice in any country, rather than an opaque company run from the most liberty-ensuring country on the planet.
No reputable VPN service logs any kind of user activity, unlike your internet service provider, which can easily log every website you visit by storing all your DNS requests sent in cleartext. The only VPN on this list that maintains 24 hours worth of basic connection logs (no activity) is VPN.ac, and they clearly state their reasons (security) for doing so. There have been shady VPNs that have cooperated with government agencies, such as PureVPN (see logging case) and I do not recommend these providers.
Many VPN services claim that if you pay their fee, they'll provide you unlimited data transmission and won't throttle your speeds. Generally, this is true, but I'll give you my standard official "unlimited" warning: It's been my experience that when a vendor says something is "unlimited," it's almost always limited. Somewhere, there will be a note in the fine print or terms of service that allows the vendor to limit you in some way. It pays to read those agreements.
In 2011, a LulzSec hacker was arrested for his involvement with an attack on the Sony Pictures website. Cody Kretsinger used HideMyAss VPN to conceal his identity, but the company complied with a court order to hand over evidence that led to his arrest. This occurred in spite of the company’s pledge not to keep any logs of user activity. HMA says it does not log the contents of its users’ internet traffic, but it does keep detailed metadata logs that include users’ real IP addresses, which was enough to charge Kretsinger with a crime.
To prevent middle-man access and to ensure that the data is sent via a secure tunnel, certain criteria should be met. The criteria include a DNS Leak Protection (over IPv4, IPv6 and WebRTC), encrypted traffic via a Private tunnel, and hopefully no logs of the data saved anywhere. However, if the government wants to see which websites and web locations a user visits, the ISP provider can demand and get that information. Thus, no real anonymity is achieved, but the specific data will be encrypted, secure and free from middle-man attacks.
KeepSolid boasts of having endpoints in 54 countries and specialised servers designed to allow you access to geo-locked streaming services undetected. While this allowed us easy access to American Netflix, the UK iPlayer endpoint was actually too slow to actually load any BBC’s content, while using the other UK endpoints were invariably detected by the website. Hopefully this will improve over time.
A remote-access VPN uses public infrastructure like the internet to provide remote users secure access to their network. This is particularly important for organizations and their corporate networks. It's crucial when employees connect to a public hotspot and use the internet for sending work-related emails. A VPN client, on the user's computer or mobile device connects to a VPN gateway on the company's network. This gateway will typically require the device to authenticate its identity. It will then create a network link back to the device that allows it to reach internal network resources such as file servers, printers and intranets, as if it were on the same local network.
A VPN client on a remote user's computer or mobile device connects to a VPN gateway on the organization's network. The gateway typically requires the device to authenticate its identity. Then, it creates a network link back to the device that allows it to reach internal network resources -- e.g., file servers, printers and intranets -- as though the gateway is on the network locally.
Probably PPTP's biggest advantage is that it lets you create an easy and inexpensive VPN between two Windows computers (e.g., in a RAS or Routing and Remote Access connection). PPTP also doesn't have the NAT-related problems that I mentioned earlier and works with non-TCP/IP protocols such as IPX. So if you're on a tight budget and you need minimal security, PPTP is certainly better than nothing. But even the budget conscious have other alternatives. Windows XP and Windows 2000 support IPSec natively, and I recommend it over PPTP.
Using a VPN will prevent most kinds of DNS attacks that would redirect you to a phishing page, but a regular old page made to look like a legit one in order to trick you into entering your data can still work. Some VPNs, and most browsers, are pretty good about blocking phishing pages, but this attack still claims too many victims to be ignored. Use common sense and be sure to verify that websites are what they say they are by looking carefully at the URL and always visiting HTTPS sites.
As seen in our worst free VPN guide, there are reasons why you should pay for a VPN. That said, you shouldn’t go broke just because you should pay. In addition to finding the cheapest VPNs on the market, we looked for the providers that offer the most value for your dollar. If you can’t afford a VPN, you can read our section below with our free recommendation.