After making a post about comparing VPN providers, I received a lot of requested feedback. I’ve implemented most of the ideas I received.
Providers
- AirVPN
- IVPN
- Mozilla VPN
- Mullvad VPN
- NordVPN
- NymVPN
- Private Internet Access (abbreviated PIA)
- Proton VPN
- Surfshark VPN
- Tor (technically not a VPN)
- Windscribe
Notes
- I’m human. I make mistakes. I made multiple mistakes in my last post, and there may be some here. I’ve tried my best.
- Pricing is sometimes weird. For example, a 1 year plan for Private Internet Access is 37.19€ first year and then auto-renews annually at 46.73€. By the way, they misspelled “annually”. AirVPN has a 3 day pricing plan. For the instances when pricing is weird, I did what I felt was best on a case-by-case basis.
- Tor is not a VPN, but there are multiple apps that allow you to use it like a VPN. They’ve released an official Tor VPN app for Android, and there is a verified Flatpak called Carburetor which you can use to use Tor like a VPN on secureblue (Linux). It’s not unreasonable to add this to the list.
- Some projects use different licenses for different platforms. For example, NordVPN has an open source Linux client. However, to call NordVPN open source would be like calling a meat sandwich vegan because the bread is vegan.
- The age of a VPN isn’t a good indicator of how secure it is. There could be a trustworthy VPN that’s been around for 10 years but uses insecure, outdated code, and a new VPN that’s been around for 10 days but uses up-to-date, modern code.
- Some VPNs, like Surfshark VPN, operate in multiple countries. Legality may vary.
- All of the VPNs claim a “no log” policy, but there’s some I trust more than others to actually uphold that.
- Tor is special in the port forwarding category, because it depends on what you’re using port forwarding for. In some cases, Tor doesn’t need port forwarding.
- Tor technically doesn’t have a WireGuard profile, but you could (probably?) create one.
Takeaways
- If you don’t mind the speed cost, Tor is a really good option to protect your IP address.
- If you’re on a budget, NymVPN, Private Internet Access, and Surfshark VPN are generally the cheapest. If you’re paying month-by-month, Mullvad VPN still can’t be beat.
- If you want VPNs that go out of their way to collect as little information as possible, IVPN, Mullvad VPN, and NymVPN don’t require any personal information to use. And Tor, of course.
ODS file: https://files.catbox.moe/cly0o6.ods
PIA isnt independent, its by a Israeli spyware company, that owns multiple VPN Review sites and VPN services . Remove it from the list.
No, don’t rrmove it from the list. Make a note acknowledging the issue so others see it
Whoa for real??
Yes. The owner/developer is Kape technologies, an Israeli spyware/adware company.
For maximum privacy, I recommend VPN providers with a jurisdiction outside of Five Eyes and other international intelligence-sharing agreements – that is, one headquartered outside of the US, UK, Australia, New Zealand and Canada. So it initially seems like a positive sign that, while CyberGhost has offices in Germany, it’s headquartered in Romania. German entrepreneur Robert Knapp says he founded the $114,000 startup on the back of low-wage Bucharest labor before flipping it for $10.5 million in 2017.
The issue is who he sold it to – the notorious creator of some pernicious data-huffing ad-ware, Crossrider. The UK-based company was cofounded by an ex-Israeli surveillance agent and a billionaire previously convicted of insider trading who was later named in the Panama Papers. It produced software which previously allowed third-party developers to hijack users’ browsers via malware injection, redirect traffic to advertisers and slurp up private data.
Crossrider was so successful it ultimately drew the gaze of Google and UC Berkeley, which identified the company in a damning 2015 study. (You can read the Web Archive version of that document.)
This practice, commonly called traffic manipulation, is condemned web-wide. And the only difference between it and one of the oldest forms of cyberattack, called man-in-the-middle (MitM), is that you clicked “agree” on the terms and conditions.
Whether or not PIA or ExpressVPN or the other providers owned by Kape fulfill this data scraping and ad-serving pipeline in my mind is irrelevant. Choosing to do business with them rewards bad actors when there are other VPN sellers who don’t have such a tainted lineage.
I read from somewhere that mullvad is owned by two israeli guys. Dont remember the names, but I was told, that it’s written on a frontpage or smth.
That’s disappointing if true, though not as bad as being owned by Kape Technologies. It’s entirely possible there are two Israeli guys that care about privacy, and on the other hand it’s possible that Mullvad was created specifically for intelligence purposes.
I’ve been using one of these since forever and it just works. Should I look at the others?
I don’t want this to be a “I use x and its the best” type comment so I won’t say which one.
I only use wireguard and wouldn’t touch openvpn just because it seems so complex in comparisson.
The price is fine, the speed is fine, wireguard makes it ubiquitous, never had a problem with reliability.
If you feel one of the options offers something better than the one you currently use, you may consider switching. That’s the purpose of comparisons, after all!
that’s kind of my point though. I’ve never considered switching because what I’ve been using is fine.
PIA does not have WireGuard configs available. To get those, you have to use third-party tools to capture and generate the necessary info. Otherwise, you have to use their client, or else no WireGuard.
Users have been asking for years (since 2018, I think), and they’ve never provided them.
PIA was also purchased by the Israeli company, Kape Technologies, which is tied to Unit 8200. If your concern is privacy, I would recommend do against it.
The very first CEO of Crossrider, Koby Menachemi, happened to be once a part of Unit 8200 which is an Israeli Intelligence Unit in their military and has also been dubbed as “Israel’s NSA “.
Is this really much of an issue? They provide documentation and a repository of scripts for working with WG for instance. And I’ve been using this docker container for many years without issue.
It’s an issue for accuracy in the comparison images that were posted.
Why isn’t F-Droid included in the Availability section?
Could be wrong but I think it’s due to the security vulnerabilities present, its generally better to just use Google play store with an anonymous account.
Na… The likelyhood of installing some bad or fake app from google play store is much higher than on fdroid.
deleted by creator
The issue there AFAIK is that some app builds aren’t fully reproducible, because if they were the developer signature would still apply and be used. In the reproducible case the security of the build infra wouldn’t matter, because the same app would be produced the same regardless were they are build.
Without reproducible builds, you cannot really trust the software anyway, because the Dev could hook some hidden code only for the released binary app and sign that.
deleted by creator
Once it passes inspection, the F-Droid build service compiles and packages the app to make it ready for distribution. The package is then signed either with F-Droid’s cryptographic key, or, if the build is reproducible, enables distribution using the original developer’s private key. In this way, users can trust that any app distributed through F-Droid is the one that was built from the specified source code and has not been tampered with.
https://f-droid.org/en/2025/09/29/google-developer-registration-decree.html
Is it worth stating which companies own which vpns? I saw a TIL that mentions a select few companies own most VPNs
I’m on ProtonVPN because it’s ran by CERN people, so definitely an important information IMO.
Their CEO is a Trump supporter
Show me where he endorses Trump.
Oh, you can’t? But you read it on Facebook or something so it must be true?
Common, show me your information.
This is bullshit based on some old tweet Andy Yen did about trump doing good going against big tech. You can read about it here or search for it elsewhere.
It always comes out when someone says something nice about ProtonVPN, who have an amazing track record IMO.
A company’s CEO gets to determine the path their company takes and the tweet is indicative of where he plans to steer proton.
Stop spreading this bs because this is not what’s happening.
We’re never going to know what they intend to do until they do it, but they’ve given us an indication of what they think and we should believe it
Ok, just read the artlce cited on wikipedia and it sounds like calling him a Trump supporter is a bit of an exaggeration. He seems basically centrist. Which is not great but not nearly as bad.
he seems like a moron if he thinks republicans are going to “tackle big tech abuses” before democrats will.
Thank you!
And sorry if I came around a bit agressively. Kudos to you for checking the link and updating your view.
That write up does seem to ignore the doubling down here:
https://lemmy.ca/comment/13913116
Calling out that JD Vance was the only one to answer is pretty troubling to me after reading about some of his new-right ties. It’s way, way too close for my liking to a mouse telling everyone that will listen that the cat was amazing for inviting him and all his friends to his house in a week. ie. Playing into what just seems like an obvious strategy.
That said, I’m pretty ignorant about the CEO. I just remembered this lemmy comment and I didn’t notice it included in the write up that was being linked.
In steins;gate, cern is evil…
Yes but that book sucks ass
who do you make of proton’s support for trump?
deleted by creator
I do not use Windows and I do everything in my power to use non American phones.
The difference is that proton’s founder voiced support whereas Microsoft has always had a relationship w my govt and it’s dragnet for the Gazan genocide is quiet.
deleted by creator
westerners seem to think so; how many times have you been told to shut up about gaza since the last election?
They are not, see my response below.
All VPNs are blocked on my university’s network
I live off campus, thankfully, but it sucks that I can’t have any privacy on my laptop while on campus.
You can set up a wireguard tunnel for yourself relatively easily, there are a ton of guides out there. Its basically a way for you to pop out elsewhere, same principle as a vpn. Most vpn providers use wireguard as a protocol.
If the VPNs are blockable and detectable just like that, they don’t really serve as good VPNs, no? Buy some cheap VPS and setup some state of the art thing like x-ray/vless - surely that would solve the problem.
Mullvad on desktop has QUIC protocol encapsulation so that wireguard just looks like normal https traffic.
There’s also shadowsocks protocol encapsulation to look like ssh traffic. And that’s even available on mobile too.
deleted by creator
I appreciate the attempt to quantify availability, but don’t most of these providers allow you to generate OpenVPN and Wireguard configs, which can be used practically anywhere?
Nevertheless, your work is appreciated.
I just checked how much I was paying for my Nord subscription and now I’m convinced that Proton Unlimited (discounted) is a great value. Gonna switch next year when my subscription ends. Thanks for putting this together!
OP this is a big improvement from your previous post. It’s an excellent starting point for folks who are looking to start using a VPN. There’s a lot of constructive criticism in here, which is good, but might be discouraging. Just know that this is already very useful for many people.
One thing you may want to update - listing Tor’s logging policy as “No Logs” is a bit misleading, that’s really more of a voluntary recommendation for individual Tor exit relay operators.
Tor exit relay operators absolutely can store logs of outgoing connections if they choose to. And technically they could even snoop on non-secure traffic if they choose, there’s a reason you should be using HTTPS if you’re going to use Tor for clearnet browsing.
Of course most Tor exit relay operators aren’t going to do these things but it’s all voluntary, seems incorrect to claim all exit relay operators follow no log principles.
EDIT: Also AFAIK you can’t forward a port from the clearnet through a Tor exit relay’s public IP address back to your own Tor client, Tor doesn’t do port forwarding like that. It’s definitely not needed to run Tor Browser (and Tor VPN I think) but that isn’t needed for any of the other VPNs either, a bit confusing how you listed that one.
Proton is essentially the best free VPN huh.
If you care about privacy no.
If you just need to unlock regional content then it should be good.
Keyword being “free”.
Could you suggest a better VPN that’s free?
There probably aren’t any, because when a product like that is free, that means you are the product nearly 100% of the time.
I agree.
Though, it’s not that deep. I was saying how it’s the best amongst the free ones. I’m not saying it’s the best in general.
This is the Privacy community though and the keyword should be “privacy”
deleted by creator
LMAO
First of all Mullvad isn’t German.
Second, they have already proved they respect customers privacy.
Get your facts straight and don’t cry if someone criticizes your favorite corporation.
deleted by creator
Upload to https://catbox.moe/
Thanks! I’ve uploaded it!
Airvpn doesn’t require any personal information. I mean… I guess it asked for a name or whatever, but it doesn’t verify any of it. I certainly didn’t give it anything legitimate, and I paid with mixed crypto so it certainly has as little personal information on me as would be possible with a vpn.
What gives ivpn, mullvad and nym the advantage for the personal info section?
What gives ivpn, mullvad and nym the advantage for the personal info section?
Originally I was referring to the signup process (since they generate a random account for you) but I edited it to try to add some clarity.
I can only speak to Mullvad, but if you want to, you can visit their onion site on tor, and pay using Monero while providing zero information. They give you a 16 digit number. And that’s it. That’s the extent of your interaction with them. No name, no email address, no credit card information, nothing.
Most of that is optional, of course, but the option is always there.
C tor/little-t-tor/etc. is licensed under the “3-clause BSD” license
Tor technically doesn’t have a WireGuard profile, but you could (probably?) create one
I dont know a lot about wireguard, but of the cuff answer would be no.
It’s odd that it says it’s licensed under
Creative Commons Attribution Share Alike 4.0 Internationalbut the actual license file is a different license.Tor is distributed under the “3-clause BSD” license
The reason gitlab says it is, is because the LICENSE file contains all licenses for the codebase, including stuff like geoip which is destributed under CC BY-SA 4.0
This file contains the license for Tor,
It also lists the licenses for other components used by Tor.
Ah, that explains it. Thank you! I apologize for the mistake.
Yeah you can’t, tor is a completely different protocol and the only way to use tor with a wireguard client is with a server in the middle that routes the internal wireguard traffic into tor.
