Author Archives: Alex Grant
Author Archives: Alex Grant
Why Choose NordVPN
When seeking anonymity of data and browsing, you need a reliable and secure VPN that you can trust. NordVPN has more than 5,300 servers in 58 countries across the world and can be tailored to fit any user’s needs, from gaming to P2P file sharing, data security to expanded content availability. Is NordVPN a secure and reliable service? Read my investigation to find out more.
Best VPN for
NordVPN was started in 2012 by four friends who wanted to create a liberated Internet experience. Their main goals are to combat censorship and unwanted surveillance. They started small, with only one server, keep on expanding and now have more than 5,300 servers around the world. This is one of the largest server networks in the VPN industry.
NordVPN is based in Panama and therefore not part of the 5-eyes and 14-eyes alliances. Those global state security alliances are known to put pressure on VPN companies to disclose user activity, but NordVPN can’t be touched. Panama has very strict copyright laws. However, although NordVPN is based there, it doesn’t have any servers in Panama, thus it skirts the local laws on illegal downloads.
A no logs policy is also an important defense against data theft from hackers. This became a big issue for NordVPN during 2019.
Just about every VPN company in the world uses servers run by other companies. These are the cloud servers that many other online services use these days and the same servers that offer cloud storage to the public. A notable exception to this rule is IPVanish, which runs all of its own infrastructure.
When other companies are in charge of managing part of a service, there is always a heightened risk of a security breach. Such an event happened on a server that NordVPN was using to provide VPN services in Finland.
The server got hacked while it was processing customer connections. VPNs are organized so that even the technicians that maintain the computers aren’t able to get into the traffic that passes through it. So, as there was no mechanism to observe traffic, the hacker wasn’t able to steal any data.
The presence of an intruder did create one security flaw, however, that is, the intruder would have been able to hijack the session establishment process and give his own encryption leys as part of the security procedures. Fortunately, this type of hack, which is called a “man in the middle attack” wasn’t possible on a mass basis, so the entire operations of the VPN could not be hijacked. The hacker could have tricked individual connections into exposure. However, it seems that such a move never took place.
Each individual VPN server does not hold user account information or even login credentials, so fortunately, together with the no logs policy of the company, there was no information available for the hacker to steal.
Since discovering the breach, the company has terminated its agreement with the operators of the compromised server and initiated a security audit on all of the other servers that it uses. The company has installed instruction prevention systems on all of its servers in addition to the security measures that its outsourced server providers had in place.
The NordVPN hacker attack was a big scare, but it did the company a favor. It forced them to take extra measures and improve their security monitoring.
There is only one level of VPN service offered by NordVPN; either you’re in or you’re out. The price plans offered by the company get cheaper depending on how long you sign up for. The monthly payment plan is the most expensive at $11.95 per month. Other options are one-year, two-year, and three-year plans with the price per month on the three-year plan working out at $3.49.
Be aware though, that you have to pay for your plan upfront. So, if you take out the one-month plan, you will have to pay $11.95 there and then. The subscription fee is on a repeat billing cycle, so you will be charged again automatically when that month expires. If you take out the three-year plan, you will pay $125.64 straight away. The company will take out another fee from your account once that three years have expired.
If the thought of paying for a service that you haven’t even tried puts you off, don’t worry. NordVPN offers a 30-day money-back guarantee on all of its plans. I have put that promise to the test and I can confirm that the company issues refunds without putting up a fight.
The main screen of the app has a map of the world with a menu bar to the left. The map shows a marker in each country where NordVPN has servers.
You click on a marker to get connected to a VPN server in that country. The system will automatically assign you a server from the list of all of the servers that it has in that country. Once you are connected, you will see a system notification at the bottom left of your computer’s screen and the marker you pressed will turn green.
It is possible to select a specific server in the country of your choice and this is where the side menu bar comes in. The menu lists all of the countries that NordVPN has servers in. When you hover your pointer over a country a menu icon, in the form of three dots appears to the right of the country. Clicking on this gets you a pop-up where you can select a city or a specific server. The server selection list should the current amount of capacity usage on that machine. You can also mark a specific server as a favorite for direct access in the future.
The “Smart-Play™” function gives you access to streaming services. It combines the concepts of smart DNS and VPNs to enable users to doge regional detection and get access to streaming services that usually block overseas access.
This is a great feature if you are traveling and not impressed by the local TV. You can access TV from home over the Internet. The SmartPlay feature is integrated into NordVPNs servers, so you don’t have to look for it as an option – it is automatically in play when you connect.
This tool is available in both the apps and in the browser extensions for NordVPN. The system blocks ads and trackers and it also prevents your computer from becoming part of a botnet – a system used by hackers to cripple other computers through a DDoS attack. NordVPN operates a blacklist of infected and malicious websites. If you have CyberSec turned, the security system will check that blacklist every time you surf to a new website. If the site is on the list, CyberSec will block it from loading into your browser and save you from being infected.
The right menu list of servers in the app includes specialty servers. One of the options in this category is labeled “P2P.” This menu line gives you access to a list of servers that are specifically calibrated to facilitate downloading with torrents. You can select a country from the list available in this option, or just opt to connect to the fastest P2P server.
Torrent downloading is a contentious issue in the VPN industry. Many VPNs declare that they don’t allow file sharing, while others will allow it, but for legal reasons, won’t tell you that. NordVPN is very open on its website about its acceptance of P2P activity on its network.
NordVPN has a special feature that enables users to connect to the TOR network through a VPN server. TOR stands for “the onion router.” It is an alternative to a VPN and it routes traffic randomly though the computers of volunteers. The system includes layers of encryption and its purpose is to obscure the origin of a connection. However, it is painfully slow and messages continue unencrypted once they leave the network onto the intended destination.
Unfortunately, I wasn’t able to use the facility. It didn’t even appear as an option in the app. I asked NordVPN about this and a technician told me that they were having problems with the service. It hasn’t been discontinued, but the service often gets overwhelmed, so they remove it from the options list. The company hopes to provide a permanent version of this service soon.
One of the Specialty Servers category in the app is a Double VPN option. This is visible in the mobile version of the app, but isn’t immediately available in the Windows version. You need to go into the Settings menu and change the default protocol over from UDP to TCP before the option appears in the menu.
The Double VPN routes your connection through two VPN servers, each in a different country. This creates double encryption on all of your traffic for the stretch between the two VPN servers. One problem with this option is that it will slow down your traffic considerably.
You can choose the option to “Connect on Start” and which VPN network you want to connect to. If you have a favorite that works well for your needs, this can be a great way to bypass tedious processes of picking and connecting manually. This is a security feature that makes sure that you device is always protected.
A kill switch blocks all apps from accessing the internet if the VPN is not active. This is an important option because sometimes internet connections drop momentarily and then reconnect. The break in the connection may be enough to stop the VPN working, while apps running on your device may still try for a response. When the internet comes back, those apps might pick up the communications thread that they were on and carry on operating without the VPN protection, thus exposing your identity.
NordVPN has two types of kill switch. One is an overall internet kill switch and the other is an application kill switch. This will only block nominated apps from getting internet access without the VPN while allowing all other traffic to pass unprotected.
The kill switch is optional and if you forget that you turned it on, you might get moments that cause you to panic. It will seem that your internet connection is not working. In fact, it is blocked until you turn the VPN on.
For ease of use, NordVPN has adapted their service and made programs for PC, Mac, iOS and Android platforms. This is especially helpful because you can take your VPN security on the road with you on your smartphone. Now, sitting in a coffee shop and browsing on your phone is much safer. With your subscription service, you can use the application on your computer at work, your laptop, your home desktop, tablet and smartphone with complete fluidity.
It is also possible to set up the VPN manually of Linux machines, Blackberry, Raspberry Pi and WiFi routers.
NordVPN produces a browser extension version of its app for Chrome and Firefox.
Each NordVPN account is entitled to have six simultaneous connections. You can install the software on more than six devices but only six of them can be connected at the same time.
NordVPN has one of the best customer support teams in the business. You can search through the knowledge base, which is very comprehensive to answer your own problems. If that doesn’t help, you can access a chat bot. This is not a real person, but acts like one and it will try to answer your questions by doing a better search through the knowledge base than you could. If this bot doesn’t solve your problems, it will put you through to a real person.
The support team can also be contacted via email and through a form in the website.
As noted earlier, connection speed is super important. So, I decided to test different areas of the world to see how they performed. My pre-VPN speed at home in the UK was:
When I connected to a VPN in Frankfurt, Germany, the speed went down to less than half:
Further away, connected to Chicago, USA, the ping slowed, but the download speed was very close to the performance that I got when connected to the Frankfurt server and the upload speed was a lot better:
For fun, I tested Costa Rica. The results were dreadful:
To be fair, the slowness of the Costa Rica connection could be down to a slow local network and not the fault of NordVPN. In each case, I tested a connection to a destination as close as possible to the VPN server location.
Do these speeds matter? Ping refers to the round-trip time of a single packet. So, the slower the ping the less suitable that connection would be for interactive applications, such as internet telephony or online gaming. Upload speeds are only important if you are planning on running your own server at home. Download speeds are especially important for streaming video. If the connection is too slow, you will get pauses in the playback and also scrambled frames and jumps in the video play.
HBO Go recommends a minimum of 3 Mbps to stream its videos over the internet. Netflix recommends 3 Mbps for SD streaming and t5 Mbps for HD video. In all of these tests, I would have been OK streaming video, except if I wanted to access video sites in Costa Rica from the UK.
After running a handful of different DNS Leak Test web services on a variety of VPN location choices I am happy to say that I didn’t find a leak anywhere. This is not surprising, though, because NordVPN has a DNS leak protection program running 24/7 to automatically detect and repair any leaks.
I installed the NordVPN app on my Android phone. The NordVPN website warns that the app available in Google Play has some performance restrictions on it and it is better to download the version available on the company website.
The app has the same functions as the computer version, but the layout is a little different. The right-hand menu in the computer app is below the map in the mobile app.
When examining the list of available servers for a country, the mobile app gives the server’s distance from your location, which isn’t information that the computer-based app gives. However, the computer app shows the load on each server but the mobile app doesn’t.
I was impressed that the VPN connection transitioned seamlessly when changing from a Wi-Fi network to a 3G network. It didn't have to disconnect and reconnect - it just flowed seamlessly into the new connection.
The matter of log keeping is of crucial importance in the VPN industry. No matter how determined a company is to protect the privacy of its customers, they can’t stop the police forcing their way in and seizing their servers if someone takes out a court order. The only defense from this intrusion is if there is no information on those servers.
The headquarters location of NordVPN in Panama makes it harder for US and European authorities or copyright holders to sue them, but it doesn’t protect your anonymity completely. Every server location is a legal vulnerability. Fortunately, thanks to the NordVPN no logs policy, there is no information to seize.
NordVPN accepts payment by Bitcoin, which is another method that customers can use in order to protect their anonymity.
The major point of weakness in any secure system occurs at the point of session establishment. Once a connection has been established, encryption and authentication systems make it impossible for a hacker to steal data from the user. Like most VPNs, NordVPN uses a system called OpenVPN for its security measures. This includes a session establishment protection library called OpenSSL.
“SSL” is a misnomer and a bit of a throwback. The term is widely used in networking technology and it stands for “Secure Socket Layer.” This is the system that puts security into HTTPS (HTTP Secure) and makes it a secure version of HTTP, the system that transports all web pages. SSL was superseded by Transport Layer Security (TLS) a long time ago and it is TLS that protects the session establishment procedures of NordVPN.
The TLS protocol centers on server authentication procedures that require access to a certificate. That certificate delivers an encryption cypher that the client can use to challenge the server to prove its identity. NordVPN uses a 2048-bit RSA key for this process, which, to date, has never been cracked.
The RSA cypher protects the delivery of the session encryption key. This key is symmetrical, which means that both sides have to know the same key in order to communicate. NordVPN uses a 256-bit AES cypher for session encryption. This is the strongest encryption system used commercially in the world today and is impossible to crack.
Websites are able to detect where a connection request comes from and selectively block them. This is called “regional restrictions” and the practice is particularly prevalent among video streaming sites. This is because TV stations only pay for the rights to show videos in specific countries, so if they let people access their libraries or live streams from anywhere, they could be sued by the producers of that content.
It is understandable why streaming services implement regional restrictions but it is also very annoying. Fortunately, VPNs can get around these access blocks by making it look as through you are in the country that has access to the site.
NordVPN is very good at getting around regional restrictions. It can get you into the BBC iPlayer even if you aren’t in the UK and it can get you into the streaming websites of the major US television networks even though you are outside of the USA.
There is one streaming website that has gone to such length to block access from overseas that it has become the touchstone of performance in the VPN industry. Its regional restrictions are so difficult to get into that most VPN companies will tell you that it can’t be done. That site is Netflix and NordVPN can get you cross-border access to it – as long as you have a Netflix subscription. It can get into the Netflix video libraries for the US, the UK, Canada, France, Germany, Japan, and Italy from outside of those countries.
The NordVPN can also get you into Hulu for Japan and the USA from outside those countries, into Amazon Prime Video in the country where you have an account and Sky Go, ITV, Channel 4, and the BBC iPlayer while you are outside of the UK. It can get you video access in the ABC network from outside of the USA.
NordVPN is one of the top five VPN services in the world. It is very cheap for all of its capabilities. More expensive services are not able to get you into Netflix like NordVPN can. The security extras of this provider, such as the double hop VPN and the CyberSec facility are unique and should be considered world beaters. Its allowance of six simultaneous connections is also unusually generous in the industry.
The server network of NordVPN is one of the largest in the world and the anonymity and privacy services it provides are very strong. The security of its connections is as good as you could expect from anyone and its no logs policy is a great help.
However, NordVPN loses points because in certain locations it is just too slow. The recent security breach in Finland should also give us all pause for thought. Although the company has gone to great lengths to correct its intrusion defenses, I have to wonder why those measures were implemented in the first place.
Why Choose ZoogVPN
Zoog is easy to install, easy to use, and supported on a variety of platforms and devices. It also has some great video tutorials to assist in setup and unblocking content, as well as wallet-friendly subscription plans.
Best VPN for
ZoogVPN is one of the few premier services that offers a free plan. It is limited to only 2GB of data transfer per month, which goes pretty quickly even with average internet usage, but is better than nothing. Since some users of other VPNs report difficulty in utilizing free trials or money back guarantees, a totally free subscription is a great way to try the service out with no obligation or hassle of cancellation.
After that, there is only one basic plan that is sold in three different subscription lengths - one-month, one year, and 2 years (at the time of this post, pricing was $7.99/$2.99/$1.75 per month, respectively). They run frequent specials and discounts, so if you are considering getting a VPN soon, it pays to check out their very polished website from time to time. Compared to VPNs of similar quality, these pricing models are on the good side of average.
ZoogVPN markets itself, and builds it features accordingly, as a VPN for content streamers who either want to bypass geographic restrictions on websites or at the very least access content usually unavailable through proxy servers. This is made clear by the content of their website and the types of help available in their tutorials and FAQ section. Zoog’s goal is to give customers a way to privately and securely access sites such as Hulu, Netflix, or Xfinity.
Since these sites are often changing their own security measures, we went ahead and tested ZoogVPN on Netflix - and it worked like a charm. Should a user experience problems with one of these sites, Zoog’s website contains information on how to change servers or security protocols in order to regain access.
The interface and option menus are set up differently than many other VPNs. Some users might find it to be refreshingly simple and minimalist, while others would wish that it had a little more charm. Either way, the application is unobtrusive and as easy to navigate as something with as much technical voodoo as a VPN could be. The same could be said for its sign up and installation procedures - while fast and relatively easy, it manages to feel tedious and mundane in a way that few modern VPNs have been.
Note: At the time of posting this review there was no Mac option, however, now there is. It uses IKEv2 VPN protocol for lightning-fast connections. OpenVPN TCP/UDP is also available. Other features include VPN-on-demand for auto-reconnect and a Kill Switch.
Setting up a VPN is the easy part, and while an attractive UI and easy installation process is nice and all, most of the time your VPN will just be running in the background. Since all VPNs will have an impact on performance, latency, and speed, we started first with a few speed tests of ZoogVPN.
Our baseline results before and after connecting to the nearest ZoogVPN server from www.speedtest.net.
Unfortunately, this was the largest drop in performance we have seen. When we tried doing some streaming on Netflix, however, performance seemed to be fine. With these numbers, it would be hard to recommend ZoogVPN for online gaming or torrenting purposes, but for regular web browsing and videos, it was serviceable. Also note that your mileage may vary, as there are many factors involved in speed over a VPN, so it could still be worth trying out Zoog and seeing what results you get.
Next, I went to see if our IP was successfully changed, which it was, and followed that up with a peek on ipv6leak.com which showed us that it was not leaking.
These basic tests left us satisfied that the VPN tunnel was working as intended for at least a basic level of security.
While the use of a VPN will keep your IP anonymous when browsing, we took a look to see what types of logs ZoogVPN keeps. Being based in the UK, they are subject to both national and EU data retention logs. According to their website, they do keep minimal connection logs regarding time and duration of sessions, as well as the amount of data transfer. While they do not state how long they keep these logs for, they do go on to say that they keep no logs whatsoever of online activity within a session. Still, for a user looking for the most privacy possible, it might be prudent to try some other VPNs - while their policy sounds reasonable, being based in the UK and not having as long as a track record of anonymity as other providers causes a small amount of skepticism.
Overall, Zoog is not set to make huge waves in the world of VPNs. Its main appeal is the ability to access a variety of streaming sites, even across regions - they are very committed to delivering this, including guides and tutorials on how to stay one step ahead should the proxy-vetting of Netflix, et al. change. If this is a big priority, and you aren’t looking for blazing fast speeds for online gaming or torrenting, then ZoogVPN may give you all you need in a simple, affordable package.
Why Choose CyberGhost VPN
CyberGhost is one of the most user-friendly VPNs, and one that doesn’t skimp out on extra features in the name of “simplicity.” It has blazing speed and top of the line encryption.
Best VPN for
CyberGhost offers four plans: $12.99 a month, $3.69 a month billed every two years, $2.75 a month billed $99 every three years, or $5.99 a month billed $71.88 every 12 months. (Note that these are billed up front, however, there is a 45-day money-back guarantee.)
Subscribed users can connect up to seven simultaneous devices.
Also of note, CyberGhost has a reasonably effective free version that still has decent bandwidth and speed. Free users are limited to three hours of use per day, however.
From the polished website to the attractive client, CyberGhost delivers an intuitive VPN experience. A lot of the VPNs out there suffer from cluttered interfaces and confusing menus; others go too far the other way and hide a lot of features to present a minimalistic client. With CyberGhost, someone finally found the sweet spot between these two extremes.
There is also a lot of material on the site to help you navigate through all of the features and options so that you get the most out of your VPN - the guides and troubleshooting FAQs are very thorough and useful. While there isn’t a live chat feature right now, almost any question I could think of was covered somewhere on their site, in a well-organized and well-explained fashion.
Once you are up and running, CyberGhost offers an impressive set of features. My favorite was he 1-click streaming option worked for me on Netflix. Streaming sites often block VPN users based on a proxy IP being detected, or regional restrictions, so this scored huge bonus points in my book. Other VPNs can be configured to get around this, but CyberGhost actually does the legwork for you. Another bonus was a set of features focused on torrenting - CyberGhost can be easily configured to start whenever you begin torrenting to prevent accidental lapses in security, download speed and details are tracked for you, and torrenting-friendly servers automatically selected.
An important part of choosing the right VPN is how well it preserves your data transfer speed. There will always be some loss of speed when connecting to a VPN, which is based on a combination of many factors. Fortunately, this is easily tested on www.speedtest.net, where I did a before and after test.
Speed tests before and after connecting to CyberGhost:
These results are among the best I’ve seen. The ping was quite high, which is probably due to the distance from the server (CyberGhost does not have as many North American based-servers as some of its competitors).
CyberGhost also has one of the best privacy policies around. They claim to keep absolutely zero logs - not even connection times, user IPs, or traffic data. While privacy can always be compromised by certain government agencies, this is as good as it really gets right now.
Cyberghost uses the current industry standard 256-bit AES encryption, which provides a high level of Internet security. In addition, the service comes standard with some useful bells and whistles like an ad blocker, malware-blocker, and DNS and IPV6 leak protection. There are alerts built into the interface that let you know when these end up being used, along with all of the relevant details.
Why Choose IPVanish VPN
IPVanish is headquartered in Phoenix. The company was founded in 2012, and claiming it won the Info Security Products Guide’s 2016 Startup of the Year Award. It offers 24-7, 365 customer support, has a “zero log policy” and claims to be the fastest, most secure VPN network on the planet.
Best VPN for
Single plan pricing begins at $10/month-to-month then drops to $6.49/month if you sign up for a whole year at $77.99. Their 7-day money back guarantee will be processed in 10 business days if cancelled on the website. Refunds of variably priced currencies, including BitCoin, are paid at the US Dollar exchange rate at the time of refund.
IPVanish has more than 850 anonymous servers in over 60 countries, including six in Africa and nearly 70 in Oceania (which I’m told is unusual).
The subscription includes OpenVPN, the protocol most experts prefer, as well as L2TP/IPsec and PPTP, which purists consider unacceptably porous. IPVanish also has two protocols available for mobile devices – IPSec and IKEv2.
You can make up to five simultaneous connections on multiple devices (as long as just one is connected via PPTP or L2TP). The service can be configured for Windows, MAC OS X, iOS, Android, Windows Phone, Ubuntu, Chromebook and routers.
IPVanish also provides unlimited bandwidth and unlimited daily access to servers and content. Most notable among the very few limits IPVanish does impose is one on “non-individual” or multi-party usage, complete with a sternly worded threat to terminate or restrict your account if there are more than two simultaneous logins from multiple IP addresses under the same username. You have been warned.
Using IPVanish cut my download speed nearly in half (from 83.53 Mbps to 43.4 Mbps) and reduced upload speed by about 20 percent (from 9.13 Mbps to 7.46 Mbps).
Shows that IPVanish is, apparently, leak proof.
According to these results, my IP address was on the Left Coast rather than in the Midwest.
Ambiguous – results identical with and without IPVanish.
Running IPVanish did not appear to affect speed. Once you login, you can set the app to remember you and you will not see the login screen again.
IPVanish is a mixed bag where privacy is concerned. On the plus side, the site does not keep logs, offers OpenVPN, helps disguise the fact you are using a VPN and accepts anonymous forms of payment, including BitCoin and PayPal. On the other hand, you will need to provide limited personal information to open your account and the bulk of IPVanish’s servers are scattered among all the Fourteen Eyes countries and two – one each in Cairo, Egypt and Hanoi, Vietnam – are in countries on the current Reporters Without Frontiers’ “Enemies of the Internet” list. This is also a US-based company and might provide any info it does have to the FBI or NSA if asked.
IPVanish’s top tier OpenVPN security protocol employs the theoretically unbreakable AES-256 cipher, and although it ultimately communicates using the same protocol as many web browsers, its SSL is rated among the best. Still, there are some concerns regarding the number of persistent cookies and third party cookies it allows.
Was easily able to watch latest Sherlock episode after connecting to a UK server, but puzzled over how to access Netflix for literally hours before getting frustrated and quitting. (Full disclosure: I’m not particularly tech savvy and was, frankly, baffled by the methods for getting round this that I found on Google, all of which seemed to required buying a subscription to a SmartDNS service).
Like many (most of you?) I didn’t give Internet security much thought until a recent need to send info securely to a potential employer. I couldn’t use the firm’s workaround of using a fax machine and a time crunch made it necessary to trust to email instead which led me to checking out the better option of using a VPN in the future. For the tech-shy, there’s a steep learning curve once you enter the Wonkdom of VPNs, including an alphabet storm of acronyms.
IPVanish’s website eased (though did not speed up) the process considerably. All things considered, IPVanish provides the security and privacy most of us could need at a slightly slower speed and slightly higher price than some other VPNs.