IVPN and Mullvad are probably the best VPNs if you simply want to transfer full view of all your internet activity from your ISP to one of these 2 companies. If you want to keep your internet movements private from everyone, use Tor browser. Its slower and doesn't do udp, but it is much closer to real privacy than the commercial VPNs. Of course, if you are a high priority target of a large nation state, then Tor might not be enough for you, but for most people it works well for those things you want private. If you just want to watch movies, torrent and stuff like that, regular VPNs are the way to go.
Proton. It replaced PIA for me when it was introduced. Since I was already paying for Proton mail, there was no reason to keep paying for a separate VPN as well.
Really? Protonmail doesn't have a clean track record. They backtracked their TOS, their onion site forwards to the clearnet, and they outed a French climate activist.
Same story, made the switch and now I use the ecosystem except the password manager. It's a bunch of solid products. Tad Expensive (compared to free like Gmail) but I'm happy.
I've been trying out the password manager these past couple weeks to see how it compares to Bitwarden. Overall I've been impressed. Auto fill actually seems to be superior on Proton as it works on some sites that Bitwarden never would for me. My only real complaint at the moment is that the iOS app will log out of my account at random and it's a hassle to log back in since I don't always have my Proton pw on hand.
I use Mozilla VPN, which is just Mullvad but more expensive. I want to support Mozilla though and enjoy the integration with my multi account containers so i stick with it
If you were in with Mozilla VPN while it was in beta (for $4.99/month), you can keep that price for life as long as you have an active sub. I got lucky with that one.
I use Moz too. It works pretty well, but I do get a lot of "confirm you are not a bot" messages from Cloudflare, especially when I'm using LibreWolf to anonymize my browser headers (fingerprint).
I tried Proton (the free version), but it didn't seem as reliable and it just had too much going on. Mullvad is as simple as choosing a location and connecting.
I tried Proton for a month for I'd get A LOT of "confirm you're not a robot" when entering a lot of websites. Was really annoying. Did you ever get around that?
Some have pointed at Kape’s history. The company had previously operated under the name Crossrider and was active in the advertising space. Among other things, it installed toolbars with ‘potentially unwanted software.’ While the company has since switched to a focus on cybersecurity, this past has made some people suspicious.
I use PIA in spite of this because their excellent privacy policy has not changed since this purchase. If their policy changes I will drop them like a bad habit.
Personally for me all three. They offer OVPN profiles to connect even without using their software and their privacy policy includes a “no logs” clause
Port forwarding, got a good deal, reviewed well. It exports Wireguard and OpenVPN files easily, so you are not tied to their Eddie client. I'm happy with it so far.
The traffic is encrypted between my computer and a VPS located abroad that I rent, which acts as a sort of proxy. My ISP only sees traffic between me and the VPS.
It’s been great for me. Servers all over the world, connection remains rock solid for me. I also like that they support port forwarding, which can be a godsend for some torrents.
I don't. Your ISP can hardly see anything you do online. Almost all websites are encrypted with HTTPS and if you are concerned about them seeing what domains you visit you can just change your dns server to quad9 or something else privacy respecting. A more valid usecase for VPN is preventing websites from tracking you IP address, downloading "Linux ISO's" or bypassing geographical blocks and for that I used mullvad but I am looking for something else now that they blocked port forwarding.
If you torrent copyrighted material in Germany, you definitely want a VPN. Private law firms "representing copyright holders" regularly request information about consumers based on source IPs/protocol/ports from ISPs with a court's rubber stamp, then send out demand letters for hundreds of euros, with a risk of thousands if you choose to fight it.
Sometimes they follow up if you ignore it, sometimes not. It is horribly oppressive.
tl;dr germans who torrent from a consumer internet service should use a vpn
Even DNS traffic and IP address and packet metadata is extremely valuable to ISPs like Comcast and AT&T. They use it to control what you can and can't do -- for example, throttling your access to streaming video services that compete with their own streaming products or partners' products. They spent millions to overturn Net Neutrality regulations so they can use what they know about your traffic to monetize you (steer you to their products).
What would you suggest now? IVPN and mullvad used to be my go-to VPN providers but now that they both removed port forwarding I really don't know what to use.
Yup. An ISP could potentially gain some information based on the IPs you're hitting and the number/frequency of packets sent and received, but that would take serious logging and analysis on their part. It's much easier to collect data through DNS requests.
I see surprisingly few mentions of WindScribe in this thread. I've had nothing but good experience with them and I always read their promo emails in full (they send very few of them, and their marketing team is hilarious)
I recently switched to windscribe from NordVPN since my initial 3 year plan was coming to an end with nord. I really liked that you can customize a plan. I only need a few specific servers to choose from so I picked those and just pay $4 monthly instead of having to buy 3 years at a time to get a good price. Makes it easier to switch if I choose to but the speeds have been incredible compared to Nord. I do wish they would update their linux client to have feature-parity with the rest of the clients (linux doesn't seem to have split-tunneling as an option).
I use a combination of self hosted wireguard servers at family and friends. They connect together with Tailscale. One of the endpoints connect to the Internet through Mullvad. This makes it easy for every single device I own to connect to either Mullvad or any of a number of possible regular ISPs.
Family not so much. Friends most definitely. It's awesome but takes some trust to lend ones IP out. But having almost 10 different IP addressess to choose from really helps at times. One of them lives abroad too.
Windscribe. Prices are great, unlimited bandwidth, and 1Gbps servers for no additional cost. They have a free tier as well. They’re very privacy focused. Been a customer of theirs for probably like 5-6 years now.
Excuse me for my lack of understanding, but why are there so many people looking to hide their traffic from their ISP with a VPN? Isn't HTTPS enough? Are you afraid of ISPs resorting to DPI or MiM to spy on their users? Is customer protection so weak in the US that ISPs are free to spy on their customers using aforementioned techniques?
Edit: I just realized that I left out people leaving under authoritarian regimes, for whom VPNs are unfortunately required to evade their government.
To me, the problem is you are instead giving over all of your info to the VPN company, and still be tracked by other means such as fingerprinting of devices, cookies/site data or browsing patterns. Is some random VPN company more trustworthy than my ISP and who’s to say they aren’t sharing the information? Plus, the could also be subpoenaed/NSLed if that’s the concern.
I'd be more willing to trust a VPN company with this data than an ISP. The former's entire business hinges on providing privacy to their customers while the latter can just sell your data to whoever they want and most people wouldn't bat an eye.
Because HTTPS protects only things you do on the site. ISP still knows which sites you connect to. Which YouTube video you are watching to. etc. F.E. in Russia ISP's have to keep logs of users interactions for half of year and give it to government when they need them.
Yes, because they know the IPs your packets go to, but if there are multiple websites behind a single IP they won't know which one (unless you use your ISP DNS server, which you should probably not)
Which YouTube video you are watching to. etc.
No, because the URL is contained within the HTTP packets which are encrypted with SSL (the S in HTTPS), so unless the ISP does MiM, they cannot know which URL you are visiting.
Selfhosted DigitalOcean VPS with SOCKS 5 SSH tunnelling for masking my home IP when web browsing and OVH VPS with OpenVPN server for masking my home IP for my local seedbox server. I don't really need commercial VPNs since I only really need basic functionality to mask my IP and I don't really need a shared service to do that.
Did you care about traces that you left behind and can be linked directly to you? Is a nice setup but if you pay DigitalOcean VPS with PayPal for example or credit card all your efforts to hide your real IP that is linked to you is useless. I don't know if this is a major concern to you, of course.
Yeah, I'm aware it's dedicated and not shared, and there's billing info etc. It's just so that websites, particularly forums etc cannot have my home IP just like that. It's an additional layer of protection.
I also use Nord. I think it's fine, but self-hosted and open would be better (since you for SURE know what data is passing through and what is happening with it). With Nord it's like a "trust me bro" black box.
That said, I trust Nord enough for my needs. I don't do anything too secretive on the VPN and frankly I think the 80/20 is in favor of just using Nord over self-hosting (I don't really have time for that).
Self hosting a VPN isn't going to help hide traffic from your ISP though. Even if you "self host" on a cloud instance or rack elsewhere, you've still got ISPs there who will see all your traffic. Unless there's some other magic implied that I've overlooked?
I used to have Mullvad but it recently disabled portforwarding-support. Now I ditched it in favor of Proton since I already had a Proton subscription running. I am still looking out for a VPN that supports portforwarding though, in a way that a non-tech-savvy person like myself can run it on Linux. No idea where and how to do that now.
my own wireguard server. i use it to watch one of those iptv "all included" services as well as stream from torrents and hosters.
for anonymity i usually use, proxychains, tor or a mix of both.
VyprVPN. I'm late to the party, but I've spoken to the founder a couple of occasions, he seemed like a guy that really just wants to provide no nonsense VPN. Its not the best or fastest service, and I don't need VPN for everything, but for whatever I need, it's cheap and it's privacy friendly.
I've been trying running a VPN on my phone as a matter of course lately (Proton). I'm assuming it not only keeps your ISP from knowing where you're going but, more importantly, advertisers and trackers as well.
.
....or do I have that last bit wrong?
It can as a side option. I think Proton has something like this. It is done on DNS level. You can use something like NextDNS to achieve this things without VPN.
IVPN initially because it is very privacy focused but now I swapped to Nord because it's basically free if you get cashback offers and it seems to bypass more region restrictions for video streaming etc.
I used to use Proton, but it stopped working in the country I travel to work in, so I changed to SurfShark as it works as a region unblocker, on recommendation from other people here.
Really? Can I ask why? I've been using them for both and had no issues that I've seen, but if they have some flaws in privacy I would like to know what they are.
Because I never got very good speeds from Proton VPN, and the feature parity has never been very consistent especially because I use Linux. I get much better speeds from Torguard and they allow port forwarding, and have an overall much more feature rich Linux client. I still subscribe to and recommend Proton, I just don't use their VPN or password manager.
I've done a lot of digging, and the only concern I've found is that the company is somehow connected to PureVPN.
I'm not paranoid, so for me this is fine. Take your own threat model into consideration.
Funnily enough, Ivacy knows basically nothing about me, since I bought the offer through a 3rd party site. I have nothing registered on my Ivacy account, aside from my email and password.
I use google one VPN. Its included with the extra storage plan I pay for. I'm curious how it compares to the other services as it's the only one I have used.
ISP says hello, seeing which sites, videos you visit and sharing this info with government. Reputable VPN's exist. Link to reputable resource for comparison.
They do hide your "real" IP address from other peers when using BitTorrent, such that angry letters from copyright holders go to the VPN instead of your ISP. The assumption is that your ISP would be more likely to snitch on you when compared to a reputable VPN.