But even if you know who’s behind your VPN, you shouldn’t trust a free one. A free service makes you and your data the product, so you should assume that any information it gathers on you—whether that’s an actual browsing history or demographics like age or political affiliation—is being sold to or shared with someone. For example, Facebook’s Onavo provides an encrypted connection to Onavo’s servers like any VPN, shielding you from the prying eyes of your ISP or fellow network users. But instead of promising not to examine, log, or share any of your traffic, Onavo’s privacy policy promises the opposite. Covering the service, Gizmodo sums it up well: “Facebook is not a privacy company; it’s Big Brother on PCP.” Facebook collects information about your device, other applications you use, and even “information and other data from your device, such as webpage addresses and data fields.” And the company “may combine the information, including personally identifying information, that you provide through your use of the Services with information about you we receive from our Affiliates or third parties for business, analytic, advertising, and other purposes.” That means Facebook can collect anything it wants, and sell it to anyone it wants.
Here you should remember that before being sent and received over the Internet, any data needs to first be split into packets. To ensure each data packet stays secure, a VPN service wraps it in an outer packet, which is then encrypted through a process called encapsulation. This exterior packet keeps the data secure during the transfer, and it is the core element of the VPN tunnel. When the data arrives at the VPN server, the outer packet is removed to access the data within, which requires a decryption process.
Every VPN will tell you it is does not track your internet activity or is a “zero logs” VPN. In reality, delivering high performance across an extensive global network is impossible unless you are monitoring at least some connection details of your users. You could read a ton of privacy policies and terms of service to find out exactly what’s collected and for how long it’s stored or let us do that for you and just check the logging policy section of our review that explains this in plain language. Ideally you want a VPN that does not log your IP address at all and limits timestamp logging to just the date of your connection.

TunnelBear is designed for a very specific group of people: people who want a VPN service but don’t want to mess around with configuration or become IT experts to make their connections more secure. And it caters brilliantly for that market, with a very straightforward interface and jargon-free writing. In truth, all of the VPN services these days do this but TunnelBear tries very hard to stand out. It’s not for power users - there isn’t much you can change - but with up to five simultaneous connections, servers across 20 countries and decent performance on US and Canadian websites.  Longer connections can be slower, though: it’s when the relatively small number of server locations makes itself obvious. There’s a free version that limits you to 500MB of monthly traffic, and if you pay annually the price of the full version drops from $9.99 to $4.99 per month.
We didn’t audit any VPN services ourselves (though IVPN, our top pick, offered to arrange such an exercise), but we did ask detailed questions about each service’s operations as a way to judge whether a company was acting in good faith. Good faith is important, because there aren’t many avenues to penalize a VPN company that isn’t following through on its promises. In the US, companies making false claims about their products are policed by the Federal Trade Commission, and to some extent state attorneys general. Joseph Jerome at CDT told us that companies violating their own privacy policy or claims about logging would be “a textbook example of a deceptive practice under state and federal consumer protection laws,” and in theory, “the FTC could seek an injunction barring the deceptive practice as well as potentially getting restitution or other monetary relief.”
Compatibility – Device compatibility is something that has become more important with the passage of time. With an increased number of brands of computers and advances in mobile technology, virtually any software today should be compatible with various devices and operating systems. You should always make sure your VPN is compatible with your device before you make up your mind.
Yet Mullvad is worth a look because it's extremely private and secure. It asks nothing about you when you sign up. Instead, it assigns you a random number that will be your combined username and password. You don't have to provide an email address, and you can pay by mailing cash to the company's headquarters in Sweden. (Mullvad also takes credit cards, PayPal, bitcoin and wire transfers.)

Extensible Authentication Protocol-Message Digest 5 Challenge (EAP-MD5 Challenge) is a required EAP type that uses the same challenge handshake protocol as PPP-based CHAP, but the challenges and responses are sent as EAP messages. A typical use for EAP-MD5 Challenge is to authenticate the credentials of remote access clients by using user name and password security systems. EAP-MD5 Challenge can be used to test EAP interoperability.
Since VPNs route your traffic through another network, you can also make it appear as if it’s coming from another location. That means if you’re in Sydney, Australia, you can make your traffic appear to come from New York City. This is useful for certain sites that block content based on your location (like Netflix). It also allows some people (we’re looking at you, Australians) have to deal with insanely high import taxes on software that see them paying twice (or more) what US consumers pay for the same products.
Buffered VPN is a Hungarian VPN provider based in Gibraltar. After operating from 2013, its services were made public in the summer of 2014. There is no broadband limit to Buffered and this is a total advantage. They have managed to bypass the limits of Netflix, BBC iPlayer and Hulu and their campaigns against the VPN, which is also impressive. Buffered becomes one of the world’s fastest VPN services with a growing network of VPN servers (currently in 29 countries, but adding more locations frequently).

GRE is sometimes used by ISPs to forward routing information within an ISP's network. To prevent the routing information from being forwarded to Internet backbone routers, ISPs filter out GRE traffic on the interfaces connected to the Internet backbone. As a result of this filtering, PPTP tunnels can be created using PPTP control messages, but tunneled PPTP data is not forwarded.

Ray Walsh is one of BestVPN's resident VPN experts. Ray is currently ranked #1 VPN authority in the world by agilience.com. During his time at BestVPN.com Ray has reviewed some of the world's foremost VPNs. Ray is an advocate for digital privacy, with vast experience writing about the political and social aspects of infosec, cybersec, and data privacy. Find him @newsglug on Twitter.
We'll go into greater explanation about these three metrics and how we collect them below. But choosing which is most important is tricky. Mostly, it depends on how you're using your internet connection. We assume that most people reading are major consumers of content. Reading the news, streaming movies, using BitTorrent, or listening to music on the web all require that your device pull down data more or less continuously. With that in mind, we've settled on download speeds as the most important benchmark.
IVPN doesn’t have as many server locations as larger services like ExpressVPN do. When we initially recommended the service, IVPN was limited to 13 countries, compared with ExpressVPN’s 94. But in the months since, IVPN has doubled that to 26, including two additional locations in Asia (Tokyo and Singapore). We’ve yet to test the new servers though, and in the past, IVPN’s single location in Asia—Hong Kong—was slower than competitors.
In short, it's time to start thinking about protecting your personal information. That's where virtual private networks, or VPNs, come in. These services use simple software to protect your internet connection, and they give you greater control over how you appear online, too. While you might never have heard of VPN services, they are valuable tools that you should understand and use. So who needs a VPN? The short answer is that everyone does. Even Mac users can benefit from a VPN.