A VPN encrypts all your online traffic and passes it through a secure server, making it more difficult for third parties to eavesdrop and track your communication.
It is a valuable tool while using public Wi-Fi, a laptop or smartphone at the office, or an untrusted network.
We evaluated 11 different VPN providers, analyzing their convenience, performance, privacy policies, and device support. In our search, we identified two VPN services that are reasonably priced, serious about security and your privacy, and packed with good connectivity options and device support.
Should you use a VPN?
There are many reasons to use a VPN, including anonymizing your online activity and private data while using public Wi-Fi or other non-trusted connections, watching streaming services that are blocked when you’re abroad, separating your job traffic from your family’s traffic, and gaining internet access from within a country (or business) that censors content.
A VPN is not a miracle; it is not intended to be a comprehensive security solution. If someone is motivated to access your information, they will find a way. A government might get a court order. A criminal could deploy malware to infiltrate your phone or computer and duplicate your data beyond the VPN’s operation.
Your machine could leak information due to a software error. Or, someone may progressively gather information about you and your gear (a process known as “digital fingerprinting”), ultimately gaining the capacity to monitor your travels across cyberspace — similar to how advertising businesses use social network data to show you those creepy advertisements.
However, VPN providers hide information in their advertising material using phrases like “military-grade encryption” and “complete or 100 percent anonymous access.” Several encryption standards are more effective at securing data streams than others, but there is no widely agreed “military” standard, and anonymity cannot be guaranteed. Some VPN providers also make promises regarding “multi-hop” techniques or double-encrypting your traffic; we don’t consider this a significant benefit, as it might slow down your speed and doesn’t add much to your privacy.
Yes, using a VPN can increase your anonymity, but you will still leave digital footprints. To its credit, IVPN expressly states that it does not guarantee anonymity or military-grade encryption and uses more precise language to describe its marketing techniques and pledges.
The location of a VPN provider’s headquarters is frequently cited as a justification for identity protection claims. Obtaining your data from a Swiss- or Panama-based provider (like ProtonVPN or NordVPN, for example) may need more effort than from a US-based provider, but it is not impossible. Through mutual legal aid accords, the courts of several nations can force vendors to provide account information in highly restricted circumstances. Given these constraints, we have included their headquarters location in each review for your reference, but we do not believe you should give it any thought.
Keep in mind that assertions made by vendors regarding their transparency should be taken with a grain of salt, and explore the open-source software. Several VPNs (including Mullvad, MozillaVPN, IVPN, ProtonVPN, and PIA) have made their whole software code available for public inspection. This is preferable since open-source projects are exposed to public scrutiny and, as a result, tend to address vulnerabilities and provide patches more frequently, so safeguarding you more effectively.
Others (like ExpressVPN or SurfShark) had adopted a more restricted approach, supporting the OpenVPN protocol specification or publishing only a portion of their software. Other vendors may claim that their goods have been audited by third party companies (Surfshark, for example, has undergone audits in 2018 and 2021); however, these audits may not be widely accessible or take place infrequently, or only be made available to the general public (NordVPN). RestorePrivacy provides audit-specific information for several providers. Additionally, not all of a product’s source code is subject to an audit.
As you continue your investigation, be mindful of the specialized VPN review websites themselves. Many of these are operated by VPN providers (for example, VPN-Mentors.com is owned by Kape, which provides a range of VPNs, including ExpressVPN and PIA), so seek independent sources of information.
Our VPN testing methodology
We evaluated 11 major VPN providers, focusing on those with the most outstanding reviews, the most locations, the fastest speeds, and a history of delivering decent privacy. We downloaded installations and created accounts for each VPN. Then, we tested each VPN under various settings, including speed and DNS leak checks, for more objective evaluations.
Furthermore, we reviewed each VPN’s privacy policy and investigated any potential privacy conflicts. In addition, we noted if the organizations took further measures to provide a safe service, such as undergoing an independent assessment by cybersecurity specialists.
How easy it is to use
Several aspects make one VPN simpler to use than others. Not only did we evaluate the user-friendliness of software interfaces, but also the simplicity of companies’ security measures. Some VPNs (CyberGhost, ExpressVPN, and Surfshark) do not support multi-factor authentication at all, some offer a variety of privacy settings but make them hard to use or setup, and some have kill switches (which terminate your connection instantly if the VPN connection fails, preventing accidental data exposure). Some will notify you if you use an older version or prompt you to upgrade.
Support
We analyzed the platforms supported by each VPN (ideally, each must support macOS, Linux, Windows, Android, and iOS devices), the number of concurrent streams supported by the service, and the number of nodes and locations under each VPN’s management. Although configuring a VPN server on your network is not for everyone, we considered router support and requires technical expertise.
Setup
Every software has a setup. As we went through the process of setting up each VPN and creating our accounts, we took note of how long it took and how simple it was to move between servers.
Subscriptions
We scrutinized how VPN service providers manage subscriptions. Why? Many VPN providers provide 30- or 45-day free trials to evaluate their products, and some even give free subscriptions (with limited functionality). That seems fantastic till you choose to quit your trial and look for an alternative answer. Some suppliers make it difficult to exit, while others retain your confidential information long after closing your account. Several suppliers provide discounts via advertisements and affiliate programs; if you keep a watch on YouTube, you may be able to acquire an initial membership at steep savings.
Privacy
We wanted to extensively analyze each VPN’s privacy policy and their relationships with other organizations and if they’ve undergone impartial code and infrastructure reviews. Ultimately, a VPN service must protect users’ data without collecting it themselves.
Speed
Bandwidth test using Ookla’s Speedtest and DNS leak testing with DNSLeakTest.com.
The King: Mullvad
Mullvad takes the extra step to protect your privacy, which is the most crucial factor to consider when searching for a VPN. When you sign up for the company’s service, they do not request your email address, which is an intriguing technique for protecting your privacy. Instead, you acquire a unique identifier that serves as your identification. That means no password is necessary once you’ve entered your code, it’s unlikely that anybody could guess your code or discover it on the dark web (except if you reused it, which you shouldn’t), and it’s rare that anyone could tie the code to you even if they obtained it in a breach.
Their billing is straightforward: €5 each month (payable by various choices, including cash, credit cards, and cryptocurrencies), automatically renewed with a 30-day cancelation period. Each subscriber may connect up to five devices concurrently, and applications are compatible with Windows, macOS, Linux, iOS, Android, a Firefox browser plugin, and network routers.
Mullvad offers a very intuitive user interface. There are toggles to stop viruses, advertisements, and tracking. You choose the country you wish to connect to, and the system swiftly and automatically locates the nearest server. It also contains an automated kill switch that disconnects you from the web if it fails, preventing you from conversing over an unsafe connection without your knowledge. In addition, it includes automatic software upgrades and does not collect data from third parties.
Mullvad, located in Sweden, receives good scores for transparency; the company has made its code open source and employs open-source development tools. Cure53 reviewed Mullvad’s code in 2020, and even if they are ready for yet another audit, we appreciated the openness with which they addressed the concerns discovered and how they were addressed. When you first open the app, your encryption keys are generated by you, so they don’t even know what they are.
Mullvad is so well respected that Mozilla now uses its servers to operate its more expensive MozillaVPN service using Mullvad’s servers.
The most significant disadvantage of Mullvad is that they lack infrastructure in as many locations as their rivals. Their performance is their most important benefit; there was minimal connection deterioration, with minimal lag and download speed issues.
The Queen: IVPN
Like Mullvad, IVPN utilizes a random number generation mechanism for login, so it does not save passwords. An attacker would be unable to link your email address and personal information to their servers in the case of a breach. IPVN provides applications for the five most popular operating systems, modems, and network storage devices. IVPN is somewhat more costly than Mullvad, but their top-tier service gives slightly greater flexibility. IVPN provides access to two simultaneous devices for $6 per month or seven concurrent devices for $10 per month, with annual savings available. A good touch is that IVPN does not automatically renew your membership unless you instruct it to do so.
In our tests, IVPN delivered speeds at least 88% faster than those without a VPN on our testing equipment. IVPN’s configuration controls are grouped to make it simple to make adjustments, such as switching between the OpenVPN and WireGuard protocols, enabling additional protections to prevent tracking, and “hardcore mode,” which restricts all Google and Facebook domain interactions and allows the use of LAN-connected gadgets (such as printers and file sharing systems).
Another feature we like is IVPN’s always-on firewall option, which acts as a kill switch. IVPN and TunnelBear are the only two VPNs with yearly audits that are open to the public and that have never failed. Additionally, it does not collect third-party data or has major DNS leaks.
Honorable mentions
NordVPN
The headquarters of NordVPN is in Panama. It includes applications for the five operating systems, compatibility with intelligent TVs, Chromebooks, game consoles, and Chrome, Edge, and Firefox browser extensions. It supports up to six simultaneous device feeds and has an infrastructure in 60 countries. It built its variant of the WireGuard protocol, known as NordLynx, and includes OpenVPN and IPSec. It has conducted third-party audits, but only existing clients have access to them. It offers a 30-day free trial and a monthly subscription with yearly discounts; however, as is typical with VPN services, some have noted refund issues. CoinPayments can facilitate cryptocurrency transactions for NordVPN. It offers optional obfuscated server security to conceal VPN traffic. The company also sells the password manager NordPass and the secure cloud storage service NordLocker.
ProtonVPN
ProtonVPN is a trustworthy business with a strong reputation that takes their safety and your security seriously. It provides three premium subscriptions with yearly discounts: Basic for $4/month, Plus for $8/month, and Visionary for $24/month. We recommend the Plus package, which enables ten concurrent devices and provides faster speeds and streaming capability. This plan likewise routes your traffic across several servers but improves speed and allows you to select individual servers from a vast array of locations. The Basic plan features servers in over 40 areas. In contrast, the Plus and Visionary plans have servers in 63 countries and enable routing VPN traffic through “secure core” servers in Sweden, Iceland, or Switzerland. This is a method for ensuring more security, albeit at the expense of performance.
In addition, there is an adware filter called NetShield that you can use to prevent specific malware, as well as adverts and trackers, as well as a simple kill switch. All of these options are accessible via the primary setup panel. The “smart protocol” of ProtonVPN automatically selects the connection with the optimal performance for your conditions. Additionally, you may choose between WireGuard and OpenVPN via an additional setup menu.
Using its own DNS servers, the service prevents DNS leaks. Other reviews discovered PII in its records, despite the company’s promise of a “strict no-logging policy,” which might be another reason to utilize Mullvad or IVPN if this is an issue. Along with its 2019 audits, the Switzerland-based company provides open-source code for its Windows, macOS, iOS, and Android apps. If you choose to cancel or modify your membership, you will be billed for the part of the month in which you used the service.
ExpressVPN
ExpressVPN is headquartered in the British Virgin Islands and is owned by Kape Technologies. It appears to support the five major operating systems, Chrome, Edge, Firefox browser extensions, smart TVs, gaming consoles, routers, and Chromebooks. Its server infrastructure spans 94 countries, and its plan supports five concurrent broadcasts. Lightway, a protocol comparable to WireGuard, is detailed here and compatible with the IPSec and OpenVPN protocols. ExpressVPN has a 30-day money-back guarantee; some reviews have noted that requesting a refund was a lengthy procedure. Bitpay and Paymentwall are supported as payment gateways.
When the company was formerly known as Crossrider, Kape advertised a plugin software system used to distribute ad insertion software; the U.S. Department of Justice fined its CIO for hacking, which gives us concern when purchasing a solution intended to safeguard your privacy. Additionally, Kape operates the VPN review website VPN-Mentors.com.
PIA (Private Internet Access)
Private Internet Access (PIA) has vast server infrastructure in 78 countries and is headquartered in the United States. They provide applications for the 5 major operating systems, game consoles, routers, smart televisions, and Chrome, Opera, and Firefox browser extensions. They offer up to ten simultaneous device streams utilizing OpenVPN and WireGuard and have open-sourced their applications.
In addition, they have released several transparency reports, which, nevertheless, have not been independently audited. They have issues with data leakage. As with other businesses, their subscription is subsidized for extended time periods and comes with a 30-day return policy; nevertheless, consumers have stated that obtaining a refund can be challenging.
SurfShark
SurfShark supports the five most popular operating systems and offers Chrome, Firefox, and Edge browser extensions. It has an infrastructure in 65 locations, and its network of third-party servers has been inspected here. In addition, it offers both OpenVPN and WireGuard protocols and allows limitless concurrent devices. The organization’s headquarters are in the British Virgin Islands. Plans are offered at significant savings for more extended periods and are refundable for up to 30 days; however, some reviewers have noted the difficulty in receiving refunds. Through CoinGate or CoinPayments, SurfShark will accept bitcoin payments. There have been instances of leakage of sensitive information from its records.
Hotspot Shield
Hotspot Shield is available in 80 countries and offers applications for all five operating systems and Chrome web browsers and routers. Three options are available: a lifetime free plan, a premium plan (includes five simultaneous devices) for $13/mo and a family plan (allowing up to 25 devices) for $20/mo. Its free plan is restricted to a single location and has a daily traffic cap of 500 MB. The premium plans support video streaming. You can evaluate the premium plans for up to 45 days, and yearly subscriptions are offered at substantial discounts.
Hotspot Shield promotes “military-grade encryption,” which is not a reasonable statement since the company has previously had FTC complaints and has not performed code audits. They are situated in the United States and have created a proprietary protocol called Catapult Hydra, which has been patented and is utilized by a small number of other security providers.
TunnelBear
TunnelBear is now acquired by McAfee, supports Windows, macOS, iOS, and Android (but not Linux), and includes browser extensions for Chrome and Firefox. The company is headquartered in Canada, has an infrastructure in 50 locations, and is expanding service to nations in the Southern Hemisphere that other providers have underserved. Three plans are available: a free plan, a premium plan, and a corporate plan for multiple clients that costs $5.75 per month per seat, with savings for yearly orders.
The free plan offers 500 MB of monthly traffic, while the pricier plans support up to five simultaneous devices. Although they have some private information that investigators have discovered, they do not record any activity. However, they do frequent code audits. They give no refunds and offer OpenVPN but not the WireGuard protocol.
IPVanish
IPVanish, which Ziff-Davis currently own, provides a single yearly package with a 30-day money-back guarantee. It supports an infinite number of devices on each of the five supported operating systems and Amazon Fire Sticks, routers, and Chrome browsers. It supports the OpenVPN, IPSec, and WireGuard protocols. It has a massive network of its own machines in more than 75 countries (including one in Africa and a handful in South America).
The company’s headquarters are located in the United States. It has not undergone a code audit, does not block advertisements, and only offers split tunnels on Android devices. Split tunnels allow you to route only a portion of your bandwidth through a VPN, which is essential if you use applications like maps that require your location. IPVanish does record origin IPs and users on the physical device without encryption.
CyberGhost
CyberGhost is likewise held by Kape Technologies and has the same corporate responsibility concerns as PIA and ExpressVPN. The compan is headquartered in Romania and has 7,800 machines located in 91 different countries. The monthly plan includes a 14-day money-back promise, while the longer-term plans give 45-day money-back guarantees. The plan supports up to seven simultaneous connections, all five operating systems, and a variety of smart TVs, game consoles, Chrome and Firefox web browsers, and routers.
Every three months, transparency reports are produced, which is not the same as a third-party audit, but they continue to say that they have no data to disclose and do not monitor or keep user data. The application lacks a kill switch and MFA support, and it only employs WireGuard. They provide a variety of security add-ons, such as a password manager, anti-virus software, and a private browser. Before launching the main Windows application, you must install Microsoft’s .Net Framework when utilizing the Windows app.
Infoceptor's editorial team handpicks all of the products and services it recommends, regardless of external influences. Affiliate links appear in some of our stories. We may receive an affiliate commission if you purchase something through one of these links, which helps us stay independent and support our great team.
