Our top picks are proven to work with streaming apps and sites, reliably clock the fastest speeds and have the most useful set of privacy features. Their logging policies are the most transparent, fair and privacy-focused. Their apps are well-designed, quick to install and above all, easy to use. The best services also offer friendly customer support you can rely on to help you quickly should you get stuck.
As we previously noted, we don't recommend relying on our picks to get around geographic restrictions on copyrighted content. The practice is likely illegal, and it violates the terms of service of your ISP, VPN, and content provider. On top of that, it often doesn't work—we couldn't access Netflix over any of the services we tried, and of the four streams we loaded on BBC iPlayer, only two worked a few days later.
PPTP - PPTP has been around since the days of Windows 95. The main selling point of PPTP is that it can be simply setup on every major OS. In short, PPTP tunnels a point-to-point connection over the GRE protocol. Unfortunately, the security of the PPTP protocol has been called into question in recent years. It is still strong, but not the most secure.
SSTP (Secure Socket Tunneling Protocol) is a suitable alternative to standard protocols in areas where VPNs are restricted because it can bypass most firewalls. SSTP is quite similar to OpenVPN but, unlike OpenVPN, it is owned by Microsoft, which means it is not available for independent auditing. Microsoft’s history of cooperating with the NSA does not inspire confidence in this standard.
Everything you do on the Internet has to pass through your own ISP before reaching the destination. So, when you request Google, for example, the information is sent, unencrypted, to your ISP and then passes through some other channels before reaching the server that holds Google’s website. Basically, VPN services privatize information that can be read by ISPs or any other agency that inspects your traffic.
There are a number of ways to use VPN. The most common scenario is when a remote user accesses a private network across the Internet using a remote access VPN connection. In another scenario, a remote office connects to the corporate network using either a persistent or an on-demand site-to-site VPN connection (also known as a router-to-router VPN connection).
The VPN services market has exploded in the past few years, and a small competition has turned into an all-out melee. Many providers are capitalizing on the general population's growing concerns about surveillance and cybercrime, which means it's getting hard to tell when a company is actually providing a secure service and when it's throwing out a lot of fancy words while selling snake oil. In fact, since VPN services have become so popular in the wake of Congress killing ISP privacy rules, there have even been fake VPNs popping up, so be careful. It's important to keep a few things in mind when evaluating which VPN service is right for you: reputation, performance, type of encryption used, transparency, ease of use, support, and extra features. Don't just focus on price or speed, though those are important factors.
The IVPN app’s default settings are great for most people, who should be happy just smashing the Connect button and not fiddling with settings. The desktop app defaults to a secure OpenVPN connection with AES 256-bit encryption (what we consider the standard at this point), and the mobile app can (and should) be toggled to OpenVPN as well. Our budget pick, TorGuard, defaults to the weaker (but also acceptable) AES 128-bit encryption unless you manually change it, and hasn’t added OpenVPN support on its iOS app.
Cost: There are two plans here; Premium and Gold, but only the latter supports VPN while the other is just their DNS service. UnoTelly Gold costs $7.95/month if you buy it every month, but there are three other options if you want to purchase it for three months, six months, or one year. Those prices, respectively, are $6.65/month, $6.16/month, and $4.93/month (each, of course, being paid for in one lump sum). You can try it free for eight days through this link.
TorGuard also lacks extra features that are nice to have, like automatically connecting to the VPN when you’re on an unknown Wi-Fi network (which IVPN offers) or split-tunneling to choose which apps do and don’t route through the VPN (which ExpressVPN supports). And it offers no option to automatically connect to the fastest server, a feature our top pick lacks as well. But if you have above-average knowledge of networking, you’ll appreciate TorGuard’s more in-depth settings pane, which allows you to add scripts or kill specific processes when the VPN disconnects—neither our top pick nor popular services like Private Internet Access allow that kind of control.
Mobile Apps: If you’re going to spend money on a VPN service provider (or even if you use a free one, frankly), you should be able to get a consistent experience across all of your devices. Most prominent providers offer desktop and mobile solutions for individual users, and while corporate and school networks may be a bit behind the curve here, they’re catching up too. Make sure you don’t have to use two different VPNs with two different policies and agreements just because you want to secure your phone along with your laptop.
ExpressVPN has 148 locations in 94 different countries which means you can dial your IP address into 148 locations around the world. ExpressVPN delivers great performance - and it’s put the effort into its software too, with dedicated apps for Windows, Mac, Linux, iOS, Android and BlackBerry as well as some Smart TVs, Amazon Fire TV Sticks, Apple TV, PS4 and Xbox and even your router. Not only that but there are solid online tutorials too, so even if VPNs are dark magic to you they’ll have you up and running in no time. P2P is fully supported and it's super speedy so you can torrent using the maximum bandwidth of your broadband connection and there’s a kill switch that keeps your IP address hidden if anything goes wrong with the VPN or with your internet connection. ExpressVPN is reasonably priced, delivers a good service and has support for three simultaneous connections. There’s no free trial available but there is a no-fuss 30-day money back guarantee if the service doesn’t meet your requirements so that's a good way to test it out if you're unsure. We have used the 24/7 customer service a number of times and can vouch for its effectiveness - we had a couple of issues with using the service on a PC and were able to sort it within a few minutes using the instant online chat support.
When we tested other aspects of IVPN's performance, it also satisfied our requirements. On the default settings, our real IP address didn't leak out via DNS requests or IPv6 routing, let alone a standard IP address checker. The DNS-requests check indicated that the app was using the company's internal DNS servers and that they were correctly configured. None of the 12 services we tested disclosed our true IP address (though some showed mismatched IPs).
Since we're living in a connected world, security and privacy are critical to ensure our personal safety from nefarious hacks. From online banking to communicating with coworkers on a daily basis, we're now frequently transferring data on our computers and smartphones. It's extremely important to find ways of securing our digital life and for this reason, VPNs have become increasingly common.
With the single-adapter model, also known as the NBMA model, the network for the frame relay service provider (also known as the frame relay cloud) is treated as an IP network and the endpoints on the cloud are assigned IP addresses from a designated IP network ID. To ensure that OSPF traffic is received by all of the appropriate endpoints on the cloud, the frame relay interface must be configured to send unicast OSPF announcements to all of the appropriate endpoints. For the server running Routing and Remote Access, this is done by designating the interface as an NBMA network and adding OSPF neighbors.
In this case, agencies see only the tunnel and not what is inside. They only get to view a single connection from a specific server and not who the user is, location or what is being downloaded or uploaded. VPN software also has the ability to provide agencies with user information or deny request for such. Such solution can be implemented as client and server software, hardware and software or on a subscription basis. There is also Secure Sockets Layer VPN, which enables remove users to connect by simply using a web browser.
Auto-static refers to the automatic adding of the requested routes as static routes in the routing table. The sending of the request for routes is performed through an explicit action, either through Routing and Remote Access or the Netsh utility while the demand-dial interface is in a connected state. Auto-static updates are not automatically performed every time a demand-dial connection is made.
DNS servers are a bit like the phone books of the Internet: You can type in “thewirecutter.com,” for instance, and one of the many DNS servers behind the scenes can point you to the IP address of a server hosting the site. Most of the time, your DNS requests automatically route through your ISP, giving the ISP an easy way to monitor your traffic. Some VPN services rely on third-party DNS servers, but the best ones keep DNS servers in-house to prevent your browsing history, or your IP address, from getting out.
Every service we tested accepts payment via credit card, PayPal, and Bitcoin. That’s plenty of options for most people, and you can always use a prepaid debit card if you don’t want your billing information tied to your VPN account. IVPN and OVPN are the only ones to accept cash payment through the mail, if you really don’t want to make a payment online. Private Internet Access and TorGuard accept gift cards from other companies—IVPN doesn’t, but that option isn’t worth the additional hassle for many people when other secure, private methods are available.
VPNs also cloak your computer's actual IP address, hiding it behind the IP address of the VPN server you're connected to. IP addresses are distributed based on location, so you can estimate someone's location simply by looking at their IP address. And while IP addresses may change, it's possible to track someone across the internet by watching where the same IP address appears. Using a VPN makes it harder for advertisers (or spies, or hackers) to track you online.