In conjunction with information security experts at The New York Times (parent company of Wirecutter), we reached out to our finalists with questions about their internal security practices. We asked how they handled internal security access, how they communicated securely with customers, in what ways they collected reports on security bugs, and of course whether their statements on logging policies matched their marketing and privacy policies. We also considered which companies had public-facing leadership or ownership, and which ones openly supported projects and organizations that promoted Internet security and privacy. (For a full breakdown of trust and VPNs, check out the section above.)
The NordVPN client provided one of the most attractive interfaces, and connecting to a VPN server was straightforward and very quick. We found performance to be somewhat spotty, however, with our fastest connection running at 53 Mb/s down and 26 Mb/s up, compared to 125 Mb/s down and 20 Mb/s with the VPN connection turned off. We did have an issue connecting to Netflix, but Amazon Prime Video ran without issue. Our other internet tests went without a hitch.
For features, VPN.ac offers double-hop VPN servers, numerous encryption options, obfuscation (stealth VPN), and great apps for all major operating systems and devices. VPN.ac’s apps are very well designed and come in both light and dark modes. In addition to the VPN, you can also use their secure proxy browser extension, which is available for Firefox, Chrome, and Opera browsers.
You get your standard secure VPN account, encrypted Wi-Fi, P2P, IPv6 leak protection, a VPN kill switch, and a whole lot more. Private Internet Access VPN sure as hell isn't a sexy app you want to open all the time (so just set it to automatically open when you log in), but what it lacks in aesthetics it makes up for with a long list of features. It also has a solid backbone, claiming over 3,100 servers in 28 countries worldwide.
Hotspot Shield VPN works in most countries, but that doesn’t mean it’s always legal to use a VPN in a specific country. If you have any doubts about the legality of using a VPN in a certain country, always consult a qualified lawyer because laws can change quickly. If you’re still unsure, then it’s best to play it safe and abide by the most conservative guidelines of a country.
Ideally, every VPN service provider would subject itself to independent audits to verify that it logs and operates as it claims. Right now, audits aren’t common practice in the VPN industry, though there’s a push to change that. Joseph Jerome, policy counsel at the Center for Democracy & Technology, told us about that group’s efforts to bring transparency to the VPN industry: “We would like to see security audits released publicly so security researchers can review them and attest to their veracity, as well as learn from the issues being identified.” The few companies we found that currently performed these types of audits had other dismissal-worthy failings, despite their valiant efforts toward transparency. And while such reports may increase your confidence when you’re shopping, there’s no guarantee that an audit makes a VPN service trustworthy: In other industries, conflicts of interest have led auditors and rating agencies (PDF) to miss or ignore major problems.
To choose the best VPN for you, don’t just look at the price, not least because many services offer massive discounts if you take out a longer term subscription. Start with the basics: how many simultaneous connections can you have? Are there particular security protocols you want to use? Does the provider have servers in the places you’ll want to use it from and the places you want to connect to? How much data will they log about you, and how long do they keep it for?
We’ve shown you how to roll your own VPN using Hamachi, and even how to set up Privoxy to secure your web browsing once you have your personal VPN set up. Hamachi isn’t the only option: you can also download and configure OpenVPN (a free SSL VPN) on your own home server,, or if you have a router that supports it, enable OpenVPN on your home router so you can connect back to it when you’re abroad. Combined with Privoxy, you get the privacy and anonymity benefits of a VPN without spending a dime.
If you don’t mind doing a little extra tinkering in a more complicated app to save some money, we recommend TorGuard because it’s trustworthy, secure, and fast. TorGuard is well-regarded in trust and transparency; it was also the fastest service we tried despite being less expensive than much of the competition, and its server network spans more than 50 locations, more than twice as many as our top pick. But TorGuard’s apps aren’t as easy to use as IVPN’s: TorGuard includes settings and labels that allow extra flexibility but clutter the experience for anyone new to VPNs. And unlike IVPN, TorGuard doesn’t natively support OpenVPN connections on iOS, making it a significantly worse choice on Apple devices than it is if you use Windows, ChromeOS, or Android.
Usually, it's the free services that throttle your usage in these ways. Some paid services will offer a trial, where you can transmit up to a certain data cap before being asked to sign up as a paying customer. That's actually pretty cool, because it gives you a chance to try out the performance of their service before paying, but it also gives the vendor a chance to make the money necessary to operate the service.
PureVPN has servers in more than 140 countries and can be very inexpensive if you pay for two years up front. It also lets you "split-tunnel" your service so that some data is encrypted and other data isn't. But PureVPN was at or near the back of the pack in almost all of our 2017 performance tests. In October 2017, the U.S. Department of Justice disclosed in a criminal complaint that PureVPN had given the FBI customer logs in reference to a cyberstalking case, which kind of negates the entire point of using a VPN.
Insist on a VPN that has Kill Switch protection. There is a security vulnerability that can reveal your private information if your VPN connection is lost, even just for a few seconds. The solution is to be sure that you’re protected by a Kill Switch. A Kill Switch stops all data from being sent to the internet until a secure VPN connection has been re-established. If your VPN software does not have a Kill Switch, your computer might be leaking your private information without your knowledge
While it hides your IP address, a VPN is not a true anonymization service. For that, you'll want to access the Tor network, which will almost certainly slow down your connection. While a VPN tunnels your web traffic to a VPN server, Tor bounces around your traffic through several volunteer nodes making it much, much harder to track. Using Tor also grants access to hidden Dark Web sites, which a VPN simply cannot do. That said, some services, such as NordVPN, offer Tor access on specific servers.
Even though Tor is free, we don’t think it’s the best option for most people. If you aren’t familiar with Tor, this handy interactive graphic shows how it protects an Internet connection, and this series goes into more detail about how Tor works. Runa Sandvik, a former researcher with The Tor Project who is now part of the information security team at The New York Times (parent company of Wirecutter), described it as “a tool that allows users to remain anonymous and uncensored.” When we asked expert Alec Muffett about whether he personally used a VPN, he told us he actually spent most of his work time using Tor. But Tor has a reputation for slow connections, can be blocked by some websites, and isn’t suitable for some peer-to-peer applications like BitTorrent.
Even TunnelBear's network performance and pricing are just about average compared to other services we've reviewed, except that you can pay with literal jars of honey. The company takes security and privacy seriously, explaining its policies and protocols in plain English, and you can read the results of two third-party security audits on the company website.
TorGuard was consistently one of the fastest services we tested. When we averaged three tests performed at different times of the week with Internet Health Test, TorGuard was the fastest service when connecting in the UK and Asia, the second fastest in the US, and the third fastest in Central Europe. OVPN was the next most consistent, but that company’s small network doesn’t have any servers in Asia, and it ranked fifth in the UK. Our top pick, IVPN, was the third most consistently fast after TorGuard and OVPN. However, we tested with each app’s default settings—since we expect most people won’t change them—and TorGuard’s default 128-bit encryption gives it an advantage in speed tests over VPNs that default to 256-bit encryption, as most services do. Still, we think 128-bit encryption is fine for most people who prioritize speed, and TorGuard’s consistency makes it a good value as our budget pick.
There are several different VPN protocols, not all of which are used by all of the VPN services we reviewed. Most operating systems have built-in support for at least one of these protocols, which means you can use that protocol — and a willing VPN service — without client software. The full-fledged VPN services have online instructions for how to do this, as well as how to set up routers to connect directly to the services.
Israel-based Hola isn’t a traditional VPN in which customers connect to a network of centralized servers owned by the VPN company. Instead, Hola users connect to each other, using other users’ idle bandwidth as part of a large peer-to-peer network. Obviously, this comes with some pretty big security and legal concerns. Users could use each other’s internet for illegal activity, for example. In 2015, Hola used its user’s computers to create a botnet and perform a massive distributed denial-of-service (DDoS) attack. The abuse of customers’ trust happened entirely without their knowledge.
Security is the main reason why corporations have used VPNs for years. There are increasingly simple methods to intercept data traveling to a network. WiFi spoofing and Firesheep are two easy ways to hack information. A useful analogy is that a firewall protects your data while on the computer and a VPN protects your data on the web. VPNs use advanced encryption protocols and secure tunneling techniques to encapsulate all online data transfers. Most savvy computer users wouldn't dream of connecting to the Internet without a firewall and up-to-date antivirus. Evolving security threats and ever increasing reliance on the Internet make a Virtual Private Network an essential part of well-rounded security. Integrity checks ensure that no data is lost and that the connection has not been hijacked. Since all traffic is protected, VPNs are preferred over proxies.
What that means in practice is that VPNs are fine for bypassing geo-blocks, for protecting your online banking and for keeping business communications free from interception. However, if you’re using the internet to fight repressive regimes or to do anything else that could attract the attention of the authorities where you live, a VPN is not a magic wand that’ll make you invisible.
When we initially researched and tested VPNs for this guide in early 2018, technical and legal reasons prevented app developers from using the OpenVPN protocol in apps released through Apple’s iOS app store. During 2018, both the technical and licensing hurdles were removed, and VPN providers started adding OpenVPN connections to their iOS apps. We’ve already noted that our top pick, IVPN, has added it, as have ExpressVPN and PIA. In a future update, we’ll specifically test these upgraded iOS apps, but in the meantime the updated IVPN app has worked as promised for several Wirecutter staffers who use it regularly. Because this OpenVPN support makes it much easier for anyone with Apple devices to create a reliably secure VPN connection, we wouldn’t recommend a service without it to anyone with an iPhone or iPad.
VPN stands for virtual private network and is a type of network connection that allows users to access computer networks from anywhere in the world. This technology is often used for business or educational purposes because many VPNs feature encryption methods which make sending data more secure and private. You can also appear as if you are in a different country, which makes obtaining content of a specific country possible if that country does not allow for international access. Thus, it is becoming more popular to purchase VPN networks from hosts or providers. If you need to connect to a VPN, the owner of the VPN will give you the specific login and password information. Then, follow these steps to connect from any computer with Internet access.
We've knocked CyberGhost down a peg from last year's standings because the service's network performance wasn't as great this time around in our tests. Yet it has a feature-loaded, user-friendly interface, with convenient buttons in the Windows client software for streaming media, torrenting files, protecting your Wi-Fi transmissions and evading censorship. (The Mac desktop software has fewer features.)
HotSpot Shield is a product that has had some ups and downs in terms of our editorial coverage. Back in 2016, they picked up some very positive coverage based on founder David Gorodyansky comments about protecting user privacy. Then, in 2017, a privacy group accused the company of spying on user traffic, an accusation the company flatly denies. Finally, just this year, ZDNet uncovered a flaw in the company's software that exposed users. Fortunately, that was fixed immediately.