I made a spreadsheet comparing different open source VPN providers.
Part 2 here
Providers
Notes
- Please do not start a flame war about Proton.
- Please do not start a flame war about cryptocurrencies. Monero is the only cryptocurrency listed because of its privacy.
- The very left column is the category for each row, the middle section is the various VPN providers, and the right section is which VPNs are the best in each category.
- IVPN has two differing plans, which is why “Standard” and “Pro” are sometimes differentiated.
- For accounts, “Generated” means a random identifier is created for you to act as your account, “Required” means you must sign up yourself. Proton VPN allows guest use under specific conditions (e.g. installed from the Google Play Store), but otherwise requires an account.
- Switzerland is seen as more private than Sweden. Gibraltar is seen as privacy neutral.
- All prices are in United States Dollars. Tax is not included.
- Pricing is based on the price combination to achieve the exact time frame. For example, Proton VPN does not have a 3 year plan but you can achieve 3 years by combining a 2 year plan with a 1 year plan.
- The availability section is security based. Availability is framed around a GrapheneOS and secureblue setup.
- The Proton VPN Flatpak is unofficial, but based on the official code.
- Availability on secureblue is based on the
ujust install-vpncommand. Security features must be disabled on secureblue in order to use the GUI for IVPN and Mullvad VPN, but not for Proton VPN. Mozilla VPN and NymVPN are available as Flatpaks, which are safer than layering packages. - I wanted to include more categories, such as which programming languages they are written in, connection speed, and security, but that became far too difficult and complex, so I decided to omit those categories.
Takeaways
- NymVPN is very very new, but it’s off to a strong start. It wins in almost every category. I actually hadn’t heard of it until I started this project.
- If you want a free VPN, Proton VPN is the only one here that meets that requirement.
- If you want to pay week-by-week, IVPN is the only one that allows that.
- If you’re paying month-by-month on a budget, Mullvad VPN is the cheapest option.
- NymVPN is the cheapest plan for anything past 1 month.
- If you want to use Accrescent as your main app store, IVPN is the only VPN available there for now.
- If you want to pay for a bundle of apps, including a VPN, Proton sells more than just a VPN.
- Mozilla VPN is terrible. The only thing it has going for it is a verified Flatpak, but NymVPN also has that so it doesn’t even matter.
I was grumped by not seeing PIA on this break down. I’ve been using it for years and have always had a good experience with it. But I’m not so sure I know their privacy side now that I see this great break down
Edit: just re read the post again and I think PIA isn’t on here cause it’s not open source?
PIA is an American owned company obligated to comply with the Five Eyes Alliance, they’re legally obligated to retain your personal information unless noted otherwise.
Source their privacy policy, which FYi compare their Privacy Policy to another company like Mullvad and notice how theirs reads like a novel compared to Mullvads, that’s an immediate red flag.
Nice comparison. Thanks for sharing! Any reason NordVPN was excluded?
It isn’t open source.
Those are clients/for clients tho.
Server is proprietary closed-sauce.
I wonder which VPNs of the ones listed open sourced their backend/server side?
edit: Neither Mullvad or Proton have…
However, their client software for Linux at least is:
no love for windscribe? :(
CEO is a jackass but the product is fantastic and has a great free tier, although P2P/torrenting was removed from the free tier unfortunately I believe
CEO is a jackass but the product is fantastic
evergreen
What about logging policies? Seems like that would be an important category to visit - which providers store logs or don’t etc. I’ve heard of some that use RAM-only logging that allegedly never gets stored on disk.
Even so, you never knowif they’re really no log. What guarantees that apart from a verbal promise?
There is no guarantee unless you could personally audit their facilities and inspect what they did with your account etc. But I would still choose one that states they have a good policy versus one that says nothing on the subject.
Best way I know is to observe them being unable to comply with legal demands to supply data when they receive them. From what I’ve heard Mullvad has passed that test, but I’ve never tried to follow up and find details.
Are any of these good options for port forwarding? I’m currently using PIA and I’d rather not.
Oh boy, seems I missed something again. What’s wrong with PIA? I’ve been using them forever.
Oh, you know, the usual. Bought out by an Israeli spyware company.
Why not PIA? I was looking into it for port forwarding
It’s owned by an Israeli spyware company.
I have Pure VPN. It allows port forwarding but isn’t on the list. I don’t see it talked about much so I don’t know how it compares to others, but I’ve just been using it because I got a great deal for a 5 year plan forever ago.
Pure vpn seams like a pretty generic scammy vpn like surfshark or nordvpn they have there own blog dedicated to why they are the best stating reasons like securing yourself in public wifi, protecting you from scams or getting hacked, protecting you against ddos atacks??? and just advertising vpn’s as a jack of all trades privacy toolkit, which they really aren’t.
VPN companies that are willing to lie to consumers about what vpn’s actually do means they could be lying about other things, like there no logs policy.
Proton does a better job at explaining what a vpn actually does and doesn’t do.
That explains it. It’s been working well enough for me, but I’ll probably change as soon as this plan is up.
I mean I’m using pia, so not much better but I’m broke so I ain’t paying for mullvad or anything. I might switch to nymvpn when I get the chance though, it seams pretty good.
Yeah the spreadsheet is kind of useless without that information
I wouldn’t call it useless, for people who just use a vpn for privacy, for all I know the only main use case for port forwarding in a vpn is torrenting linux iso’s rather than genuine privacy measures.
That’s why I said kind of
Proton VPN supports port forwarding. IVPN and Mullvad VPN do not. Mozilla VPN and NymVPN don’t explicitly state whether or not they do from what I found, so I’m not sure.
NymVPN doesn’t supports it. I asked their support. They have plans for the future.
If you are looking for reliable port forwarding consider Windscribe VPN.
Mozilla VPN is just mullvad so they do not
I had the same dilemma after mullvad stopped allowing you to create port forwards. I switched to Proton which works fine but I’m curious what other options are out there. It can be hard to find the details about port forwarding, especially if it only works when using their app and not with openvpn/wireguard which is easier for running containers.
AirVPN lets you open 5 ports and allow p2p. Works with their app and openvpn/wireguard. I’ve been paying for it couple years now and I’m pretty happy with it
ProtonVPN has started to become blocked on tons of websites. I have to switch servers all the time, to the point I won’t be able to keep a VPN connection up like I used to.
I’ve read Mullvad has worsened as well. There seems to be a general ban on VPN use (there was always some of course)
My last hope: non profits who offer VPN. They keep logs, don’t allow torrenting, and require a real name to subscribe. Very few server choices, if any.
I’m… fine with that. I just want privacy. No surveillance. And I trust the non profit. Plus I torrent on a VPS anyway
What I would like to see are local VPNs, with a small enough pool of users on each server to not get flagged. A rotation between servers from time to time. Compliant with the law of course (as long as the law doesn’t require total surveillance, evidently). The goal is to hide everyone’s activity from the providers and websites (yes, I know, fingerprinting)
But maybe there’s some other existing tool/service I’m not aware of?
Does using a VPS truly enhance safety while torrenting? Isn’t it still possible for downloads and uploads to be traced back to your identifiable IP address, especially considering that the VPS provider logs your IP and email details?
VPN on VPS (easy to do with gluetun)
Basically you use a container that’s a VPN connection and connect other containers to it.
Thank you for clarifying. Does using a VPN on a VPS offer the same level of privacy as connecting a VPN container to a torrent container from a home connection? I’m curious about the advantages of using a VPS in this context.
No advantages privacy-wise, but it’s like a seedbox! I keep the torrent client running. Also I’m on a limited mobile data plan on my router at home, so this helps.
When I found out you could get a free 200GB VPS (look up free tier vps) - and because I had another paid VPS already anyway - I decided to make a seedbox. It’s not a ton of storage but it works really well, very happy with it.
Exactly this, the commenter above even mentioned they have a VPS already, what’s stopping them from (this is just an option) slapping tailscale on there, enabling it as an exit node and being done with it? Would literally take 5 minutes and suddenly your traffic is coming from a datacenter and not your home IP
I’m having problems opening the image, is it just me?
I’ve included it both as a post image and as an embedded image for maximum compatibility (e.g. for RSS readers), so there shouldn’t be any problems. I’ve tested it on multiple browsers on multiple devices just fine.
Edit: It seems lemmy.world is breaking all lemmy.ml images
also doesn’t work on sh.it
I can see it there? On Voyager, if that matters.
Does anyone have experience with the Mullvad, NymVPN, or AirVPN clients (if they exist) on Linux? I’m still mad Proton removed support for their Linux client and replaced it with an intern-level gnome-only taskbar applet. Also, do they support generating plain Wireguard configs?
(if they exist) on Linux
secureblue is Linux.
I have experience with airvpn on linux. They have a couple different client options as well as being able to config files for both openvpn and wireguard. All of which I have used and haven’t had any notable challenges using.
The AirVPN client works well on Linux. They provide really good Linux support. https://airvpn.org/linux/
I really like Mullvad. I can’t speak towards their app though I just export the configurations and import them to my distros networking settings so I can activate it more easily.
Yes, I use mullvad VPN on Linux. It works fine. You don’t need their client, of course, but it is good.
I can confirm that Mullvad VPN client works quite well on Linux.
I don’t use the official client, but airvpn with pure wireguard works perfectly.
Why is proton consistently red in the pricing category despite being cheaper than (or on par with) other options like mozilla which is consistently yellow? Am I misreading this as green = good, red = bad?
That seems to be a bug. That’s my bad. Thanks for catching that! I’ll fix it soon and edit the post.
Edit: Fixed! Sorry about that.
Posts you have to squint at to figure out if they glow or are just inexperienced.
Where is AirVPN? Arguably much better then these VPN providers offering static port forwarding among their features.
Provides configurations built for Wireguard and OpenVPN with each server having unlisted IPs to completely get around VPN blocks.
Owned by a “hacktivst” lawyer in Italy.
Multiple audit along with police attempting to sieze running servers. These are configured to dump there configuration on shutdown and run entirely in ram.
This is a battle tested VPN that has existed since 2010. They allow for completely anonymity using Creptocurrencies payments.
Also would be worth considering RiseUp VPN which is run by an anarchist organization. There’s also a new one BuycatVPN which I think is affiliated with the Tech for Palestine project and from an organization that’s an official partner with BDS, but I don’t know anything else about it.
I will definitely check these out. Thanks for the tip, friend.
Wow, Nym’s payment model past month-to-month looks good. I don’t really need port forwarding, so the advantage I see they have over Mullvad is the decentralized nature of their servers. Mullvad does have multi-hop but it goes through Mullvad owned or rented servers. Does anyone know if Nym really does use servers that aren’t leased/rented by them for decentralization? Otherwise, they are no different from Mullvad and only the payment model is better.
Mullvad does not offer port-forwarding anymore.
This is great, thanks for sharing! You’ve got a few useful feedback points, let me add one more: does a provider have an onion address. This allows decoupling of payment from usage. Not a big thing, but good to know.
I have never heard of NymVPN
Most people haven’t, till they have.
I suggest adding AirVPN.
