After making a post about comparing VPN providers, I received a lot of requested feedback. I’ve implemented most of the ideas I received.
Providers
- AirVPN
- IVPN
- Mozilla VPN
- Mullvad VPN
- NordVPN
- NymVPN
- Private Internet Access (abbreviated PIA)
- Proton VPN
- Surfshark VPN
- Tor (technically not a VPN)
- Windscribe
Notes
- I’m human. I make mistakes. I made multiple mistakes in my last post, and there may be some here. I’ve tried my best.
- Pricing is sometimes weird. For example, a 1 year plan for Private Internet Access is 37.19€ first year and then auto-renews annually at 46.73€. By the way, they misspelled “annually”. AirVPN has a 3 day pricing plan. For the instances when pricing is weird, I did what I felt was best on a case-by-case basis.
- Tor is not a VPN, but there are multiple apps that allow you to use it like a VPN. They’ve released an official Tor VPN app for Android, and there is a verified Flatpak called Carburetor which you can use to use Tor like a VPN on secureblue (Linux). It’s not unreasonable to add this to the list.
- Some projects use different licenses for different platforms. For example, NordVPN has an open source Linux client. However, to call NordVPN open source would be like calling a meat sandwich vegan because the bread is vegan.
- The age of a VPN isn’t a good indicator of how secure it is. There could be a trustworthy VPN that’s been around for 10 years but uses insecure, outdated code, and a new VPN that’s been around for 10 days but uses up-to-date, modern code.
- Some VPNs, like Surfshark VPN, operate in multiple countries. Legality may vary.
- All of the VPNs claim a “no log” policy, but there’s some I trust more than others to actually uphold that.
- Tor is special in the port forwarding category, because it depends on what you’re using port forwarding for. In some cases, Tor doesn’t need port forwarding.
- Tor technically doesn’t have a WireGuard profile, but you could (probably?) create one.
Takeaways
- If you don’t mind the speed cost, Tor is a really good option to protect your IP address.
- If you’re on a budget, NymVPN, Private Internet Access, and Surfshark VPN are generally the cheapest. If you’re paying month-by-month, Mullvad VPN still can’t be beat.
- If you want VPNs that go out of their way to collect as little information as possible, IVPN, Mullvad VPN, and NymVPN don’t require any personal information to use. And Tor, of course.
ODS file: https://files.catbox.moe/cly0o6.ods
Is it worth stating which companies own which vpns? I saw a TIL that mentions a select few companies own most VPNs
I’m on ProtonVPN because it’s ran by CERN people, so definitely an important information IMO.
In steins;gate, cern is evil…
Yes but that book sucks ass
Their CEO is a Trump supporter
Show me where he endorses Trump.
Oh, you can’t? But you read it on Facebook or something so it must be true?
Common, show me your information.
This is bullshit based on some old tweet Andy Yen did about trump doing good going against big tech. You can read about it here or search for it elsewhere.
It always comes out when someone says something nice about ProtonVPN, who have an amazing track record IMO.
A company’s CEO gets to determine the path their company takes and the tweet is indicative of where he plans to steer proton.
Stop spreading this bs because this is not what’s happening.
We’re never going to know what they intend to do until they do it, but they’ve given us an indication of what they think and we should believe it
That write up does seem to ignore the doubling down here:
https://lemmy.ca/comment/13913116
Calling out that JD Vance was the only one to answer is pretty troubling to me after reading about some of his new-right ties. It’s way, way too close for my liking to a mouse telling everyone that will listen that the cat was amazing for inviting him and all his friends to his house in a week. ie. Playing into what just seems like an obvious strategy.
That said, I’m pretty ignorant about the CEO. I just remembered this lemmy comment and I didn’t notice it included in the write up that was being linked.
Ok, just read the artlce cited on wikipedia and it sounds like calling him a Trump supporter is a bit of an exaggeration. He seems basically centrist. Which is not great but not nearly as bad.
he seems like a moron if he thinks republicans are going to “tackle big tech abuses” before democrats will.
Thank you!
And sorry if I came around a bit agressively. Kudos to you for checking the link and updating your view.
who do you make of proton’s support for trump?
They are not, see my response below.
do you use windows? what do you make of microsoft’s support for trump? what mobile phone do you use, because both of them support trump.
I do not use Windows and I do everything in my power to use non American phones.
The difference is that proton’s founder voiced support whereas Microsoft has always had a relationship w my govt and it’s dragnet for the Gazan genocide is quiet.
so it’s OK because they’re quietly nazis?
ProtonVPN: only 8 years old: RED FLAG!
Well reddish flag at least, is there a rationale behind this? I mean 8 years is quite a long time.
I think it’s just a relative color scale from a spreadsheet… with the older being the greenest, the youngest the reddest, and the rest just fall in between. ProtonVPN just happens to be in between, it’s not as red as the others but also not as green as the ones that have been around for much longer.
So you also think the choices were not that good?
I mean what you are saying is that if there had been a 50 year old one, all the others should be red?
I’m just explaining the reason why it’s more reddish (but not as red as others). It’s something most spreadsheet software (this was clearly MS Excel) can do automatically with numbers for visual indication so we can more easily see the distribution, it does not mean 8 years old is bad.
If there’s a big unbalance in color it would just make it more visible that there’s a big unbalance in ages. Probably if that had happened more colors could have been added to the gradient, maybe maroon->red->yellow->green->blue->white. But I think it was not seen as necessary in this case (or the author was lazy, since these are one of the defaults I believe).
Who cares about why it happened? I mean it’s kind of obvious. No one questioned why excel shows a specific colour, but I did why the person making the spreadsheet did in fact use what you go to lengths to explaine, in a specific way. It’s like saying sorry your paycheck was halved because we have this software and today it divided your salary in half. Not saying that’s not ok or anything, but explaining how “dividing by 2 halves a number”.
I feel you explain something, while correct, had nothing to do with what I said.
(this was clearly MS Excel)
LibreOffice Calc, actually. You are correct about the color grading.
(or the author was lazy, since these are one of the defaults I believe)
I changed the conditional colors from the default to match the colors that LibreOffice uses for “Good”, “Neutral”, and “Bad”.
If you make 2.1 you could add some info on the port forwarding because there are massive differences on it between providers. Like PIA gives you a single random port that changes each time you reconnect, while AirVPN gives you 5 static ports you can configure yourself.
Been using windscribe for 2 years now. Big fan so far. Haven’t had any issues and it’s nice that I can set it up on my android phone to block access to everything on there if by off chance it were to crash or go down.
Proton and Mullvad VPN appear to win the battle of the charts for privacy & security.
Except Mullvad has been proven a trustworthy service, while Proton has already a couple alarming things in their record.
What alarming things?
Why isn’t F-Droid included in the Availability section?
Could be wrong but I think it’s due to the security vulnerabilities present, its generally better to just use Google play store with an anonymous account.
Na… The likelyhood of installing some bad or fake app from google play store is much higher than on fdroid.
i think the security issues are not about fake apps, but about fdroid signing the builds themself, while their build infrastrcuture is described as insecure
The issue there AFAIK is that some app builds aren’t fully reproducible, because if they were the developer signature would still apply and be used. In the reproducible case the security of the build infra wouldn’t matter, because the same app would be produced the same regardless were they are build.
Without reproducible builds, you cannot really trust the software anyway, because the Dev could hook some hidden code only for the released binary app and sign that.
uhm no not really? I mean reproducible builds are used to cross verfiy that it is the same binary in this case, but like android has no mechanism to do that, this is not how it works.
that a build should be reproducible is more about your second point and doesnt really have anything to do with fdroid, as far as i know
Edit: these links should explain it all: https://discuss.grapheneos.org/d/21675-fdroid-security/2
Once it passes inspection, the F-Droid build service compiles and packages the app to make it ready for distribution. The package is then signed either with F-Droid’s cryptographic key, or, if the build is reproducible, enables distribution using the original developer’s private key. In this way, users can trust that any app distributed through F-Droid is the one that was built from the specified source code and has not been tampered with.
https://f-droid.org/en/2025/09/29/google-developer-registration-decree.html
The ‘availability’ is misleading. If they offer OpenVPN or Wireguard then they are available pretty much anywhere.
Using just plain Wireguard or OpenVPN configs would also be much better than installing random VPN provider apps.
I can vouch for cryptostorm. Offers port forwarding and good speed. Haven’t been with them long but they seem legit.
I’d love to see them audited.
Back when they were in the US, they closed shop and moved to Iceland to avoid turning over data for a subpoena.
That’s both admirable and an admission that they had longs to turn over.
But that they generate accounts on the fly like the best? Is promising in context.
I see that Windscribe was included. Their price tier is always in promotion so I’d take that in consideration.
Also, they have app for Linux: https://windscribe.com/features/linux/
It is not in Electron like many others. It is native Linux.
Also of note, some providers have data caps. I haven’t looked at all providers, merely Nymvpn as I was interested. Turns out they have a 2TB/month cap. Might not be an issue for some, but might be for others.
PIA isnt independent, its by a Israeli spyware company, that owns multiple VPN Review sites and VPN services . Remove it from the list.
No, don’t rrmove it from the list. Make a note acknowledging the issue so others see it
Whoa for real??
Yes. The owner/developer is Kape technologies, an Israeli spyware/adware company.
For maximum privacy, I recommend VPN providers with a jurisdiction outside of Five Eyes and other international intelligence-sharing agreements – that is, one headquartered outside of the US, UK, Australia, New Zealand and Canada. So it initially seems like a positive sign that, while CyberGhost has offices in Germany, it’s headquartered in Romania. German entrepreneur Robert Knapp says he founded the $114,000 startup on the back of low-wage Bucharest labor before flipping it for $10.5 million in 2017.
The issue is who he sold it to – the notorious creator of some pernicious data-huffing ad-ware, Crossrider. The UK-based company was cofounded by an ex-Israeli surveillance agent and a billionaire previously convicted of insider trading who was later named in the Panama Papers. It produced software which previously allowed third-party developers to hijack users’ browsers via malware injection, redirect traffic to advertisers and slurp up private data.
Crossrider was so successful it ultimately drew the gaze of Google and UC Berkeley, which identified the company in a damning 2015 study. (You can read the Web Archive version of that document.)
This practice, commonly called traffic manipulation, is condemned web-wide. And the only difference between it and one of the oldest forms of cyberattack, called man-in-the-middle (MitM), is that you clicked “agree” on the terms and conditions.
Whether or not PIA or ExpressVPN or the other providers owned by Kape fulfill this data scraping and ad-serving pipeline in my mind is irrelevant. Choosing to do business with them rewards bad actors when there are other VPN sellers who don’t have such a tainted lineage.
Honestly i wish these kind of vpns had a different name.
Wireguard isnt even on the list and its entirely free, but also it doesn’t serve this same purpose.
Vpn stands for private personal network, selfhosted vpns do exactly that, i can use my Phone to connect to all my home services which replace expensive subscriptions without actually exposing those services to the net or requiring a domain for them.
Vpns are amazing, but most people i know irl that use them barely understand what they are or what they can be used for.
VPN Providers*
It’s private as opposed to the public internet; there’s no “personal” in VPN.
Vpn stands for private personal network
Ermm…
Virtual private network,i know, i know, but i just wrote the wrong thing on accident.
Since its been up for so long feels dishonest to change it. I am owning up to my mistakes and my sentiment that the post is about providers only still stands.
Hah no worries, I thought maybe it was like a translation error or something.
Agreed, my current “vpn” doesn’t even support a virtual private network. I have to setup two different VPNs, one for proxying my requests and one for actual VPN stuff.
small warning: the Tor VPN app is dependent on Google Play.
It is not. I’ve been able to use it on GrapheneOS without Google Play Services.
Huh. Why did it complaining about lack of google play when i try it?
I’m not sure. Are you certain you have the right app?
I downloaded it from google play via Aurora Store, bc i cannot find the actual source.
The right app is org.torproject.torbrowser. You can also get it from the official site: https://www.torproject.org/download/#androidTor VPN is different from Tor Browser.
TIL, I had no idea there were separate services.
ok, it works now. thx
“Tor VPN is beta software. Do not rely on it for anything other than testing. It may leak information and should not be relied on for anything sensitive”
in case you did not read the disclaimer
Its available through FDroid, you have to enable the the guardian repo first:
Airvpn doesn’t require any personal information. I mean… I guess it asked for a name or whatever, but it doesn’t verify any of it. I certainly didn’t give it anything legitimate, and I paid with mixed crypto so it certainly has as little personal information on me as would be possible with a vpn.
What gives ivpn, mullvad and nym the advantage for the personal info section?
I can only speak to Mullvad, but if you want to, you can visit their onion site on tor, and pay using Monero while providing zero information. They give you a 16 digit number. And that’s it. That’s the extent of your interaction with them. No name, no email address, no credit card information, nothing.
Most of that is optional, of course, but the option is always there.
What gives ivpn, mullvad and nym the advantage for the personal info section?
Originally I was referring to the signup process (since they generate a random account for you) but I edited it to try to add some clarity.
I appreciate the attempt to quantify availability, but don’t most of these providers allow you to generate OpenVPN and Wireguard configs, which can be used practically anywhere?
Nevertheless, your work is appreciated.
