Obfuscation – Obfuscation is a key feature if you are using a VPN in China, schools, work networks, or anywhere that VPNs may be blocked. However, if you are not in a restricted network situation, obfuscation is generally not necessary and may impact performance. (See the best VPN for China guide for a great selection of VPNs with built-in obfuscation features.)
One of the biggest things that can put people off the idea of using a VPN is that they slow down your internet. This is mainly because you are adding an extra leg to the journey your data must take to reach its destination (via the VPN server). These days good VPN services are very fast and if you connect to a server near to you, you will often get 90% or more of your raw internet connection speed. 
Testing criteria: Each VPN service in this guide was tested for IP address leaks, DNS leaks, connection issues, reliability, speed, and whether the features work correctly. Additionally, I also examined company policies, jurisdiction, logging practices, as well as the history of each VPN provider. The rankings of this list were based on a combination of all these factors.
That all-too-common attitude to the safety and privacy of personal data creates an enormous risk when it comes to online security. Public Wi-Fi networks, which are ubiquitous and convenient, are unfortunately also extremely convenient for attackers who are looking to compromise your personal information. How do you know, for example, that "starbucks_wifi_real" is actually the Wi-Fi network for the coffee shop? Anyone could have created that network, to lure victims into disclosing personal information. In fact, a popular security researcher prank is to create a network with the same name as a free, popular service and see how many devices will automatically connect because it appears safe.
Type the server information that the owner of the VPN gave you. Type the IP address in the "Internet address" text box and the server name in the "Destination name" text box. Put a check mark in the box next to "Don't connect now; just set it up so I can connect later." You will need to finish setting up your connection before you can connect. Click "Next."
A mix of features and price make a good VPN, but plenty of bad VPNs masquerade as good ones. Look for articles written by trustworthy sources that discuss the merits of each service based on its features, versus simple rundowns and user testimonials, which are almost always polluted by a combination of fanatical users and corporate bootstrapping in attempt to get their names out to potential customers.
Server switching is a feature -- offered by most VPN service providers -- that allows you to change what region or country you're going to connect to. Most providers allow you to switch as often as you'd like (although you usually have to disconnect, then change your configuration, and reconnect). This may be useful if you're trying to hide your location, or if you're running into some communications glitches on the server you're currently using.

TorGuard offers applications for every major platform, including Windows, macOS, and Android. And unlike our top pick, it also supports OpenVPN on ChromeOS. (Though TorGuard does offer an iOS app, it doesn’t natively support the OpenVPN protocol that allows for the easiest and most reliable secure connections.) Using these apps, you can manually select a server, click Connect, and not worry about the rest. But otherwise, the applications aren’t as refined or easy to use as IVPN’s. New users are likely to find themselves out of their depth when modifying anything but the most basic functions, such as auto-connecting at launch or minimizing the app.
NordVPN operates servers in over 50 countries with 12 in Asia Pacific. Torrenting is allowed on all servers. It’s on par with ExpressVPN when it comes to unblocking streaming services. It can bypass the Netflix proxy firewall in the US and Australia alike. It keeps zero logs of any kind and is based in Panama, where it is not subject to any data retention laws. NordVPN also offers special servers optimized for privacy and high-speed downloads, such as ultra-fast streaming, double hop VPN, Tor over VPN, and anti-DDoS.

VPN technology was developed to allow remote users and branch offices to access corporate applications and resources. To ensure security, the private network connection is established using an encrypted layered tunneling protocol and VPN users use authentication methods, including passwords or certificates, to gain access to the VPN. In other applications, Internet users may secure their transactions with a VPN, to circumvent geo-restrictions and censorship, or to connect to proxy servers to protect personal identity and location to stay anonymous on the Internet. However, some Internet sites block access to known VPN technology to prevent the circumvention of their geo-restrictions, and many VPN providers have been developing strategies to get around these roadblocks.
IPVanish operates hundreds of servers in 60 countries, including 12 in APAC. It owns all of its own physical servers resulting in some of the fastest download speeds available from any VPN. Those speeds cannot be put toward streaming Netflix, however, as IPVanish is currently not able to unblock Netflix. It’s a good option for P2P filesharers. Torrenting traffic is allowed on all servers. The company is based in the US but has a strict no logs policy.

Most services provide perfectly adequate internet speed when in use, and can even handle streaming HD video. However, 4K video and other data-intensive tasks like gaming over a VPN are another story. Some VPN services, such as NordVPN, have started to roll out specialty servers for high-bandwidth activities. And nearly every service we have tested includes a tool to connect you with the fastest available network. Of course, you can always limit your VPN use to when you're not on a trusted network.
However, you've got no choice but to run TunnelBear's client software (unless you use Linux), which may concern some privacy-minded users, and there's no option to set up TunnelBear connections on routers or other devices. Last but not least, this tiny Canadian firm is now owned by U.S. antivirus giant McAfee, which may mean TunnelBear is subject to U.S. search warrants.
We're not cryptography experts, so we can't verify all of the encryption claims providers make. Instead, we focus on the features provided. Bonus features like ad blocking, firewalls, and kill switches that disconnect you from the web if your VPN connection drops, go a long way toward keeping you safe. We also prefer providers that support OpenVPN, since it's a standard that's known for its speed and reliability. It's also, as the name implies, open source, meaning it benefits from many developers' eyes looking for potential problems.

For features, VPN.ac offers double-hop VPN servers, numerous encryption options, obfuscation (stealth VPN), and great apps for all major operating systems and devices. VPN.ac’s apps are very well designed and come in both light and dark modes. In addition to the VPN, you can also use their secure proxy browser extension, which is available for Firefox, Chrome, and Opera browsers.
ExpressVPN is another highly-rated premium VPN service that has been praised for its customer service and includes all the features you'd expect from a top-rated VPN such as unlimited bandwidth, unlimited speed, and strong encryption. You're able to connect up to three devices simultaneously via ExpressVPNs thousands of servers in more than 94 different countries.
Server switching is a feature -- offered by most VPN service providers -- that allows you to change what region or country you're going to connect to. Most providers allow you to switch as often as you'd like (although you usually have to disconnect, then change your configuration, and reconnect). This may be useful if you're trying to hide your location, or if you're running into some communications glitches on the server you're currently using.
Hands down, ExpressVPN is the number one most highly-acclaimed VPN service on the market, and it’s no secret why. With a massive amount of servers, great deals, and superior quality service, ExpressVPN blows the competition clear out of the water. In case you’re a see it to believe it kind of shopper, ExpressVPN lets you test drive the service with its 30-day money-back guarantee. Don’t like it? You’ll get your money back, no questions asked. For real.

Transport Layer Security (SSL/TLS) can tunnel an entire network's traffic (as it does in the OpenVPN project and SoftEther VPN project[8]) or secure an individual connection. A number of vendors provide remote-access VPN capabilities through SSL. An SSL VPN can connect from locations where IPsec runs into trouble with Network Address Translation and firewall rules.


Cost: You have three pricing options depending on how often you want to pay. The cheapest IPVanish plan is to buy a full year at once for $77.99, making the monthly rate $6.49/month. If you pay for three months at once for $26.99, the monthly cost comes down to $8.99/month. However, to subscribe on a monthly basis with no commitment, it will cost $10/month.


When we ran our recent Hive Five on VPN service providers, we heard from VPN providers begging to be included, angry CEOs who claimed their company was maliciously left out, and others accusing some of the contenders of illegal or unethical behavior. We took at look at the poll and the claims, and while there’s no definitive proof the poll was gamed, we decided to come up with our own top five, based on our own research rather than reader feedback, that are great whether you’re the privacy advocate, the student, or the downloader.
Most VPN services allow you to connect up to five devices with a single account. Any service that offers fewer connections is outside the mainstream. Keep in mind that you'll need to connect every device in your home individually to the VPN service, so just two or three licenses won't be enough for the average nested pair. Note that many VPN services offer native apps for both Android and iOS, but that such devices count toward your total number of connections.

Routers – When you install the VPN on your router, all the devices that connect to your router will be using the encrypted VPN tunnel – without the need to install VPN software on each device. The router will only count as one VPN connection under your subscription, even if there are numerous devices using the router’s encrypted VPN connection. There are some important considerations before you do this – see my popular VPN router guide for setup tips.
Connecting to a VPN is fairly simple. In Windows, press the Windows key, type VPN, and click the Set up a virtual private network (VPN) connection option. (If you use Windows 8, you’ll have to click the Settings category after searching.) Use the wizard to enter the address and login credentials of the VPN service you want to use. You can then connect to and disconnect from VPNs using the network icon in the system tray – the same one where you manage the Wi-Fi networks you’re connected to.
So, what’s so great about ExpressVPN? Well, to kick things off, ExpressVPN offers members more than 2,000 servers spread out over 148 locations. This means no matter where in the world you are, you are likely to have several servers at your disposal for smooth and fast streaming. Which brings us to our next ExpressVPN benefit. This company has ridiculously fast speeds. This comes from all of those servers we mentioned. Plus, ExpressVPN lets you see which servers have the fastest download speeds. You can also forget about privacy issues with ExpressVPN since it has a strict no logs policy across the board. No timestamps, no destinations, no browsing history. It’s all private, all the time.
Subscription VPN Providers usually take your privacy a bit more seriously, since you’re paying for the service. It’s unusual for them to show ads, although whether they do logging or store data about your usage varies from company to company. They usually offer free trials so you can give the service a shot first, but remember: just because you’re paying for a service doesn’t mean you shouldn’t do your homework.
HTTPS is a powerful tool that everyone should use because it helps keep sensitive browsing private at no extra cost to the people using it. But like most security standards, it has its own problems too. That little lock icon in your browser bar, which indicates the HTTPS connection, relies on a certificate “signed” by a recognized authority. But there are hundreds of such authorities, and as the EFF says, “the security of HTTPS is only as strong as the practices of the least trustworthy/competent CA [certificate authorities].” Plus, there have been plenty of news stories covering minor and even major vulnerabilities in the system. Some security professionals have worried about those least-competent authorities, spurring groups to improve on the certificate standards and prompting browsers to add warnings when you come across certificates and sites that don’t withstand scrutiny. So HTTPS is good—but like anything, it isn’t perfect.
Mac's "Network Connection" tool has remained virtually unchanged in all Mac OS X versions. Thus, these directions should work when making basic VPN connections. However, it is best to keep your system upgraded to the latest version in order to address any security flaws and to be able to access more recent advanced options (such as using certificates) for configuring your VPN connection.
Some VPNs offer “split tunneling,” which routes all traffic through your VPN except specific services or sites that you allow. For example, you might want to send your Web traffic through your VPN but stream Netflix on your fast, domestic connection. But these types of rules are complicated to implement without also leaking other important information, and we didn’t assess how effective they were in practice.
A remote-access VPN uses public infrastructure like the internet to provide remote users secure access to their network. This is particularly important for organizations and their corporate networks. It's crucial when employees connect to a public hotspot and use the internet for sending work-related emails. A VPN client, on the user's computer or mobile device connects to a VPN gateway on the company's network. This gateway will typically require the device to authenticate its identity. It will then create a network link back to the device that allows it to reach internal network resources such as file servers, printers and intranets, as if it were on the same local network.
×