VPN Comparison

After making a post about comparing VPN providers, I received a lot of requested feedback. I've implemented most of the ideas I received.

Providers

Notes

  • I'm human. I make mistakes. I made multiple mistakes in my last post, and there may be some here. I've tried my best.
  • Pricing is sometimes weird. For example, a 1 year plan for Private Internet Access is 37.19€ first year and then auto-renews annually at 46.73€. By the way, they misspelled "annually". AirVPN has a 3 day pricing plan. For the instances when pricing is weird, I did what I felt was best on a case-by-case basis.
  • Tor is not a VPN, but there are multiple apps that allow you to use it like a VPN. They've released an official Tor VPN app for Android, and there is a verified Flatpak called Carburetor which you can use to use Tor like a VPN on secureblue (Linux). It's not unreasonable to add this to the list.
  • Some projects use different licenses for different platforms. For example, NordVPN has an open source Linux client. However, to call NordVPN open source would be like calling a meat sandwich vegan because the bread is vegan.
  • The age of a VPN isn't a good indicator of how secure it is. There could be a trustworthy VPN that's been around for 10 years but uses insecure, outdated code, and a new VPN that's been around for 10 days but uses up-to-date, modern code.
  • Some VPNs, like Surfshark VPN, operate in multiple countries. Legality may vary.
  • All of the VPNs claim a "no log" policy, but there's some I trust more than others to actually uphold that.
  • Tor is special in the port forwarding category, because it depends on what you're using port forwarding for. In some cases, Tor doesn't need port forwarding.
  • Tor technically doesn't have a WireGuard profile, but you could (probably?) create one.

Takeaways

  • If you don't mind the speed cost, Tor is a really good option to protect your IP address.
  • If you're on a budget, NymVPN, Private Internet Access, and Surfshark VPN are generally the cheapest. If you're paying month-by-month, Mullvad VPN still can't be beat.
  • If you want VPNs that go out of their way to collect as little information as possible, IVPN, Mullvad VPN, and NymVPN don't require any personal information to use. And Tor, of course.

ODS file: https://files.catbox.moe/cly0o6.ods

top 100 comments

sorted by: hot top controversial new old
[–] 36 points 1 year ago (6 children)

Why isn't F-Droid included in the Availability section?

  • source
  • hideshow 6 child comments
  • [+] -27 points 1 year ago (5 children)

    Could be wrong but I think it's due to the security vulnerabilities present, its generally better to just use Google play store with an anonymous account.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 28 points 1 year ago (4 children)

    Na... The likelyhood of installing some bad or fake app from google play store is much higher than on fdroid.

  • source
  • parent
  • hideshow 4 child comments
  • [+] 3 points 1 year ago (3 children)
  • [–] 5 points 1 year ago* (last edited 1 year ago) (2 children)

    The issue there AFAIK is that some app builds aren't fully reproducible, because if they were the developer signature would still apply and be used. In the reproducible case the security of the build infra wouldn't matter, because the same app would be produced the same regardless were they are build.

    Without reproducible builds, you cannot really trust the software anyway, because the Dev could hook some hidden code only for the released binary app and sign that.

  • source
  • parent
  • hideshow 2 child comments
  • [+] 2 points 1 year ago* (last edited 1 year ago) (1 child)
  • [–] 5 points 1 year ago

    Once it passes inspection, the F-Droid build service compiles and packages the app to make it ready for distribution. The package is then signed either with F-Droid’s cryptographic key, or, if the build is reproducible, enables distribution using the original developer’s private key. In this way, users can trust that any app distributed through F-Droid is the one that was built from the specified source code and has not been tampered with.

    https://f-droid.org/en/2025/09/29/google-developer-registration-decree.html

  • source
  • parent
  • [–] 29 points 1 year ago (3 children)

    I've been using one of these since forever and it just works. Should I look at the others?

    I don't want this to be a "I use x and its the best" type comment so I won't say which one.

    I only use wireguard and wouldn't touch openvpn just because it seems so complex in comparisson.

    The price is fine, the speed is fine, wireguard makes it ubiquitous, never had a problem with reliability.

  • source
  • hideshow 3 child comments
  • [–] [S] 10 points 1 year ago (2 children)

    If you feel one of the options offers something better than the one you currently use, you may consider switching. That's the purpose of comparisons, after all!

  • source
  • parent
  • hideshow 2 child comments
  • [–] 25 points 1 year ago

    OP this is a big improvement from your previous post. It's an excellent starting point for folks who are looking to start using a VPN. There's a lot of constructive criticism in here, which is good, but might be discouraging. Just know that this is already very useful for many people.

  • source
  • [–] 23 points 1 year ago (18 children)

    Is it worth stating which companies own which vpns? I saw a TIL that mentions a select few companies own most VPNs

  • source
  • hideshow 18 child comments
  • [–] 1 point 1 year ago (17 children)

    I'm on ProtonVPN because it's ran by CERN people, so definitely an important information IMO.

  • source
  • parent
  • hideshow 17 child comments
  • [–] 4 points 1 year ago (8 children)

    Their CEO is a Trump supporter

  • source
  • parent
  • hideshow 8 child comments
  • [–] -3 points 1 year ago (7 children)

    Show me where he endorses Trump.

    Oh, you can't? But you read it on Facebook or something so it must be true?

    Common, show me your information.

    This is bullshit based on some old tweet Andy Yen did about trump doing good going against big tech. You can read about it here or search for it elsewhere.

    It always comes out when someone says something nice about ProtonVPN, who have an amazing track record IMO.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 6 points 1 year ago*

    That write up does seem to ignore the doubling down here:

    https://lemmy.ca/comment/13913116

    Calling out that JD Vance was the only one to answer is pretty troubling to me after reading about some of his new-right ties. It's way, way too close for my liking to a mouse telling everyone that will listen that the cat was amazing for inviting him and all his friends to his house in a week. ie. Playing into what just seems like an obvious strategy.

    That said, I'm pretty ignorant about the CEO. I just remembered this lemmy comment and I didn't notice it included in the write up that was being linked.

  • source
  • parent
  • [–] 5 points 1 year ago (2 children)

    Ok, just read the artlce cited on wikipedia and it sounds like calling him a Trump supporter is a bit of an exaggeration. He seems basically centrist. Which is not great but not nearly as bad.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 1 year ago (2 children)

    A company's CEO gets to determine the path their company takes and the tweet is indicative of where he plans to steer proton.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago (5 children)

    who do you make of proton's support for trump?

  • source
  • parent
  • hideshow 5 child comments
  • [+] 0 points 1 year ago (3 children)
  • [–] 0 points 1 year ago (2 children)

    I do not use Windows and I do everything in my power to use non American phones.

    The difference is that proton's founder voiced support whereas Microsoft has always had a relationship w my govt and it's dragnet for the Gazan genocide is quiet.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 23 points 1 year ago

    I just checked how much I was paying for my Nord subscription and now I’m convinced that Proton Unlimited (discounted) is a great value. Gonna switch next year when my subscription ends. Thanks for putting this together!

  • source
  • [–] 17 points 1 year ago* (last edited 1 year ago) (1 child)

    One thing you may want to update - listing Tor's logging policy as "No Logs" is a bit misleading, that's really more of a voluntary recommendation for individual Tor exit relay operators.

    Tor exit relay operators absolutely can store logs of outgoing connections if they choose to. And technically they could even snoop on non-secure traffic if they choose, there's a reason you should be using HTTPS if you're going to use Tor for clearnet browsing.

    Of course most Tor exit relay operators aren't going to do these things but it's all voluntary, seems incorrect to claim all exit relay operators follow no log principles.

    EDIT: Also AFAIK you can't forward a port from the clearnet through a Tor exit relay's public IP address back to your own Tor client, Tor doesn't do port forwarding like that. It's definitely not needed to run Tor Browser (and Tor VPN I think) but that isn't needed for any of the other VPNs either, a bit confusing how you listed that one.

  • source
  • hideshow 1 child comment
  • [–] 16 points 1 year ago

    Also of note, some providers have data caps. I haven't looked at all providers, merely Nymvpn as I was interested. Turns out they have a 2TB/month cap. Might not be an issue for some, but might be for others.

  • source
  • [–] 15 points 1 year ago*

    I appreciate the attempt to quantify availability, but don't most of these providers allow you to generate OpenVPN and Wireguard configs, which can be used practically anywhere?

    Nevertheless, your work is appreciated.

  • source
  • [–] 27 points 1 year ago (3 children)

    PIA does not have WireGuard configs available. To get those, you have to use third-party tools to capture and generate the necessary info. Otherwise, you have to use their client, or else no WireGuard.

    Users have been asking for years (since 2018, I think), and they've never provided them.

  • source
  • hideshow 3 child comments
  • [–] 43 points 1 year ago

    PIA was also purchased by the Israeli company, Kape Technologies, which is tied to Unit 8200. If your concern is privacy, I would recommend do against it.

    The very first CEO of Crossrider, Koby Menachemi, happened to be once a part of Unit 8200 which is an Israeli Intelligence Unit in their military and has also been dubbed as “Israel’s NSA “.

  • source
  • parent
  • [–] 12 points 1 year ago

    Tor isn't a VPN. It's a proxy.

  • source
  • [–] 11 points 1 year ago* (last edited 1 year ago)

    The 'availability' is misleading. If they offer OpenVPN or Wireguard then they are available pretty much anywhere.

    Using just plain Wireguard or OpenVPN configs would also be much better than installing random VPN provider apps.

  • source
  • [–] 10 points 1 year ago*

    I see that Windscribe was included. Their price tier is always in promotion so I'd take that in consideration.

    Also, they have app for Linux: https://windscribe.com/features/linux/

    It is not in Electron like many others. It is native Linux.

  • source
  • [–] 9 points 1 year ago

    Mullvad also ran some pretty quirky ads on our public transit. I hadn't been that familiar with them, but it did heighten my awareness, and they seem pretty fine.

  • source
  • [–] 9 points 1 year ago (2 children)

    Airvpn doesn't require any personal information. I mean... I guess it asked for a name or whatever, but it doesn't verify any of it. I certainly didn't give it anything legitimate, and I paid with mixed crypto so it certainly has as little personal information on me as would be possible with a vpn.

    What gives ivpn, mullvad and nym the advantage for the personal info section?

  • source
  • hideshow 2 child comments
  • [–] [S] 6 points 1 year ago

    What gives ivpn, mullvad and nym the advantage for the personal info section?

    Originally I was referring to the signup process (since they generate a random account for you) but I edited it to try to add some clarity.

  • source
  • parent
  • [–] 3 points 1 year ago*

    I can only speak to Mullvad, but if you want to, you can visit their onion site on tor, and pay using Monero while providing zero information. They give you a 16 digit number. And that's it. That's the extent of your interaction with them. No name, no email address, no credit card information, nothing.

    Most of that is optional, of course, but the option is always there.

  • source
  • parent
  • [–] 8 points 1 year ago

    If you make 2.1 you could add some info on the port forwarding because there are massive differences on it between providers. Like PIA gives you a single random port that changes each time you reconnect, while AirVPN gives you 5 static ports you can configure yourself.

  • source
  • [–] 14 points 1 year ago (5 children)

    ProtonVPN: only 8 years old: RED FLAG!

    Well reddish flag at least, is there a rationale behind this? I mean 8 years is quite a long time.

  • source
  • hideshow 5 child comments
  • [–] 8 points 1 year ago* (4 children)

    I think it's just a relative color scale from a spreadsheet.. with the older being the greenest, the youngest the reddest, and the rest just fall in between. ProtonVPN just happens to be in between, it's not as red as the others but also not as green as the ones that have been around for much longer.

  • source
  • parent
  • hideshow 4 child comments
  • [–] -5 points 1 year ago (3 children)

    So you also think the choices were not that good?

    I mean what you are saying is that if there had been a 50 year old one, all the others should be red?

  • source
  • parent
  • hideshow 3 child comments
  • [–] 3 points 1 year ago* (last edited 1 year ago) (2 children)

    I'm just explaining the reason why it's more reddish (but not as red as others). It's something most spreadsheet software (this was clearly MS Excel) can do automatically with numbers for visual indication so we can more easily see the distribution, it does not mean 8 years old is bad.

    If there's a big unbalance in color it would just make it more visible that there's a big unbalance in ages. Probably if that had happened more colors could have been added to the gradient, maybe maroon->red->yellow->green->blue->white. But I think it was not seen as necessary in this case (or the author was lazy, since these are one of the defaults I believe).

  • source
  • parent
  • hideshow 2 child comments
  • [–] [S] 2 points 1 year ago

    (this was clearly MS Excel)

    LibreOffice Calc, actually. You are correct about the color grading.

    (or the author was lazy, since these are one of the defaults I believe)

    I changed the conditional colors from the default to match the colors that LibreOffice uses for "Good", "Neutral", and "Bad".

  • source
  • parent
  • [+] -11 points 1 year ago

    Who cares about why it happened? I mean it's kind of obvious. No one questioned why excel shows a specific colour, but I did why the person making the spreadsheet did in fact use what you go to lengths to explaine, in a specific way. It's like saying sorry your paycheck was halved because we have this software and today it divided your salary in half. Not saying that's not ok or anything, but explaining how "dividing by 2 halves a number".

    I feel you explain something, while correct, had nothing to do with what I said.

  • source
  • parent
  • [–] 6 points 1 year ago* (last edited 1 year ago) (4 children)

    C tor/little-t-tor/etc. is licensed under the "3-clause BSD" license

    Tor technically doesn’t have a WireGuard profile, but you could (probably?) create one

    I dont know a lot about wireguard, but of the cuff answer would be no.

  • source
  • hideshow 4 child comments
  • [–] [S] 1 point 1 year ago* (2 children)

    It's odd that it says it's licensed under Creative Commons Attribution Share Alike 4.0 International but the actual license file is a different license.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago* (1 child)

    Tor is distributed under the "3-clause BSD" license

    The reason gitlab says it is, is because the LICENSE file contains all licenses for the codebase, including stuff like geoip which is destributed under CC BY-SA 4.0

    This file contains the license for Tor,

    It also lists the licenses for other components used by Tor.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 6 points 1 year ago*

    I think it's worth noting NYMVpn uses a quite advanced mixnet for security which is different from other VPNs and theoretically more secure than even TOR. I say theoretically because it hasn't yet been proven with large scale use.

    https://nym.com/blog/what-is-a-mixnet

  • source
  • [–] 6 points 1 year ago* (1 child)

    I can vouch for cryptostorm. Offers port forwarding and good speed. Haven't been with them long but they seem legit.

  • source
  • hideshow 1 child comment
  • [–] 2 points 1 year ago

    I'd love to see them audited.

    Back when they were in the US, they closed shop and moved to Iceland to avoid turning over data for a subpoena.

    That's both admirable and an admission that they had longs to turn over.

    But that they generate accounts on the fly like the best? Is promising in context.

  • source
  • parent
  • [–] 5 points 1 year ago* (1 child)

    Very much appreciate this work, but I am again gonna ask if there is some way to include I2P, perhaps in its own thing, perhaps segregated by outproxies.

    Yep, its super slow compared to basically all VPNs, and is a bit of struggle to set up compared to most VPNs.

    But, it is also entirely free, and you can use I2P with outproxies to access the wider internet outside of I2P's... I2P-net... allows port forwarding, works very well for a slow but steady churn of uh, filesharing, etc.

    I would also argue I2P is a better way that TOR to protect your IP and your actual net traffic, due to TOR nodes being known to be run as honeypots ...

    Its possible an I2P outproxy could also be operated as a honeypot, but as I understand it, ... so long as you are not unlucky enough to just directly route through an outproxy without first bouncing through other I2P users/hosts... you're basically good.

    And even in that scenario, its would be very difficult to reverse engineer all the packets and figure out which parts were going to who, as well as the actual contents of those packets.

  • source
  • hideshow 1 child comment
  • [–] 7 points 1 year ago

    Agreed, if OP is going to add Tor in a "VPN" list then may as well add I2P. I2P + outproxies are pretty much the same thing as Tor + Tor Exit Relay. It's not the best way to utilize I2P but the option does exist.

    Then again neither Tor nor I2P should be in a "VPN" list, the whole thing seems more of a VPN provider topic.

  • source
  • parent
  • I'm using one of these for a long time and since I need port-forwarding there seem to be only 3 options and thanks to your data I realized I still made the right choice and gonna keep using this one for forseeable future

  • source
  • [–] 5 points 1 year ago (1 child)

    It is a bit sad and unexpected that AirVPN has not been audited...

  • source
  • hideshow 1 child comment
  • [–] 4 points 1 year ago*

    It's not entirely a big deal to me.

    I think I agree with the staff reply on this thread: https://airvpn.org/forums/topic/56799-audits/

    Our software is free and open source, while we repute at the moment not acceptable to provide external companies with root access to our servers to perform audits which can not anyway guarantee future avoidance of traffic logging or transmission to third parties. On the contrary, we deem very useful anything related to penetration tests. Such tests are frequently performed by independent researchers and bounty hunters and we also have a bounty program.

  • source
  • parent
  • [–] 4 points 1 year ago

    Will AirVPN ever get audited ? Hope so

  • source
  • [–] 4 points 1 year ago*

    Since you do not seem to list self-hosting options, e.g. WireGuard or OpenVPN, then IMHO it'd be good to at least have a line on each about what's the actual backend, e.g. does service X runs on WireGuard, OpenVPN, something else, something proprietary that has been audited by 3rd party if so whom and when.

    Edit: suggested self-hosting (but not at home) WireGuard in the previous thread https://lemmy.ml/post/37270537/21536054

  • source
  • [–] 4 points 1 year ago (5 children)

    Has anyone tried nymvpn? It's been on my radar for a bit.

  • source
  • hideshow 5 child comments
  • [–] -1 points 1 year ago (4 children)

    I've been concerned about performance lately; after having been on Mullvad forever, performance dropped to "abysmal" on every server, so I tried ivpn and got much better speeds. Still, it's a fraction of my fiber capability, wiþ VPN off. I looked at Nym, but haven't tried it; it doesn't seem like þroughput is a primary selling point for þem.

    If you do try it, could you report back on speed impact?

    I get 8% of my raw þroughput on Mullvad's servers. I get 28% on ivpn. Neiþer seems like a reasonably cost for Wireguard, and should be better.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 1 year ago (1 child)

    I thought it was just my connection that was slow. Mullvad has been underperforming for me as well for the past 2 weeks. I might consider trying Nym if there’s still no improvement in the next week of so.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 0 points 1 year ago (1 child)

    From what I understand Nymvpn uses 2-hop connection, aka your data goes through two of their servers before reaching its intended destination, versus 1-hop with most other VPNs. It's more private, but you'll sacrifice speed as a result of having to go through at least 2 servers. They even have a 5-hop mode, which I don't know, probably would be slower than tor xD

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 year ago

    Mullvad has multi-hop as well. What isn’t clear to me yet is if Nym uses servers they do not own/rent for the decentralization they claim. Mullvad’s multi-hop goes through servers they either own or rent.

  • source
  • parent
  • [–] 4 points 1 year ago

    @Charger8232 as a NymVPN user I would add that I got 2 years of service paying in crypto for $50Also this post is from Lemmy, so I retooted a Lemmy post

  • source
  • [–] 3 points 1 year ago

    Been using windscribe for 2 years now. Big fan so far. Haven't had any issues and it's nice that I can set it up on my android phone to block access to everything on there if by off chance it were to crash or go down.

  • source
  • [–] 3 points 1 year ago (3 children)

    Is there a reason I've never seen one of these contain ExpressVPN? I used if before because it had the lowest latency of the few that I had shopped around looking at.

  • source
  • hideshow 3 child comments
  • [–] 15 points 1 year ago

    Since September 2021, ExpressVPN has been a subsidiary of Kape Technologies, a company wholly owned by Israeli billionaire Teddy Sagi.

    Teddy Sagi is an Israeli businessman and convicted criminal based in London and Dubai.

    PIA is also owned by Sagi btw. Shouldn't even be on this list.

  • source
  • parent
  • [–] 3 points 1 year ago

    Thanks so much! I am looking for a new one because my current one is expensive and of questionable ownership haha.

  • source
  • [–] 3 points 1 year ago

    This is a really great resource thank you!

  • source
  • [–] 2 points 1 year ago
    [–] 2 points 1 year ago

    Maybe a field for number of servers currently?

  • source
  • [–] 3 points 1 year ago*

    Nice revision. If you're including TOR I would say Tailscale could be considered for a VPN. I'm hosting a Gitea instance completely for free on their service. It's on my hardware, but it's their domain.

  • source
  • [–] 4 points 1 year ago (8 children)

    Proton is essentially the best free VPN huh.

  • source
  • hideshow 8 child comments
  • [–] -1 points 1 year ago (7 children)

    If you care about privacy no.

    If you just need to unlock regional content then it should be good.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 7 points 1 year ago (6 children)

    Keyword being "free".

    Could you suggest a better VPN that's free?

  • source
  • parent
  • hideshow 6 child comments
  • [–] 4 points 1 year ago (2 children)

    There probably aren't any, because when a product like that is free, that means you are the product nearly 100% of the time.

  • source
  • parent
  • hideshow 2 child comments
  • [–] -1 points 1 year ago (2 children)

    This is the Privacy community though and the keyword should be "privacy"

  • source
  • parent
  • hideshow 2 child comments
  • [–] 3 points 1 year ago (3 children)

    Proton and Mullvad VPN appear to win the battle of the charts for privacy & security.

  • source
  • hideshow 3 child comments
  • [–] 16 points 1 year ago* (last edited 1 year ago) (2 children)

    Except Mullvad has been proven a trustworthy service, while Proton has already a couple alarming things in their record.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 year ago* (last edited 1 year ago)

    Good work. Might be valuable to add a "allows port forwarding" row.

    Edit: whoops, I'm a silly willy. It's right in front of me! My bad.

  • source
  • load more comments
    view more: next ›
    46 comments in c/technology@lemmy.world view that post
    10 comments in c/privacy@programming.dev view that post