In the past, some VPN services would offer different pricing tiers, each of which offered a different set of features. One way to separate these pricing tiers was to limit the bandwidth (how much data you can transfer). With premium services, this practice is now almost unheard of, and all of the services we have listed do not limit their users' bandwidth. Bandwidth limits live on, however, in free VPN services.
My recommendation, and the protocol I most often choose to use, is OpenVPN. OpenVPN is a non-proprietary, open-source implementation of a VPN communication layer protocol. It's well-understood, well-regarded, generally quite secure, and robust. In addition, it has the benefit of being able to communicate over port 443, which is the standard port for https communication, which means almost all firewalls will allow OpenVPN traffic -- and most won't even be able to detect that a VPN is being used.
One of the most popular VPN software out in the market today, NordVPN has over 550 servers in 49 different countries. These servers aid users in different needs, which include encryption of both incoming and outgoing data, sending all traffic through a Tor network to safeguard user anonymity and protection against DoS attacks, which are usually done by malignant hackers.
One way to resolve the issue of trust is to be your own VPN provider, but that’s not a feasible option for most people, and it still requires trust in any company providing the hardware that your VPN would run on, such as Amazon’s cloud services. Multiple projects can help you cheaply turn any old server into a VPN, including Algo, Streisand, and Outline. By encrypting all the traffic from your home or mobile device to a server you manage, you deprive your ISP and a potentially villainous VPN of all your juicy traffic logs. But most people lack the skills, patience, or energy—or some combination of the three—to do this. If you don’t manage servers or work in IT, it may be harder to manage perfect operation and performance better than trustworthy professionals. Lastly, though you remove one threat from the equation by cutting out a VPN service provider, you also lose the extra layer of privacy that comes from your traffic mixing in with that of hundreds or thousands of other customers.
In conjunction with information security experts at The New York Times (parent company of Wirecutter), we reached out to our finalists with questions about their internal security practices. We asked how they handled internal security access, how they communicated securely with customers, in what ways they collected reports on security bugs, and of course whether their statements on logging policies matched their marketing and privacy policies. We also considered which companies had public-facing leadership or ownership, and which ones openly supported projects and organizations that promoted Internet security and privacy. (For a full breakdown of trust and VPNs, check out the section above.)
For two years running, Private Internet Access has performed the best in our network tests and remained the cheapest full-fledged VPN service we've tried. It has more than 3,000 servers worldwide, supports platforms ranging from Windows and Mac to open-source routers, and lets you customize your tunneling and encryption protocols. You can pay in bitcoin, and you don't have to provide your real name.
VPNArea is one of the few providers that offer dedicated IP addresses in various countries around the world, as listed on their website. They also allow account sharing and permit six simultaneous connections per subscription. VPNArea continues to improve and remains an excellent choice for privacy-focused users. Check out their discount pricing for annual plans. [Learn more >]
In very simple terms, a VPN connects your PC, smartphone, or tablet to another computer (called a server) somewhere on the internet, and allows you to browse the internet using that computer’s internet connection. So if that server is in a different country, it will appear as if you are coming from that country, and you can potentially access things that you couldn’t normally.
Increasingly, mobile professionals who need reliable connections are adopting mobile VPNs.[need quotation to verify] They are used for roaming seamlessly across networks and in and out of wireless coverage areas without losing application sessions or dropping the secure VPN session. A conventional VPN can not withstand such events because the network tunnel is disrupted, causing applications to disconnect, time out, or fail, or even cause the computing device itself to crash.
Protocol: When you’re researching a VPN, you’ll see terms like SSL/TLS (sometimes referred to as OpenVPN support,) PPTP, IPSec, L2TP, and other VPN types. We asked Samara Lynn, Lead Analyst for Networking and Small Business at PCMag, whether or not a user shopping for a VPN should shop for one over another. “SSL is what is commonly used these days. All of these protocols will provide a secure connection,” she explained, and pointed out that most solutions are invisible to the end-user anyway. Strictly, each protocol has its benefits and drawbacks, and if you’re concerned about this (specifically, PPTP vulnerabilities,) you’re probably already aware of them. Most users don’t need to be concerned about this—corporate users on the other hand, are probably all using IPSec or SSL clients anyway.
Ideally, every VPN service provider would subject itself to independent audits to verify that it logs and operates as it claims. Right now, audits aren’t common practice in the VPN industry, though there’s a push to change that. Joseph Jerome, policy counsel at the Center for Democracy & Technology, told us about that group’s efforts to bring transparency to the VPN industry: “We would like to see security audits released publicly so security researchers can review them and attest to their veracity, as well as learn from the issues being identified.” The few companies we found that currently performed these types of audits had other dismissal-worthy failings, despite their valiant efforts toward transparency. And while such reports may increase your confidence when you’re shopping, there’s no guarantee that an audit makes a VPN service trustworthy: In other industries, conflicts of interest have led auditors and rating agencies (PDF) to miss or ignore major problems.
Something pretty great about Speedify is that you can use it for free without even making an account. The moment you install and open the software, you're immediately being protected behind a VPN and can do anything a user can, like change the server, toggle encryption on and off, set monthly or daily limits, and easily connect to the fastest server.
VPNs can make your browsing private, but that doesn’t necessarily mean you’re anonymous. VPN services can and do log traffic (even the ones that say they don’t log do need to log some information, or they wouldn’t be able to function properly), and those logs can be requested by the authorities. Think of a VPN as being like curtains: people can’t peek through your curtains if you’ve got them closed, but curtains won’t hide your house.
If you're trying to connect to a remote media source with Kodi, a VPN would likely play a different role. It might, for example, prevent your ISP from determining what you're up to. It might also be useful if you're connecting to a third-party service for Kodi that allows streaming of copyright-infringing material. Keep in mind, however, that some VPN services specifically forbid the use of their services for copyright infringement.
Transport Layer Security (SSL/TLS) can tunnel an entire network's traffic (as it does in the OpenVPN project and SoftEther VPN project) or secure an individual connection. A number of vendors provide remote-access VPN capabilities through SSL. An SSL VPN can connect from locations where IPsec runs into trouble with Network Address Translation and firewall rules.
Multi-hop cascades + NeuroRouting – Perfect Privacy gives you the ability to create multi-hop VPN cascades across up to four different servers in the network. This protects you against the possibility of a rogue data center logging traffic, targeted monitoring, and other threat scenarios. Additionally, the NeuroRouting feature dynamically routes all traffic through multiple hops in the server network, and can be used with any device (explained more here).
Hopefully, you’re not a candidate for government surveillance, but who knows. Remember, a VPN protects against your internet service provider seeing your browsing history. So you’re protected if a government agency asks your internet service provider to supply records of your internet activity. Assuming your VPN provider doesn’t log your browsing history (some VPN providers do), your VPN can help protect your internet freedom.
One of the biggest things that can put people off the idea of using a VPN is that they slow down your internet. This is mainly because you are adding an extra leg to the journey your data must take to reach its destination (via the VPN server). These days good VPN services are very fast and if you connect to a server near to you, you will often get 90% or more of your raw internet connection speed.
Even if none of the above really sound right to you, you can still benefit from using a VPN. You should definitely use one when you travel or work on an untrusted network (read: a network you don’t own, manage, or trust who manages.) That means opening your laptop at the coffee shop and logging in to Facebook or using your phone’s Wi-Fi to check your email at the airport can all potentially put you at risk.
Finding the best free VPN is an exercise in balancing those restrictions. TunnelBear, for example, lets you use any server on its network but limits you to 500MB-1GB per month. Avira Phantom VPN lets you use as many devices as you like and any server you like, but also restricts you to 500MB per month. AnchorFree Hotspot Shield also places no limits on the number of devices, but restricts you to 500MB per day and only US-based servers. Kaspersky Secure Connection also doesn't limit your devices but doesn't let you choose a VPN server—the app does it automatically.
Some users will also want to research a VPN provider’s peer-to-peer (P2P) file-sharing policies. There are VPNs that block torrents. Others turn a blind eye to them, but will sell you out in a heartbeat should you be up to no good. P2P is not our main focus here, but we will note in each review whether a particular provider allows file sharing or not.
As we said, KeepSolid VPN Unlimited is also good value, if you’re prepared to dig deep. Paying £76.45 for three years use is equivalent to paying £2.12 a month, or, if you’re really made of money, then £152.92 will net you a lifetime subscription. The standard monthly price of £7.64 doesn’t compare as well, but £45.88 for 1 year (equivalent to £3.82 a month) is slightly better than others.
Depending on how ISPs respond to a newly deregulated environment, a VPN could tunnel traffic past any choke points or blockades thrown up by ISPs. That said, an obvious response would be to block or throttle all VPN traffic. Or perhaps ISPs will come up with an entirely novel way to monetize the letitude given them by the current lack of net neutrality legislation.
We asked TorGuard detailed questions about the company’s internal policies and standards, just as we did with five other top-performing services. TorGuard CEO Benjamin Van Pelt answered all our questions, as he has done for other outlets multiple times since the company launched in 2012. Though TorGuard’s answers weren’t as in-depth as some other companies’ responses, Van Pelt is a public figure who has been willing to talk about TorGuard’s operations at length. In 2013, ArsTechnica got a close look at TorGuard’s engineering and network management skills as the company rebuffed repeated attacks on its servers. Even though the company’s marketing is wrought with overreaching claims about being “anonymous”—an inaccurate boast that makes some experts cringe—the technical and operational standards of the company are focused on protecting customer privacy. In one interview with Freedom Hacker, Van Pelt notes that if there were problems on a server, such as someone using it for spamming, the company couldn’t restrict a single user. “Rules would be implemented in that specific server which would limit actions for everyone connected, not just one user. Since we have an obligation to provide fast, abuse free services, our team handles abuse reports per server – not per single user.”
Early data networks allowed VPN-style connections to remote sites through dial-up modem or through leased line connections utilizing Frame Relay and Asynchronous Transfer Mode (ATM) virtual circuits, provided through networks owned and operated by telecommunication carriers. These networks are not considered true VPNs because they passively secure the data being transmitted by the creation of logical data streams. They have been replaced by VPNs based on IP and IP/Multi-protocol Label Switching (MPLS) Networks, due to significant cost-reductions and increased bandwidth provided by new technologies such as digital subscriber line (DSL) and fiber-optic networks.