VPN Recommendation

What is a VPN

A VPN (Virtual Private Network) is a tool that creates a private network connection across a public network, such as the Internet. It provides privacy (obfuscation) and security (encryption) while on the public network but does not guarantee anonymity. To achieve anonymity, The Onion Routing (TOR) is required.

Beyond traditional VPNs, there are alternative tools like Cloudflare Tunnels, ZeroTier, Tailscale, and proprietary solutions like Apple Private Relay and Cloudflare WARP. These tools offer unique features and integrations that can complement or replace VPNs depending on the use case.

.. consider VPNs for what they are, a middleman. They have benefits. They also absolutely have associated risks. They are a tool in the box but not an end-all-be-all-be-all solution. They are far from it. We need to understand their use case when compared to various threat models.

VPNs and Alternatives

Tool	Features	Use Cases	Notable Integrations
Mullvad VPN	Privacy-focused, no email association, cash payment support.	Obfuscation, secure browsing.	Integrates with Tailscale for private routing.
IVPN	Privacy-first, anonymous signups, supports cash payments.	Secure browsing, privacy-focused users.	Supports multi-hop and WireGuard configurations.
ProtonVPN	Swiss-based, strong privacy laws, free tier available.	Secure browsing, privacy-conscious users.	Integrates with ProtonMail for encrypted email.
Cloudflare Tunnels	Exposes local services securely via Cloudflare's network.	Hosting services without public IP, bypassing firewalls.	Works with Cloudflare Access for zero-trust security.
ZeroTier	Peer-to-peer virtual network with mesh routing.	IoT devices, gaming, remote access.	Supports IPv4/IPv6 networks and integrates with network controllers.
Tailscale	Simplifies VPN configuration using WireGuard.	Secure remote access to private resources.	Mullvad VPN integration provides enhanced privacy by routing via Mullvad servers.
TOR	Provides anonymity using layered encryption.	Accessing the dark web, bypassing censorship.	Integrates with browsers like Tor Browser.
Cloudflare WARP	Encrypts all DNS queries and some traffic, improving security.	Lightweight, better for speed and low-latency connections.	Cannot route all traffic like traditional VPNs.
Apple Private Relay	Masks user IP and DNS requests when using Safari.	Privacy-focused for general browsing.	Limited to Apple ecosystem and Safari browser.

Benefits of Alternatives

• Cloudflare Tunnels: Removes the need for exposing your IP by using a reverse proxy over HTTPS.
• ZeroTier: Provides mesh networking, ideal for personal and small business use cases.
• Tailscale: Combines WireGuard's security with ease of use, and with Mullvad integration, ensures privacy by routing traffic through Mullvad's VPN servers.
• Cloudflare WARP: Lightweight and designed for DNS and basic traffic encryption; better for speed than traditional VPNs.
• Apple Private Relay: Protects Safari users' IP addresses and DNS queries but does not act as a complete VPN.

VPN vs WireGuard, Tailscale, and ZeroTier

Feature	Traditional VPN	WireGuard	Tailscale	ZeroTier
Setup Complexity	Moderate to high; may require manual configuration.	Easy to moderate; simple setup for many clients.	Easy; uses your identity provider for access control.	Moderate; requires understanding of network rules.
Performance	Lower due to older protocols.	High; lightweight and efficient.	High; uses WireGuard under the hood.	High; optimized for P2P routing.
Privacy	Good; depends on provider policies.	Depends on implementation (e.g., Mullvad uses WireGuard).	Good; Mullvad integration enhances privacy.	Decentralized, privacy depends on configuration.
Flexibility	Routes all internet traffic.	Routes specific traffic as configured.	Simplifies remote access to private resources.	Allows custom virtual networks.
Use Case	General-purpose secure browsing.	Optimized for speed and secure connections.	Simplifies secure remote access and sharing.	Custom networks for IoT, gaming, or remote access.

Privacy Policy Comparison

As of 2023-03-19:

See a much more robust and updated vpn comparison chart here (Techlore)

Provider	Personal Data	Data Retention	Third-Parties	Payment Options	Country of Data Storage	Individual Rights	Policy Updates	$/Device/Month
Mullvad VPN	Payment info, support/problem report info.	40 days - statutory period, six months for support.	E-mail service providers, payment suppliers.	Cash, Cryptocurrency, Credit/Debit Card	EU/EEA	Correction, deletion, limitation, complaint.	Published on the website.	$1
IVPN	Account, payment, usage, crash logs, device permissions.	90 days (mostly); accounting unlinked; logs as needed.	Braintree, PayPal.	Cash, Cryptocurrency, Credit/Debit Card	EU (GDPR Compliant)	Access, rectification, erasure, revoke permissions.	Posted on the website, emailed to customers.	$1.42
Proton VPN	Account creation, support/bug reports.	Retained for active accounts; deleted when closed.	Referrer platforms, routing technology.	Cash, Cryptocurrency, Credit/Debit Card	Switzerland	Access, edit, delete, export, complaint.	Notification of changes for enabled users.	$1
Nord Security	User-provided data, automatic data, third-party data.	Varies by data type.	Payment processors, support, analytics, marketing.	Credit/Debit Card, PayPal, Cryptocurrency	Panama	Access, rectification, erasure, etc.	Updates communicated on the website.	$2.4

VPN Troubles

Signs of a Bad VPN Provider

• They offer a free trial but require payment information.
• They are a Free VPN.
• History of selling user data.
• Search terms like "no logs" or "zero logs" in terms of service or privacy policies. [1]
• Research the VPN provider's reputation [e.g., "provider name scam" ( fraud OR ripoff)] Search URL.

VPN Provider Risks

Some VPN providers, particularly those owned by KAPE Technologies, may pose risks to user privacy. KAPE Technologies owns:

• CyberGhost VPN
• Zenmate VPN
• Private Internet Access (PIA)
• ExpressVPN
• SurfShark

KAPE's history and acquisitions raise privacy concerns. For instance:

• CyberGhost VPN was purchased by KAPE for $10 million in 2017.
• Private Internet Access was bought for $127 million in 2019.
• ExpressVPN was acquired for $936 million in 2021.

Kape VPN relationships Users should carefully evaluate VPN providers' transparency and privacy policies before choosing a service.