When we initially researched and tested VPNs for this guide in early 2018, technical and legal reasons prevented app developers from using the OpenVPN protocol in apps released through Apple’s iOS app store. During 2018, both the technical and licensing hurdles were removed, and VPN providers started adding OpenVPN connections to their iOS apps. We’ve already noted that our top pick, IVPN, has added it, as have ExpressVPN and PIA. In a future update, we’ll specifically test these upgraded iOS apps, but in the meantime the updated IVPN app has worked as promised for several Wirecutter staffers who use it regularly. Because this OpenVPN support makes it much easier for anyone with Apple devices to create a reliably secure VPN connection, we wouldn’t recommend a service without it to anyone with an iPhone or iPad.
It was chosen as an Editors' Choice at PCMag, where the site concluded its review with this: "Private Internet Access is easy to recommend, but only with an asterisk. Yes, it's incredibly robust with powerful tools and an extensive network of VPN servers across the world. It also has a strong privacy stance when it comes to protecting customer information. And it's incredibly simple, but (and this is the asterisk) it's also stripped to the bone in terms of interface."
TorGuard is incorporated in St. Kitts and Nevis, and operates out of offices mostly in the US. But most people shouldn’t be worried about the legal jurisdiction of their VPN’s offices—we detail the reach of government surveillance above. In short, we think a privacy-focused VPN with public leadership that can be trusted not to collect information about their customers is a better choice in any country, rather than an opaque company run from the most liberty-ensuring country on the planet.
Most people leave their privacy and security vulnerable in ways that can be addressed with methods other than signing up for a VPN—methods that are potentially more effective. If you have a drafty house with paper-thin walls and halogen light bulbs, you’d get far more value out of every dollar by sealing up cracks, insulating, and switching to LEDs than you would by putting solar panels on your roof. Similarly, before you rush to sign up for a VPN subscription, you should consider these other ways to up your privacy game.
The IVPN app’s default settings are great for most people, who should be happy just smashing the Connect button and not fiddling with settings. The desktop app defaults to a secure OpenVPN connection with AES 256-bit encryption (what we consider the standard at this point), and the mobile app can (and should) be toggled to OpenVPN as well. Our budget pick, TorGuard, defaults to the weaker (but also acceptable) AES 128-bit encryption unless you manually change it, and hasn’t added OpenVPN support on its iOS app.
A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network. Applications running across a VPN may therefore benefit from the functionality, security, and management of the private network.
ExpressVPN is incredibly fast and super secure, and it can unblock just about any site or service on the internet - including Netflix, Hulu, BBC, and more - with impressive streaming capabilities. It offers servers in over 90 countries, and the 24/7 live chat support is one of the friendliest and most professional. ExpressVPN gives a strong fight to NordVPN, while other VPNs lag behind.
What that means in practice is that VPNs are fine for bypassing geo-blocks, for protecting your online banking and for keeping business communications free from interception. However, if you’re using the internet to fight repressive regimes or to do anything else that could attract the attention of the authorities where you live, a VPN is not a magic wand that’ll make you invisible.
Also worth consideration is Windscribe. For your money you’ll get fast speeds, streamlined access to popular streaming services via dedicated endpoints, an unlimited number of simultaneous connections, and the ability to share your encrypted connection (if your wireless router supports this). Kaspersky Secure Connection proved to be a little faster than Windscribe and its subscription rates are a little more generous, too.
The solution is also able to bypass firewalls through stealth connections. Additional security is provided through an ad and malware blocker, which can be switched on and off. For those who enjoy torrenting, the software supports such process, with certain servers optimized for P2P networks. This is designed to keep high-speed browsing on other connections. However, the service warns users to keep torrenting activities confined to specific cities around the world.
Since it takes research to find out if a VPN service has a history of good or bad behavior, we’ve done the legwork to find the best VPN out there. In order to win our seal of approval, the service has to protect online privacy; allow you to keep anonymity; offer a good variety of locations from which to direct your traffic; offer fast, reliable performance; and provide an easy-to-use interface.
When you're accessing the internet via Wi-Fi, do you worry about the safety of your data—and about who else might be spying on that data as it passes over the air, or even stealing it? If not, you're sadly in the high-risk majority. You really ought to be using a virtual private network, or VPN. In fact, however, when PCMag ran a survey on VPN usage, we found that a surprising 71 percent of our 1,000 respondents had never even used a VPN. Even among those who support net neutrality—who you might think would be better informed on security and privacy issues—55 percent had never used a VPN.
When you browse the web while connected to a VPN, your computer contacts the website through the encrypted VPN connection. The VPN forwards the request for you and forwards the response from the website back through the secure connection. If you’re using a USA-based VPN to access Netflix, Netflix will see your connection as coming from within the USA.
For those who are new to using a VPN, one of the most important features will be an easy-to-use interface. You want something as easy as flipping a switch. Private Internet Access offers just that, with an extremely simple Android app. Best of all, a yearly subscription is around $40, which is one of the lowest prices you'll find for a premium VPN.
ExpressVPN attempts to build trust in other ways, even without a public face. Court records from 2017 demonstrate that when Turkish authorities seized ExpressVPN servers in the country looking for information, they found nothing of value, as promised by ExpressVPN’s no-logging policy. ExpressVPN also highlights initiatives such as open-source leak-testing tools, developer content about how the company implements different technologies, and support for the efforts of OpenMedia and the EFF. The ExpressVPN representative even offered to arrange a confidential call between our writer and the owners of the company. However, without being able to discuss their identities or learn about other senior leadership, we believed that wouldn’t have been enough to change our recommendation, so we declined. In the end, trust is such a crucial part of deciding which VPN to use that we had to pass on ExpressVPN.
One way to resolve the issue of trust is to be your own VPN provider, but that’s not a feasible option for most people, and it still requires trust in any company providing the hardware that your VPN would run on, such as Amazon’s cloud services. Multiple projects can help you cheaply turn any old server into a VPN, including Algo, Streisand, and Outline. By encrypting all the traffic from your home or mobile device to a server you manage, you deprive your ISP and a potentially villainous VPN of all your juicy traffic logs. But most people lack the skills, patience, or energy—or some combination of the three—to do this. If you don’t manage servers or work in IT, it may be harder to manage perfect operation and performance better than trustworthy professionals. Lastly, though you remove one threat from the equation by cutting out a VPN service provider, you also lose the extra layer of privacy that comes from your traffic mixing in with that of hundreds or thousands of other customers.
These folks have been around since 2010, and don't log anything. They provide a generous five connections, a connection kill switch feature, and some good online documentation and security guidance. Our one disappointment is that their refund policy is 7-days instead of 30, but you can certainly get a feel for their excellent performance in the space of a week.