We used to advise people to do banking and other important business over their cellular connection when using a mobile device, since it is generally safer than connecting with a public Wi-Fi network. But even that isn't always a safe bet. Researchers have demonstrated how a portable cell tower, such as a femtocell, can be used for malicious ends. The attack hinges on jamming the LTE and 3G bands, which are secured with strong encryption, and forcing devices to connect with a phony tower over the less-secure 2G band. Because the attacker controls the fake tower, he can carry out a man-in-the-middle attack and see all the data passing over the cellular connection. Admittedly, this is an exotic attack, but it's far from impossible.
Protocol: When you’re researching a VPN, you’ll see terms like SSL/TLS (sometimes referred to as OpenVPN support,) PPTP, IPSec, L2TP, and other VPN types. We asked Samara Lynn, Lead Analyst for Networking and Small Business at PCMag, whether or not a user shopping for a VPN should shop for one over another. “SSL is what is commonly used these days. All of these protocols will provide a secure connection,” she explained, and pointed out that most solutions are invisible to the end-user anyway. Strictly, each protocol has its benefits and drawbacks, and if you’re concerned about this (specifically, PPTP vulnerabilities,) you’re probably already aware of them. Most users don’t need to be concerned about this—corporate users on the other hand, are probably all using IPSec or SSL clients anyway.
Tunnel endpoints must be authenticated before secure VPN tunnels can be established. User-created remote-access VPNs may use passwords, biometrics, two-factor authentication or other cryptographic methods. Network-to-network tunnels often use passwords or digital certificates. They permanently store the key to allow the tunnel to establish automatically, without intervention from the administrator.
When it comes to servers, more is always better. More servers mean that you're less likely to be shunted into a VPN server that is already filled to the brim with other users. NordVPN, Private Internet Access, and TorGuard currently lead the pack with well over 3,000 servers each—NordVPN is at the forefront with 5,130 servers. But the competition is beginning to heat up. Last year, only a handful of companies offered more than 500 servers, now it's becoming unusual to find a company offering fewer than 1,000 servers.
The client is uniform across every device I have used (Windows, Android, and Amazon FireOS). I would like to say I was quite happy that ExpressVPN is one of the few VPNs (that seem trustworthy) that actually had a client in the Amazon App Store for the Fire tablets. No more need for sideloading, manual updates, or sketchy OpenVPN clone clients. At first the speeds weren't the greatest on the "Smart Location" server (New York). These speeds capped at about 12Mbps down and 10Mbps up. I have 150Mbps/15Mbps service. After hunting for other servers I found a few that provide roughly 60Mbps/15Mbps service throughout the US and Canada. DNS Leak tests were successful in that I am not leaking.
Hopefully, you’re not a candidate for government surveillance, but who knows. Remember, a VPN protects against your internet service provider seeing your browsing history. So you’re protected if a government agency asks your internet service provider to supply records of your internet activity. Assuming your VPN provider doesn’t log your browsing history (some VPN providers do), your VPN can help protect your internet freedom.
At $7.50/month and $58.49 for a year, they're obviously trying to move you towards their yearly program. We awarded the company points for Bitcoin support, and their money-back guarantee. We're a little disappointed that they only allow a 7-day trial, rather than a full 30-days. The company is generous, with five simultaneous connections. They also picked up points for their connection kill switch feature, a must for anyone serious about remaining anonymous while surfing.