It usually relies on either Internet Protocol Security (IPsec) or Secure Sockets Layer (SSL) to secure the connection. However, SSL VPNs can also be used to supply secure access to a single application, rather than an entire internal network. Some VPNs also provide Layer 2 access to the target network; these will require a tunneling protocol like PPTP (Point-to-Point Tunneling Protocol) or L2TP (Layer 2 Tunneling Protocol) running across the base IPsec connection.
Cost - VPNs aren't too pricey, but they vary from vendor to vendor. If your main concern is price, then go with something inexpensive, or free - like Spotflux Premium VPN or AnchorFree HotSpot Shield Elite. By all means, try a free server but they do have a few drawbacks since they attract a lot of users. Free servers are often slower, and since most are ad-supported, they place adverts on the online pages you access. Others can even limit the speed of your connection, as well as your online time or amount of data transferred.
One way to resolve the issue of trust is to be your own VPN provider, but that’s not a feasible option for most people, and it still requires trust in any company providing the hardware that your VPN would run on, such as Amazon’s cloud services. Multiple projects can help you cheaply turn any old server into a VPN, including Algo, Streisand, and Outline. By encrypting all the traffic from your home or mobile device to a server you manage, you deprive your ISP and a potentially villainous VPN of all your juicy traffic logs. But most people lack the skills, patience, or energy—or some combination of the three—to do this. If you don’t manage servers or work in IT, it may be harder to manage perfect operation and performance better than trustworthy professionals. Lastly, though you remove one threat from the equation by cutting out a VPN service provider, you also lose the extra layer of privacy that comes from your traffic mixing in with that of hundreds or thousands of other customers.
However, if you’re using a top-tier VPN service, the difference in speed usually isn’t noticeable, and can sometimes speed up your connection. You can still watch streaming videos and download large files without interruption. Our VPN servers are among the fastest in the industry and we work hard to keep it that way. Download Hotspot Shield VPN and get privacy protection without sacrificing speed.

GRE is sometimes used by ISPs to forward routing information within an ISP's network. To prevent the routing information from being forwarded to Internet backbone routers, ISPs filter out GRE traffic on the interfaces connected to the Internet backbone. As a result of this filtering, PPTP tunnels can be created using PPTP control messages, but tunneled PPTP data is not forwarded.


The initial PPP payload is encrypted and encapsulated with a PPP header to create a PPP frame. The PPP frame is then encapsulated with a modified GRE header. GRE is described in RFC 1701 and RFC 1702 in the IETF RFC Database and was designed to provide a simple, general purpose mechanism for encapsulating data sent over IP networks. GRE is a client protocol of IP using IP protocol 47.
It’s also fast with impressive 830+ server locations, which makes it an excellent choice for P2P file-sharing, online gaming, and HD streaming. There are no annoying bandwidth caps here, and you can connect to Netflix US, BBC iPlayer, or France’s Canal+ if you wish – there’s a server for every need. The double encryption will understandably slow things down.
My rule of thumb is to use a domestic VPN and connect to servers as close to my location as possible. That said, I have had good nights and bad nights getting online. In my recent trip, I found most hotels' networks to become unusable after about 9pm. My theory is that many of the guests were watching Netflix at that time, completely clogging the hotels' pipes.
Using Wi-Fi on the Windows laptops, we timed how long it took to connect to websites, measured latency times (how long it took a server to respond), and recorded upload and download speeds with Ookla's Speedtest meter, both with and without the VPN activated. We also timed how long it took to download a large video file, both with and without VPN activation.

At $7.50/month and $58.49 for a year, they're obviously trying to move you towards their yearly program. We awarded the company points for Bitcoin support, and their money-back guarantee. We're a little disappointed that they only allow a 7-day trial, rather than a full 30-days. The company is generous, with five simultaneous connections. They also picked up points for their connection kill switch feature, a must for anyone serious about remaining anonymous while surfing. 


Credit: Opera VPNAlso, although your data is encrypted as it travels between you and the far-off VPN server, it won't necessarily be encrypted once it leaves the VPN server to get to its final destination. If the data isn't encrypted — and that depends on the website you're connecting to — then the traffic might be intercepted and read. (One well-known VPN provider was recently accused of inserting ads in users' web browsers, which would violate users' security and privacy.)
We contacted each of our finalists with simple questions about its service and troubleshooting. Most VPN companies provide technical support through online ticketing systems, meaning you’ll need to wait for a response. This means that self-help support sites are even more important, since waiting for a reply while your connection is down can be frustrating. Response times to our support inquiries ranged from 20 minutes to a day.

Typically, when you try to access a website on the Internet, your ISP (Internet Service Provider) receives the request and redirects you to your destination. As your Internet traffic passes through your ISP, they can see everything you do online. What’s more, they can track your behavior and sometimes even hand your browsing history over to advertisers, government agencies and other third parties.
Our top picks are proven to work with streaming apps and sites, reliably clock the fastest speeds and have the most useful set of privacy features. Their logging policies are the most transparent, fair and privacy-focused. Their apps are well-designed, quick to install and above all, easy to use. The best services also offer friendly customer support you can rely on to help you quickly should you get stuck.
A mix of features and price make a good VPN, but plenty of bad VPNs masquerade as good ones. Look for articles written by trustworthy sources that discuss the merits of each service based on its features, versus simple rundowns and user testimonials, which are almost always polluted by a combination of fanatical users and corporate bootstrapping in attempt to get their names out to potential customers.
In the past few years, I had terrible luck with VPNs... one provider didn't work with Netflix at all, and the other one very cluttered app interface which drove me crazy, so every time I used it, I felt frustrated. Now I'm testing Nordvpn. I'm not very trustful with big names, and its price seems too high for my pocket, but I thought I should give it a shot. In a few months of using Nord I didn't see any bugs or issues, so I feel that it's better to pay a few extra bucks but have a stable service like this, so in the long shot, it's totally worth the price I paid. Don't be afraid to invest, people.
Users utilize mobile virtual private networks in settings where an endpoint of the VPN is not fixed to a single IP address, but instead roams across various networks such as data networks from cellular carriers or between multiple Wi-Fi access points.[30] Mobile VPNs have been widely used in public safety, where they give law-enforcement officers access to mission-critical applications, such as computer-assisted dispatch and criminal databases, while they travel between different subnets of a mobile network.[31] Field service management and by healthcare organizations,[32][need quotation to verify] among other industries, also make use of them.
Therefore, protect your Android device is a must from all kinds of cyber threats and the best solution lies in using the fastest VPN for Android. All the above-mentioned VPNs are best Android VPNs and offer dedicated yet tested app, with a proven track record for providing ironclad protection and faster performance, and yes all are free to download.
VPNArea is one of the few providers that offers dedicated IP addresses in various countries around the world, as listed on their website. It also allows account sharing (six simultaneous connections permitted). VPNArea continues to improve and remains an excellent choice for privacy-focused users. Check out their discount pricing for annual plans. [Learn more >]
Most VPN services allow you to connect up to five devices with a single account. Any service that offers fewer connections is outside the mainstream. Keep in mind that you'll need to connect every device in your home individually to the VPN service, so just two or three licenses won't be enough for the average nested pair. Note that many VPN services offer native apps for both Android and iOS, but that such devices count toward your total number of connections.
Trusting a VPN is a hard choice, but IVPN's transparency goes a long way toward proving that its customers' privacy is a priority. Founder and CEO Nick Pestell answered all of our questions about the company's internal security, and even described the tools the company uses to limit and track access to secure servers. IVPN goes further than the other leading candidates we considered by being transparent about who runs the service and who is responsible for your privacy.

You want to skip PPTP if at all possible. It’s a very dated protocol that uses weak encryption and due to security issues should be considered compromised. It might be good enough to secure your non-essential web browsing at a coffee shop (e.g. to keep the shopkeeper’s son from sniffing your passwords), but it’s not up to snuff for serious security. Although L2TP/IPsec is a significant improvements over PPTP, it lacks the speed and the open security audits found with OpenVPN.

PureVPN has a huge choice of 750 servers in 141 countries and counting. The sheer volume of features, toggles, and tools they provide makes it a top contender for the advanced users. There is a stealth browsing mode, online banking security, secure FTP access, multiple protocols and more. They have server lists optimized for P2P and video streaming, so switching is easy.
CyberGhost’s popular free tier might not offer amazing speeds, but its paid Pro tier is a real contender.  It proved to be both quick and consistent in our speed tests. An “extra speed” feature can be toggled before you connect for an extra boost. Setup and use are novice-friendly, and live chat with customer support is available if you need a hand. Military grade encryption ensures all your data is safely tunneled to the VPN server, and CyberGhost does not store any logs of user activity or other identifiers.
Some users will also want to research a VPN provider’s peer-to-peer (P2P) file-sharing policies. There are VPNs that block torrents. Others turn a blind eye to them, but will sell you out in a heartbeat should you be up to no good. P2P is not our main focus here, but we will note in each review whether a particular provider allows file sharing or not.
While privacy should be the number one deciding factor when choosing a VPN service, performance and speed are also a necessity. Our team has engineered TorGuard to provide the highest levels of security and speed from anywhere in the world. Regardless of whether you are connecting from North or South America, Europe, Asia or Oceania, our worldwide VPN network will provide you the fastest speeds possible from anywhere around the globe. TorGuard maintains 50+ VPN server locations with 3000+ Servers and our network is always expanding.
To verify that each service effectively hid our true IP address, we looked at a geolocation tool, DNS leaks, and IPv6 leaks. When connected to each service’s UK servers, we noted whether we could watch videos on BBC iPlayer, and using US servers we noted whether we could stream Netflix. We also visited the sites of Target, Yelp, Cloudflare, and Akamai to check whether our VPN IP addresses prevented us from accessing common sites that sometimes blacklist suspicious IP addresses.
Private Internet Access, or PIA, is one of the most visible, privacy-focused VPNs available. Because of its reputation and advocacy concerning online privacy and security, it has also been a Wirecutter staff pick. But whether you prioritize speed and performance or trust and transparency, our top pick is a better bet. If you find PIA attractive because of its low price, note that spending just a little more on TorGuard will buy you much better performance.
Free VPN services are generally subpar when compared to premium providers, or they’re posited as a ‘trial’ version of the service. Most aim to retain their customer base by getting them to upgrade to the full-fat version, but a free version is still better than browsing without one. On the other hand, lots of free users also help to give a company legitimacy; especially if they’re dropping down five star reviews like it’s going out of fashion. Offering a solid free service is a great way to get some positive attention, and the market is fairly crowded.
There is a PPTP control connection between the IP address of the PPTP client using a dynamically allocated TCP port and the IP address of the PPTP server using the reserved TCP port 1723. The PPTP control connection carries the PPTP call control and management messages that are used to maintain the PPTP tunnel. This includes the transmission of periodic PPTP Echo-Request and PPTP Echo-Reply messages to detect a connectivity failure between the PPTP client and PPTP server. PPTP control connection packets consist of an IP header, a TCP header, a PPTP control message, and a data-link trailer and header as shown in the following figure:

Some users will also want to research a VPN provider’s peer-to-peer (P2P) file-sharing policies. There are VPNs that block torrents. Others turn a blind eye to them, but will sell you out in a heartbeat should you be up to no good. P2P is not our main focus here, but we will note in each review whether a particular provider allows file sharing or not.
If you're of the iPhone persuasion, there are a few other caveats to consider for a mobile VPN. Some iPhone VPN apps don't use OpenVPN, even if the VPN service that made the app supports the protocol. That's because Apple requires additional vetting if a company wants to include OpenVPN with its app. VPN app developers have slowly started jumping through those extra hoops and are bringing support for protocols such as OpenVPN to iOS.
BILLED {{orderCtrl.getIntervalPrice('middle', 'middle', true)}}{{orderCtrl.currencySymbolSpaced}} FIRST {{getInterval('middle')}} MONTHS, THEN {{orderCtrl.getIntervalPrice('middle', 'middle', true)*2}}{{orderCtrl.currencySymbolSpaced}} EVERY {{getInterval('middle')}} MONTHS
There’s currently only one scenario where you would entertain using L2TP/IPsec instead of OpenVPN and that’s for mobile devices like iOS and Android phones. Currently neither Android nor iOS supports native OpenVPN (although there is third-party support for it). Both mobile operating systems do, however, support L2TP/Ipsec natively and, as such, it’s a useful alternative.

Latency is a measurement of time between when your computer sends a request and when it receives a response. It's often called ping time. Lots of things can affect latency; the distance your request physically travels through fiber has a big impact, for example. Latency is measured in milliseconds, however, so even a large increase may not be noticeable to the average user. Latency is very important when playing video games over a VPN, as lower latency means a more responsive experience with less lag.


Virtual LAN (VLAN) is a Layer 2 technique that allow for the coexistence of multiple local area network (LAN) broadcast domains, interconnected via trunks using the IEEE 802.1Q trunking protocol. Other trunking protocols have been used but have become obsolete, including Inter-Switch Link (ISL), IEEE 802.10 (originally a security protocol but a subset was introduced for trunking), and ATM LAN Emulation (LANE).
For the Routing and Remote Access service, MPPE encryption strengths are configured on the Encryption tab on the properties of a remote access policy to use 40-bit (the Basic setting), 56-bit (the Strong setting), or 128-bit (the Strongest setting) encryption keys. Administrators should use 40-bit MPPE encryption keys to connect with older operating systems that do not support 56-bit or 128-bit encryption keys (this includes older Windows operating systems and operating systems from companies other than Microsoft). Otherwise, use 128-bit encryption keys. Encryption strengths for L2TP/IPSec connections use 56-bit DES (the Basic or Strong setting) or 168-bit 3DES (the Strongest setting).
Our team also understands the individual need of vpn by our users since some users are more concerned about their online privacy and security whereas others are more focused towards speed and features. Some potential customers also want easy service. All these factors have been taken into account by our team and a detailed review has been written which will help you in selecting the fast vpn service for you.
The Overplay Smart DNS service, on the other hand, routes internet connection using a different DNS to give the illusion that one is located in a different country, without significant speed reduction. This is very useful to those who want to access sites that are blocked in their own countries. The service supports PCs, Apple TV, iPhone, iPad, Wii, PS3, XBOX360, among other devices.
TRY THE FASTEST VPN RISK FREE:  ExpressVPN is currently running an offer of 3 free extra months with their 12 month plan here, this works out as a 49% discount on the monthly price. This deal includes a risk free 30 day money back guarantee, so in the unlikely event you are unhappy with the speed, or want to cancel for any other reason you can get a full refund.
When we test VPNs, we generally start with the Windows client. This is often the most complete review, covering several different platforms as well as the service's features and pricing in depth. That's purely out of necessity, since most of our readers use Windows (although this writer is currently using a MacBook Air). We currently use a Lenovo ThinkPad T460s laptop running the latest version of Windows 10. We periodically upgrade to a newer machine, in order to simulate what most users experience.
×