Skip to main content

CyberGhost VPN review

A powerful and full-featured VPN from a popular privacy provider

CyberGhost Main Interface
(Image: © CyberGhost)

TechRadar Verdict

CyberGhost is a capable VPN service with a powerful Windows client, packed with features and yet still user-friendly. It has some issues (the support site needs work, the device limits can be a hassle) but CyberGhost scores in all the main areas, with great WireGuard performance, excellent unblocking results, plus fast and helpful live chat support.

Pros

  • +

    Excellent WireGuard and OpenVPN speeds

  • +

    Loads of features

  • +

    Unblocks US Netflix, BBC iPlayer, Amazon Prime, Disney Plus

  • +

    Speedy live chat support

Cons

  • -

    No security audit

  • -

    Support site isn't the best

  • -

    Number of settings might intimidate newbies

  • -

    Windows app doesn't notify when it disconnects

CyberGhost is a Romanian and German-based privacy giant which provides comprehensive VPN services for more than 15 million users.

CyberGhost VPN boasts 7,800+ servers in 110+ locations across 91 countries. That's far more servers than most, although ExpressVPN claims 160 locations, and HideMyAss has over 290.

Torrents are allowed on many, although not all servers, and the company has apps for Windows, Mac, iOS, Android and more.

CyberGhost VPN supports connecting up to seven devices simultaneously. That's better than many (even the premium ExpressVPN only supports five), but keep in mind that these must be specific devices. Connect from a phone, or a games console, or a smart TV, just once, and that's one of your slots used up. If you run out of slots, you can log out of individual devices (opens in new tab), but that quickly becomes annoying. (Though not as annoying as KeepSolid VPN Unlimited, where you can only free up one device slot per week.)

Elsewhere, a web knowledgebase is available if needed, while chat and email support is on hand to help you through any particularly tricky situations.

Optional extras include dedicated IPs. Sign up for this for an extra $5 billed monthly ($4.75 on the six-month plan, $4 if you sign up for two years) and you'll get the same IP address, unique to you, every time you log on to the service.

Dedicated IPs allow you to access IP-restricted networks, which is handy if you need to access a business system while connected to the VPN. They also reduce the chance that you'll be blocked by streaming and other platforms, as they haven't had their reputation trashed by other people's bad behavior.

The catch? Dedicated IPs allow other sites to recognize you, because you'll have the same IP address every time you visit. Fortunately, CyberGhost enables switching between dedicated and dynamic IPs as required, so you can easily use a dedicated IP where necessary and dynamic for everything else (more on that later).

CyberGhost Payment Page

You can pay for your CyberGhost plan using PayPal, Bitcoin or credit card, and more (Image credit: CyberGhost)

CyberGhost pricing

Signing up for CyberGhost VPN's monthly account (opens in new tab) costs $12.99 a month, which is at the high-end of the industry-standard $10-$13.

As usual, extending your subscription saves money. Prices drop to an equivalent $4.29 a month on the annual plan (opens in new tab), whereas signing up for two years (opens in new tab) cuts the cost to $3.25 a month, and the three-year plan (opens in new tab) is $2.29 a month for the first term (three years plus three months), and $2.48 on renewal.

That's good value for the longer-term plans, although there are a handful of providers with even better deals. Private Internet Access gives you three years and three months protection for only $2.03 a month, with a simple antivirus included. And Ivacy's five year plan is a rock-bottom $1.19 a month. (That's $78 upfront for two years of CyberGhost protection, and $71.64 for five years with Ivacy.)

Upgrading to CyberGhost Security Suite (opens in new tab) adds antivirus and a Security Updater to check for missing software patches. It's priced from $5.65 a month billed monthly, to $1.29 on the three-year plan. That's not a lot, but then it's a relatively basic suite. If your security is a top priority, keep in mind that Avira, Avast, Bitdefender, Kaspersky, Norton and more all now have full-featured security suites with VPNs included.

Whatever deal you choose, you're able to pay by Bitcoin, as well as PayPal, credit card, Google Pay and Amazon Pay (beware, though, your options might vary depending on location).

CyberGhost Free Trial

While CyberGhost's free trial is useful, waiting in a long queue to test out the service is less than ideal (Image credit: CyberGhost)

There's even a free trial. It's short, though, at just 24 hours for the desktop build (7 days on mobile devices) so only start it when you're very sure that you'll have the free time to run whatever tests you need.

If you sign up and then find the service doesn't work for you, there's more good news: the company has a lengthy 45-day money-back guarantee (14 days for monthly-billed plans), one of the most generous deals around.

CyberGhost No Logs Policy

CyberGhost keeps no logs on its users' online activity (Image credit: CyberGhost)

Logging and privacy

Like many VPNs, CyberGhost's website proudly boasts of a 'strict no logs policy' on its front page.

Unlike some VPNs, the service's privacy policy does a good job of backing this up, with some very specific statements: "When using the CyberGhost VPN, we have no idea about your traffic data such as browsing history, traffic destination, data content, and search preferences. These are NOT monitored, recorded, logged or stored by us.

"More than this, when using the CyberGhost VPN, we are NOT storing connection logs, meaning that we DON'T have any logs tied to your IP address, connection timestamp or session duration."

For customers who aren't sure about the technical details, the policy goes on to spell out the implications.

"We do NOT know at any time which user ever accessed a particular website or service."

"We do NOT know which user was connected to our CyberGhost VPN service at any given time or which CyberGhost VPN server IP they used."

"We do NOT know the set of original IP addresses of a user’s computer."

If you need more, a 'Does CyberGhost log? No!' support document adds a little extra detail.

The company backs this up to a degree with a Transparency Report (opens in new tab) where it lists DMCA, police and other requests it receives, and goes on to say: "Since we're Bucharest-based and under no obligation from the Romanian law to store data, we can honor our strict no logs policy. This means we're unable to comply with requests, even if they are legally binding."

While this is welcome, these are just words on a website, and there's no way for an individual user to know how the service actually works. Many providers are addressing this by having independent audits run on their systems, and we hope CyberGhost will soon do the same.

In the meantime, we can at least run some basic privacy checks of our own, using sites such as IPLeak.net and DNS Leak Test to look for DNS and other privacy leaks. We did, and discovered some good news: none of the tests revealed any problems.

CyberGhost Data Collection

CyberGhost's apps allow users to opt out of data collection (Image credit: CyberGhost)

CyberGhost deserves some privacy credit for its app design, too. Like many providers, its apps can capture anonymous data to help understand how they're being used. But unlike some competitors (hello, NordVPN), CyberGhost doesn't just leave this turned on by default – the Windows app installer clearly explains what it's doing during setup, and you can opt out of the scheme with a click.

Speedtest.net performance benchmark

We used several different speed testing sites to measure CyberGhost's performance (Image credit: Speedtest.net)

Performance

We measured CyberGhost speeds from US and UK locations with 1Gbps connections, using several performance testing services (SpeedTest's website and command line app, nPerf.com, SpeedOf.me and more). We checked the download speeds at least five times from each site, then checked again using another protocol, before repeating this all over again in an evening session.

US WireGuard speeds were excellent at 650-670Mbps in the UK, 830-850Mbps in the US. Only a handful of providers – IPVanish, Mozilla VPN, TorGuard – have competed with that in recent reviews.

UK OpenVPN speeds doubled from the 170-210Mbps we saw last time around, to 300-415Mbps this time. That might be partly due to a new OpenVPN driver. This is a little above average, although we've recently seen higher peak OpenVPN speeds from Mullvad (490Mbps) and Hide.me (580Mbps).

Netflix menu showing popular shows

CyberGhost was able to unblock all the streaming services we tested it with (Image credit: Netflix)

Netflix and streaming

Some VPNs make you work to unblock streaming sites. If you're looking to access US Netflix, for instance, you might have to try each of the US locations in turn before you find one that gets you in.

CyberGhost doesn't waste your time with any of those kinds of shenanigans. Its app location lists have a Streaming tab with specialist servers for Netflix, BBC iPlayer, Hulu, Amazon Prime, Disney Plus, HBO Max and more.

US and UK customers get the best coverage, but our app also listed servers in Brazil, Canada, Finland, France, Germany, India, Italy, Japan, Romania and Sweden. These cover both the top platforms and smaller or regional services: RTL, MTV Finland, France TV, AI Play and more.

We began our tests by connecting to the BBC iPlayer location, and found we could stream iPlayer content without difficulty – a great start.

We switched to the US Netflix server, and again this allowed us to browse and stream whatever content we liked.

There were no hassles of any kind with Amazon Prime, where CyberGhost got us access right away. And it was the same story with Disney Plus, where we had no streaming issues at all.

CyberGhost Torrents

CyberGhost hides your IP to protect you while torrenting (Image credit: CyberGhost)

Torrents

CyberGhost doesn't support P2P on all locations, as a page on the website explains: "We have to block P2P protocols on certain servers, either due to strategic (this is traffic that unnecessary slows down other user's traffic) or due to legal reasons in countries where we are forced by providers to block torrent traffic, among them USA, Russia, Singapore, Australia and Hong Kong."

Fortunately, you don't have to try to remember which locations supports P2P. CyberGhost's apps include a 'For Torrenting' list with your options. And it looks like there are plenty: our Windows app listed 66 P2P-friendly countries, which is more than most VPN providers support in total.

We checked this by connecting to three P2P-friendly locations and successfully downloading a torrent from each, with no connection or other issues.

Handy bonus features in the Windows app Settings box include the ability to automatically connect your preferred CyberGhost server whenever you launch your torrent client (more on that later).

Sourcing torrents from more dubious sites can sometimes leave you exposed to attack, but CyberGhost's malicious URL filter, another welcome addition, could help you avoid a lot of trouble.

CyberGhost Setup

Setting up CyberGhost's VPN client is an easy process (Image credit: CyberGhost)

Setup

CyberGhost does its best to make sure the setup process is as easy as possible, and for the most part it's very successful.

Clicking the Trial link on the website quickly downloaded the tiny Windows installer. We accepted the terms and conditions, entered our email address and password, and after clicking the usual 'please confirm your address' link in a follow-up email, that was it. We were ready to go, with no payment or other details required.

It's much the same story with the mobile apps. The CyberGhost site links you to the relevant app store, and you download and install the apps in the usual way.

If you need the OpenVPN configuration files to set up a router or other device, though, your life becomes considerably more complicated. While other VPN providers typically give you a bunch of standard OVPN files to download, CyberGhost asks you to do the following: log in to your account; add a device profile; choose the features you need (ad blocking, data compression, malware protection, more); choose OpenVPN TCP or UDP; choose your target country; note down a server name, custom username and password; and download the OVPN file, certificates and key files in a ZIP file.

If you're looking to set up multiple locations, you must also rename each OVPN file to something appropriate.

Oh, and every OVPN file you download immediately counts against your seven device limit. You can go into the control panel and remove it, and CyberGhost won't complain, but it's still hassle.

This approach has some advantages – it's secure and gives you a high level of control over how each connection works – but if you're just hoping to download 89 standard OpenVPN configuration files, get ready for disappointment. There's a lot of setup work to do.

CyberGhost Windows Client

The Windows client is clean and lightweight, but powerful (Image credit: CyberGhost)

Windows app

CyberGhost's Windows client opens with a clean, lightweight console which includes a connection status, a list of locations and a Connect button. Don't be fooled, though – there's a lot of functionality tucked into a right-hand panel which you can open whenever you need it.

A location picker lists all countries and their distance from you. This can be filtered to display servers optimized for streaming or torrents, and a Favorites system makes it easy to build your own custom list.

The service generally connects quickly, but we noticed one problem: there are no notifications to tell you when it connects or disconnects. That means you can't be completely sure of whether you're protected unless you're looking at the CyberGhost app.

CyberGhost Smart Rules

CyberGhost's Smart Rules panel gives you a great deal of control over how its Windows client functions (Image credit: CyberGhost)

The app's Smart Rules panel gives you an unusual level of control over when the client launches. Most VPNs have an option to launch when Windows starts, for instance, but CyberGhost also allows you to choose a preferred server, and then launch a particular app, such as your default browser in incognito mode.

There's even more flexibility in the Wi-Fi Protection panel, where CyberGhost allows you to decide exactly what happens when connecting to new networks. You can have the client automatically connect to the VPN if the network is insecure, for instance, or never connect if it's encrypted, or indeed perform custom actions for specific networks (always protect at home, never protect at work) – or simply ask you what to do.

Built-in App Rules allow you to automatically connect to a specific VPN location when you open an app. You could connect to the specialist US Netflix location when you open the Netflix app, for instance, or choose a torrent-friendly location when you launch your P2P application.

There's another handy touch in the Exceptions feature, where you can build a list of websites which won't be passed through the tunnel. If a streaming site is only accessible to users in your country, add it to CyberGhost's Exceptions and it'll never be blocked, no matter which VPN location you're using.

If this sounds too complex, and maybe you're only after the VPN basics, no problem; it can all be safely ignored. You'll never even see it unless you go looking. But if you'd like to fine-tune the service, and generally optimize it to suit your needs, CyberGhost gives you a mix of options and opportunities you simply won't see elsewhere.

CyberGhost Settings: Protocols

CyberGhost supports OpenVPN, IKEv2 and WireGuard protocols (Image credit: CyberGhost)

Settings

The Settings box lets you choose your preferred protocol (OpenVPN, IKEv2, and now WireGuard, too), using random ports to connect (which might bypass some VPN blocking), and enabling or disabling a kill switch, IPv6 connections and DNS leak protection.

Our tests showed the kill switch generally worked very well. We tried forcibly closing VPN connections, and even killing CyberGhost's OpenVPN and WireGuard helper processes, but the kill switch blocked our internet access immediately. However, there were some issues, too.

As we mentioned earlier, the app doesn't raise notifications if the connection drops. Unless you're looking at its console, you'll have no idea why your internet has just died.

This won't matter much with OpenVPN or IKEv2 connections, as we found the app updated its connection status and automatically reconnected within a few seconds.

When we closed the WireGuard process, though, the app didn't appear to notice. Our internet was correctly blocked, but the app told us we were still connected. Hitting the Disconnect button got us our internet access back, but this could still leave users confused for a while. And if the app thinks it's connected when it's not, that leaves us wondering whether there are other issues here that we might have missed.

CyberGhost Mac App

CyberGhost's Mac app is a very streamlined affair (Image credit: CyberGhost)

Mac app

CyberGhost's Mac app opens with a stripped-back mobile VPN-like panel, little more than a list of locations and a Connect button. Good news if you're not interested in the low-level technicalities: just point, click, and you're connected in a very few seconds.

Tap an 'Expand' icon, though, and a panel appears to the left, with a list of locations and links to various settings. It looks much like the Windows app, but with some unexpected differences.

The Mac location list doesn't include the distance to each server, for instance, as we saw on Windows. But it adds a 'server load' figure of its own, helping you identify which servers are busiest. Both details are useful, but wouldn't it make more sense if each of the apps displayed both figures?

The app sidebars have different location lists, too. Windows gives you lists for gaming, torrenting and streaming; Mac only gives you downloading and streaming lists.

As usual with Mac VPN apps, it doesn't have all the features available on Windows. Click Privacy Settings, for instance, and you only get the ad, tracker and malware-blocking option. There's no configurable DNS leak option or automatic kill switch.

The startup rules are much simpler than we saw with Windows, too. You can set up the app to automatically connect when it launches, or whenever you access untrusted Wi-Fi networks. But you can't have the VPN connect when you run particular apps, and there's no 'Exceptions' option to define websites which won't pass through the VPN tunnel.

Still, it's important to put this in perspective. CyberGhost's Windows app is one of the most configurable we've seen, and even though this version can't quite match that, it's still a capable Mac VPN app which is user-friendly and equipped with plenty of useful tools and features.

CyberGhost Split Tunneling

CyberGhost's Android app offers split tunneling, allowing the user to specify which apps use the VPN, and which do not (Image credit: CyberGhost)

Android app

Mobile VPN apps are often underpowered when compared to their desktop cousins, but CyberGhost's offerings are surprisingly capable.

The app opens with the usual very simple portrait interface, for instance, little more than a Connect button and the name of your selected location. But switch to the tablet-friendly landscape mode and you get the location list and Connect button on the same screen, making it easier to find the server you need and get online.

You can have the app automatically connect when you access insecure Wi-Fi, and protocol support includes OpenVPN and WireGuard (but no IKEv2).

The app includes the desktop client's ability to use a random port when connecting to the VPN, a simple trick which might help bypass VPN blocking.

A Content Blocker supports blocking domains associated with malware, ads or trackers. We've never found it particularly effective – and it's turned off by default, which also suggests it's not a huge security plus – but the feature is available if you'd like to try it.

Split tunneling is probably the highlight here, allowing you to decide which apps use the VPN and which don't, in just a few clicks.

There's also support for domain fronting, a clever technique which bypasses some VPN blocking by directing key CyberGhost traffic through a content delivery network (CDN). We didn't test this but we're happy to know it's available (and curious why it's not included in the Windows client).

You don't get a kill switch, but that's not a critical issue – you'll just have to set up the Android system-level kill switch instead.

CyberGhost iOS app

CyberGhost has apps for iPad, iPhone and even Apple Watch (Image credit: CyberGhost)

iOS app

The iOS app shares the same look and feel as the Windows and Android versions, and getting started is as easy as logging in, then tapping Connect to access your nearest location.

VPN apps for iOS never match Android VPN apps for features, just because Apple's security model doesn't allow them the same control, but there is a sprinkling of useful features here. For example, you can set up the app to automatically connect when you access insecure or specific networks. Or you can set your protocol to IKEv2 or WireGuard (no OpenVPN), or run a connection checker to analyze your internet connectivity, see if CyberGhost's VPN servers are accessible, and generally troubleshoot any problems.

Overall, these aren't the best mobile apps we've ever seen, but for the most part they're a likeable and well-judged mix of power and ease of use. They come with a 7-day trial, too, so it's easy to check them out if you're intrigued.

CyberGhost Dedicated IP

Choose the location of your dedicated IP from CyberGhost's web dashboard (Image credit: CyberGhost)

Dedicated IP system

CyberGhost now offers dedicated IPs for an extra $5 a month, dropping to $4.25 a month (recently up from $4) on the annual plan, or $3.75 a month over two years. Hand over the cash and you'll get a unique IP address for your use only, reducing the chance that you'll be blocked by sites for other people's bad behavior, and allowing you to access IP-restricted business networks while using the VPN.

Sign up for the scheme and you're able to choose your preferred location from a small list: Montreal, Frankfurt, Paris, London, Manchester, Chicago and New York.

We chose New York and the website presented us with a token, a lengthy text string ('DIP26mZCWKAQP3oKioFu8YLRburW6LxR') which represented our IP. We pasted this into the Windows app, and our dedicated IP became available from the location picker.

Although this may sound like a hassle, there's a good reason for the scheme. CyberGhost doesn't associate the IP with our account, which ensures it remains as anonymous as a regular VPN IP address; the company has no way to connect any web action to a particular account.

This does leave some scope for problems. In particular, if you lose your IP token, there's no way to get it back because CyberGhost doesn't know what it was. But that's no surprise, and the company does its best to help, for example automatically generating and downloading a plain text file containing your token as soon as it's allocated.

Once your new address is activated, it immediately appears in the Dedicated IP section of CyberGhost's location picker. You can select it whenever necessary, or browse the usual location lists when you need a dynamic IP.

This all worked smoothly and as advertised for us. Our shiny new IP was allocated quickly, and it appeared to be in New York, as we requested, and Cyren, BrightCloud, Talos and other IP reputation checkers all found it was clean and blacklist-free.

It's a simple and straightforward system, and fair value on the plan, but other VPNs also have decent dedicated IP schemes. Check out Private Internet Access ($4.25 a month on the annual plan), Ivacy ($1.99 a month on the annual plan) and PureVPN ($2.99 a month billed annually) for more options.

CyberGhost Support

You'll need to choose the right keywords to find what you're looking for in CyberGhost's knowledgebase (Image credit: CyberGhost)

Support

CyberGhost support begins with its web guides, where you'll find advice on setting up the service on Windows, Mac, Android, iOS, Android, Linux and more.

These do a fair job of explaining key tasks, such as installing the Windows app, with screenshots and helpful extra tips (how to choose a secure password, for instance). But there isn't the depth or the detail to match the likes of ExpressVPN or NordVPN.

The knowledgebase search engine isn't particularly intelligent or helpful. It relies on you carefully choosing the best possible keyword (you'll get very different results for searching on 'speed' and 'performance', for instance), and even if you get that right, the results don't appear to be sorted by usefulness.

A 'Recent activity' panel looked like a good idea, as it lists recently added or changed support documents. But then we browsed down the page and realized CyberGhost had only added three articles in the past year. Seems like we shouldn't expect the knowledgebase to significantly improve any time soon.

Still, there is just about enough useful content here to help you with the basics. And if that fails, you can also talk to a real, live, human being, fortunately, via email or live chat support.

We opened a live chat session, and only a couple of minutes later, a support agent was responding to our question. Despite us choosing a slightly technical topic on the generation of OpenVPN configuration files, the agent immediately understood what we needed, and clearly explained everything we needed to know.

CyberGhost's support site may be a little dubious, then, but that's not the end of the story. If you're running into problems, there's a good chance that the live chat support will quickly point you in the right direction.

CyberGhost review: Final verdict

CyberGhost has a number of issues – we'd especially like regular security audits, please – but overall, it delivers on the top VPN priorities for most people, with speedy connections, excellent unblocking, loads of features and helpful live chat support. Give it a try.

Mike Williams
Mike Williams

Mike is a lead security reviewer at Future, where he stress-tests VPNs, antivirus and more to find out which services are sure to keep you safe, and which are best avoided. Mike began his career as a lead software developer in the engineering world, where his creations were used by big-name companies from Rolls Royce to British Nuclear Fuels and British Aerospace. The early PC viruses caught Mike's attention, and he developed an interest in analyzing malware, and learning the low-level technical details of how Windows and network security work under the hood.