If you're ever concerned about who might be peeping over your virtual shoulder, then consider a virtual private network, or VPN.
An excellent entrant in the field of consumer VPNs, ExpressVPN has a wide distribution of servers across the globe, ensuring one will likely be close at hand.
It has also invested heavily in creating and explaining how it operates a safe and secure company.
While it has improved the value of its offering, it's still on the expensive side for what it offers the average consumer.
What Is a VPN?
When you connect to an unsecured Wi-Fi network at the local coffee shop, you're not safe.
An unscrupulous person could snoop on your web traffic, or perhaps the free Wi-Fi is phony and designed expressly to steal information from anyone who connects to it.
Out on the web, governments and advertisers are keen to get your data.
Even your ISP is looking to profit from selling your anonymized data.
When you're connected to a VPN, your data travels through an encrypted tunnel to a server operated by the VPN company.
From here, it exits onto the web.
While in transit, it can't be intercepted, stopping sleazes at the coffee shop from snooping on you.
Out on the open internet, your real IP address can't be discerned because your traffic appears to be coming from the VPN server.
Routing your traffic through the VPN's server also effectively spoofs your location.
Pricing and Features
ExpressVPN has three subscription options: $12.95 billed each month, $59.95 billed every six months, and $99.95 billed annually.
Like most services, the only difference is for how long you commit.
The company accepts payment by all major credit cards, PayPal, and other services such as Alipay and WebMoney.
ExpressVPN subscriptions can also be purchased with Bitcoin.
The current monthly price of a VPN service averages around $10.21, which is quite a bit below ExpressVPN's $12.95 asking price.
Many VPNs come in well below the average.
Mullvad, for example, costs just €5 per month ($5.92 at time of writing), making it one of the cheapest VPNs available.
You'll save money with ExpressVPN's annual plan, but $99.95 is well above the $71.87 average we see across the industry.
Kaspersky Secure Connection is notable for having the lowest annual fee of any VPN I've yet reviewed, at just $29.99 per year.
Generally, we advise against starting with an annual VPN subscription.
Instead, use a free or short-term subscription so you can test out the VPN with all the sites and services you need.
The only thing cheaper than cheap is free, and ExpressVPN does not offer a free VPN subscription tier.
That's unfortunate, because the best way to tell if a VPN will work for you is to try it out at home.
TunnelBear VPN does offer a free trial, but limits you to 500MB of data per month, while HotSpot Shield's free subscription cuts you off at 500MB per day. ProtonVPN, on the other hand, places no data restrictions on its free subscription and has a flexible pricing structure that can get you started for $5.00 per month.
Previously, ExpressVPN limited you to just three simultaneous connections from different devices.
I'm happy to say that the company has improved its offering to match the industry average of five simultaneous connections.
That welcome change comes a little late as several VPNs challenge that expectation by offering less restrictive plans.
NordVPN offers six connections, and CyberGhost seven, while TorGuard VPN lets you choose how many connections you'd like with a simple slider that goes from five to 205.
Avira Phantom VPN, Encrypt.me VPN, Ghostery Midnight, IPVanish VPN, Surfshark VPN, and Windscribe VPN don't even bother to limit the number of simultaneous connections.
Note that Encrypt.me and IPVanish VPN are owned by j2 Global, which in turn owns Daxdi's publisher Ziff Media.
Alternatively, you can spring for a router preloaded with ExpressVPN software, thanks to a partnership between ExpressVPN and FlashRouters.
Or you can follow ExpressVPN's instructions and configure the router yourself.
The advantage of a VPN-enabled router is that it protects every device on your network, including those that can't run VPNs on their own, and effectively lets you connect an infinite number of devices.
ExpressVPN notably provides apps or installation instructions on a dizzying number of platforms, so you're sure to find something that meets your needs.
VPN Protocols
VPNs are a mature technology and as such there are a lot of different ways to create a VPN connection.
I prefer OpenVPN, which is an open-source project.
That means its code has been picked over for vulnerabilities.
ExpressVPN, happily, supports OpenVPN UDP/TCP on Android, iOS, Linux, macOS, and Windows.
It also supports configuring routers to use OpenVPN.
ExpressVPN also supports the older L2TP protocol on macOS and Windows, and the much less secure PPTP on Windows only.
I don't recommend using either, unless you absolutely have to for some obscure legacy reason.
It's notable that ExpressVPN supports OpenVPN in its iOS app.
Apple makes app developers that wish to use OpenVPN jump through additional hoops, so some developers don't bother.
ExpressVPN also supports the IKEv1/2 protocols on iOS, which is my next-best choice of VPN protocol after OpenVPN.
Recently, ExpressVPN has begun a public beta of its own Lightway VPN protocol.
This custom protocol uses the open-source wolfSSL cryptography library, which is smart because trying to make your own crypto from scratch can be a dangerous endeavor.
We haven't tested the new protocol yet but plan to do so in the future.
The Wireguard protocol is the heir-apparent to the OpenVPN throne.
This open-source project has been long in development and just recently left its experimental phase, leading some VPN companies to adopt it.
In my limited testing, I have found this new technology to be extremely fast.
I hope ExpressVPN follows suit, but it's not a major issue for the moment.
Servers and Server Locations
Part of what you are paying for with a VPN subscription is access to the company's fleet of VPN servers.
These are the machines through which your web traffic will flow.
Generally speaking, it's good to have a diverse distribution of servers, since this will ensure that you'll be able to find one close by, no matter where you travel, and likely get better service because of that closeness.
It also gives you more options for spoofing your location.
ExpressVPN offers 160 server locations across 94 countries.
Among my top-rated VPNs, ExpressVPN offers the best balance of hardware and virtual servers in the most countries (more on this later).
It has held this distinction for a long time, but CyberGhost is catching up, offering servers in 90 countries.
In addition to having the most server locations, ExpressVPN also excels in geographic diversity, with several in Africa and excellent coverage across South America—two continents often underserved or completely ignored by other VPN companies.
ExpressVPN also maintains servers for some countries with repressive internet policies, including Turkey, and Vietnam.
Some readers have expressed concern about virtual servers.
These are software-defined servers, meaning that one piece of hardware can host multiple virtual servers.
Virtual servers can also be configured to appear as if they are in a country other than where that physical hardware is located.
Virtual servers aren't necessarily bad, but the idea that your data may be heading to some country other than where you want it to go can be unnerving.
ExpressVPN is transparent about its use of virtual servers.
An explanatory page says that less than three percent of servers are not physically located where they appear to be, and lists their true location.
A company spokesperson confirmed this information.
ExpressVPN explains that part of why it uses virtual servers is to provide better performance, but also for improved security.
You wouldn't necessarily want a VPN server within a dangerous country, as it could be tampered with, potentially revealing private information about its users.
ExpressVPN's Turkey, Venezuela, and Vietnam servers, for example, are all virtual.
This sounds reasonable.
The only other VPNs that boast better coverage are PureVPN and HMA! VPN, which cover 140 and 190 countries, respectively.
These companies, however, are heavily reliant on virtual server infrastructure.
Of PureVPN's 140 locations, 77 are virtual.
Of the 190 countries of HMA!, only 56 are physical locations.
I think ExpressVPN has a better approach, and one that feels more honest to customers.
That said, most consumers probably do not need a lot of server locations—virtual or otherwise.
What they probably need are as many servers as possible, as near as possible to their homes.
The average person probably doesn't have a reason to tunnel into 90+ countries.
This really cuts into ExpressVPN's value proposition.
The company offers an excellent service all around, but its best feature is really geared toward the frequent traveler, the business person, or someone with very specific needs.
Most VPN companies will spin up servers as needed (virtual or otherwise) to meet demand.
As such, the overall number of servers is influenced by how many subscribers a company can boast.
But a large server fleet also means you're more likely to find an uncrowded server, potentially getting you better performance.
ExpressVPN has over 3,000 servers at its disposal, placing it among the largest collection of servers we've seen.
ExpressVPN, Hotspot Shield, Private Internet Access, and TorGuard all have over 3,000 servers but CyberGhost and NordVPN are at the top of the heap with well over 5,000 servers.
Your Privacy With ExpressVPN
When you use a VPN, you're entrusting it with access to your web traffic.
If the VPN company were lacking in morals, it could easily monetize your personal information much the same way an ISP can.
The VPN might also be targeted by law enforcement to hand over information relating to its customers.
This is why it's important to read and understand a VPN's privacy policy.
Don't worry, I've read the fine print for you.
I'm happy to say that ExpressVPN goes to impressive lengths to protect customer privacy and secure its data and infrastructure.
It's one of the few companies whose claims have been tested by crisis, and clearly makes the effort to do well by consumers.
To its credit, ExpressVPN's privacy policy is a reasonable length, though it could stand to be much easier to read.
TunnelBear does an excellent job of being transparent to customers in an understandable way and more companies should emulate its efforts.
ExpressVPN is clear about the limits of its data gathering.
The company says it stores no logs of user activity, originating IP address, the VPN IP you connect with, the session duration, nor a connection timestamp.
That's what you want to hear from a VPN company.
Better still, ExpressVPN makes it clear in its policy (and verified to me) that it only generates revenue through the sale of VPN subscriptions.
The company does not sell user data.
The company does, however, collect some information.
It gathers the aggregate amount of data transferred by each user.
It logs the most recent date, but not time, a successful connection has been made. The company also notes which VPN location you connect with—but not a specific public-facing IP address.
ExpressVPN stresses that this information is not sufficient to identify a specific individual, since it would be identical to many other users.
Still, customers should always be skeptical of anonymized data, since it doesn't always stay anonymous.
These policies have also been backed up by practice.
A company representative proudly pointed out that when Turkish authorities seized an ExpressVPN server, investigators, "could not find any server logs that would enable investigators to link activity to a user or even determine which users, or whether a specific user, were connected at a given time." Perhaps it is a good thing that ExpressVPN now uses a virtual server to cover Turkey.
ExpressVPN has its headquarters in the British Virgin Islands, which has no data retention laws.
The company points out that any request for user information would have to be issued from a local court, and would only be honored if the crime under investigation would be punishable by at least a year in prison in the British Virgin Islands.
The hope is that this would slow down frivolous, or intrusive, investigations that would encroach on your privacy.
Some VPN companies have begun releasing the results of third-party audits in order to validate the security of their services.
NordVPN commissioned an audit of its no-log policy, and TunnelBear has committed to releasing annual audits of its entire process.
In 2019, the company released a third-party audit of its browser extensions, which did little to shed light on how the company handles data.
In February 2020, ExpressVPN announced an audit from PricewaterhouseCooper that looked deeper at the company's code and practices.
Unfortunately, this report was not made available to the general public (as is often the case with PwC reports), but it's a strong endorsement that ExpressVPN is keeping its word.
ExpressVPN is one of the few companies that told me it uses RAM only servers.
That means servers are completely rebuilt at reboot, removing any nasty software hiding inside.
It also makes them difficult to confiscate.
ExpressVPN also says it uses a cryptographic key scheme that assigns unique keys for each server and does not store those keys on disk, making it much harder for an attacker to impersonate an ExpressVPN server.
Those servers, ExpressVPN says, are in third-party data centers that limit access to servers.
While I am satisfied with ExpressVPN's efforts to protect customer privacy, you may feel differently.
If you don't feel you can trust a VPN, for any reason, I strongly suggest choosing a different service.
Hands On With ExpressVPN
I had no trouble downloading and installing the software on an Intel NUC Kit NUC8i7BEH (Bean Canyon) desktop running the latest version of Windows 10.
One quirk of ExpressVPN is that you don't log in with a username and password, or a generated username as you do with Private Internet Access.
Instead, you use an activation code found on the ExpressVPN customer portal.
This might be confusing for some people, but it is certainly easier than having to enter it manually.
Once...
