Every service we tested accepts payment via credit card, PayPal, and Bitcoin. That’s plenty of options for most people, and you can always use a prepaid debit card if you don’t want your billing information tied to your VPN account. IVPN and OVPN are the only ones to accept cash payment through the mail, if you really don’t want to make a payment online. Private Internet Access and TorGuard accept gift cards from other companies—IVPN doesn’t, but that option isn’t worth the additional hassle for many people when other secure, private methods are available.

Developed by Institute of Electrical and Electronics Engineers, VLANs allow multiple tagged LANs to share common trunking. VLANs frequently comprise only customer-owned facilities. Whereas VPLS as described in the above section (OSI Layer 1 services) supports emulation of both point-to-point and point-to-multipoint topologies, the method discussed here extends Layer 2 technologies such as 802.1d and 802.1q LAN trunking to run over transports such as Metro Ethernet.


The Center for Democracy & Technology brought just such a complaint against one VPN provider last year, though no enforcement action has been announced. Many privacy sites suggest finding a VPN service outside the prying eyes of US intelligence agencies and their allies, but FTC protections could be an argument for finding one in the US so that there’s a penalty if it deceives its customers.
The free version allows you to connect only one device, and you can use only one server in America – which will not work with Netflix, Hulu, or other popular streaming sites. You can still use it to access YouTube, Facebook, and other favorite social media sites that may be blocked. Plus, it’s compatible with all major operating systems, and it’s one of the fastest VPNs out there.
Instead of logically tying the endpoint of the network tunnel to the physical IP address, each tunnel is bound to a permanently associated IP address at the device. The mobile VPN software handles the necessary network-authentication and maintains the network sessions in a manner transparent to the application and to the user.[30] The Host Identity Protocol (HIP), under study by the Internet Engineering Task Force, is designed[by whom?] to support mobility of hosts by separating the role of IP addresses for host identification from their locator functionality in an IP network. With HIP a mobile host maintains its logical connections established via the host identity identifier while associating with different IP addresses when roaming between access networks.
TunnelBear VPN is a free service that constantly impresses people. This VPN is super-secure and even opened up its software to a third-party analysis last year. The outcome? Security researchers found the VPN to be secure and reliable. It also keeps no logs. Unfortunately, The service is restricted to just 500MB per month. Despite this, it is brilliant for locations with severe censorship and where privacy is essential. It is perfect for securely unblocking news.
We spent more than 130 hours over four months researching 32 VPN services, testing 12, interviewing the leadership of five, and consulting information security and legal experts about our results. We found that most people should prioritize other security tools and privacy practices first, but in the cases where a VPN makes sense—such as when you're connecting to public Wi-Fi—IVPN is the most trustworthy provider that offers fast, secure connections with an easy setup process on both computers and mobile devices.
Trust.Zone offers inconsistent speeds that vary considerably from one server to the other. Users might find it excellent for certain locations like the UK and Germany, but not fast enough for others. The privacy and security features of Trust.Zone are its strongest attributes, making it a great option for users seeking protection at acceptable speeds.
Developed by Institute of Electrical and Electronics Engineers, VLANs allow multiple tagged LANs to share common trunking. VLANs frequently comprise only customer-owned facilities. Whereas VPLS as described in the above section (OSI Layer 1 services) supports emulation of both point-to-point and point-to-multipoint topologies, the method discussed here extends Layer 2 technologies such as 802.1d and 802.1q LAN trunking to run over transports such as Metro Ethernet.
One of the most important factors when you’re choosing a VPN provider is also the hardest to quantify: trust. All your Internet activity will flow through this company’s servers, so you have to trust that company more than the network you’re trying to secure, be it a local coffee shop’s Wi-Fi, your campus Internet connection, your corporate IT network, or your home ISP. In all our research, we came across a lot of gray areas when it came to trusting a VPN, and only two hard rules: Know who you’re trusting, and remember that security isn’t free.
Since we last tested VPNs, we've given special attention to the privacy practices of VPN companies and not just the technology they provide. In our testing, we read through the privacy policies and discuss company practices with VPN service representatives. What we look for is a commitment to protect user information, and to take a hands-off approach to gathering user data.

We’ve shown you how to build your own VPN for remote gaming and browsing that also protects your security, shown you how to make a VPN even more secure, and shown you dozens of services that operate free and paid VPNs you can sign up for and use. We’ve even put the question to you several times to tell us which VPN service providers you think are the best. So how do you pick a solid VPN service?


The first step to security is usually a firewall between the client and the host server, requiring the remote user to establish an authenticated connection with the firewall. Encryption is also an important component of a secure VPN. Encryption works by having all data sent from one computer encrypted in such a way that only the computer it is sending to can decrypt the data.
Reassurance that your personal IP address is hidden, and your confidential data is kept safe. Many people  don’t realize that using the internet gives websites and businesses information that can be traced back to their IP address which can then be sold for marketing purposes. It’s not only irritating, it’s invasive and extreme. This can also create an entryway for hackers. Our free VPN servers prevent companies and hackers from getting to you and your IP address remains hidden.
Every user is going to have slightly different VPN needs, and the best way to pick the ideal VPN service is to take careful stock of what your needs are before you go shopping. You may even find you don’t need to go shopping because home-grown or router-based solutions you already have are a perfect fit. Let’s run through a series of questions you should ask yourself and highlight how different VPN features meet the needs highlighted by those questions.

CyberGhost has more than 1100 Servers worldwide in 50 countries, making it easy for users to find a fast and secure connection. It does not collect any user data and all traffic information are protected by 128-encryption. Speed is fairly fast, allowing users to stream content, download files and do online shopping. The service comes in three plans, a one-month plan, a six-month plan or an annual package.

The number and distribution of those servers is also important. The more places a VPN has to offer, the more options you have to spoof your location! More importantly, having numerous servers in diverse locales means that no matter where you go on Earth you'll be able to find a nearby VPN server. The closer the VPN server, the better the speed and reliability of the connection it can offer you. Remember, you don't need to connect to a far-flung VPN server in order to gain security benefits. For most purposes, a server down the street is as safe as one across the globe.


Jurisdiction – The British Virgin Islands (BVI) falls outside of the jurisdiction of European countries part of the “14 Eyes”. There are no data retention laws in the BVI, which makes it a perfect location that can be trusted for its user-friendly privacy laws. ExpressVPN rightly boasts its jurisdiction as it is one of the main attributes of the provider.
VPNs secure your traffic and route it through an intermediary server so it can’t be traced. But if privacy is not of chief concern to you, then there are other alternative proxy methods that offer faster speed. A SOCKS proxy, for example, does pretty much the same thing as a VPN without the encryption. Without having to encrypt and decrypt traffic, SOCKS proxy users can get faster speeds and still mask their IP address.

With the increasing use of VPNs, many have started deploying VPN connectivity on routers for additional security and encryption of data transmission by using various cryptographic techniques.[33] Home users usually deploy VPNs on their routers to protect devices, such as smart TVs or gaming consoles, which are not supported by native VPN clients. Supported devices are not restricted to those capable of running a VPN client.[34]
It is possible to create Windows-based L2TP connections that are not encrypted by IPSec. However, this does not apply to a VPN connection because the private data being encapsulated by L2TP is already not encrypted. Non-encrypted L2TP connections can be used temporarily to troubleshoot an L2TP over IPSec connection by eliminating the IPSec authentication and negotiation process.

After the tunnel is established, data can be sent. The tunnel client or server uses a tunnel data transfer protocol to prepare the data for transfer. For example, when the tunnel client sends a payload to the tunnel server, the tunnel client first appends a tunnel data transfer protocol header to the payload. The client then sends the resulting encapsulated payload across the network, which routes it to the tunnel server. The tunnel server accepts the packets, removes the tunnel data transfer protocol header, and forwards the payload to the target network. Information sent between the tunnel server and the tunnel client behaves similarly.


But for a company that bills itself as "the world's fastest VPN," Hide.me was kind of mediocre, with our download speeds dropping to a third of the non-VPN baseline. Free users are limited to 2GB of monthly data and can connect to servers in only three countries; either of those limitations would be more acceptable if the network speeds were faster.

Google has launched Chrome on Google Daydream View and the Lenovo Mirage Solo with Daydream. If you have one of these headsets, you can launch Chrome directly from your homepage to browse and interact with any webpage while in VR. Chrome aims to be a universal browser on all types of devices and operating systems. This is also true for the new VR version. All the features you love on Chrome, from voice search to incognito mode to saved bookmarks, are now accessible on your Daydream headset.
This is also a good way to provide support for more than one family member on a single subscription. Generally, there's no good reason for a VPN provider to allow less than two or three connections. If your provider only allows one, find another vendor. We gave extra points in our VPN directory to those vendors who allowed three or more connections.
Using VPNs, an organization can help secure private network traffic over an unsecured network, such as the Internet. VPN helps provide a secure mechanism for encrypting and encapsulating private network traffic and moving it through an intermediate network. Data is encrypted for confidentiality, and packets that might be intercepted on the shared or public network are indecipherable without the correct encryption keys. Data is also encapsulated, or wrapped, with an IP header containing routing information.
Logging Policy – This is a tricky subject. The record of PureVPN is not quite clear of controversy, as the company was involved in a case of handing over a particular user’s information to the FBI. However, the particular incident in question was an ethical conundrum, where human rights of a bullied individual were at stake. I can’t really condemn PureVPN for playing its part in helping agencies catch a suspect of reprehensible cybercrimes. In fact, PureVPN has responded admirably to the whole incident with a change in its policies to prevent similar ethical dilemmas in the future. The company probably doesn’t enjoy playing Aristotle and resolving convoluted ethical problems for its own sake as well as for its users’.
The Overplay Smart DNS service, on the other hand, routes internet connection using a different DNS to give the illusion that one is located in a different country, without significant speed reduction. This is very useful to those who want to access sites that are blocked in their own countries. The service supports PCs, Apple TV, iPhone, iPad, Wii, PS3, XBOX360, among other devices.
The free tier gives you the Windows, Mac, iOS, Android and Amazon Fire TV/Firestick client software (and the beta Linux software, should you wish to try it); the Windflix feature to (try to) watch U.S. or U.K. Netflix streams; the Chrome, Firefox and Opera Windscribe browser extensions to block ads and trackers; a separate firewall built in to the Windows and macOS clients; and the ability to connect to VPN servers in 11 countries, mostly in Europe and North America.
The student/worker. This person has responsibilities to attend to, and uses a VPN provided by their school or company to access resources on their network when they’re at home or traveling. In most cases, this person already has a free VPN service provided to them, so they’re not exactly shopping around. Also, if they’re worried about security, they can always fire up their VPN when using airport or cafe WI-Fi to ensure no one’s snooping on their connection. Photo by Ed Yourdon.
The service supports torrenting through its zero logs policy. It supports PPTP, Open VPN and L2TP connections, with each going up to 256 bits except for PPTP. To further increase security, IPVanish uses shared IPs, making it even more difficult to identify users. This also ensures that even the vendor could not furnish agencies with your information even if it wanted to.
While VPNs are an important tool, they are far from foolproof. Let’s say you live in an oppressive country and want to evade censorship in order to access the unrestricted web. A VPN would have limited use. If you’re trying to evade government restrictions and access sites like Facebook and Twitter, a VPN might be useful. Even then, you’d have to be somewhat dependent on the government’s willingness to look the other way.
The bad news for anyone used to free services is that it pays to pay when it comes to a VPN. There are tons of free options from reputable companies, but these are usually a poor substitute for the paid options. Free services usually allow a limited amount of bandwidth usage per month or offer a slower service. Tunnel Bear, for example, offers just 500MB of free bandwidth per month, while CyberGhost offers a free service that is significantly slower than its paid service.
Ideally, every VPN service provider would subject itself to independent audits to verify that it logs and operates as it claims. Right now, audits aren’t common practice in the VPN industry, though there’s a push to change that. Joseph Jerome, policy counsel at the Center for Democracy & Technology, told us about that group’s efforts to bring transparency to the VPN industry: “We would like to see security audits released publicly so security researchers can review them and attest to their veracity, as well as learn from the issues being identified.” The few companies we found that currently performed these types of audits had other dismissal-worthy failings, despite their valiant efforts toward transparency. And while such reports may increase your confidence when you’re shopping, there’s no guarantee that an audit makes a VPN service trustworthy: In other industries, conflicts of interest have led auditors and rating agencies (PDF) to miss or ignore major problems.
IPSec – Internet Protocol Security (IPSec) can be utilized with Layer 2 Tunneling Protocol (L2TP) or Internet Key Exchange version 2 (IKEv2). While it is not open source, it does do well in the performance category and can be used natively (without apps) on most operating systems. IPSec/IKEv2 may be the best protocol to use with some mobile devices (iOS), which do not work as well with OpenVPN.
Tests are run on connections ranging from 10 Mbps to 30 Mbps connections. Our testers are in different locations around the world, but we never plot the results of speed tests from different locations together. The internet in Buenos Aires will almost always be slower than in Berlin, for instance, so that wouldn’t be a fair comparison. We do add multiple tests to the same plot even if we ran them days or weeks apart, so long as they are from the same location.
The IVPN app’s default settings are great for most people, who should be happy just smashing the Connect button and not fiddling with settings. The desktop app defaults to a secure OpenVPN connection with AES 256-bit encryption (what we consider the standard at this point), and the mobile app can (and should) be toggled to OpenVPN as well. Our budget pick, TorGuard, defaults to the weaker (but also acceptable) AES 128-bit encryption unless you manually change it, and hasn’t added OpenVPN support on its iOS app.
Latency is a measurement of time between when your computer sends a request and when it receives a response. It's often called ping time. Lots of things can affect latency; the distance your request physically travels through fiber has a big impact, for example. Latency is measured in milliseconds, however, so even a large increase may not be noticeable to the average user. Latency is very important when playing video games over a VPN, as lower latency means a more responsive experience with less lag.
Prices – ProtonVPN offers a free version with unlimited bandwidth. This makes it one of the few free VPN services with unlimited bandwidth. Its paid versions are categorized as Basic, Plus, and Visionary, each of which progressively offers more advanced features than the one before it. The basic version costs $4/month, while the Plus and Visionary plans cost $8/month and $24/month respectively. Yep, it is quite expensive.
First and foremost, using a VPN prevents anyone on the same network access point (or anywhere else) from intercepting your web traffic in a man-in-the-middle attack. This is especially handy for travelers and for those using public Wi-Fi networks, such as web surfers at hotels, airports, and coffee shops. Someone on the same network, or the person in control of the network you're using, could conceivably intercept your information while you're connected.
×