Virtual private networks, commonly known as VPNs, are gaining widespread popularity. Advertisements for VPNs are frequently encountered on platforms like YouTube, often numbering in the hundreds and thousands.
Engadget conducts testing and reviews of VPNs to simplify the selection process for users. A VPN, at its core, operates by masking an individual’s IP address and device identity by routing internet traffic through a remote server. This approach means that websites and services receive a different IP address from the user’s actual one, and internet service providers can only detect that a VPN server is being accessed, without knowing which specific sites are being visited. This feature makes VPNs valuable tools for enhancing data privacy and security, particularly when one connects to unsecured networks. For instance, when using public WiFi, there is uncertainty about the extent of activity tracking that could occur. A VPN adds an extra layer of privacy, provided the VPN provider is reliable. However, using a VPN should be part of a broader security strategy, which includes setting complex passwords and implementing multifactor authentication alongside other fundamental security measures.
VPNs are also commonly advertised for their ability to bypass geoblocking techniques utilized by companies to restrict access to certain content. By connecting to a remote server, a VPN can effectively alter the user’s perceived location, enabling access to content such as a different country’s Netflix library or the UK-exclusive BBC iPlayer for shows like Doctor Who. For those in the EU, a VPN can provide access to sites blocked due to stringent regional data protection regulations. Historically, VPNs have even been employed to circumvent political firewalls designed to censor online access.
With VPN providers often making extensive claims about military-grade encryption, digital invisibility, and exceptional speeds, distinguishing between truth and marketing exaggeration can be challenging. To address this, Engadget began evaluating VPNs in 2023, assessing factors like security, speed, latency, usage limits, and pricing. Although further in-depth testing will not proceed until 2025, Engadget’s comprehensive VPN guide will remain the central resource for related coverage. In the interim, the current focus is on detailing the VPN testing methodology.
Background Checks:
The evaluation process starts with examining each VPN product’s background. Engadget scrutinizes privacy policies, transparency reports, and security audits that are publicly accessible, noting each service’s security specifications. The company’s history regarding security incidents, such as data breaches, is also investigated, utilizing pre-existing academic research from organizations like Consumer Reports and VPNalyzer for further insights.
Setup:
The review continues with a close examination of the VPN setup process across different platforms, including web browsers and smart TVs, to understand usability. An essential aspect under scrutiny is the ease of initiating a VPN connection. Some VPNs automatically connect to a secure server with each device usage, while others require more effort to maintain connectivity. The user-friendliness and intuitiveness of each VPN are critically assessed.
Usage Limits:
VPN providers often promise universal device compatibility. However, it is crucial to analyze the terms of service for each plan to identify any limits. This investigation checks for restrictions on the number of simultaneous device connections, potential "fair use" limits triggering after a defined traffic volume, and whether advanced features like multi-hop connections are exclusive to pricier plans. This assessment is conducted alongside specific tests to verify the providers’ claims regarding simultaneous device use.
Speed and Latency:
The process of testing speed and latency begins with determining the baseline connection speed without a VPN. Subsequently, using the "quick connect" feature in VPN applications helps identify the fastest available provider during speed tests. After connecting, internet speed tests by Ookla and ping tests through meter.net are conducted. The results include the average speed and ping, along with a comparison to the baseline measurements before VPN use.
Geoblocking:
All VPN tests are performed from within the US. They involve connecting to a Canada-based server to access Netflix content exclusive to that region, connecting to a Hong Kong-based server for a region-specific YouTube news livestream, and conducting gaming tests on UK servers. This process evaluates not only content accessibility from these servers but also checks for latency or other potential user experience disruptions.
Checking for Leaks:
Engadget uses publicly accessible tools such as NordVPN’s IP Lookup and ExpressVPN’s leak tests to check for DNS and WebRTC leaks before and after VPN connection. A DNS leak transmits unencrypted DNS queries outside of the VPN’s encrypted tunnel to ISP DNS servers, which can compromise privacy. Similarly, a WebRTC leak can reveal personal IP addresses to visited websites. Despite possible browser configurations to prevent WebRTC leaks, an effective VPN should inherently prevent these vulnerabilities.
