Protocol: When you’re researching a VPN, you’ll see terms like SSL/TLS (sometimes referred to as OpenVPN support,) PPTP, IPSec, L2TP, and other VPN types. We asked Samara Lynn, Lead Analyst for Networking and Small Business at PCMag, whether or not a user shopping for a VPN should shop for one over another. “SSL is what is commonly used these days. All of these protocols will provide a secure connection,” she explained, and pointed out that most solutions are invisible to the end-user anyway. Strictly, each protocol has its benefits and drawbacks, and if you’re concerned about this (specifically, PPTP vulnerabilities,) you’re probably already aware of them. Most users don’t need to be concerned about this—corporate users on the other hand, are probably all using IPSec or SSL clients anyway.
Usually, it's the free services that throttle your usage in these ways. Some paid services will offer a trial, where you can transmit up to a certain data cap before being asked to sign up as a paying customer. That's actually pretty cool, because it gives you a chance to try out the performance of their service before paying, but it also gives the vendor a chance to make the money necessary to operate the service.
Everything you do on the Internet has to pass through your own ISP before reaching the destination. So, when you request Google, for example, the information is sent, unencrypted, to your ISP and then passes through some other channels before reaching the server that holds Google’s website. Basically, VPN services privatize information that can be read by ISPs or any other agency that inspects your traffic.
When purchasing VPN service from a provider, consider the kind of security you want. If you want to use a VPN in order to send documents, emails, or browse the web more securely, then you’ll want to sign up with a host that offers an encryption method such as SSL (also called TLS) or IPsec. SSL is the most widely used form of security encryption. Encryption is a method of obscuring data from those who should not see it. Also, try to pick a host which uses OpenVPN rather than “point-to-point tunneling protocol” (PPTP) for encryption. PPTP has had several security vulnerabilities in recent years; whereas OpenVPN is commonly considered the more secure method of encryption.
Many companies proudly display “warrant canaries” on their websites. These are digitally signed notices that say something to the effect of “We have never been served a warrant for traffic logs or turned over customer information.” Law enforcement can prohibit a company from discussing an investigation, but in theory, it can’t compel a company to actively lie. So the theory goes that when the warrant canary dies—that is, the notice disappears from the website because it’s no longer truthful—so does privacy. The EFF supports this legal position, though other highly regarded companies and organizations think warrant canaries are helpful only for informing you after the damage has been done. Such notices may provide a nice sense of security, and they are important to some people, but we didn’t consider them essential.
If your VPN provider is based within a country that is part of the 14 Eyes, it can be asked to share data of its customers and will legally have to comply. If your provider promises that it doesn't log any information, you're probably safe within the 14 Eyes, but it is more of a risk if privacy is your main concern and you might want to consider looking for a VPN provider that is based elsewhere.
Their best plan is 1-year subscription plan: $6.99 ($83.88). While their monthly price of $11.95 is at the high end of the spectrum (and they did lose a few points for that), their yearly price of $83.88 is lower than most our contenders. And yes, they also have a full 30-day refund policy. NordVPN also offers a dedicated IP option, for those looking for a different level of VPN connection. They do offer $2.99/month (75% discount) for a 3-year plan .