All that being said, we currently name TorGuard as the fastest VPN service. It doesn't take the top spot in all of our tests, but has remarkably low latency and had the best performance in the all-important download tests. Fittingly, it offers many add-ons such as dedicated IP addresses that, along with its speed, will appeal to the BitTorrent users it is designed to protect.
Installing and configuring ProtonVPN’s Windows client was simple enough and it provided some of the best in-use statistics. Performance was at the lower end of our comparison group at 39 Mb/s down and 18 Mb/s up, compared to our usual 125 Mb/s down and 18 Mb/s up. Netflix was blocked, but Amazon Prime Video and our other test services connected without a hitch.
If VPN connections get blocked by your network because of strict network management or government censorship, TorGuard offers a “stealth” connection to avoid deep packet inspection. Specifically, TorGuard uses Stunnel (a clever portmanteau of SSL and tunnel) to add an extra layer of encryption and make your traffic look like normal, secure Web traffic. If you’re having connection issues, you can enable Stunnel with a checkbox on the main application window, but only if you select TCP from the protocol list. (Otherwise, the box is unclickable, with no explanation as to why.)
Though TorGuard’s support site offers in-depth information, finding specific info is harder, and the site is not as easy to follow as those for our top pick or ExpressVPN. TorGuard provides helpful video tutorials, but they’re two years old now and don’t show the latest versions of the company’s apps. As with most of the VPNs we contacted, TorGuard support staff responded to our help ticket quickly—the response to our query came less than half an hour after we submitted it on a weekday afternoon. Still, if you’re worried about getting lost in VPN settings or don’t like hunting for your own answers, IVPN is a better fit.
When purchasing VPN service from a provider, consider the kind of security you want. If you want to use a VPN in order to send documents, emails, or browse the web more securely, then you’ll want to sign up with a host that offers an encryption method such as SSL (also called TLS) or IPsec. SSL is the most widely used form of security encryption. Encryption is a method of obscuring data from those who should not see it. Also, try to pick a host which uses OpenVPN rather than “point-to-point tunneling protocol” (PPTP) for encryption. PPTP has had several security vulnerabilities in recent years; whereas OpenVPN is commonly considered the more secure method of encryption.
Ideally, every VPN service provider would subject itself to independent audits to verify that it logs and operates as it claims. Right now, audits aren’t common practice in the VPN industry, though there’s a push to change that. Joseph Jerome, policy counsel at the Center for Democracy & Technology, told us about that group’s efforts to bring transparency to the VPN industry: “We would like to see security audits released publicly so security researchers can review them and attest to their veracity, as well as learn from the issues being identified.” The few companies we found that currently performed these types of audits had other dismissal-worthy failings, despite their valiant efforts toward transparency. And while such reports may increase your confidence when you’re shopping, there’s no guarantee that an audit makes a VPN service trustworthy: In other industries, conflicts of interest have led auditors and rating agencies (PDF) to miss or ignore major problems.
My rule of thumb is to use a domestic VPN and connect to servers as close to my location as possible. That said, I have had good nights and bad nights getting online. In my recent trip, I found most hotels' networks to become unusable after about 9pm. My theory is that many of the guests were watching Netflix at that time, completely clogging the hotels' pipes.
In our review of IPVanish, I gave a four-star rating for its strong encryption, excellent performance, and a large set of servers. While it is based in the U.S., the company promises to keep no logs other than payment information, which you can also avoid by paying with Bitcoin. IPVanish has more than 40,000 unique IP addresses on more than 1,000 servers spread out over more than 60 countries, meaning you get some serious diversity. There's no limit to how many times you can switch servers, allowing you to move around until you find the absolute best. Toss in a kill switch, IPv6 and DNS leak protection, and manual port selection, and this becomes a very attractive option. Yearly plans start at about $6 per month, while monthly plans start at about $10.
Buffered VPN doesn't disclose much about the size of its network, but the 30-day money back guarantee means that you can take their service for a test drive and really get a feel for how well it performs for you. The company lost a few points from us because they do keep some connection information. They gained points for their client support, unlimited bandwidth, and generous number of simultaneous sessions allowed.