VPN technology was developed as a way to allow remote users and branch offices to securely access corporate applications and other resources. To ensure safety, data travels through secure tunnels, and VPN users must use authentication methods -- including passwords, tokens or other unique identification procedures -- to gain access to the VPN server.
In an overcrowded VPN market, ExpressVPN continues to stand out from the rest and remains the top recommendation at Restore Privacy. It is based in the British Virgin Islands and offers secure, user-friendly apps for all devices. Extensive testing for the ExpressVPN review found it to be very secure, with exceptional speeds and reliability throughout the server network.
TorGuard’s signup and payment process is also fine but not stellar. Compared with that of IVPN, the checkout process is clunky, and using a credit or debit card requires entering more personal information than with our top pick. The easiest option for anonymous payments is a prepaid debit card bought locally. Otherwise, like most providers, TorGuard accepts a variety of cryptocurrencies, PayPal, and foreign payments through Paymentwall. That last service also allows you to submit payment through gift cards from other major retailers. We don’t think this method is worth the hassle for most people, but if you have some money on a fast-food gift card you don’t want, turning it into a VPN service is a nice option.
In 2016, a federal court in Australia ordered ISPs to block BitTorrent tracker sites including ThePirateBay, Torrentz, TorrentHound, IsoHunt and SolarMovie. This has proven to be somewhat effective as visits from Australia to these sites have dropped by 53%. This doesn’t take into account VPN users — the sites can still be accessed with any of the VPNs we listed above.
If HTTP browsing is a postcard that anyone can read as it travels along, HTTPS (HTTP Secure) is a sealed letter that gives up only where it’s going. For example, before Wirecutter implemented HTTPS, your traffic could reveal the exact page you visited (such as https://thewirecutter.com/reviews/best-portable-vaporizer/) and its content to the owner of the Wi-Fi network, your network administrator, or your ISP. But if you visit that same page today—our website now uses HTTPS—those parties would see only the domain (https://thewirecutter.com). The downside is that HTTPS has to be implemented by the website operator. Sites that deal with banking or shopping have been using these types of secure connections for a long time to protect financial data, and in the past few years, many major news and information sites, including Wirecutter and the site of our parent company, The New York Times, have implemented it as well.
In the most recent round of testing, we've also looked at how many virtual servers a given VPN company uses. A virtual server is just what it sounds like—a software-defined server running on server hardware that might have several virtual servers onboard. The thing about virtual servers is that they can be configured to appear as if they are in one country when they are actually being hosted somewhere else. That's an issue if you're especially concerned about where you web traffic is traveling. It's a bit worrisome to choose one location and discover you're actually connected somewhere else entirely.
DNS servers are a bit like the phone books of the Internet: You can type in “thewirecutter.com,” for instance, and one of the many DNS servers behind the scenes can point you to the IP address of a server hosting the site. Most of the time, your DNS requests automatically route through your ISP, giving the ISP an easy way to monitor your traffic. Some VPN services rely on third-party DNS servers, but the best ones keep DNS servers in-house to prevent your browsing history, or your IP address, from getting out.
Sadly, I engaged PIA, the number one rated and paid a "great price" for a 3 year service only to findout that dur to a recent SMTP abuses they no longer can be used when using Microsoft servers. So, all of my outbound email is rejected from Microsoft Servers due to this policy. In itself, fine, but as I enrolled in this service and while setting up the servie at no time was this mentioned nor, prior to a May 15 issue, was this a problem.
Using a VPN is a little trickier for ChromeOS users, however. While Google has worked to make it easier to use a VPN with a Chromebook or Chromebox, it's not always a walk in the park. Our guide to how to set up a VPN on a Chromebook can make the task a bit easier, however. In these cases, you might find it easier to install a VPN plug-in for the Chrome browser. This will only secure some of your traffic, but it's better than nothing.
Routers – When you install the VPN on your router, all the devices that connect to your router will be using the encrypted VPN tunnel – without the need to install VPN software on each device. The router will only count as one VPN connection under your subscription, even if there are numerous devices using the router’s encrypted VPN connection. There are some important considerations before you do this – see my popular VPN router guide for setup tips.

Put simply, a Virtual Private Network, or VPN, is a group of computers (or discrete networks) networked together over a public network—namely, the internet. Businesses use VPNs to connect remote datacenters, and individuals can use VPNs to get access to network resources when they’re not physically on the same LAN (local area network), or as a method for securing and encrypting their communications when they’re using an untrusted public network. Photo by Pavel Ignatov (Shutterstock).
In our review of IPVanish, I gave a four-star rating for its strong encryption, excellent performance, and a large set of servers. While it is based in the U.S., the company promises to keep no logs other than payment information, which you can also avoid by paying with Bitcoin. IPVanish has more than 40,000 unique IP addresses on more than 1,000 servers spread out over more than 60 countries, meaning you get some serious diversity. There's no limit to how many times you can switch servers, allowing you to move around until you find the absolute best. Toss in a kill switch, IPv6 and DNS leak protection, and manual port selection, and this becomes a very attractive option. Yearly plans start at about $6 per month, while monthly plans start at about $10.
IVPN was one of the fastest providers when we tested US servers using the Internet Health Test. Our budget pick, TorGuard, was faster, but it defaults to the less secure 128-bit encryption. Our non-VPN connection tested at roughly 300 Mbps down. Some tested services are not listed because connection failures prevented some of our tests from completing.
Mullvad is not that easy to use, with a bare-bones desktop interface and, unlike every other VPN service we've reviewed, no mobile client apps. (You do get instructions on how to manually set up OpenVPN apps.) This service's network speeds were far from great in our tests, and it's fairly expensive, with no discount for paying yearly instead of monthly.
Generally speaking, transfer speed tests via NordVPN’s UK endpoints continue to impress, with FTP downloads clocking 10.4MB/s (83Mbit/s) and HTTP downloads at 10MB/s (80Mbit/s). However, we saw unusually slow FTP results from our Dutch reference server, at an anomalous 5.1MB/s (40.8Mbit/s), compared to an HTTP download at 9.9MB/s (79.2Mbit/s). That said, U.S. speeds have improved on previous tests, coming in at around 3.5MB/s (28Mbit/s) for both FTP and HTTP transfers.
They’re Based in Romania – A Safe Jurisdiction, if they do collect some of your personal data, (say logs – it’s aggregated into a combined form and represents a collection of the mass or sum of all VPN.ac users). Besides possibly being on an altogether different server than your selected surfing point from, they won’t share it with any other countries. Rest assured…
If HTTP browsing is a postcard that anyone can read as it travels along, HTTPS (HTTP Secure) is a sealed letter that gives up only where it’s going. For example, before Wirecutter implemented HTTPS, your traffic could reveal the exact page you visited (such as https://thewirecutter.com/reviews/best-portable-vaporizer/) and its content to the owner of the Wi-Fi network, your network administrator, or your ISP. But if you visit that same page today—our website now uses HTTPS—those parties would see only the domain (https://thewirecutter.com). The downside is that HTTPS has to be implemented by the website operator. Sites that deal with banking or shopping have been using these types of secure connections for a long time to protect financial data, and in the past few years, many major news and information sites, including Wirecutter and the site of our parent company, The New York Times, have implemented it as well.
There’s a lot to say about CyberGhost’s VPN service. For starters, it’s got great speeds and performed stupendously on every speed test. In fact, CyberGhost touts an average of 47 Mbps globally. That’s a great average. What’s more, this company allows you to access Netflix and other popular TV and movie streaming sites, so you can enjoy HD streaming from anywhere.
Cost: You have three pricing options depending on how often you want to pay. The cheapest IPVanish plan is to buy a full year at once for $77.99, making the monthly rate $6.49/month. If you pay for three months at once for $26.99, the monthly cost comes down to $8.99/month. However, to subscribe on a monthly basis with no commitment, it will cost $10/month.
Price-wise, Norton WiFi Privacy is pretty generous, too. A one-year subscription (for one device only), costs just £19.99 for the first year, and a 5-connection account costs £29.99 per year. However, the price jumps up after the first year, to £39.99 for 1 device and £59.99 for 5 devices. That’s still better than some, mind, but you may want to disable auto renewal, just in case.
ExpressVPN attempts to build trust in other ways, even without a public face. Court records from 2017 demonstrate that when Turkish authorities seized ExpressVPN servers in the country looking for information, they found nothing of value, as promised by ExpressVPN’s no-logging policy. ExpressVPN also highlights initiatives such as open-source leak-testing tools, developer content about how the company implements different technologies, and support for the efforts of OpenMedia and the EFF. The ExpressVPN representative even offered to arrange a confidential call between our writer and the owners of the company. However, without being able to discuss their identities or learn about other senior leadership, we believed that wouldn’t have been enough to change our recommendation, so we declined. In the end, trust is such a crucial part of deciding which VPN to use that we had to pass on ExpressVPN.
If you’re just getting started with VPNs and want a basic VPN for using on public Wi-Fi hotspots or accessing region-restricted websites, there are a few good, simple options. We like ExpressVPN because they have great speeds and a lot more functionality than average including clients for almost any device—you can even get a router pre-installed with their VPN client.
Since we last tested VPNs, we've given special attention to the privacy practices of VPN companies and not just the technology they provide. In our testing, we read through the privacy policies and discuss company practices with VPN service representatives. What we look for is a commitment to protect user information, and to take a hands-off approach to gathering user data.
Fortunately, there are some brave companies that are still trying to stay one step ahead of Netflix’s VPN catchers. Currently, Windscribe Pro is our top choice. The service delivers good speeds on its U.S. servers, and has a very simple approach to Netflix: Just select the “Windflix” connection from the desktop app or browser extension and you’re good to go. Windflix is still technically in beta, but it works well and there’s even a Windflix U.K. option if you’d like to experience Netflix from the other side of the pond.
MicVPN is a free and unlimited VPN (Virtual Private Network) proxy for All devices. MicVPN masks your IP address, encrypt your internet traffic, turns public Wi-Fi into a private network and helps login sites and apps on your iOS, Android phone, Mac OS,Windows etc. so that you can access any restricted contect safely and anonymously. MicVPN have a sound account management system, account can cross-platform login. The key is the beginning when you use the software, do not need to register and log in. MicVPN does not show ads, our goal is to allow users to fast, secure and stable Internet access.MicVPN works just like Tor proxy, also known as “the tunnel Router”, to hide IP address and bypass internet censorship, to overcome geo-restriction and access the desired content.however, has a much faster connection speed, and better privacy and security protection than Tor.  Our app is a trial app, you can use it for free for 1 day, if you want to support more countries, please subscribe to our app.
Norton WiFi Privacy is a VPN solution that is specifically designed for mobile devices. It is downloadable from the App Store or the Google Play Store. The software is capable of protecting users from the dangers associated with public Wi-Fi hotspots. It has the capability to block ads, which automatically hides advertisements while preventing sites from tracking user location.
Windscribe  offers unlimited device connections. Yes you heard that right! The reason is that unlike the others above on this list, it doesn't offer unlimited data. So you're limited by bandwidth and data, not by devices. You get 10GB every month, and there's a free plan also but that only allows one device. There are apps for Windows, Mac and iOS but not Android, and the service also offers browser add-ons with useful features such as ad-blocking. Short range performance (to US sites) is good, but we noticed lag with transatlantic connections. However, if you’re looking to protect the data from a whole bunch of devices - an office, perhaps, or just a smart home - the support for unlimited connections is a real stand-out feature.
A popular VPN service, TorGuard has servers in over 50 countries and enables users to unblock websites and get around censorship. This ensures that wherever you are in the world, there is bound to be a TorGuard server near you. By default, the service enables users to make five simultaneous connections. This lets users run the service on all their devices. To better protect users, the service has a kill switch. However, this feature is not available on mobile devices. Likewise, a Domain Name System leak protection works on Windows and OS X.

Hide Your Browsing Activity From Your Local Network and ISP: If you’re using a public Wi-Fi connection, your browsing activity on non-HTTPS websites is visible to everyone neraby, if they know how to look. If you want to hide your browsing activity for a bit more privacy, you can connect to a VPN. The local network will only see a single, secure VPN connection. All the other traffic will travel over the VPN connection. While this can be used to bypass connection-monitoring by your Internet service provider, bear in mind that VPN providers may opt to log the traffic on their ends.
There are some minor disadvantages to using a dynamic IP. If someone who previously had the IP address you've been assigned did something nefarious on a service you use, it's possible that IP address might be banned. Usually, VPN providers are very careful about checking their IP addresses against blacklists, so the chances of this being a problem for you are slim.
This could be bad. I'm not terribly concerned if Comcast discovers my secret passion for muscle cars and I get more ads for car customizing kits. It might be annoying, but I'm not doing anything I really want to hide. Where the problem could occur is if ISPs start inserting their own ads in place of ads by, say, ZDNet. That could cut off the revenue that keeps websites alive, and that could have very serious repercussions.
Yes. Although Netflix is now available almost everywhere, some places – notably the United States – enjoy a much larger catalog of titles than everywhere else. And some people want to access regional catalogs. In theory, all you need do to watch a local version of Netflix from somewhere else is connect to a VPN server in that country. You can sign into any regional Netflix page with any active Netflix account, no matter where that account is registered. The snag is that due to pressure from its content producers, Netflix now tries to ban IP addresses that it knows belongs to VPN and proxy services. Many VPN services have found sneaky ways around this ban, but it is a cat and mouse game.  Please see our best Netflix VPNs for a list of services which still work with Netflix (most of the time).
Good VPN providers have outstanding characteristics to rely on while they are establishing their position in the free tech world to have a high general rating. Best virtual private network providers give outstanding services to their clients. Therefore, they go through a strict screening before making it to the rating table. All the methods used to evaluate the output characteristics are always getting improved. Top VPN apps are coming up with great strategies for making their customers feel safe and secure with their networks.
No reputable VPN service logs any kind of user activity, unlike your internet service provider, which can easily log every website you visit by storing all your DNS requests sent in cleartext. The only VPN on this list that maintains 24 hours worth of basic connection logs (no activity) is VPN.ac, and they clearly state their reasons (security) for doing so. There have been shady VPNs that have cooperated with government agencies, such as PureVPN (see logging case) and I do not recommend these providers.
The IVPN app’s default settings are great for most people, who should be happy just smashing the Connect button and not fiddling with settings. The desktop app defaults to a secure OpenVPN connection with AES 256-bit encryption (what we consider the standard at this point), and the mobile app can (and should) be toggled to OpenVPN as well. Our budget pick, TorGuard, defaults to the weaker (but also acceptable) AES 128-bit encryption unless you manually change it, and hasn’t added OpenVPN support on its iOS app.
Something pretty great about Speedify is that you can use it for free without even making an account. The moment you install and open the software, you're immediately being protected behind a VPN and can do anything a user can, like change the server, toggle encryption on and off, set monthly or daily limits, and easily connect to the fastest server.
In the past few years, I had terrible luck with VPNs... one provider didn't work with Netflix at all, and the other one very cluttered app interface which drove me crazy, so every time I used it, I felt frustrated. Now I'm testing Nordvpn. I'm not very trustful with big names, and its price seems too high for my pocket, but I thought I should give it a shot. In a few months of using Nord I didn't see any bugs or issues, so I feel that it's better to pay a few extra bucks but have a stable service like this, so in the long shot, it's totally worth the price I paid. Don't be afraid to invest, people.
There's a reason why all these VPNs are paid. Providing encryption and VPN services to millions of users is a resource-intensive work that requires servers across the world. A free VPN might be enough for something minor like checking foreign news occasionally. If you need a VPN on a regular basis, however, you’re better off with a reliable paid service.

In the past, some VPN services would offer different pricing tiers, each of which offered a different set of features. One way to separate these pricing tiers was to limit the bandwidth (how much data you can transfer). With premium services, this practice is now almost unheard of, and all of the services we have listed do not limit their users' bandwidth. Bandwidth limits live on, however, in free VPN services.
The Overplay Smart DNS service, on the other hand, routes internet connection using a different DNS to give the illusion that one is located in a different country, without significant speed reduction. This is very useful to those who want to access sites that are blocked in their own countries. The service supports PCs, Apple TV, iPhone, iPad, Wii, PS3, XBOX360, among other devices.
The Android app is actually fun to use, and you got to give TunnelBear credit for really doubling down on its name by really running with the concept. TunnelBear does not currently support torrenting, so if that's an important feature you're best to look elsewhere. If you're only looking for a casual VPN for your phone, TunnelBear is a great free option with affordable pricing for upgrading to the premium service.

IPVanish has a clear no-logging policy and is based in the USA, which doesn’t legally require logging of user activity. By the same token, there’s few data protection requirements and, in 2016, when it was owned by its previous parent company Highwinds, IPVanish handed over detailed connection information for use as evidence by the US Department of Homeland Security, even though it claimed to keep no logs at the time. Current owner StackPath says it intends to honour its no logging policy, but it’s not clear whether any technical changes have been implemented to ensure this.


The Center for Democracy & Technology brought just such a complaint against one VPN provider last year, though no enforcement action has been announced. Many privacy sites suggest finding a VPN service outside the prying eyes of US intelligence agencies and their allies, but FTC protections could be an argument for finding one in the US so that there’s a penalty if it deceives its customers.
One basic test for a VPN service is to check how long a VPN client takes to connect to a VPN server and get online. For our 2018 reviews, we installed each vendor's VPN client software on an HP EliteBook x360 1020 G2 laptop running Windows 10, an iPad mini and a Samsung Galaxy S8 Android phone. (In 2017, we used a Lenovo ThinkPad X1 Yoga notebook, an Apple MacBook Air, a Samsung Galaxy S6 phone and the iPad mini.) We used each device with each VPN service we tested.
With VPNs you can access streaming services which are usually blocked to overseas viewers. You can do this by simply connecting to a VPN server in the appropriate country. Unsurprisingly, both Netflix and BBC iPlayer attempt to block VPN users. These blocks are often ineffective, and many providers have found ways around them. For more information about unblocking the most common services see our VPN for Netflix and VPN for BBC iPlayer guides.

Watch your Plex library in Kodi with the Plex Kodi addonDecember 24, 2017 / by AaronHow to set up Plex on Chromecast and get the most out of itDecember 7, 2017 / by AaronPlex vs Kodi: Which streaming software is right for you?November 1, 2017 / by AaronInstalling and using the Fire TV Plex appOctober 31, 2017 / by AaronThe best Plex plugins: 25 of our favorites (Updated)September 20, 2017 / by Aaron
Tunnel endpoints must be authenticated before secure VPN tunnels can be established. User-created remote-access VPNs may use passwords, biometrics, two-factor authentication or other cryptographic methods. Network-to-network tunnels often use passwords or digital certificates. They permanently store the key to allow the tunnel to establish automatically, without intervention from the administrator.
×