Logging Policy – The privacy policy of ZenMate is not quite convincing from the point of view of the user. For instance, it claims that it collects personal data of users in various forms, including timestamps. This leaves the privacy of users vulnerable through a time-correlation attack. Moreover, the privacy policy is extremely lengthy and complicated, which further raises alarms as to the credibility of the claims of ZenMate as a zero-logging VPN.
For features, they offer multi-hop VPN cascades, advanced firewall configuration options (DNS and IP leak protection), port forwarding, NeuroRouting, Socks5 and Squid proxies, obfuscation features to defeat VPN blocking (Stealth VPN), and a customizable TrackStop feature to block tracking, malware, advertising and social media domains. They also give you an unlimited number of device connections and offer full IPv6 support across their server network.
Logging Policy – PIA has never been involved in any privacy exposure incident. Moreover, the privacy policy of the company is very clearly defined, which serves to increase user confidence in the reliability of the VPN. PIA clearly mentions that they follow a no-log policy and the fact that they have a clean slate in this regard makes PIA one of the best VPN services for privacy-seeking individuals.
You might be thinking: “I only need one connection, don’t I?” What if you want to set up VPN access on more than one device, for more than one family member, on your home router, or the like? You’ll need multiple concurrent connections to the service. Or, perhaps, if you’re particularly security oriented, you’d like to configure multiple devices to use multiple different exit nodes so your collective personal or household traffic isn’t all bundled together.

Whereas most providers say they log nothing, that’s not always the case. Some record very little data like the day you subscribed, the amount of data you’ve consumed, and delete those logs when you end the session. Other providers log your IP address, the servers you used, and store those logs. If they’re based in the US, UK or any other country with data retention laws, they can be compelled to hand over that data to law enforcement.

Insist on a VPN that has Kill Switch protection. There is a security vulnerability that can reveal your private information if your VPN connection is lost, even just for a few seconds. The solution is to be sure that you’re protected by a Kill Switch. A Kill Switch stops all data from being sent to the internet until a secure VPN connection has been re-established. If your VPN software does not have a Kill Switch, your computer might be leaking your private information without your knowledge
The VPN server can be configured to use either Windows or Remote Authentication Dial-In User Service (RADIUS) as an authentication provider. If Windows is selected as the authentication provider, the user credentials sent by users attempting VPN connections are authenticated using typical Windows authentication mechanisms, and the connection attempt is authorized using the VPN client’s user account properties and local remote access policies.

Extensible Authentication Protocol-Transport Layer Security (EAP-TLS) is an EAP type that is used in certificate-based security environments. If smart cards are used for remote access authentication, EAP-TLS is the required authentication method. The EAP-TLS exchange of messages provides mutual authentication, negotiation of the encryption method, and encrypted key determination between the remote access client and the authenticator. EAP-TLS provides the strongest authentication and key-determination method.

When we ran our recent Hive Five on VPN service providers, we heard from VPN providers begging to be included, angry CEOs who claimed their company was maliciously left out, and others accusing some of the contenders of illegal or unethical behavior. We took at look at the poll and the claims, and while there’s no definitive proof the poll was gamed, we decided to come up with our own top five, based on our own research rather than reader feedback, that are great whether you’re the privacy advocate, the student, or the downloader.
One of the most popular VPN services in the market, HideMyAss has a myriad of features that are sure to attract anyone who wants online anonymity. It uses a variety of servers that work with any operating system or mobile device. Aside from PPTP and OpenVPN protocols, the service supports L2TP, which is more difficult to block. Ideal for getting around censorship and firewalls.
Mac users often told that they don’t need antivirus software because Mac is not prone to viruses; get a life man! This is not true at all, even the first well-known virus; Elk Cloner, affected Apple computers, not MS-DOS computers. Currently, the state of Mac malware is evolving, with more and more threats targeting the so-called impervious machines. We have already witnessed Mac threats appearance recently; on malwarebytes.com a mac user from Miami who had his DNS settings changed and were unable to change them back.

L2TP uses UDP messages over IP networks for both tunnel maintenance and tunneled data. The payloads of encapsulated PPP frames can be encrypted or compressed (or both); however, L2TP clients do not negotiate the use of MPPE for L2TP connections. Encryption for L2TP connections is provided by IPSec Encapsulating Security Payload (ESP) in transport mode.

We have tested each of these services in as repeatable a manner as possible, but it's worth remembering that networks can be fickle. To get the clearest picture of a VPN's performance, we would have to perform these tests many more times, at different locations and different times of day. We think of these tests as more of a snapshot of performance that establishes a replicable metric for measuring each service. Your mileage with these services will almost certainly vary somewhat from mine.

Finally, read the fine print to see if they restrict any protocols or services you wish to use the service for. If you want to use the service for file sharing, read the fine print to ensure your file sharing service isn’t blocked. Again, while it was typical to see VPN providers restrict services back in the day (in an effort to cut down on bandwidth and computing overhead) it’s more common today to find VPNs with an anything-goes policy.
 Return Policy: “Many issues can contribute to sub-optimal performance (ISP, location, censorship, settings, etc.). The TunnelBear team goes to exceptional lengths to satisfy users who experience sub-optimal performance or the occasional outage. However, TunnelBear does not offer financial reimbursement due to these issues.” In other words, they don’t offer refunds.
To stress-test the VPN services, we do things a little differently. Instead of letting Ookla find the best (read: closest) test server, we select a specific test server in Anchorage, Alaska, for both the VPN testing and the baseline test. We then connect to a VPN server in Australia, and calculate a percent change between the two. Usually, this results in a noticeable impact on latency as well as download and upload speeds. It helps give a sense of how the VPN would perform when you're traveling abroad or using the VPN to spoof your location.
Are you so used to your data traveling over Wi-Fi that you've stopped worrying about the security of that data—and about who else might be spying on it, or even stealing it for nefarious purposes? If so, you are—sadly—in the majority, and you ought to consider using a viritual private network, or VPN. In fact, when PCMag conducted a survey on VPN usage, we found that a dismal 71 percent of the 1,000 respondents had never used a VPN. Even among those who support net neutrality—who you might think would tend to be well informed on technology and privacy issues—only 45 percent had used a VPN.