Pricing is quite flexible, with a three-day plan available for just $2. But for those who want to avail of the complete service and support, A basic plan of $5 per month, a solid plan of $10 a month, and dedicated plan of $25 per month are also available. These packages offer users access to servers in different countries and unlimited bandwidth. Custom plans can be arranged, all one has to do is contact support.
Agree expressvpn is an absolute winner, even though nordvpn has more than twice servers (around 5000) it still loses in download speed and therefore streaming. One remark I noticed when tested average speed of different vpns is that the closer your own location is to vpn server you choose the better the speed and it seems to be obvious. The only big cons for expressvpn is of course the price but it seems that the guys from the company knows the best can’t be cheap  I would also like to share a good source for online vpn comparison chart I have found, check it here
CHAP is an improvement over PAP because the clear-text password is not sent over the link. Instead, the password is used to create a hash from the original challenge. The server knows the client’s clear-text password and can, therefore, replicate the operation and compare the result to the password sent in the client’s response. CHAP protects against replay attacks by using an arbitrary challenge string for each authentication attempt. CHAP protects against remote-client impersonation by unpredictably sending repeated challenges to the remote client throughout the duration of the connection.
Tunnel endpoints must be authenticated before secure VPN tunnels can be established. User-created remote-access VPNs may use passwords, biometrics, two-factor authentication or other cryptographic methods. Network-to-network tunnels often use passwords or digital certificates. They permanently store the key to allow the tunnel to establish automatically, without intervention from the administrator.

Proximity: Choosing a server close to your own location will result in a speedier connection. If you’re in Asia and want to access American content, then choose a server on the west coast USA. If you’re in Europe, then use an East Coast server. If you know the location of the server hosting the content you’re trying to access, you can also choose a VPN server near there.

That attitude to the safety and privacy of personal data creates an enormous online security risk. Public Wi-Fi networks, which are ubiquitous and convenient, are unfortunately also highly convenient for attackers looking to compromise your personal information. How do you know, for example, that "starbucks_wifi_real" is actually the Wi-Fi network for the coffee shop? Anyone could have created that network, and they may have done so in order to lure victims into disclosing personal information over it. In fact, a popular security researcher prank is to create a network with the same name as a free, popular service and see how many devices will automatically connect because it appears safe.