The Center for Democracy & Technology brought just such a complaint against one VPN provider last year, though no enforcement action has been announced. Many privacy sites suggest finding a VPN service outside the prying eyes of US intelligence agencies and their allies, but FTC protections could be an argument for finding one in the US so that there’s a penalty if it deceives its customers.
L2TP/IPsec (Layer 2 Tunneling Protocol with Internet Protocol Security): L2TP is not secure itself, so it's generally paired with the IPsec secure-networking standard. The combination of the two was once thought to be very secure when properly implemented, but some VPN services suggest that you use OpenVPN instead. L2TP/IPsec has native support in Windows, OS X/macOS, Android, Chrome OS and iOS. Most VPN services support it.
When we test VPNs, we use the Ookla speed test tool. (Note that Ookla is owned by PCMag's publisher, Ziff Davis.) This test provides metrics for latency, download speeds, and upload speeds. Any one of these can be an important measurement depending on your needs, but we tend to view the download speed as the most important. After all, we live in an age of digital consumption.
IPVanish operates hundreds of servers in 60 countries, including 12 in APAC. It owns all of its own physical servers resulting in some of the fastest download speeds available from any VPN. Those speeds cannot be put toward streaming Netflix, however, as IPVanish is currently not able to unblock Netflix. It’s a good option for P2P filesharers. Torrenting traffic is allowed on all servers. The company is based in the US but has a strict no logs policy.
Here's the problem with the internet: It's inherently insecure. When the internet was first designed, the priority was to be able to send packets (chunks of data) as reliably as possible. Networking across the country and the world was relatively new, and nodes often went down. Most of the internet's core protocols (methods of communicating) were designed to route around failure, rather than secure data.
When you browse the web while connected to a VPN, your computer contacts the website through the encrypted VPN connection. The VPN forwards the request for you and forwards the response from the website back through the secure connection. If you’re using a USA-based VPN to access Netflix, Netflix will see your connection as coming from within the USA.
In terms of general performance, Hide My Ass! around the average mark with a quick and stable 6.4MB/s (51.2Mbit/s) for FTP to 6.9MB/s (55.2Mbit/s) HTTP via UK endpoints, and 8.8MB/s (70.4Mbit/s) for FTP and 7.2MB/s (57.6Mbit/s) HTTP in the Netherlands. In other words, pretty good going. VPN connections to the U.S. are almost invariably slower than those to closer geographic endpoints, as you’d expect, the 2.12MB/s (16.96Mbit/d) we got with Hide My Ass this time around was definitely below average.
The VPN providers present a great variety of virtual private network outputs for technically savvy and average customers. The tech world struggles with a lot of outputs that are design and technologically presented. At times, it is hard to differentiate between these two ideas. Luckily, there are a few tech geeks that have mastered the design of the virtual private networks and have enough competence in all the matters of VPN outputs to differentiate the bad and good services. For a computer specialist, there are some VPN services evaluations that they will deal with daily. Therefore seek help from a computer professional before purchase.
ExpressVPN scored well in our recent round of testing in terms of speed – we recorded around 8.5MB/s (68Mbit/s) via both FTP and HTTP in the UK, while Dutch endpoints gave us 6.3MB/s (50.4Mbit/s) via FTP and 7MB/s (56Mbit/s) via HTTP, more than enough for general browsing, streaming and downloading. US connection speeds, as you’d expect, were rather slower at 2.5MB/s (20Mbit/s) via FTP and a good 3.2MB/s (25.6Mbit/s) over HTTP.
Aside from a moral quandary, what does VPNHub offer subcribers? A selection of endpoints in 50 countries, including less common locations like Cyprus, Costa Rica and the Philippines, the option to connect to VPNHub on booting up your system, a killswitch that’ll nerf your connection whenever the VPN fails, and ‘Scramble’, a feature that attempts to hide from your ISP the fact that you’re using a VPN.
With a presence in 148 locations across 94 countries, you also won’t need to worry about international travel. Furthermore, the more than 2,000 servers are all well placed throughout common travel destinations and urban centers. Any package will land you unlimited bandwidth and speed, a guaranteed 99.9 percent uptime, and 24-hour customer service. With so many guaranteed features, it’s no wonder this vendor is considered among the best — although note that ExpressVPN only supports up to three simultaneous connections, which is the least of the services on our list.
We didn’t find any problems when we tested other aspects of TorGuard’s performance. Each time we checked our location via IP address, it accurately resolved to the location of a TorGuard server. Neither our true IP address nor our location was exposed when we tested for DNS leaks and IPv6 leaks. TorGuard runs its own DNS servers—a requirement for all the VPNs we tested—so the routing that happens when you go to a website isn’t released to your ISP, Google, or anyone else. And since TorGuard doesn’t support IPv6, the app disables it completely, just like IVPN.
As we said, KeepSolid VPN Unlimited is also good value, if you’re prepared to dig deep. Paying £76.45 for three years use is equivalent to paying £2.12 a month, or, if you’re really made of money, then £152.92 will net you a lifetime subscription. The standard monthly price of £7.64 doesn’t compare as well, but £45.88 for 1 year (equivalent to £3.82 a month) is slightly better than others.
Some VPNs offer great service or pricing but little to no insight into who exactly is handling them. We considered feedback from security experts, including the information security team at The New York Times (parent company of Wirecutter), about whether you could trust even the most appealing VPN if the company wasn’t willing to disclose who stood behind it. After careful consideration, we decided we’d rather give up other positives—like faster speeds or extra convenience features—if it meant knowing who led or owned the company providing our connections. Given the explosion of companies offering VPN services and the trivial nature of setting one up as a scam, having a public-facing leadership team—especially one with a long history of actively fighting for online privacy and security—is the most concrete way a company can build trust.
If you’re seriously concerned about government surveillance—we explain above why that should be most people’s last consideration when choosing a VPN—some expert sites like privacytools.io recommend avoiding services with a corporate presence in the US or UK. Such experts warn about the “14 eyes,” a creepy name for a group of countries that share intelligence info, particularly with the US. IVPN is based in Gibraltar, a British Overseas Territory. We don’t think that makes you any worse off than a company based in Switzerland, Sweden, or anywhere else—government surveillance efforts around the world are so complicated and clandestine that few people have the commitment, skills, or technology to avoid it completely. But because Gibraltar’s status has been a topic of debate in other deep dives on VPNs, we’d be remiss if we didn’t mention it.
OVPN was regularly the fastest VPN in our tests regardless of the time of week or location. We also liked the app’s clean design and its simple and well-labeled settings pane. But OVPN is a small startup with a limited server network: At this writing, the company has servers in just seven countries, none in Asia. That makes it less versatile for finding less congested routes or geoshifting. OVPN also hasn’t released an Android app yet, so even non-iOS device owners will have to resort to the clunky, third-party OpenVPN Connect app on their phones. When we reached out for details about the company’s operational security, founder and CEO David Wibergh was open to questions and gave us answers that led us to believe that the company acted in the best interest of its customers’ privacy and security. He noted that after an uptick in data requests from local authorities in Sweden—all of which OVPN responded to by explaining that it lacked any pertinent data—the company published a blog post to detail just how little information it keeps.
Mobile VPNs are designed and optimized to ensure a seamless user experience when devices are switching networks or moving out of coverage. It generally has a smaller memory footprint, and because of that, it also requires less processing power than a traditional VPN. Therefore, it enables your applications to run faster while the battery pack is able to last longer.