It's unsurprising that utilising a VPN has become the top choice for staying safe and encrypted online in recent years.
As you’re probably aware, the fundamental purpose of a VPN is to increase your online security and privacy by sending your data through an encrypted tunnel. It keeps your data away from the prying eyes of governments, ISPs, or indeed malicious types like hackers. This means that if you're online shopping or using online banking a VPN would be pretty handy as it would instantly increase your privacy and security.
If you want to easily pick out the most secure VPN provider with top-notch encryption, we’ve done the hard work for you and compiled our top five choices right here.
- Check out the best VPN
Most secure VPN in 2020
With ExpressVPN, you get every ounce of security you could possibly want. The provider uses AES 256-bit encryption and OpenVPN almost exclusively. Additionally, the company uses an RSA-4096 handshake (a form of connection negotiation between your device and a VPN server) and SHA-512 hash message authentication code (HMAC), along with PFS (Perfect Forward Secrecy).
WebRTC leak protection, DNS leak prevention, and a kill switch round off an impressive security effort. Furthermore, the company uses its own private, zero-knowledge 256-bit encrypted DNS on each server.
You get a 30-day money-back guarantee, and if you opt for the 12-month plan (with three months extra thrown in for good measure), you’ll be getting a solid value proposition – particularly considering the security features on offer here. The packages available are:
Get the most secure VPN 2020: $6.67 per month (with 3 months FREE)
It's easy to recommend ExpressVPN on its security capabilities alone, but that would be selling it someway short. It's also excellent when it comes to speed and ease-of-use. And the good news is that TechRadar readers can get a little perk, too. ExpressVPN has agreed to give readers three months extra free when you sign up. Here are its plans and prices in full:
- [$6.67 a month], save 49%, 12-months (plus 3 free) - $99.95
- [$9.99 a month] 6-month - $59.95
- [$12.95 a month] 1-month - $12.95
This Panama-based provider has some real strengths security-wise, most notably ‘Double VPN’ technology which routes your connection through two separate VPN servers (instead of just one) for an additional layer of security.
There are a limited number of Double VPN servers, but the service also offers the usage of the Onion network over VPN, as well as automatic blocking of suspicious websites and ads. 256-bit AES encryption is on hand, while the IKEv2/IPsec security protocol has been adopted as the default in NordVPN’s apps for iOS and macOS, with OpenVPN being the choice for Windows and Android.
The service delivered on the performance front in our tests, and you can connect with a wide range of available clients (plus there are a number of tutorials for devices which don’t have native clients provided). As for privacy, the company implements a ‘no logs’ policy, so it’s all good in that regard.
On the subscription front, NordVPN offers some affordably priced commercial plans (the expensive monthly subscription aside), along with a 30-day money-back guarantee. The limited multi-year plan is great value if you’re happy to make that commitment. The packages available are:
VyprVPN manages its own network which is noticeable instantly, with the service performing amazingly fast. There is a good number of server locations too, so there will be no trouble finding a good connection.
The provider isn't just about speed, it's equally impressive in the security section. Apart from the standard protocols, the service uses the Chameleon protocol which makes it harder for others to detect that you're using a VPN. In other words, it will prevent DPI and VPN blocking. Kill switch and leak protection are also available, and VyprVPN uses its own encrypted zero-knowledge DNS service.
And now VyprVPN has had an independent audit to verify that it doesn't log or share anything about what you're doing online, including session logs.
A 3-day trial is available if you want to test out the service, which is a good thing since the company doesn't offer refunds. There are only two plans, with the option of monthly and annual payment. The premium plan is definitely a better choice due to "extras" like the Chameleon protocol. The packages available are:
In our performance testing, IPVanish delivered excellent download speeds for nearby servers, while still managing above-average speeds over longer distances. Native apps are available for all the major platforms, with setup instructions for many others.
The software gives you more than enough low-level settings to tinker with, should you wish, although there is a slight downside with the Windows client. We found the latter was somewhat prone to network issues and didn’t play nice at all if rival VPN clients were installed on the host PC, so bear this in mind.
Moving onto security, IPVanish uses AES-256-CBC encryption with an SHA256 hash algorithm, multiple protocol support, a kill switch (lacking on mobile apps), IPv6 leak protection, both proprietary and third-party DNS, as well as an OpenVPN scramble solution to help avoid the VPN connection being detected and blocked. The service is also one of our favorites when it comes to privacy.
You’ll have to cough up some cash in order to enjoy this service, though, as there’s no free trial to test it (unless you sign up for the iOS app). The prices aren’t the cheapest around, although the yearly plan offers more than palatable value-for-money. The packages available are:
More often than not, you'll see us praising CyberGhost VPN's clever little features - its task-based app options, optional data compression, really nice mobile apps. The list goes on.
But its pure security shouldn't be disregarded. Yes, it has the kind of no logs pledge that you'd normally expect from any VPN provider, but CyberGhost has also been leading the way with its annual transparency reports. It says that it doesn't want to hide anything from the user, even if hiding your information is a big priority.
And then there are those extra added touches that so often make this provider stand out from the busy secure VPN crowd. It can block ads, trackers and malicious websites for starters. And its automated HTTPS redirection ensures you're always making the most secure connection.
Although it shouldn't really be your main consideration for choosing a VPN, it's worth also noting CyberGhost's pricing. Not many are able to match it, especially if you sign up for a longer term. That's where the company really seeks to reward you for your loyalty.
Security and Encryption
Encryption can only go so far. If the authorities demand logs or other details on users from a VPN firm, encryption won’t stop the provider from handing said details over – which is why you should always be on the lookout for a firm which has a super-solid ‘no logs’ policy. That’s because while encryption might keep your data private and unreadable to your ISP, it’s still visible to the VPN.
So that’s one of the common misconceptions about VPN security and encryption with regards to online privacy. Further misunderstandings can stem from the mishmash of jargon that surrounds talk of encryption, which is all likely to be meaningless to the casual VPN user. Terms like 128-bit, 256-bit, AES, and other jargon is likely to confuse, so a bit of explanation is in order.
Encryption relies on advanced mathematical formulae to work its magic. Some types of encryption are stronger than others, and that’s where the terms 128-bit and 256-bit come in – the latter is stronger than the former. AES stands for Advanced Encryption Standard and is the computer cipher or the actual algorithm used to perform the encryption.
Blowfish and AES are by far the most common ciphers found in daily VPN usage, and you’ll most commonly see VPN providers offering AES 256-bit encryption. The latter is something of a worldwide standard for solid security, with 256-bit encryption producing a staggering 1.1579 x 10 to the power of 77 possible keys.
Given that, even if you were using the combined power of all the world’s most powerful supercomputers, it’s not possible to pull off a brute-force attack to crack a symmetric 256-bit key (not before the death of the universe rolled around, anyway).
Also worth a mention is Perfect Forward Secrecy (PFS), a system of private encryption keys generated for each new session – this basically ensures that even if the current particular key in use is somehow compromised, the encryption of past sessions can’t be cracked (because they all use a different key).
As for VPN protocols, on the security front, OpenVPN is the recommended choice under most circumstances due to its inherent safety and high configurability.
Those are the basics when it comes to VPN encryption, without delving into the depths of the subject.