Tunnel endpoints must be authenticated before secure VPN tunnels can be established. User-created remote-access VPNs may use passwords, biometrics, two-factor authentication or other cryptographic methods. Network-to-network tunnels often use passwords or digital certificates. They permanently store the key to allow the tunnel to establish automatically, without intervention from the administrator.

We contacted each of our finalists with simple questions about its service and troubleshooting. Most VPN companies provide technical support through online ticketing systems, meaning you’ll need to wait for a response. This means that self-help support sites are even more important, since waiting for a reply while your connection is down can be frustrating. Response times to our support inquiries ranged from 20 minutes to a day.

Using a VPN will prevent most kinds of DNS attacks that would redirect you to a phishing page, but a regular old page made to look like a legit one in order to trick you into entering your data can still work. Some VPNs, and most browsers, are pretty good about blocking phishing pages, but this attack still claims too many victims to be ignored. Use common sense and be sure to verify that websites are what they say they are by looking carefully at the URL and always visiting HTTPS sites.
Subscription VPN Providers usually take your privacy a bit more seriously, since you’re paying for the service. It’s unusual for them to show ads, although whether they do logging or store data about your usage varies from company to company. They usually offer free trials so you can give the service a shot first, but remember: just because you’re paying for a service doesn’t mean you shouldn’t do your homework.

We didn’t audit any VPN services ourselves (though IVPN, our top pick, offered to arrange such an exercise), but we did ask detailed questions about each service’s operations as a way to judge whether a company was acting in good faith. Good faith is important, because there aren’t many avenues to penalize a VPN company that isn’t following through on its promises. In the US, companies making false claims about their products are policed by the Federal Trade Commission, and to some extent state attorneys general. Joseph Jerome at CDT told us that companies violating their own privacy policy or claims about logging would be “a textbook example of a deceptive practice under state and federal consumer protection laws,” and in theory, “the FTC could seek an injunction barring the deceptive practice as well as potentially getting restitution or other monetary relief.”
Think about it this way: If your car pulls out of your driveway, someone can follow you and see where you are going, how long you are at your destination, and when you are coming back. They might even be able to peek inside your car and learn more about you. With a VPN service, you are essentially driving into a closed parking garage, switching to a different car, and driving out, so that no one who was originally following you knows where you went.
What that means in practice is that VPNs are fine for bypassing geo-blocks, for protecting your online banking and for keeping business communications free from interception. However, if you’re using the internet to fight repressive regimes or to do anything else that could attract the attention of the authorities where you live, a VPN is not a magic wand that’ll make you invisible.

When purchasing VPN service from a provider, consider bandwidth requirements for your VPN. Bandwidth determines how much data can be transferred. High quality video and audio are larger in size and, thus, require more bandwidth than text or images. If you only want to use a VPN for internet browsing or transferring private documents, then most hosts provide enough bandwidth to do just that quickly and easily. However, if you want to stream video or audio, such as watching Netflix or playing online games with your friends, then pick a VPN host that allows for unlimited bandwidth.
Sadly, I engaged PIA, the number one rated and paid a "great price" for a 3 year service only to findout that dur to a recent SMTP abuses they no longer can be used when using Microsoft servers. So, all of my outbound email is rejected from Microsoft Servers due to this policy. In itself, fine, but as I enrolled in this service and while setting up the servie at no time was this mentioned nor, prior to a May 15 issue, was this a problem. 

Avast SecureLine and Avira Phantom VPN are run by antivirus companies as complements to their primary businesses. These services are also limited to Windows, Mac, iOS and Android and don't work without client software. But they offer few features, have a couple of dozen servers at most and don't let you pay anonymously. However, the companies are known quantities, and the services are handy for occasional travelers.

Credit: Opera VPNAlso, although your data is encrypted as it travels between you and the far-off VPN server, it won't necessarily be encrypted once it leaves the VPN server to get to its final destination. If the data isn't encrypted — and that depends on the website you're connecting to — then the traffic might be intercepted and read. (One well-known VPN provider was recently accused of inserting ads in users' web browsers, which would violate users' security and privacy.)
The 20+ Best Kodi Sports Addons: Updated January 2019January 1, 2019 / by William ElcockHow to install a VPN on Amazon Fire Stick/Fire TVSeptember 12, 2018 / by Paul BischoffBest Kodi Repositories, 7 we love and some to be wary ofMay 30, 2018 / by Ian GarlandHow to stop Kodi Buffering (3 fixes that actually work)May 1, 2018 / by William ElcockHow to install Kodi on Firestick and Amazon Fire TVSeptember 27, 2017 / by Paul Bischoff

Setting up ExpressVPN and connecting to a VPN server was easy enough. Performance, when connected to the VPN server, was average at 49 Mb/s down and 16 Mb/s up, compared to our usual speeds of 125 Mb/s down and 20 Mb/s up. Netflix complained about a proxy being in use when we used the automatic configuration option, but it worked fine when we manually selected a local U.S. server. Amazon Prime Video played just fine, and our other internet tests completed without issue.
We're not cryptography experts, so we can't verify all of the encryption claims providers make. Instead, we focus on the features provided. Bonus features like ad blocking, firewalls, and kill switches that disconnect you from the web if your VPN connection drops, go a long way toward keeping you safe. We also prefer providers that support OpenVPN, since it's a standard that's known for its speed and reliability. It's also, as the name implies, open source, meaning it benefits from many developers' eyes looking for potential problems.

VPNs are necessary for improving individual privacy, but there are also people for whom a VPN is essential for personal and professional safety. Some journalists and political activists rely on VPN services to circumvent government censorship and safely communicate with the outside world. Check the local laws before using a VPN in China, Russia, Turkey, or any country with with repressive internet policies.
Setting up a Virtual Private Network is a straightforward process. It's often as simple as entering a username and sever address. The dominant smartphones can configure Virtual Private Networks using PPTP and L2TP/IPsec protocols. All major operating systems can configure PPTP VPN connections. OpenVPN and L2TP/IPsec protocols require a small open source application (OpenVPN) and certificate download respectively.

— Windscribe now supports static residential U.S.-based IP addresses and port forwarding.  The service has a new ad and tracking blocker called "R.O.B.E.R.T." There's also a new "build-a-plan" pricing scheme that charges you $1 per month per country you want to connect to, with 10GB of data per country included. Unlimited data for all the countries you choose costs another $1 per month.


It should come as no surprise, then, that Australia is a market ripe for VPN providers. A VPN, or virtual private network, encrypts a device’s internet traffic and routes it through an intermediary server in a location of the user’s choosing. This can allow Australians to access content that’s geolocked in their own country. It can also provide a private tunnel through which to use P2P filesharing applications.
What is the Seren Kodi addon? Is it safe and are there alternatives?January 14, 2019 / by William ElcockWhat is cCloud Kodi Addon? Is it legal and safe to install? Updated Jan 2019January 4, 2019 / by Tom BlackstoneHow to watch NBA 2018-2019 online with Kodi – Streaming GuideJanuary 3, 2019 / by Paul Bischoff22 great Kodi movie and TV addons that actually work in January 2019January 1, 2019 / by Paul Bischoff24 best Kodi Addons working in January 2019: Over 120 tested, only these addons made the cut!January 1, 2019 / by Ian Garland
Windscribe  offers unlimited device connections. Yes you heard that right! The reason is that unlike the others above on this list, it doesn't offer unlimited data. So you're limited by bandwidth and data, not by devices. You get 10GB every month, and there's a free plan also but that only allows one device. There are apps for Windows, Mac and iOS but not Android, and the service also offers browser add-ons with useful features such as ad-blocking. Short range performance (to US sites) is good, but we noticed lag with transatlantic connections. However, if you’re looking to protect the data from a whole bunch of devices - an office, perhaps, or just a smart home - the support for unlimited connections is a real stand-out feature.
It's important to note that installing a VPN on one device will only protect that device. If you want your media streamer (say an Amazon Fire TV Stick) to use the VPN connection, you'll either need to try and install a VPN app on it, look for VPN settings where you can enter your account details, or install an app for your router that'll cover all devices connected to it. Find out more in our article on how to use a VPN with a Fire TV Stick.

Thankfully, there's a workaround for this problem. Instead of using the VPN app from the company from which you've purchased a subscription, you can download the standalone OpenVPN app. Open it, and you can enter your subscription information from the VPN company you've decided to work with. The OpenVPN app will then connect to the VPN company's servers using our preferred protocol.


I recommend always using a VPN when using someone else's Wi-Fi network. Here's a good rule of thumb: If you're away from the office or home, and you're using someone else's Wi-Fi (even that of a family member or a friend, because you never know if they've been compromised), use a VPN. It's particularly important if you're accessing a service that has personally identifying information. Remember, a lot goes on behind the scenes, and you never really know if one or more of your apps are authenticating in the background and putting your information at risk.

Over the course of four months, we scoured articles, white papers, customer reviews, and forums to compile the pros and cons of VPN services and different VPN protocols and encryption technologies. That One Privacy Site and privacytools.io stood out as two of the most thorough and unbiased sources of information. We interviewed Electronic Frontier Foundation analyst Amul Kalia about government surveillance and VPN efficacy. We also got answers from Joseph Jerome, policy counsel for the Center for Democracy & Technology’s privacy and data project, about how accountable VPN providers are for their policies and terms of service, and how that relates to trustworthiness. Alec Muffett, a security expert and software engineer, also shared his views on the usefulness of VPNs to protect against various threats.


How to buy and pay with bitcoin anonymouslyApril 18, 2018 / by Aimee O'DriscollWhat bitcoin is and how to buy it and use itApril 6, 2018 / by Aimee O'DriscollMonero vs zcash vs dash: which is the most anonymous cryptocurrency?April 4, 2018 / by Aimee O'Driscoll20+ Bitcoin scams and how to spot and avoid themMarch 8, 2018 / by Aimee O'DriscollWhat is Bitcoin mining and how can you do it?March 7, 2018 / by Aimee O'Driscoll
Many VPN services claim that if you pay their fee, they'll provide you unlimited data transmission and won't throttle your speeds. Generally, this is true, but I'll give you my standard official "unlimited" warning: It's been my experience that when a vendor says something is "unlimited," it's almost always limited. Somewhere, there will be a note in the fine print or terms of service that allows the vendor to limit you in some way. It pays to read those agreements.
Tip for Chrome, Firefox, and Opera users: A feature called WebRTC can, in some Web browsers, inadvertently cause your true IP address to leak out even when you’re connected via a great VPN. WebRTC assists with peer-to-peer connections, such as for video chatting, but could be exploited in some cases. You can manually disable this function in Firefox, or use an extension to block most instances of it in Chrome or Opera. For more details and instructions, check out Restore Privacy.
Hide Your Browsing Activity From Your Local Network and ISP: If you’re using a public Wi-Fi connection, your browsing activity on non-HTTPS websites is visible to everyone neraby, if they know how to look. If you want to hide your browsing activity for a bit more privacy, you can connect to a VPN. The local network will only see a single, secure VPN connection. All the other traffic will travel over the VPN connection. While this can be used to bypass connection-monitoring by your Internet service provider, bear in mind that VPN providers may opt to log the traffic on their ends.
Trust and transparency issues are the foremost concerns in choosing a great VPN, and if a service doesn’t have enough locations to be useful to you, all the security features won’t make a difference. But after those concerns have been satisfied, we recommend that most people use connections based on the OpenVPN protocol, because of security flaws and disadvantages in the PPTP and L2TP/IPsec protocols. (Experienced users may consider IKEv2, but because it has its own debated pros and cons, we ruled it out.) Though AES 128-bit encryption is fine for most purposes, we prefer services that default to the more-secure 256-bit encryption and still offer good performance.
Reddit users give Nord praise because it actually seems trustworthy, especially compared to other VPNs that may hand over information to the wrong people. Nord is also equipped with the ability to connect to a Double VPN, which encrypts your traffic twice for double the protection. One NordVPN fan on Reddit, Sacredkeep, even mentioned that NordVPN solved the problems that PureVPN and PIA gave them. Plus if you have any issues, Nord offers a 24/7 live chat. If you want a no frills, no worries situation, NordVPN is the simple, smooth operator that has your back. Get one month for $11.95, one year for $6.99/month, or two years for $3.99 per month.
With endpoints in 18 countries, Kaspersky Secure Connection can be set up so that it connects automatically, connects to an endpoint in a certain country by default, or seeks to establish a connection whenever you connect to an insecure Wi-Fi hotspot. You don’t, however get an automatic killswitch, so if your VPN connection goes south, you won’t be automatically disconnected.
Inside the Preferences pane, you can also tick boxes to automatically launch or connect the app when you boot your device. Anyone using the Windows or macOS app should tick the box to autoconnect “when joining insecure WiFi networks.” You can also tag individual Wi-Fi networks as trusted or untrusted, to make sure you’re always protected even if you forget to connect the app manually. These network rules—not offered on most apps, including IVPN’s mobile apps or any of TorGuard’s apps—will make sure you don’t forget your VPN when you need it the most.
Using a VPN is a little trickier for ChromeOS users, however. While Google has worked to make it easier to use a VPN with a Chromebook or Chromebox, it's not always a walk in the park. Our guide to how to set up a VPN on a Chromebook can make the task a bit easier, however. In these cases, you might find it easier to install a VPN plug-in for the Chrome browser. This will only secure some of your traffic, but it's better than nothing.
Advertiser Disclosure: Some of the products that appear on this site are from companies from which QuinStreet receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. QuinStreet does not include all companies or all types of products available in the marketplace.
In general, the answer is yes, it is perfectly legal (and normal!) to use VPNs, even if you are in places like China where VPNs are restricted. VPNs are used every day by businesses and individuals throughout the world for basic privacy and security purposes. Businesses rely on VPN technology and encryption for security reasons and it would not make sense for this to ever become illegal.
If you’re just getting started with VPNs and want a basic VPN for using on public Wi-Fi hotspots or accessing region-restricted websites, there are a few good, simple options. We like ExpressVPN because they have great speeds and a lot more functionality than average including clients for almost any device—you can even get a router pre-installed with their VPN client.
We've knocked CyberGhost down a peg from last year's standings because the service's network performance wasn't as great this time around in our tests. Yet it has a feature-loaded, user-friendly interface, with convenient buttons in the Windows client software for streaming media, torrenting files, protecting your Wi-Fi transmissions and evading censorship. (The Mac desktop software has fewer features.)

In conjunction with information security experts at The New York Times (parent company of Wirecutter), we reached out to our finalists with questions about their internal security practices. We asked how they handled internal security access, how they communicated securely with customers, in what ways they collected reports on security bugs, and of course whether their statements on logging policies matched their marketing and privacy policies. We also considered which companies had public-facing leadership or ownership, and which ones openly supported projects and organizations that promoted Internet security and privacy. (For a full breakdown of trust and VPNs, check out the section above.)


If your VPN provider is based within a country that is part of the 14 Eyes, it can be asked to share data of its customers and will legally have to comply. If your provider promises that it doesn't log any information, you're probably safe within the 14 Eyes, but it is more of a risk if privacy is your main concern and you might want to consider looking for a VPN provider that is based elsewhere.
A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or public networks as if their computing devices were directly connected to the private network. Applications running across a VPN may therefore benefit from the functionality, security, and management of the private network.[1]
×