Many companies proudly display “warrant canaries” on their websites. These are digitally signed notices that say something to the effect of “We have never been served a warrant for traffic logs or turned over customer information.” Law enforcement can prohibit a company from discussing an investigation, but in theory, it can’t compel a company to actively lie. So the theory goes that when the warrant canary dies—that is, the notice disappears from the website because it’s no longer truthful—so does privacy. The EFF supports this legal position, though other highly regarded companies and organizations think warrant canaries are helpful only for informing you after the damage has been done. Such notices may provide a nice sense of security, and they are important to some people, but we didn’t consider them essential.

ExpressVPN is based in the British Virgin Islands which, although a British Overseas Territory, isn’t beholden to the strict data retention laws of the UK’s Investigatory Powers Act. If you’re after anonymous payment options, you can buy your subscription with bitcoin if you wish – and if you don’t want to, then ExpressVPN has a clearly stated no-logging policy. This has been put to the test by the Turkish authorities, who seized endpoint servers last December, and found no logs.
When purchasing VPN service from a provider, consider bandwidth requirements for your VPN. Bandwidth determines how much data can be transferred. High quality video and audio are larger in size and, thus, require more bandwidth than text or images. If you only want to use a VPN for internet browsing or transferring private documents, then most hosts provide enough bandwidth to do just that quickly and easily. However, if you want to stream video or audio, such as watching Netflix or playing online games with your friends, then pick a VPN host that allows for unlimited bandwidth.

KeepSolid boasts of having endpoints in 54 countries and specialised servers designed to allow you access to geo-locked streaming services undetected. While this allowed us easy access to American Netflix, the UK iPlayer endpoint was actually too slow to actually load any BBC’s content, while using the other UK endpoints were invariably detected by the website. Hopefully this will improve over time.


Hi Nathan, We do not censor feedback, and if that is your experience then it is your experience. I'm sorry that you seem to have had so many problems. All I can say is that for me it was just a matter of installing the software, entering my account details, choosing a server location, and hitting start. I have experienced the odd hiccup in the past, but as far as could I see all issues have now been resolved. I tested using Windows 10 (plus Android and both Mac clients). If you are finding everything too hard, then why not just take advantage of the 30-day money back guarantee and try something else?
If you're of the iPhone persuasion, there are a few other caveats to consider for a mobile VPN. Some iPhone VPN apps don't use OpenVPN, even if the VPN service that made the app supports the protocol. That's because Apple requires additional vetting if a company wants to include OpenVPN with its app. VPN app developers have slowly started jumping through those extra hoops and are bringing support for protocols such as OpenVPN to iOS.
Other features include a kill switch, which will shut down your Internet connection if you lose access to the VPN for whatever reason, and the ability to share encrypted connections as a secure wireless hotspot, if your router supports the feature. Windscribe also supports anonymous payment via Bitcoin and gift vouchers, and you don’t to provide an email address in order to sign up.
To choose the best VPN for you, don’t just look at the price, not least because many services offer massive discounts if you take out a longer term subscription. Start with the basics: how many simultaneous connections can you have? Are there particular security protocols you want to use? Does the provider have servers in the places you’ll want to use it from and the places you want to connect to? How much data will they log about you, and how long do they keep it for?
That means fewer options and in some cases no options at all when Australians want to stream a TV show, play a video game, or listen to music. The lack of choice can lead to increased piracy of copyrighted material. In December 2016, a federal court in Australia ordered internet service providers to block BitTorrent tracker sites including ThePirateBay, Torrentz, TorrentHound, IsoHunt and SolarMovie.

These services offer many ways to connect, including without the service's client software; support operating systems and devices, such as routers or set-top boxes, beyond just the "big four" operating systems (Windows, Mac, Android and iOS); have hundreds, or even thousands, of servers in dozens of countries; and generally let the user sign up and pay anonymously.
Each internet request usually results in a whole series of communication events between multiple points. The way a VPN works is by encrypting those packets at the originating point, often hiding not only the data, but also the information about your originating IP address. The VPN software on your end then sends those packets to VPN server at some destination point, decrypting that information.
With  multiple clients, rich with different features, it’s no wonder this VPN service handles more than 10 million users. CyberGhost covers Microsoft’s and Apple’s operating systems, but also iOS and Android. The interface is not the best out there and could definitely use some work, but these disadvantages are easily overshadowed by the awesome features this VPN offers.
IVPN goes further than the other leading candidates we considered by being transparent about who runs the service and is responsible for your privacy. The company lists its core team on its website, and its small team has an online presence on a variety of platforms. In contrast, only one employee at ExpressVPN has a public face: VP of marketing Harold Li gave us detailed answers to questions about policies and internal security, but couldn’t tell us much about who else worked there. (We discuss ExpressVPN in more detail in the Competition section—that company was almost our top pick but for this issue.)
PPTP - PPTP has been around since the days of Windows 95. The main selling point of PPTP is that it can be simply setup on every major OS. In short, PPTP tunnels a point-to-point connection over the GRE protocol. Unfortunately, the security of the PPTP protocol has been called into question in recent years. It is still strong, but not the most secure.

A P device operates inside the provider's core network and does not directly interface to any customer endpoint. It might, for example, provide routing for many provider-operated tunnels that belong to different customers' PPVPNs. While the P device is a key part of implementing PPVPNs, it is not itself VPN-aware and does not maintain VPN state. Its principal role is allowing the service provider to scale its PPVPN offerings, for example, by acting as an aggregation point for multiple PEs. P-to-P connections, in such a role, often are high-capacity optical links between major locations of providers.


IVPN was one of the fastest providers when we tested US servers using the Internet Health Test. Our budget pick, TorGuard, was faster, but it defaults to the less secure 128-bit encryption. Our non-VPN connection tested at roughly 300 Mbps down. Some tested services are not listed because connection failures prevented some of our tests from completing.


Setting up a Virtual Private Network is a straightforward process. It's often as simple as entering a username and sever address. The dominant smartphones can configure Virtual Private Networks using PPTP and L2TP/IPsec protocols. All major operating systems can configure PPTP VPN connections. OpenVPN and L2TP/IPsec protocols require a small open source application (OpenVPN) and certificate download respectively.
VPNs provide a way for people to get around internet roadblocks and censors, stream or download without worry, protect themselves from hackers, and keep their internet usage mostly private from third parties. They'll especially come in handy if providers like Comcast do decide to stop playing nice with Netflix, or if you're in a country where American Netflix is blocked.
That said, many VPN providers are based outside the US, which complicates enforcement. Jerome continued: “Users can file complaints in a local jurisdiction, and local data protection laws may have more effective enforcement mechanisms. For example, privacy and confidentiality of communications are fundamental rights in the European Union. Data protection authorities in EU-member states are empowered to handle complaints brought by individuals and then provide users with information about the outcome of any investigation. But it is unclear how effective any of these remedies will be.”
The best VPNs offer a solid balance of features, server location, connectivity protocols, and price. Some are great for occasional use, others are geared towards getting around the location restrictions companies put on their apps and services, and others are targeted at people who do heavy downloading and want a little privacy while they do it. Here’s what you should look for.
We’ve shown you how to roll your own VPN using Hamachi, and even how to set up Privoxy to secure your web browsing once you have your personal VPN set up. Hamachi isn’t the only option: you can also download and configure OpenVPN (a free SSL VPN) on your own home server,, or if you have a router that supports it, enable OpenVPN on your home router so you can connect back to it when you’re abroad. Combined with Privoxy, you get the privacy and anonymity benefits of a VPN without spending a dime.
Please be aware that some of the criteria for testing are based on objective raw data such as speed test results, while other testing criteria are based on subjective personal experience and interaction with the VPN software. Due to this, our findings may not reflect your personal view. As there is a money back guarantee after a certain number of days on all of the VPN products listed on this site you should make the most of this time and perform your own testing to see if a particular product caters to your needs. If you would like to know more on how we came to our findings then please click here.
Welcome to the CNET 2019 Directory of VPN providers. In this directory, we're taking a look at a few of the very best commercial VPN service providers on the Internet like CyberGhost, IPVanish, Hotspot Shield, Private Internet Access and others. Rather than looking at the wide range of free providers, which often have a lot of limits (and dubious loyalties), we are looking at those vendors who charge a few bucks a month, but put your interests first, rather than those of shadowy advertisers and sponsors. Our VPN rankings are based more than 20 factors including number of server locations, client software, dedicated and dynamic IP, bandwidth caps, security, logging, customer support and price. 
×