I made a spreadsheet comparing different open source VPN providers.
Part 2 here
Providers
Notes
- Please do not start a flame war about Proton.
- Please do not start a flame war about cryptocurrencies. Monero is the only cryptocurrency listed because of its privacy.
- The very left column is the category for each row, the middle section is the various VPN providers, and the right section is which VPNs are the best in each category.
- IVPN has two differing plans, which is why “Standard” and “Pro” are sometimes differentiated.
- For accounts, “Generated” means a random identifier is created for you to act as your account, “Required” means you must sign up yourself. Proton VPN allows guest use under specific conditions (e.g. installed from the Google Play Store), but otherwise requires an account.
- Switzerland is seen as more private than Sweden. Gibraltar is seen as privacy neutral.
- All prices are in United States Dollars. Tax is not included.
- Pricing is based on the price combination to achieve the exact time frame. For example, Proton VPN does not have a 3 year plan but you can achieve 3 years by combining a 2 year plan with a 1 year plan.
- The availability section is security based. Availability is framed around a GrapheneOS and secureblue setup.
- The Proton VPN Flatpak is unofficial, but based on the official code.
- Availability on secureblue is based on the
ujust install-vpncommand. Security features must be disabled on secureblue in order to use the GUI for IVPN and Mullvad VPN, but not for Proton VPN. Mozilla VPN and NymVPN are available as Flatpaks, which are safer than layering packages. - I wanted to include more categories, such as which programming languages they are written in, connection speed, and security, but that became far too difficult and complex, so I decided to omit those categories.
Takeaways
- NymVPN is very very new, but it’s off to a strong start. It wins in almost every category. I actually hadn’t heard of it until I started this project.
- If you want a free VPN, Proton VPN is the only one here that meets that requirement.
- If you want to pay week-by-week, IVPN is the only one that allows that.
- If you’re paying month-by-month on a budget, Mullvad VPN is the cheapest option.
- NymVPN is the cheapest plan for anything past 1 month.
- If you want to use Accrescent as your main app store, IVPN is the only VPN available there for now.
- If you want to pay for a bundle of apps, including a VPN, Proton sells more than just a VPN.
- Mozilla VPN is terrible. The only thing it has going for it is a verified Flatpak, but NymVPN also has that so it doesn’t even matter.
You must log in or register to comment.
A place to discuss privacy and freedom in the digital world.
Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.
In this community everyone is welcome to post links and discuss topics related to privacy.
Some Rules
- Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post
- Don’t promote proprietary software
- Try to keep things on topic
- If you have a question, please try searching for previous discussions, maybe it has already been answered
- Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
- Be nice :)
Related communities
much thanks to @gary_host_laptop for the logo design :)
- 0 users online
- 108 users / day
- 435 users / week
- 1.32K users / month
- 4.54K users / 6 months
- 1 subscriber
- 4.38K Posts
- 111K Comments
- Modlog
AirVPN needs some spotlight.
Whats best for mainland China?
Never heard of NymVPN. Does anyone use them?
I use Mullvad, and I really trust their devs. Not really looking to change, but having more options is always good.
Yeah me neither. This kinda feels like a nymvpn ad
Same boat, Nym’s long term costs seem to scale much better, but I’d be reluctant to leave Mullvad
I looked on the website. This is actually an “early bird” special price that is ~80% discounted. So after a while, it’s going to be $162/year and $310/2 years.
I don’t really pay attention to these “discounts”. It is, generally, just a marketing tactic. Plenty of services/websites/shops have the same discount 24/7.
You’re right, it is pretty common to do that but there’s always the chance they just cancel the discount around renewal. If you have autopay then you probably already committed to the new price before you realized what happened.
Great work!
+1 to add NordVPN
Why? They (used to) push disgustingly deceptive marketing and had an embarrassing server breach.
Is it even open source?
No, only some of their clients are.
Linux and the newly openwrt clients are, also their main low level lib (libtelio)… windows/macos are not though
Maybe adding number of servers and country diversity
You probably dont want to use a super well known vpn for many reasons…
I’m not sure about your statement, but using a very unknown vpn could lead to possibly tracking you because theres less of a crowd to blend in with.
Assuming your statement is correct (idk if it is), then there’s a middleground i guess.
Are you sure you can blend in? Depends on the vpn and the laws I guess… If they are able to identify your connection. As far as I know, they all have credentials connected to your account…
You are right.
It is easier to blend in though if the vpn doesn’t log (and before logging is added by feds if possible) or if the person tracking you is not a government and doesnt have that control or is just the service you use, etc.
Using one only because it’s super well known? Sure. It can be well known and scummy. But it can also be well known, trusted, vetted, etc.
And you also probably don’t want to use one that is barely known as there’s the lack of trust, getting, who runs it’s, etc.
What would happen if you tried to put I2P on there?
… I guess you’d have to go by the different outproxies… ?
ProtonVPN has started to become blocked on tons of websites. I have to switch servers all the time, to the point I won’t be able to keep a VPN connection up like I used to.
I’ve read Mullvad has worsened as well. There seems to be a general ban on VPN use (there was always some of course)
My last hope: non profits who offer VPN. They keep logs, don’t allow torrenting, and require a real name to subscribe. Very few server choices, if any.
I’m… fine with that. I just want privacy. No surveillance. And I trust the non profit. Plus I torrent on a VPS anyway
What I would like to see are local VPNs, with a small enough pool of users on each server to not get flagged. A rotation between servers from time to time. Compliant with the law of course (as long as the law doesn’t require total surveillance, evidently). The goal is to hide everyone’s activity from the providers and websites (yes, I know, fingerprinting)
But maybe there’s some other existing tool/service I’m not aware of?
Does using a VPS truly enhance safety while torrenting? Isn’t it still possible for downloads and uploads to be traced back to your identifiable IP address, especially considering that the VPS provider logs your IP and email details?
VPN on VPS (easy to do with gluetun)
Basically you use a container that’s a VPN connection and connect other containers to it.
Thank you for clarifying. Does using a VPN on a VPS offer the same level of privacy as connecting a VPN container to a torrent container from a home connection? I’m curious about the advantages of using a VPS in this context.
No advantages privacy-wise, but it’s like a seedbox! I keep the torrent client running. Also I’m on a limited mobile data plan on my router at home, so this helps.
When I found out you could get a free 200GB VPS (look up free tier vps) - and because I had another paid VPS already anyway - I decided to make a seedbox. It’s not a ton of storage but it works really well, very happy with it.
Gotcha, thanks for explaining this! I’m glad you’re happy with your VPS.
Exactly this, the commenter above even mentioned they have a VPS already, what’s stopping them from (this is just an option) slapping tailscale on there, enabling it as an exit node and being done with it? Would literally take 5 minutes and suddenly your traffic is coming from a datacenter and not your home IP
Both comments are me. Configuring Tailscale (or Headscale?) is on my to-do.
To be clear, connecting to the VPS is not what I use for the anonymizing part, it’s the gluetun container that connects to ProtonVPN servers. This way I can still access my VPS with its real IP. Not sure if there was a confusion there.
Simply using my VPS as relay would still attach my browsing to a single IP I’m the sole user of… or not? I do not know how that works.
I was grumped by not seeing PIA on this break down. I’ve been using it for years and have always had a good experience with it. But I’m not so sure I know their privacy side now that I see this great break down
Edit: just re read the post again and I think PIA isn’t on here cause it’s not open source?
PIA is an American owned company obligated to comply with the Five Eyes Alliance, they’re legally obligated to retain your personal information unless noted otherwise.
Source their privacy policy, which FYi compare their Privacy Policy to another company like Mullvad and notice how theirs reads like a novel compared to Mullvads, that’s an immediate red flag.
Thank you for this
Still learning here
I’m finding out that I’ve been mislead. Probably by their marketing.
I remember an ad I saw for PIA saying something along the lines of “the only VPN that can prove in a court of law that they don’t retain your data”
Either it’s a lie or it doesn’t actually carry the weight I thought it did.
What about logging policies? Seems like that would be an important category to visit - which providers store logs or don’t etc. I’ve heard of some that use RAM-only logging that allegedly never gets stored on disk.
Even so, you never knowif they’re really no log. What guarantees that apart from a verbal promise?
There is no guarantee unless you could personally audit their facilities and inspect what they did with your account etc. But I would still choose one that states they have a good policy versus one that says nothing on the subject.
Best way I know is to observe them being unable to comply with legal demands to supply data when they receive them. From what I’ve heard Mullvad has passed that test, but I’ve never tried to follow up and find details.
I have never heard of NymVPN
Most people haven’t, till they have.
Isn’t Mozilla VPN built on Mullvad? Also, why this instead of https://thatoneprivacysite.xyz/#detailed-vpn-comparison
Yes. That’s included in the comparison.
They don’t include NymVPN.
Why is proton VPN excluded from the winners for open source, license, and based on, despite having the exact same values populated as the other 4 winners?
That’s another bug on my part. I’ll fix this in version 2.0 :)
I do not agree with placing switzerland over sweden in that location category
and i think a category should included, that tracks age of vpn or something like that, considering this is nymvpns biggest flaw… still hard to say how trustworthy it is + their software is less battle tested
(
and just for someone curiouse, it should be mentioned that nymvpn does use mullvad servers/ has a deal with mullvadsry i mixed that up obscura and mullvad had partnership, not nymvpn)I agee. Switzerland is close to be the worst country for privacy with the current revisions of the law.
I’d be happy to hear your elaboration on this. From what I know, Switzerland is seen as the gold standard in terms of privacy.
The issue is that age doesn’t correlate with security. There could be an outdated, insecure VPN that’s been around for 10 years, or a modern, secure VPN that’s been around for 10 days. If I included it, there would be no “good” or “bad” values. Nevertheless, I will include this in version 2.0.
I knew NymVPN used a small bit of Mullvad VPN’s code, but I didn’t know they used their servers. Could you link to this?
this is awkward i am sorry it seems like my memory failed me, for one it is was mullvad and obscura that have a deal, not nymvpn…
and then i also thought somehow that vpns are in sweden protected by the constitution, but it appears its more like normal laws. Which appear to be effective tho. But mainly i thought about that recently switzerland was proposing laws like this https://tuta.com/blog/switzerland-surveillance-plan (possible that laws like these get proposed in sweden aswell ofc) which makes it sound like the privacy stands of the goverment is not that strong anymore, but there are probably no effects really at the moment. I think i would rank sweden and switzerland equally i guess, i mean the famouse mullvad example kind of proofs that they are safe i think…
But like my research into the countries is not that deep, so if you really looked into this deeply and switzerland is really better for some reason, than i guess it is like this.
But i still think the age is important, like sure its completly possible that an old vpn suddenly gets infiltrated or idk what really, but since for vpns are mostly trust based, i think that the track record is the best option for this… and new vpns just dont have that long of a record (personally i would not use like a 1 month old vpn for example, whoever good it sounds)
or can nymvpn offer garantuees similar to tor?
FWIW took me less than 1h yesterday to setup WireGuard on 4 different devices :
wg-easyand thus easy to use Web UI (before 2-step auth)nmcli… and it was the first time I used WireGuard.
So I’m trying to imply that one shouldn’t use commercial VPNs or benefit from their services, solely that setting up your own depending on your abilities and needs might not be as complex as you initially imagine.
PS: I did have experience with OpenVPN before and a running server already with Docker and nginx as reverse proxy.
I assume you’re talking about creating a VPN into your own personal network? Unless you have family or friends in a different country I fail see how you’re circumventing geo restrictions or gain anonymity on the internet.
Wrong assumption, you can install it on any other machine you have root access to, e.g. remote ssh. You can rent a server in another country and put your VPN server if that’s your need.
Don’t do this if you want to use a VPN to pirate stuff. It’s a fine suggestion for anything else, using a VPS w/self hosted VPN to provide a basic degree of anonymity.
I didn’t suggest it for any usage, solely that it’s easy to setup.
Maybe I misunderstand wireguard, but don’t you still need a VPN provider to connect to? If it’s just your home server, how would you get any anonymity?
You can host WireGuard on your server, you don’t need a VPN provider specifically, you need a server to put WireGuard on though. Depends who you want to be anonymous from, as per usual it’s the threat model that defines the solution.
I was thinking for torrenting.
FWIW Im torrenting on my server 24/7 for years. I’m only torrenting Linux ISO though, using
transmissionin a container.There’s plenty of seedbox companies out there, you can get 10Gbps+ connections and they run the torrent client for you so there’s no upload happening from your local PC at all… Many offer VPN capabilities at the same time, but for general browsing I use a VPS with my own wireguard.
Yeah… And they are way more expensive than a VPN.