There are several solutions for accessing blocked streaming sites or apps: VPN, Smart DNS, proxies. The one that brings you the smoothest streaming experience is Smart DNS, as it does not involve any encryption. For those using their MacBooks to relax after a long day, I am going to explain how to set Smart DNS on Mac.

Set up Smart DNS on Mac [Summary]

Setting up Smart DNS can be done in a matter of seconds. On Mac, you need to get to the macOS DNS settings and alter the DNS with server addresses provided by the Smart DNS service.

• Prerequisites:
  • A Smart DNS account.
• Setup:
  • Step 1: Get to the Network > DNS settings.
  • Step 2: Add the Smart DNS server addresses.
  • Step 3: (Recommended) Restart your Mac.

The Smart DNS alternative to unblocking channels is the well-known VPN (Virtual Private Network) technology. Even though VPN is slower than Smart DNS, it may be the only solution for certain media sites. In case you are interested in setting up a VPN on Apple Mac OS X, I recommend reading our tutorial.

Why use Smart DNS on Mac?

Smart DNS is a technology that can be used to unblock popular geo-restricted websites like Netflix, Hulu, or BBC iPlayer easily.

The main advantage of Smart DNS over VPN is that it does not involve any data encryption. Thus, the streaming speed is as good as your regular Internet connection can achieve.

Smart DNS uses proxy servers to bypass geo-restrictions, but it does not hide your public IP address. You should remember this and do not assume that Smart DNS offers any protection against data leaks and hackers.

If you want to use your Mac for watching your favorite show on a restricted streaming channel, you have two great options: VPN and SmartDNS. As mentioned above, Smart DNS is (most of the time) faster, but it involves some initial manual setup. However, it can be done in several minutes. Read on to see how to get started.

How to set up Smart DNS on Mac

Firstly, you need access to the IP address or the name of a Smart DNS server. There are several good Smart DNS providers you may subscribe to for a reasonable price. You will find our recommendations later in the article.

You will get access to one or two IP addresses (to have a backup solution if the primary server is down or blocked).

For example, if you choose the Smart DNS solution offered by Surfshark, you should log in to the Surfshark account and, from the left menu, click on Smart DNS. You will see the two DNS addresses available. Additionally, you need to Activate your current IP address such that you are granted access to the Smart DNS service.

Once you have the address(es) of the Smart DNS server(s), you have to follow this step-by-step tutorial:

1. Open System Preferences from the top left of your screen.
2. Click on Network.
   
3. Select the network you are connected to (Wireless or Ethernet) and click the Advanced button.
4. Access the DNS tab.
   
5. If there is any DNS listed, select it and press the “-” button (delete it).
6. Press the “+” button and enter the IP address of the SmartDNS server. In case, you have more DNS server IPs, repeat the process.
7. You are done with the DNS settings. It is advisable to restart your Mac.
8. Some SmartDNS services are able to verify the connection. Thus, you may log in into admin panel offered by the provider and check your connection status. If no such option is available, simply try to unblock the desired streaming channel. If everything is properly set up it should work smoothly.

An alternative to the above-explained setup is to change the DNS settings on your router. This may be a little bit more complicated, but you may achieve access to the desired channels on all devices connected to the router (on Wi-Fi or Ethernet cable).

Troubleshooting your Smart DNS connection

In case you are not able to access a specific streaming site, you may try one of the following:

• use another browser (if you access the channel with a web browser);
• clear the browser cookies;
• try the Incognito mode.

If you are still unsuccessful, you should contact the support team of your Smart DNS provider.

Smart DNS services for Mac

You may use any Smart DNS service on your Mac as the only required setup is to add the DNS addresses to the macOS DNS settings (as presented above).

However, we recommend subscribing to the SmartDNS services that also offer access to VPN. Thus, if the Smart DNS service is not able (temporarily or permanently) to unblock your favorite channel, you have the backup option to use the VPN.

Additionally, you may switch from Smart DNS to VPN when you get slow speed. SmartDNS is usually faster than VPN, but you may experience low-quality streaming due to DNS server issues.

We have tested several such SmartDNS+VPN services, and we gladly recommend you try one of the following: StrongVPN, CactusVPN, Surfshark, NordVPN. All these services have great compatibility, and you may use them on iOS (iPhone, iPad), Android, Windows, Mac, Linux.

Summary

Smart DNS is a great technology for unblocking streaming channels or various media channels. To set it up on Mac, you need to configure the macOS DNS settings such that the provider’s servers are used. We recommend subscribing to a Smart DNS provider that also offers access to VPN such that you have an alternative to unblock what you desire.

Have you found our article on how to set up Smart DNS on Mac useful? If so, subscribe to our newsletter! We will let you know when we publish new articles, and you will make a Transylvanian baby-bat happy.

IKEv2 is one of the most popular VPN protocols due to its stability, speed, and security. Expanding upon the strengths of its predecessor (IKEv1), IKEv2 is nowadays a strong and reliable choice when it comes to encrypting data.

As you probably know already, it is fundamentally important to secure your data when connected to the Internet, and it is equally important to use the right tools. When it comes to VPN, the communication protocol is the foundation stone of online security. If the VPN protocol implements strong encryption algorithms and high-level security policies, you may use it with confidence. IKEv2 is, from the public knowledge available at this time, a VPN protocol that you may trust.

This article explains what IKEv2 is, how this VPN protocol works, how to set IKEv2 up on your devices, and how it compares with other VPN protocols. We will also look at some of the advantages and disadvantages of the IKEv2 protocol.

What is IKEv2? The Transylvanian story.

Bats know, probably better than humans, that they need to exercise regularly to be in shape. Unfortunately, the bats from Castlevania know this all too well as they have to face (more precisely, have to run fast from) the Megabats, their unfriendly neighbors.

One early morning TomBat and AnonymousBat, the two bat friends, took their bikes and headed towards the woods surrounding Vlad’s castle. As you can imagine, cycling is not a popular sport among bats, but TomBat and AnonymousBat have joined Vlad in his cycling rounds, and they started to like pedaling.

After an hour of intensive and joyful pedaling in the middle of the forest, TomBat had to stop. Something was wrong. Indeed, it was: his bike had a flat tire. TomBat had a moment of panic when he remembered that he had forgotten his repairing kit at home. The situation didn’t look joyful anymore. The perspective of getting back on foot (so to speak) was not pleasant.

Fortunately, TomBat was not alone and AnonymousBat had his own repairing kit. In ten minutes they were back on the road.

Not long after, it was TomBat’s turn to return the favor to AnonymousBat. When they felt a little bit exhausted, TomBat pulled out a chocolate bar from his backpack. It was the best chocolate you may find in Castlevania, made by TomBat girlfriend, PonyBat. With renewed forces, they were able to get back safely and happy.

The moral of the story: don’t go into the woods alone; a friend may help when you need it, and, together, you are both safer.

IKEv2 and IPSec are two good friends that help each other and work together to make VPN communication great. So let’s find out more about the IKEv2/IPSec VPN protocol.

What is IKEv2, and how does IKEv2 work?

IKEv2 (Internet Key Exchange version 2), the successor of IKEv1, is a VPN protocol developed by Microsoft and Cisco that uses the authentication suite IPSec to secure communication between a VPN client and a VPN server. Sometimes it is called IKEv2/IPSec.

IKEv2/IPSec generates encryption keys, providing high-level data security. For those interested in more technical details, IKEv2/IPSec uses the AES-256-GCM cipher for encryption. Additionally, it has several important advantages over other VPN protocols (explained in detail below).

The IKEv2/IPSec protocol uses the Diffie-Hellman key exchange algorithm to secure the communication tunnel. IKEv2 establishes a security association (SA) to check that the VPN client (your device) and the VPN server use the same encryption keys and algorithms. Once the security association is validated, IPSec creates the tunnel and initiates the secure communication.

Other important IKEv2 technical details:

• The IKEv2 uses UDP packets and port 500.
• It supports Perfect Forward Secrecy (PFS).
• IKE builds upon the Oakley Key Determination Protocol and ISAKMP for defining data exchange methods.
• IKE uses X.509 certificates for the authentication process.
• Open-source implementation exists, such as strongSwan, OpenIKEv2, and Openswan.

Why IKEv2 & IPSec?

IKEv2 and IPSec are different technologies that work great when combined.

IPSec (Internet Protocol Security) is a network protocol suite that provides secure tunneling between devices over an Internet Protocol network. It is used for encrypting data in virtual private networks (VPNs).

IPSec can use various mechanisms for authentication and key exchange to create security associations. One of these mechanisms is the Internet Key Exchange (IKE and IKEv2).

As IPSec is secure and reliable. IKEv2 is fast, stable, and provides rapid re-connection in case of dropouts. IKEv2/IPSec expose the best of both into a great VPN protocol.

IKEv1 vs. IKEv2 – The main differences

IKEv2 is the upgraded version of IKEv1 and this translates into faster, safer, and more efficient communication:

• IKEv2 consumes less bandwidth than IKEv1.
• IKEv2 has built-in NAT traversal (IKEv1 doesn’t).
• IKEv2 supports MOBIKE (Mobility and Multi-homing Protocol) make it more stable.
• IKEv2 supports EAP (Extensible Authentication Protocol) authentication, for safer communication.
• IKEv2 can detect whether a tunnel is still alive and it has the Keep Alive option enabled by default.
• As IKEv2 uses a lower number of Security Associations (SA) required per tunnel, it reduces the required bandwidth.
• IKEv2 supports Asymmetric authentication.

Thus, you should choose IKEv2 over IKEv1 any time you can.

IKEv2 compatibility

The IKEv2 was adopted and can be set up on all major operating systems (including Windows, macOS, iOS, Android, Linux) and various devices (routers, SmartTVs).

Due to its security features and stability, many VPN providers (e.g., NordVPN) use IKEv2 as the default protocol in their apps.

Advantages and disadvantages of IKEv2

Before setting up an IKEv2 VPN connection, you should take a minute and read about this VPN protocol’s pros and cons.

Advantages of using IKEv2

IKEv2 has some important benefits:

• It is secure as it supports multiple high-end ciphers for maximum protection.
• It is fast, despite implementing strong encryption.
• It is stable, as it allows users to switch between connections without dropping the protection. The efficient auto-reconnect feature is one of the most important features of IKEv2.
• It is supported on a wide variety of devices.

Disadvantages of using IKEv2

There is not much negative to say about IKEv2. One common complaint is that IKEv2 traffic can be easily blocked by firewalls, as it runs only on port 500 on UDP.

How to set up IKEv2 on your devices

Several options are available when it comes to setting IKEv2 on your device. The simplest is to install a VPN app that support the IKEv2 protocol, but, if you need to connect to your own VPN server, then you should go for the manual setup.

Additionally, you may set up IKEv2 on a router (some routers offer access to the IKEv2 protocol) and connect the devices you need to get the traffic encrypted directly to the router.

Manual IKEv2 setup

IKEv2 is one of the standard VPN protocols that can be set up on most operating systems from the VPN built-in modules. More precisely, you may set up IKEv2 (as well as L2TP or IPSec) without installing any additional app.

Firstly, you need to know the IKEv2 server name or IP address and the username/password for authentication (you may also use a certificate or use no authentication). You may obtain this info either from a VPN service provider or from the VPN network administrator. The third option is to have your own VPN server to connect to.

The manual IKEv2 setup consists of creating a VPN connection on your operating system of choice and filling in the connection settings. For example, on macOS you should perform the following steps:

1. Open System Preferences and click on the Network.
2. Click on the “+” button from the left side of the window to Create a new service.
3. For the Interface, select VPN.
4. Further, choose IKEv2 as the VPN Type.
5. Enter the connection name and click on the Create button.
6. Start the VPN configuration: enter the VPN server address (name or IP) to both the Server Address textbox and to the Remote ID field. You may let the Local ID textbox empty.
7. Next, click the Authentication Settings … button.
8. You may choose the authentication method (Username, Certificate, or None). For Username fill in the username and password. For the Certificate choose a machine authentication certificate that is already installed on your machine.
9. Finally, click the Apply button and then Connect.

Use VPN client apps

As IKEv2 is a fast and secure protocol, many VPN providers use it in their own apps, besides OpenVPN (TCP or UDP), WireGuard, or L2TP. Some even recommend IKEv2 as the default, automatic protocol, as is the case with Surfshark. Another great VPN service that we recommend and that uses IKEv2 in its apps is NordVPN.

IKEv2 on routers

Unfortunately, IKEv2 is not largely supported by routers, unlike PPTP or L2TP. However, support for IKEv2 Wi-Fi routers is expanding as some VPN providers invest in such solutions. A great example is ExpressVPN and the routers they offer.

Do you need more info on how to use a VPN on a router? Take a look at our comprehensive article!

IKEv2 alternative protocols

IKEv2 is one of the strongest VPN protocols that you may use to encrypt your online communication. However, you should know what are the differences between IKEv2 and other VPN protocols.

OpenVPN

OpenVPN is probably the most popular VPN protocol due to its over features and performance. It offers excellent encryption options, great speed, and it can be easily integrated into third-party security solutions. Plus, it is open-source, unlike IKEv2.

IKEv2 offers a similar level of protection and encryption, but it surpasses OpenVPN on the followings:

• High-speed throughput.
• Stability.
• Auto-reconnection.

IKEv2 is usually faster than OpenVPN, but it is a little bit behind in terms of compatibility.

Overall, you may use both IKEv2 and OpenVPN with confidence.

WireGuard

WireGuard is a new and elegant protocol that seems to be the future of VPN. It is open-source, secure, and easy to use.

Both protocols (IKEv2 and Wireguard) are safe and really fast, but if you want a more modern approach, you should go with Wireguard.

L2TP/IPSec (Layer 2 Tunneling Protocol)

As L2TP/IPSec offers acceptable speed and great encryption, it may be a good option for encrypting your VPN channels. L2TP is paired with IPSec in the same manner IKEv2 and IPSec work together. However, there are signs that L2TP/IPSec is no longer secure, as Snowden has claimed that the NSA has hacked it.

IKEv2/IPSec is faster than L2TP/IPSec since L2TP/IPSec is more resource-intensive due to its double encapsulation feature and takes longer to negotiate a VPN tunnel.

Another aspect in favor of IKEv2 is stability. Switching from one network to another is a smooth process with IKEv2, while L2TP may let you disconnected.

Softether

It is difficult to compare IKEv2 and Softether, as the latter is more than a VPN protocol. However, if we refer only to the protocol itself, Softether and IKEv2 are both secure.

Softether has some important advantages as it is open-source and it runs on port 443 (HTTPS), and, consequently, it is more difficult to be blocked.

SSTP (Secure Socket Tunneling Protocol)

SSTP is a secure VPN protocol mostly available on Windows devices. It uses SSL 3.0, and it is quite speedy.

SSTP and IKEv2 offer a similar level of encryption, but SSTP is more firewall resistant as it uses port 443. SSTP is only built-in on Windows operating system, unlike IKEv2 that is available on multiple platforms and devices (iOS, Android, macOS, Linux, etc.).

PPTP

PPTP is an outdated protocol and you should not use it unless you have no other choice available. It has multiple security-related issues. However, it is really fast. But, you should always go for IKEv2 if you have to choose between these two.

What is IKEv2? Summary.

The IKEv2 VPN is a strong, secure, stable, and fast VPN protocol. IKEv2 has no significant downsides, and you may use it confidently anytime you need to encrypt your online communication.

As explained, IKEv2 is easy to set up, and it is available on VPN apps offered by most VPN providers. And, it is very suitable for usage on mobile devices due to its stability when switching networks.

Do you want to learn more about the IKEv2 Protocol and other VPN-related issues? Subscribe to our newsletter (below). You will make a Transylvanian baby-bat very happy.

Your data is … yours and you should keep it yours! Otherwise, you become the product and, sooner or later, a target for marketers, on one side, and hackers, on the other side. Do you want that?

VPNs should, by definition, protect your data, but sometimes they don’t. Don’t be fooled by marketing headlines and incomplete service descriptions! Take care of your data, do your own research, and avoid services that are too good to be true (e.g., free ones).

Do you remember the story of Pinocchio and the chapter when he meets the Fox and the Cat? Due to his naivety, Pinocchio not only trusts the two, but he even offers them a sum of money from the potential gain. Their answer is well-known:

“We do not work for gain,” answered the Fox. “We work only to enrich others.”

“To enrich others!” repeated the Cat.

“What good people,” thought Pinocchio to himself.

Even small children understand that the Fox and the Cat do not have good intentions. However, Pinocchio is blinded by their sweet words.

When it comes to online privacy, don’t be a Pinocchio. Look around, read between the lines, and assume the worst. Consider the possibility that the service intends to get the most of your private data.

This article explains why privacy is important when it comes to VPN services, how you can do your own research, why you should stay away from free VPNs, and lists several VPNs that may not be your best friend for keeping your private data safe.

What is VPN privacy important, and how can a VPN get your data?

A VPN (Virtual Private Network) can see everything you do online, and it may log your activities. Moreover, by ignoring your right to privacy, malicious VPNs may use or sell your data.

According to a scientific study on Android VPN apps, the following practices are quite common:

• Third-party user tracking – 75% of the apps analyzed used tracking libraries to monitor user activities.
• Malware injection – over 38% of the studied apps contained some malware presence detected by VirusTotal.
• Traffic interception – about 16% of the analyzed apps might forward traffic in a peer-forwarding fashion rather than using their own hosted machines.
• Traffic manipulation – 16% of the analyzed VPN apps deployed non-transparent proxies to modify user’s HTTP traffic. Also, several apps actively injected JavaScript code for serving ads and redirecting e-commerce traffic to external ad partners.
• App permissions abuses – 4% of the analyzed VPN apps used the app permissions to implement localhost proxies to intercept and inspect user traffic locally.

Unfortunately, most VPN users are not aware of these practices. The same study analyzed the public user reviews of the VPN apps on Google Play and showed that only a small number of VPN users have publicly raised any concerns.

For your own sake, you need to be one of those concerned about their online privacy. It would help if you did your homework, did your own research, and looked for red flags when choosing your VPN provider.

How to do your own research

Every time you subscribe to a VPN service (as a matter of fact you should do this with every service or app you subscribe to that has access to your data) you should take at least five minutes and look for:

• the contact information;
• the company running the service;
• the privacy policy page;
• any news or articles on the Internet related to the service.

And you should ask yourself questions like:

• Is the contact information easily available on the website? Is the physical address listed clearly?
• Is the company running the service listed with identification info (e.g., tax id)?
• Does the privacy policy present the way the service process users’ private data? Does the service log data? Does it share the data with third parties?
• Are there any independent audits publicly available? Take a search on “[VPN name] audit.” Look for independently performed audits by reputable companies (e.g., PricewaterhouseCoopers) rather than self-made audits.
• What info can you find regarding the reputation of a VPN service by searching online? You can try, for example, “[VPN name] privacy concerns” or “is [VPN name] safe?”. Take your time and read 2-3 articles and judge for yourself.

If you have the slightest doubts that the VPN is fully engaged in protecting users’ privacy, search for another provider. There are plenty of excellent ones. Just take a look at the list of VPN services that offer access to the WireGuard protocol.

Are free VPNs safe?

You have probably heard this before: “If the app you are using is free, then you are the product!”. It means that one way or another, sooner or later, the free app or service will get paid for letting you use it.

Does that mean that your data is sold and your privacy is endangered? Not necessarily, but there is no way you, as a user and private person, can verify how your data is managed and the consequences of using a free service.

A VPN service has access to many private data based on its functioning principle. It can “see” your browsing habits, for example, and it may use this info in various ways (it can sell this data to interested companies or partner with companies that target you for numerous products).

Taking all these into accounts I do not consider free VPNs safe.

You may be tempted to believe that freemium services (those offering both free and paid plans) are safer. And, generally speaking, they should be. However, as the cost of providing free VPN services are high (due to infrastructure costs), many freemium VPN services look for additional ways to monetize their users. Thus, my advice is to stay away from them too.

VPN services that may not protect your privacy

Several VPN services are either transparent of exploiting user data or exposed publicly for unfair practices. We have gathered a list of such services and explained why it is advisable to avoid them. If you know of other similar services, please let us know in the comments sections.

[1] Hotspot Shield

Hotspot Shield apps are installed on millions of devices all over the World, and the VPN service is considered to be one of the most popular VPNs available on the market. Of course, Hotspot Shield began as a free service and later switched to the freemium model. However, it seems that Hotspot Shield’s practices are not as transparent and privacy-oriented as one expects from a VPN provider.

1. The company behind the HotspotShield service

Hotspot Shield is (now) run by Aura, a group of companies (most of them located in the United States) that manage several VPN services. This should not be a problem by itself if there were no privacy and security concerns related to several VPNs owned by this group.

2. Aura’s privacy policy

Strangely, Aura’s privacy policy page does not mention Hotspot Shield but lists other VPNs like Betternet, Hexatech, and Touch VPN.

The privacy policy of Aura clearly states that their applications use various tracking technologies (Cookies, Pixel Tags / Page Tags / Web Beacons / Tracking Links, SDKs) to collect information about their users.

The user-related info is used, among others, to serve ads (!).

Moreover, it looks like the data collected from Aura apps is shared with third-party services that may, in their turn, use the data for marketing purposes and serve ads.

3. Service security

In 2018 a security researcher found a way to identify Hotspot Shield users. The data leaked (country where the user was located and the user’s Wi-Fi name) could have been used to locate the user. The Hotspot Shield development team rapidly fixed the problem, but the Hotspot Shield apps’ security policies’ concern remains.

4. Third party auditing

In 2017, CDT (the Center for Democracy and Technology) filed a complaint signaling “undisclosed and unclear data sharing and traffic redirection occurring in Hotspot Shield Free VPN.” In plain words, CDT said that Hotspot Shield was misleading users related to the amount of data shared with third-party partners.

And the CDT conclusion says it all:

“Consumers who employ Hotspot Shield VPN do so to protect their privacy, and Hotspot Shield’s use of aggressive logging practices and third-party partnerships harm its consumers’ declared privacy interests.”

Additionally, Hotspot Shield was also found using various shady practices such as:

• injecting Javascript code for advertising and tracking;
• using various tracking libraries;
• redirecting traffic to e-commerce sites.

Conclusion: Hotspot Shields and the companies running the service do not seem to be interested in complete privacy and anonymity. Hiding the IP address and encrypting traffic is not enough! Thus, my advice is to avoid them.

[2] Betternet (asa well as Hexatech and TouchVPN)

Betternet is a hugely popular VPN service with millions of users from all over the World. It started as a free service, and then, a few years back, it switched to the freemium model.

However, there are some red flags regarding the Betternet service.

1. The company behind the Betternet service

It is quite a challenge to find out who runs the service. On the Betternet website, Betternet LLC is listed. However, the Terms and conditions page mentions Pango and Pango GmbH as the entities behind Betternet. Strangely, when one clicks on the link to the Pango privacy policy, one is redirected to … (surprise!) Aura, the same group of companies that own Hotspot Shield. Additionally, other VPN services are mentioned, such as Hexatech and TouchVPN.

Of course, the same privacy policy applies to all services managed by the group, which implies that user tracking is performed at scale.

2. Service security

A service vulnerability that allowed hackers to push fake updates and install malicious apps was discovered in 2020. The Betternet team fixed the issue rapidly after it came out, but the question regarding Betternet security practices remains.

3. Third party auditing

The Betternet Android app was listed in the article that presented VPN apps that included tracking technologies. The Betternet app had, at the time of the study (2017), no less than 14 tracking libraries!

Conclusion: is Betternet safe to use? I don’t think it is. You should better find other VPNs that have a better reputation.

As Hexatech and TouchVPN are also run by Aura my advice is to stay away from them too.

[3] Hola VPN

Hola is another hugely popular free VPN service. However, it logs as much info about you as it can. On the positive side, their privacy policy is transparent about their extensive logging policy.

And, here it is what Hola logs:

• your IP address;
• name and email address, screen name;
• payment, billing information, and any other information you provide to the service;
• when you register through a third-party website (such as Gmail), Hola gets access and logs your user name, email address, profile picture, birth date, gender, and preferences.
• when you register through a social network account (e.g., Facebook), Hola gets and stores the followings: your full name, home address, email address, birth date, profile picture, friends list, personal description, as well as any other information you made publicly available on your social media account;
• installed applications from your devices;
• browser type, web pages you visit, time spent on those pages, access times, and dates (for free users).

As you can see, by using Hola, your private data stops being private. It is transferred, stored, and probably used by Hola.

Moreover, Hola shares gathered data with “trusted third-party service providers or partners for the purposes of providing you with the Services, storage, and analytics.” This means that your data is furthered processed and used, probably, against you.

And, yes, Hola may hand you your data and your profile to authorities, even though Israel, where Hola headquarters are located, is not a “Fourteen eyes” country.

Conclusion: stay away from Hola if you consider that your data should remain private!

[4] PureVPN

PureVPN is a solid VPN provider with a privacy policy that states clearly that the service does not keep “any logs that can identify or help in monitoring a user’s activity”.

However, PureVPN was caught logging user data. In 2017, an investigation made public revealed that PureVPN provided data to the FBI for the criminal case. That proved that the “no logs” claim was untrue. This should raise some concerns for those interested in privacy and anonymity.

It is fair to mention that in 2019 and 2020, PureVPN completed two no-logs audits conducted by Altius IT and KPMG, respectively. The audits confirmed that, at the time of the audit, PureVPN kept not logs, and they “did not find any evidence of system configurations and/or system/service log files that independently, or collectively, could lead to identifying a specific person and/or the person’s activity when using the PureVPN service.”

Conclusion: Is PureVPN safe? Taking into account the latest audits, we may say it is. However, the fact that at some point, PureVPN shared user data with authorities remains a red flag.

Summary

Your personal data is important, and you should keep it private. It sounds obvious, but sometimes it is not. Especially when it comes to data privacy in the Internet world.

Plenty of apps and services gather access to your data and use them for their own gain. Don’t let this happen!

Online privacy and security are built on trust. That is why we have listed several VPN services that may have trust issues and that you should, in my opinion, avoid.

Do you know another VPN provider that should be on the list? Feel free to let us know in the comments below. Would you like to be notified when we publish new articles? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

WireGuard is a relatively new VPN protocol that has gained a great reputation due to its speed and simplicity. Using WireGuard on Windows is simple, and you may get started in a matter of minutes. This article explains how to set it up on Windows 10.

WireGuard Windows setup [Summary]

To use WireGuard on Windows you may either install the WireGuard VPN client or a third-party VPN app (also known as VPN software) that uses the WireGuard protocol.

• Prerequisites:
  • Access to a WireGuard config file provided by the server admin or to a VPN service that implements the WireGuard protocol.
• Option 1: Download and configure the WireGuard VPN client for Windows.
  • Step 1: Install the official WireGuard app.
  • Step 2: Import the configuration info or create a new tunnel from scratch.
  • Step 3: Enable the WireGuard connection.
• Option 2: Subscribe to a VPN provider that offers access to the WireGuard protocol. Download the Windows app, select the WireGuard protocol (if needed), and connect.

If your goal is to set up a VPN connection on Windows, you may also take a look at our article on how to set up a VPN on Windows. `You will find out how to choose your Windows VPN provider wisely.

Why is WireGuard great for Windows

WireGuard is a new VPN protocol created by Jason A. Donenfeld that is considered an excellent replacement for OpenVPN. Even though it was initially developed for Linux, WireGuard works excellent on Windows as well as on other operating systems (macOS, iOS, Android).

WireGuard is a great choice for Windows users as:

• It is free and open-source.
• It uses state-of-the-art encryption and cryptography.
• WireGuard is remarkably fast and faster than OpenVPN.
• The WireGuard Windows client app is stable and easy to use.

WireGuard works great on all types of devices, including those with limited computing power. It uses fewer resources and, thus, offers great performance.

To sum up, the WireGuard protocol is a great choice for Windows, and you should consider it as your main tool for encrypting your data.

How to install WireGuard on Windows

You may use WireGuard on Windows either by installing the WireGuard Windows client app or using a VPN app provided by a VPN service that implements the WireGuard protocol.

Use the WireGuard VPN client for Windows

Firstly you need the connection credentials of a WireGuard server. You may obtain them from a VPN provider (e.g., OVPN, Mullvad) or the VPN server administrator (you may also set up your own server).

Most of the time, you will get a configuration file that contains all the necessary info (server address, private/public keys, DNS addresses, allowed IP addresses, etc.) that looks similar to this one:

[Interface]
PrivateKey = 6EP+8PVo57wONjvOD9LM/V/Ttdr+2XyGz2FzQrdY23s=
Address = 172.18.80.148/32, fd00:0000:1337:cafe:1111:1111:15e7:e4c0/128
DNS = 46.227.67.134, 192.165.9.158

[Peer]
PublicKey = r83LIc0W2F8s3dY9x5y17Yz8wTAQJc7giW1t5eSmeXc=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn44.prd.vienna.ovpn.com:9929

To set up the WireGuard connection on Windows 10 proceed as follows:

1. Open the WireGuard official website.
2. Download the Windows Installer.
3. Start the WireGuard Windows app.
4. You have two options:
   • Create a new tunnel (Add Tunnel from the bottom-left corner of the window app) – enter a name for the tunnel, the public key, and the other connection properties.
   • Import tunnel(s) from file – in case you have received a WireGuard conf file from your VPN provider or the VPN administrator you may import it and get all the tunnel properties at once.
5. Next, turn on the VPN connection by clicking the Activate button.
6. If the connection credentials are correct, you will see the connection succesful message on the bottom-right of the screen.
7. To disconnect, open the WireGuard app and click the Deactivate button.

Blocked untunneled traffic (kill switch)

If you edit an existing connection you will notice the Block untunneled traffic option. It is a Kill Switch mechanism that adds Windows Firewall rules to block traffic that tries to bypass the VPN connection. This option can be enabled if the configuration has exactly one Peer section and AllowedIPs is set to a catch-all address.

Install a Windows VPN app that offers access to WireGuard

If you are interested only in the benefits exposed by WireGuard (fast connections, great download/upload speed) and you don’t want to know more about the technical implementation, you may use a VPN app provided by a WireGuard VPN service.

The first step is to find such a VPN service. We recommend one of the following: NordVPN, Surfshark, Hide.me, PrivateInternetAccess, but there are many more.

Next, download the Windows app from the provider’s website and install it. Further, enable the WireGuard protocol (for most of the apps WireGuard is not yet the default protocol), and connect to the VPN. You are all set up with WireGuard on Windows!

WireGuard on Windows FAQs

Summary

WireGuard is a secure and fast VPN protocol, and it works great on Windows, as well as on Android, on iOS, on Mac, or Linux. Installing a VPN app that supports WireGuard is the fastest way to get started. However, you may use the official WireGuard VPN client app and set the connection manually.

Have you found our article on how to use WireGuard on Windows useful? If so, subscribe to our newsletter! We will let you know when we publish new WireGuard-related articles, and you will make a Transylvanian baby-bat happy.

Need to access your favorite content on Netflix, Disney+, BBC iPlayer, or other geo-restricted channels? Smart DNS is a solution that is not only easy to set up but also faster than VPN. This does not mean that you have to choose between Smart DNS and VPN. You may have access to both. This article lists the best Smart DNS services offered by top VPN providers.

Smart DNS is a technology that can easily unblock streaming channels from all over the World. There are two main benefits of Smart DNS: it offers great speed while accessing streaming content, and it can be installed on devices that are not VPN-enabled.

This article briefly explains what SmartDNS is, emphasizes its advantages, explains why VPN providers have embraced the technology, and lists the best Smart DNS services that we have tested.

What is Smart DNS, and what are its main advantages?

Smart DNS is a technology that can unblock geo-restricted streaming channels like Netflix, Amazon Prime, Disney Plus, HBO, Hulu, BBC iPlayer.

Unlike VPN, which can also be used to access streaming sites, Smart DNS does not hide your IP address nor encrypt your data (more details regarding VPN vs. Smart DNS can be found here). It solely redirected requests to streaming sites through proxy servers from different locations (e.g., in the United States for accessing Hulu or Amazon Prime). Thus, the proxy server plays the middleman role and facilitates a connection between your device and the streaming servers.

When Smart DNS is enabled, the ISP-assigned DNS (Domain Name Server) address of the device is replaced with the Smart DNS server’s address. When you access a streaming channel that the service can unblock, the streaming servers’ requests are redirected to a proxy service that does the trick of changing the request’s location.

The main advantage of unblocking streaming websites or apps with SmartDNS is that the approach does not slow down your connection (as no encryption is performed). Of course, the downside is that Smart DNS does not provide the same level of privacy and anonymity as a VPN.

Another significant advantage is that SmartDNS can be set up on devices not VPN-enabled, for example, on Smart TVs. Thus, such a service can unblock streaming services directly on your TV without extra tweaks.

Why are VPN providers offering SmartDNS services?

Some VPN providers have decided to include a Smart DNS service along with the VPN offer. This is a “smart” decision as it brings benefits to both the users and the providers:

• The Smart DNS technology offers better speed and greater stability for online streaming compared to the VPN (Virtual Private Network).
• It is a complementary service, and clients may use both Smart DNS and VPN.
• Smart DNS can be used on devices that do not support VPN connections.
• Unblocking streaming channels consumes a lot of server bandwidth. The Smart DNS technology reduces the load on VPN servers and lets the users in need of encryption benefit from smoother and faster connections.

What you need to run SmartDNS

Smart DNS can be set up on a large variety of operating systems (Windows, Mac, Linux, iOS, Android) and devices: desktops, mobile devices (Android, iPhone, iPad), gaming consoles (PlayStation, Xbox), Smart TVs (Sony, Samsung, LG), Apple TV, Roku, routers.

You don’t need to install anything. The manuals setup consists of modifying the DNS settings of your device or an app. Also, some SmartDNS providers offer the functionality of setting up the DNS from within the VPN apps (which are easy-to-use VPN software).

Before you start installing SmartDNS, you need to get the IP(s) of the Smart DNS server(s). You may usually find the DNS IP in the tutorials provided by the SmartDNS service.

Next, you need to modify the DNS settings for your device. For example, on Windows 10, you have to:

1. Search for the Control Panel.
2. Click on Network and Internet and, further, on Network and Sharing Center.
3. Next, on the left side, click on Change adapter settings.
4. Right-click on the interface through which you are connected to the Internet and click “Properties.”
5. Uncheck the Internet Protocol Version 6 (TCP/IPv6) option.
6. Double-click on Internet Protocol Version 4 (TCP/IPv4).
7. In the General tab, select Use the following DNS server addresses and enter the DNS server address provided by the SmartDNS service.
8. You may check the Validate settings upon exit. If you do, the Windows Network Diagnostics will start after you click the OK button, and it will check the DNS settings.
9. It is advisable to restart your computer.

After you have finished the Smart DNS setup you may load the streaming website or the streaming app.

Important! A Smart DNS service will unblock only specific streaming services listed on the provider’s website. It is not an unblocking technology that works on any website.

VPN providers that offer the best Smart DNS services

For some time now, VPN services have successfully integrated the Smart DNS technology in their services. The most well-known services that popularised SmartDNS were Overplay.net (now part of StrongVPN) and StrongVPN with its StrongDNS. Other VPNs followed, and now there are plenty of VPN providers that offer SmartDNS.

Of course, several services only offer SmartDNS, like SmartyDNS, SmartDNSProxy, or Unlocator. However, we consider that VPN services with SmartDNS bring more value for the money as they offer alternatives to unblocking streaming content.

Now, let’s get started with the list.

[1] StrongVPN

StrongDNS is the name of the Smart DNS service offered by StrongVPN. And, it is exceptional. The number of unblocked channels is fantastic and the exposed features are very useful.

To get started with SmartDNS, you need to create a StrongVPN account first. Next, from the Customer Area, click the StrongDNS link. You will be redirected to the StrongDNS website to continue with the setup.

From the Setup Instruction page click on the Configure your channels button. You may turn StrongDNS on or off for your IP address.

The best part is that you have a large selection of channels; for each channel, you may choose a country/location (if available), and you may see on which devices StrongDNS works. For example, you may unblock Netflix from one of the many locations listed but only from your browser.

Other advantages of Strong DNS:

• You may update your IP using the URL provided on the Setup Instruction page.
• You may set it up easily on DD-WRT, Tomato, Sabai routers (tutorials are available).

Overall, I consider StrongDNS the most advanced Smart DNS service offered by a VPN provider.

[2] CactusVPN

The Smart DNS service offered by CactusVPN is also impressive. It unblocks more than 300 streaming channels from many countries and locations, and it exposes several advanced features that may be useful in various scenarios.

You may use the service from devices located in one local network at a time. First, you need to validate the public IP address of your network (Admin area > Settings > Validate Your IP address), then change the DNS settings on your device(s) as shown in the provided tutorials. Next, you need to select the country/region you want to unblock (Settings > Smart DNS Manual Setup > Websites Region).

In case your IP address is dynamic and it gets changed a lot, you have several convenient options instead of logging in to the admin panel and validate the IP manually (as shown above):

• Validate your new IP address with an URL and access the URL every time your IP is changed.
• Use a Dynamic DNS service and set the domain to the CactusVPN admin panel (Settings > Smart DNS Advanced > Dynamic DNS Settings). Your IP will be updated automatically.

Several channels that may be unblocked by the CactusVPN Smart DNS service are listed below:

• US – Netflix US, Amazon Prime, Disney+, Hulu, Pandora, Crunchyroll, HBO Go, HBO Max, NBC, Fox, ESPN Player, etc.
• Canada – History, MTV.ca, ShowCase, CBC, SportsNet, CTV, CraveTV, TVA, TSN, etc.
• UK – BBC iPlayer, ITV Player, Channel 4, Channel 5, NowTV, Eurosport Player, Demand 5, Sky Go, etc.
• Germany – Zattoo Germany, RTL, Vox Now, Super RTL, Alles Kino, Arte Germany, 2DF, ZDF, ARD.de, DMAX, TV.de, Maxdome, SAT.1, etc.
• France – France.TV, France 1, France 2, France.TV Sport, myCanal, Canal Play, My TFI, Arte France, Molotov.TV
• Italy – Netflix, Rai Play, Infinity, Mediaset Play, Dplay Italy, NowTV Italy
• Poland – Netflix Poland, HBO Go, TVP.Pl, TVP VOD, iPla, VOD, KinoPlex, Nowa, WP, Vectra, etc.
• Switzerland – Zattoo Switzerland, Swisscom, Play RTS, Play SFR, Teleboy, Wilmaa, etc.
• Sweden – HBO Nordic, Plejmo, SVT Play, Viafree, UR
• Rusia – Wink, Amediateka, DivanTV, THT, Okko
• India – Disney+ Hotstar, Voot, Zee5, Star, TVF Play, MX Player, ALT Balaji, etc.
• Australia – 7 Plus, 9 Now, SBS, Fox Sports, Anime Lab, iView, Stan, Kayo, Binge.

[3] Surfshark

Surfshark includes access to their Smart DNS services without extra charge. You may activate it for one IP address at a time and it helps you bypass geo-restrictions for the US content (US Netflix, Amazon Prime, Disney+, US Hulu, etc.).

To activate SmartDNS, log in to the Surfshark account and click on Smart DNS from the left menu. Your current visible IP address will be shown, and you may Activate Smart DNS for it. You may change it later if your IP address is changed. If you intend to use SmartDNS on a device from another network, type in the IP address corresponding to that device.

Next, you will see the DNS address you need to use for the Smart DNS setup on your device.

[4] NordVPN

NordVPN is one the best VPN providers available on the market, with excellent features, fantastic performance, and great apps. It also has a strict zero-log policy audited by independent IP security companies.

With the Smart DNS service offered by NordVPN you may access the following streaming services:

• ABC Go (US region)
• Amazon Prime (US region)
• Fox Now, Sports Go, News, Showtime (US region)
• HBO Now (US region)
• Disney Plus (German region)
• Netflix Originals

One IP address is supported, so you may use it on multiple devices, but located in the same network. Thus, if you use a router at home you may set the Smart DNS on all devices that connect to the router and share the same public IP address.

To activate Smart DNS, log in to the NordVPN account, click on the View Details button from the NordVPN service. Next, click on the Activate button from the Smart DNS section. Your current public IP address is picked up, and you will be granted access only to devices using this IP. You will receive an email with the DNS addresses and set up instructions.

Important! If you want to activate Smart DNS for a Smart TV, you may need to activate the service from the same network used by the TV.

[5] ExpressVPN

MediaStreamer is the Smart DNS service designed by ExpressVPN to help you unblock geo-restricted streaming channels. Even though the websites and apps that can be accessed using MediaStreamer are not listed, it seems that it works only for US-based channels (Netflix, Hulu, Amazon Prime, etc.).

To get MediaStreamer activated, login to the ExpressVPN account and select DNS settings from the left menu. You will get your current IP address registered.

Every time your IP changes, you need to update it to the ExpressVPN systems. You may select to have your IP address updated automatically. Thus, every time you sign in to the ExpressVPN website or use an ExpressVPN app, your current IP will get re-registered.

The last step is to set ExpressVPN DNS IP addresses to your device. Click the Configure DNS on this device to proceed.

Best Smart DNS FAQ

Summary

We have listed 5 VPN providers that offer access to their own Smart DNS service. The main advantage for you is that you may unblock streaming channels on devices that can not connect to VPN, such as Smart TVs and game consoles. Additionally, Smart DNS is faster than a VPN.

Do you know another VPN provider with Smart DNS that is not on the list? Feel free to let us know in the comments below.

Would you like to be notified when we add new VPN services to the Smart DNS list? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

This article helps you set up an OpenVPN split tunnel on your device and get the most of your VPN experience by selecting the data that goes through the VPN tunnel.

I briefly explain what VPN split tunneling is, why you may need it, and how to set up an OpenVPN split tunnel.

OpenVPN split tunnel [Summary]

Depending on the type of OpenVPN VPN server you want to connect to (OpenVPN Access Server or OpenVPN Community Edition server), you have the following options:

• Connect to an OpenVPN Access Server:
  • Set up the split tunnel from the OpenVPN Access Server admin interface.
• Connect to an OpenVPN Community Edition server:
  • Option 1: Modify the OpenVPN config file.
  • Option 2: Use a VPN client app with split tunneling on OpenVPN.

What is VPN split tunneling, and why you may need it with OpenVPN?

VPN split tunneling is an advanced but useful feature provided by several VPN apps/VPN software and technologies. It controls the VPN traffic; more precisely, it directs some of the traffic through the VPN’s encrypted tunnel and some traffic to the standard, unencrypted channel through the ISP to the Internet.

It is a very convenient way to use a VPN for specific activities (e.g., unblock streaming channels or download torrents securely) and let other apps access local resources with your regular IP address.

A well set up VPN split tunnel provides a perfectly balanced approach for better security and great speed while using VPN only for specific apps or websites.

OpenVPN is (probably) the most commonly used protocol by the VPN services available on the market, even though WireGuard looks like a serious challenger. Thus, it is useful to know and understand how you can set up split tunneling on OpenVPN.

Solutions for setting up an OpenVPN split tunnel

You may connect to two types of servers with the OpenVPN protocol: the OpenVPN Access Server (the commercial one) and the OpenVPN Community Edition server (the free server used by most of the VPN providers). And, of course, the approaches to implementing the split tunnel depend on the type of server.

Split tunneling with the OpenVPN Access Server

OpenVPN Access Server is the commercial version of the OpenVPN server, designed and optimized for businesses.

If you are using the OpenVPN Access Server, then you may set up a split tunnel easily from the administration dashboard:

• Log in to the Admin Web UI.
• Navigate to Configuration > VPN Settings > Routing.
• Turn Should client Internet traffic be routed through the VPN? to No. From now on, the traffic intended for your private networks will cross the VPN. Other traffic will bypass the VPN.
• Additionally, you may specify subnets in the input field: Specify the private subnets to which all clients should be given access (one per line).

For more details regarding split tunneling on the OpenVPN Access Server, take a look here.

OpenVPN manual modifying config files

When you connect to an OpenVPN Community Edition server and access the OpenVPN config files, you may modify them and implement the split tunnel as you please. This is the case when you set up your own OpenVPN server or when you are subscribed to a VPN service that allows you to download the config files and use the OpenVPN client app to connect (e.g., NordVPN or OVPN).

To instruct OpenVPN use the VPN tunnel only for specific websites, here is what you have to do:

1. First, find the IP of the site you want to access via VPN. You may use the nslookup command or load an IP locator website (e.g., XMyIP.com), enter the URL of the website and get the IP address.
2. Open and edit the OpenVPN conf file (.ovpn). Any text editor will do.
3. Add the following commands:
   route-nopull
route [IP address of the website] 255.255.255.255
4. Save changes and restart the OpenVPN connection.
5. To remove the split tunnel, delete the two rows, and restart the OpenVPN connection.

The result is that only the traffic to the selected website(s) will use the OpenVPN encrypted tunnel, and the rest of the traffic will remain unencrypted.

You may need to additionally configure VPN DNS Servers to stop DNS leaks, as described here, at step 6.

This works on operating systems like Windows, macOS, or Linux (Fedora, CentOS, Ubuntu, etc.), and even on routers (here it is how to set up a VPN on a router).

VPN apps with split tunneling on OpenVPN

Several VPN apps that use the OpenVPN protocol can also split the data traffic depending on the user’s needs. The setup is usually quite simple, and it consists of selecting the apps that you want to use the VPN tunnel (or, reversely, the apps that you don’t want to use the encrypted Internet connection) and turning the split option on.

Great VPNs that offer OpenVPN split tunneling are Hide.me, ExpressVPN, PrivateInternetAccess, NordVPN (on Windows and Android), and Surfshark (on Windows and Android).

For example, for enabling the OpenVPN split tunnel on Hide.me apps you have to:

1. Open the Hide.me app (in this case, the macOS app).
2. Make sure you use the OpenVPN protocol: Menu > VPN Protocol > OpenVPN.
3. Next, open the Split Tunnel tab from the left menu.
4. Select one of the two options:
   • Do not allow selected apps to use the VPN (inverse split tunneling)
   • Only allow selected apps to use the VPN
5. The split tunnel will be turned on once the VPN connection is initialized.

How to test the OpenVPN split tunnel

My recommendation is to test your split-tunnel setup, no matter the solution you have chosen. For example, do not assume that a split-tunneling feature exposed by a VPN app works just because the feature is available. Many factors may influence the proper functioning of the app. For example, some users have reported that the ExpressVPN app does not properly establish a VPN split tunnel on Mac.

It would be best if you did not assume that your split-tunnel works perfectly as soon as you have finalized the setup. Many aspects may not go as planned.

My recommendation is to do the followings:

1. With no VPN enabled, load, for example, xmyip.com (IP: 67.227.194.148). Notice your public IP address.
2. Set the VPN split for xmyip (either within the OpenVPN config file, or by adding your favorite browser to the split tunnel list, as explained above).
3. Enable the VPN connection.
4. Re-load xmyip. Observe that your public IP address is no longer shown and the IP of the VPN server replaced it.
5. If the test was successful, you may proceed with the website or websites you want to access through the VPN.

OpenVPN split tunnel FAQs

Summary

OpenVPN is probably the most used VPN protocol and a prevalent option for all VPN usage scenarios. VPN split tunneling, which brings significant benefits, can be easily set up with OpenVPN either by adding commands in the config files or by enabling the option from the VPN apps’ settings.

This is the end of our tutorial on how to get set up VPN split tunneling on OpenVPN. Subscribe to our newsletter to get notified when we publish new articles. Additionally, you will make a Transylvanian baby-bat happy.

VPN Gate is a free VPN solution used by millions of Internet enthusiasts. It was developed as an academic research project, and it has plenty of advantages. But is VPN Gate the perfect VPN solution? Let’s find out.

We do not (usually) recommend free VPN services due to security and privacy concerns. We believe that Internet users’ private data is far too important to be endangered by free VPNs (we explain here why, in more detail). However, we have chosen to present VPN Gate because it is an academic project. There are plenty of interesting details regarding the architecture and the technical solutions adopted for the implementation.

From the very beginning, it is necessary to underline that VPNGate is not an ordinary VPN service. This article takes a closer look at the VPNGate project, presents its advantages, explains the disadvantages, underlines the possible privacy and security issues, and shows how you may connect to the VPN Gate network.

The Transylvanian story of a gate to freedom

The life of bats is not simple in Castlevania. There is always a bigger bat that can make your life miserable.

From the beginning of winter, the MegaBats have started to close communication routes between the other colonies of bats. They were able to intercept the messengers and lock them down. Why were they doing that? Because they could. For some bats, this kind of motivation is enough. Sad, but true.

To every problem, there is a solution. GrandPaBat and the other bats from the Council of Elders have gathered to find a way out to these arbitrarily-imposed communication restrictions.

– My fellow bats, there must be a way to stop this abuse! We need to share news regarding food, shelter, or possible dangers between us, the regular bats! Our survival is at stake.

And, indeed, they found a way. They established to use Vlad’s castle as their safe harbor, their gate to freedom. When a group of bats would have something to share with the other bats, it should send a messenger, using a safe route (as far as the MegaBats as possible), to the castle. The messenger would entrust GrandPaBat and TomBat with the news and let them spread the knowledge to the other groups. No direct, unprotected communication between bat communities, lesser chances to lose important information.

Similar to the workaround found by the bats from Castlevania, VPN Gate represents a way to bypass censorship and keep the information private and secure.

And now, let’s find out how VPNGate works and how to use it!

What is VPN Gate and why was it created?

VPN Gate is an experimental project created at the University of Tsukuba that has the declared goal to expand the knowledge of “Global Distributed Public VPN Relay Servers” and to find better solutions for distributed VPN server systems.

VPNGate is a network of VPN servers provided by volunteers worldwide, a server network that uses the SoftEther VPN technology for encrypting data, routing traffic, and secure communication. The VPN Gate’s main purpose is to hide your IP address while browsing the Internet and help you benefit from the other VPN’s advantages. The usage of VPNGate is free, and no registration is needed.

The software running the VPN Gate server network is based on the SoftEther technology, and it was developed as a plug-in to extend SoftEther. Both projects (SoftEther and VPNGate) are operated at the University of Tsukuba, but it is important to mention that VPN Gate is not part of SoftEther.

How does VPN Gate work?

VPN Gate represents the infrastructure that allows servers to be added by volunteers. The architecture is based on the SoftEther technology and benefits from its advantages (performance, security, multiple protocols).

When a volunteer installs the SoftEther VPN server software on his Windows machine, the server is added to the public list, and it can be discovered by interested users.

When a VPN Gate user needs to connect to the network, he/she looks through the available servers listed, picks one, and directly connects to it (as presented below). No data traffic is passed through the VPNGate network, only between the user, the VPN server, and the Internet.

When to use the VPN Gate network?

VPN Gate is a totally free solution to connect to a VPN, hide your IP address, and encrypt your Internet traffic.

The VPN Gate is useful in certain scenarios to:

• Bypass governmental firewalls. The main goal of VPN Gate is to enhance Internet freedom. The SoftEther VPN protocol works on HTTPS, and it is especially difficult to be detected and blocked. Thus, it is ideal for bypassing firewalls of any type, including the Great Wall of China.
• Bypass geo-restrictions or ISP throttling. Some content (streaming channels, websites, forums, apps) is only available in certain countries or regions. By connecting to a VPNGate server from the country with access to the content, you may enjoy an awesome online experience without any restrictions.

However, before you start using it, make sure you read the disadvantages and the security concerns.

Advantages and disadvantages of VPN Gate

Like any other VPN solution, VPN Gate has pros and cons. I will list them below to help you decide whether VPN Gate is suitable for you or not.

Advantages of using VPN Gate

VPN Gate is free, but this is not the only advantage it has:

• It is open source.
• It is part of a research project backed up by a prestigious university.
• There is an important community that sustains the project.
• The network consists of more than 17,000 servers (only several hundred are listed at any given time, for security reasons).
• Servers are not placed in data centers, and they are harder to be blocked based on IP ranges.
• It provides access to several VPN protocols with high encryption (256-bit): SoftEther, OpenVPN, IPSec, SSTP.
• Many servers use the SoftEther protocol, which is very safe, fast, and stealthy.
• Some servers can unblock streaming channels like Netflix, BBC player, etc.
• Some VPN servers allow torrent traffic.
• You benefit from unlimited server and country switching.
• It can be configured on most devices, including routers.
• There are no IP leaks.

Disadvantages of using VPN Gate

Even though the list of advantages is impressive, the VPN Gate network has its drawbacks:

• It is too complicated for the average Internet user.
• Many servers provide slow speed as they are basic computers located in residential areas.
• The connectivity and overall performance are unstable.
• On mobile devices (iPhone, iPad, Android), you may not connect using the SoftEther protocol.
• It may be difficult to find a certain location or country since only a small part of the network is listed.
• The general logging policy of the network is that servers keep logs for two weeks. You may check specific logging settings for each server in the server list.
• Servers offered by volunteers may serve you ads (as some users have reported).

Is VPN Gate trustworthy? Privacy and security concerns

VPN Gate looks excellent from many angles: it is free, it was created and it is maintained by an academic institution, it is open source. But, should you completely trust it with your private data? I say you would rather not.

VPN Gate was created primarily as a research project to help those in need of bypassing governmental censorship. And for that it is great! You will probably not find a better free tool.

The weak spot of VPNGate is the fact that volunteers provide the servers. Even though VPN Gate’s technology seems secure both for the user and the volunteer, there are still concerns about the way server owners manage users’ data. For example, volunteers may have access to connection and usage logs. Are you comfortable with the thought that someone you don’t know and is not restrained by any regulation has access to such data?

Additionally, as stated on the website, the VPN Gate team may hand in your activities’ logged data if requested by official authorities.

Thus, if your data and activities’ privacy is important to you, my advice is to choose a premium VPN service, such as NordVPN, ExpressVPN, Surfshark, or Mullvad. They are better to keep your Internet traffic data safe and maintain your privacy than some volunteers from random locations around the globe.

VPN Gate vs. free VPN

VPN Gate is free, but there are clear distinctions to free VPNs.

Most (if not all) free VPNs have the goal to make money, but they do not charge you directly, unlike commercial VPNs. Free VPNs are monetizing their users either through showing ads or by selling their data. That is why we do NOT recommend free VPN solutions.

VPN Gate defines a generic infrastructure that is regulated by the team at the University of Tsukuba. VPN servers are exposed to the network by volunteers, free of charge, of course, with the only declared goal to help the project research and help those in need for bypassing various restrictions or government’s firewalls.

Still, my advice is to use VPNGate cautiously and only when you can not afford to get a paid VPN or don’t have a better alternative. There is still a possibility that a VPN server may be corrupted and get your data traffic exposed.

How to set up VPN Gate on your devices

There are several ways to connect to a VPN Gate server and there are two aspects that you need to take into consideration:

• the VPN protocols that are exposed by a VPN Gate server;
• the operating system of the device you want to connect from.

The steps to connect to a VPN Gate servers are:

1. Open the VPN Gate Public VPN Relay Server list (www.vpngate.net) and choose a VPN server from any location you want (you may select the server taking into account the scoring that is related to the overall performance of the server);
2. Check the protocols shown by the desired server (SoftEther/SSL-VPN, OpenVPN, MS-SSTP, L2TP/IPSec);
3. Choose the protocol suitable for the device you want to connect to the VPN server (check the table below);
4. Download and install any app that you need to connect (the SoftEther client, the OpenVPN app);
5. Fill in the VPN connection properties (server hostname or IP address, port number, type of connection: UDP or TCP for OpenVPN or SoftEther, username and password). For all servers, usernames and passwords are “vpn“.
6. Connect to the server (no registration is needed).

And here are the protocols suitable for the most popular operating systems (devices):

Thus, for Windows, you may install the official SoftEther VPN client and connect using the SSL VPN protocol. There is also a VPN Gate Client plugin that integrates with the SoftEther app and initiates the VPN Gate connection with a click.

You may also connect from the built-in VPN clients available on Windows with Microsoft SSTP or L2TP/IPSec. OpenVPN is also an option by installing the OpenVPN client app.

On Linux, all options are available, with the limitation that, for SSTP, you need to install an SSTP library.

On Mac, there are options to connect to a SoftEther VPN server, and I have described them in detail here. Using the SoftEther protocol is possible but does not always work as it depends on a third-party, outdated app.

On mobile devices (iOS, Android), SSL VPN and SSTP are not available, but you may connect using L2TP/IPSec (with the built-in VPN client) or OpenVPN (by downloading the official OpenVPN client app).

Several tutorials on how to access VPN Gate are available on the official website.

How to install a VPN Gate server on your computer

Would you like to help others bypass Internet censorship? Then, you may consider sharing your Internet connection and become a volunteer in the VPN Gate network.

You need a Windows computer. Then you have to install the SoftEther VPN server, activate and configure the VPN Gate service, and (optionally) enable L2TP/IPsec VPN for your guests.

I strongly recommend you carefully read what the installation of the VPN Gate server on your computer involves. You may find all the details and installation info here.

VPN Gate FAQ

Conclusion. Should you use VPN Gate?

VPNGate, the Japanese academic project, is a solid VPN solution, ideal for bypassing Internet censorship and unblocking restricted websites. It may be a valuable tool for Internet users from countries where free Internet access is restricted, for activists or journalists.

However, it may be complicated to set it up, find a fast server, and change VPN locations. Additionally, the fact that VPN servers are exposed and controlled by anonymous volunteers may be a deal-breaker.

Should you use it? My advice is to connect to VPN Gate only when you have no choice, when you can not afford to subscribe to a premium VPN service, or when you cannot solve your problem with a premium VPN. Top VPN providers offer access to friendly apps, plenty of servers, access to advanced security options (Kill Switch, split tunneling), or fancy server options (obfuscated servers, Double VPN, Onion over VPN, Shadowsocks).

You have reached the final of our article on VPN Gate. Please subscribe to our newsletter (below), and we promise to keep you updated with news and tutorials on SoftEther and VPN Gate. Plus, you will make a Transylvanian baby-bat very happy.

Using WireGuard on Android gets easier each day. There are several options to set up the new VPN protocol on your Android devices and plenty of VPN software that fully integrate WireGuard. In a matter of minutes and with a few clicks, you may start using WireGuard.

WireGuard Android setup [Summary]

There are two options to get started with WireGuard on Android. My advice is to take a look at both of them and then decide which way to go.

• Option 1: Download and configure the WireGuard VPN app for Android.
  • Step 1: Install the official WireGuard client app.
  • Step 2: Import the configuration or create a new tunnel.
  • Step 3: Activate the WireGuard connection.
• Option 2: Subscribe to a VPN provider that offers access to WireGuard. Download the Android app, enable the WireGuard protocol (if needed), and connect.

As your goal is to use WireGuard on Android devices, I suggest you also read our article on using a VPN on Android. `You will find out how VPN works on Android, what are the advantages of using a VPN, and what VPN services we recommend.

The WireGuard protocol and why it is a great choice for Android

WireGuard (a registered trademark of Jason A. Donenfeld) is a new VPN protocol that is praised for its simplicity and speed. Initially developed for Linux, it is now available for all major operating systems (Linux, Windows, macOS, iOS, Android).

WireGuard stands out with several important features:

• It is open-source and, consequently, free.
• WireGuard is really fast. Our tests show that WireGuard is faster than OpenVPN.
• It uses high-level encryption.
• The project codebase is about 4,000 lines, much less than other similar VPN protocols (OpenVPN, IPSec, etc.).
• It is integrated into the Linux kernel.

WireGuard is well suited for mobile devices, generally speaking for devices with less computing power. It was designed to use fewer resources, and thus, as a consequence, it saves battery life. Additionally, WireGuard offers great roaming support, and it accommodates hassle-free switch from WiFi to mobile data.

To conclude, the WireGuard protocol is a great choice for Android, and you should consider using it as your main protocol for encrypting your data.

How to install WireGuard on Android

You may use WireGuard on Android either by installing the WireGuard VPN app or using a VPN app provided by a VPN service that implements the WireGuard protocol.

Use the WireGuard VPN client for Android

Before starting the WireGuard setup, make sure you have access to the VPN server’s authentication credentials. You may set up your own WireGuard server, get access from a network administrator, or from a VPN provider.

The WireGuard server connection data can be:

• contained in a configuration file that contains all necessary info (server IP, private/public keys, various settings);
• encoded in a QR code generated based on a config file (it can be generated using the qrencode library);
• the server name or IP address, and the other connection properties.

The WireGuard config file contains all the information necessary for setting up the encrypted connection:

• PrivateKey – the private key of the user;
• Address – the internal IPs (IPv4 and/or IPv6);
• DNS – the DNS address(es) or IP(s) (IPv4 and/or IPv6);
• PublicKey – the public key of the server;
• AllowedIPs – list of addresses that get routed to the peer;
• Endpoint – the name or the IP address of the WireGuard VPN server and the communication port.

Here it is how a WireGuard config looks like:

[Interface]
PrivateKey = 6EP+8PVo57wONjvOD9LM/V/Ttdr+2XyGz2FzQrdY23s=
Address = 172.18.80.148/32, fd00:0000:1337:cafe:1111:1111:15e7:e4c0/128
DNS = 46.227.67.134, 192.165.9.158

[Peer]
PublicKey = r83LIc0W2F8s3dY9x5y17Yz8wTAQJc7giW1t5eSmeXc=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn44.prd.vienna.ovpn.com:9929

To set up the WireGuard connection on Android proceed as follows:

1. Open Google Play Store and search for WireGuard.
2. Download and open the app.
3. Next, tap on the “+” sign.
4. Select the way you want to get started with the WireGuard setup.
5. Import from file or archive – You may import a WireGuard configuration file provided by a VPN service or administrator. You may get the config file by email or by downloading it from a server. Simply find the file on your Android device and import the WireGuard connection settings.
6. Scan from QR code – Import the configuration information stored into a QR code:
   • Open the page that contains the WireGuard QR code on your computer. You may get one from several VPN providers (e.g., OVPN), or you may generate it yourself (as mentioned above).
   • Point your device to the QR code on the computer screen.
   • Choose a name for the new WireGuard connection.
   • The WireGuard client app will read and import the config data.
7. Create from scratch – If you know the necessary connection info, you may manually create the connection. Fill in the required info for initiating the connection.
8. You are now ready to activate the WireGuard connection. Tap the toggle button next to the name of the connection. You will see a warning message. Click OK.
9. You will see the connection status on the top of the screen.
10. To disconnect, open the WireGuard app and turn off the connection or go to Settings > Connections > More connection settings > VPN and tap on the active VPN connection. You will need to confirm that you want to Disconnect.

Install an Android VPN app that offers access to WireGuard

This is the simplest approach if you are interested in getting started quickly. There is no configuration needed as VPN client apps automatically set up the VPN tunnel.

1. Find a WireGuard VPN provider and subscribe to the service. We recommend the followings VPNs for Android:
   • NordVPN
   • Surfshark
   • Hide.me
   • OVPN
2. Download the VPN provider’s app from the Google Play Store.
3. Enable the WireGuard protocol.
4. Connect to VPN with WireGuard.

WireGuard on Android FAQs

Is WireGuard better the OpenVPN on Android?

Both protocols provide excellent security and performance. Several tests show that WireGuard might be faster than OpenVPN. However, there is still not enough data to draw any conclusions regarding the better protocol for Android devices.

Is the WireGuard client app for Android free?

Yes, the WireGuard official client application is free to use. However, you need a WireGuard VPN server to connect to, which may be provided by a paid service.

Summary

WireGuard is a great VPN protocol, and it works smoothly on Android as well as on iOS and on Windows. You may either install a VPN app from a top VPN provider that implements WireGuard or proceed to set up the official WireGuard client app, a more manual approach.

This is the end of our tutorial on how to get started with WireGuard on Android. Did you like it? If so, subscribe to our newsletter! We will let you know when we publish new articles, and you will make a Transylvanian baby-bat happy.

SoftEther is a relatively new VPN project that helps people bypass Internet restrictions and surf the Internet more securely. This article explains what SoftEther VPN is and how to connect to a SoftEther server with various VPN protocols.

We live in a strange World (probably an understatement after surviving 2020). More and more restrictions are imposed on every level of our lives. And the Internet is no exception, and it has not been the exception during the last years.

Access to an open Internet must be everyone’s right. Thankfully, some technologies help us bypass abusively imposed rules. And SoftEther is one of the great ones.

This article takes a closer look at the SoftEther technology, presents its advantages (as well as disadvantages), explains how to connect using the SoftEther protocol, and lists several options on how to get started with SoftEther.

What is SoftEther VPN? The Transylvanian story.

You probably know already that in our fictitious realm (that we called Castlevania, and we virtually placed it in Transylvania, not such a fictitious place), a family of smart bats is running a small chocolate factory.

Their street shop has been heavily hit by the pandemic (as most small businesses have been), but they were able to adapt. TomBat rapidly set up an online shop, and bats all over the World started to order the fang-tastic chocolate made in Castlevania.

A problem soon became more stringent than the pandemic situation: how to properly wrap the chocolate to keep it fresh and maintain the strong cocoa taste (remember: bats do not use preservatives!). And how to maintain the cost low and remain competitive?

After some intensive brainstorming sessions led by GrandPaBat, they decided to split the orders depending on the delivery location, keep the existing wrapping for local orders, and use a new, performant packaging for long-distance orders. Thus, they were able to provide the best possible service and still keep the prices low.

Solution found! And they all lived happily ever after until the end of the pandemic!

Similarly, the SoftEther VPN server can wrap your data traffic into various packaging suitable in different scenarios, and the SoftEther protocol is the new and performant packaging.

And now, let’s talk tech!

What is SoftEther VPN?

Softether (Software Ethernet) is a project developed at the University of Tsukuba (Japan) by Daiyuu Nobori. It proposes a VPN protocol (Softether or SSL VPN) and the architecture of a VPN server capable of serving multiple VPN protocols (Softether, OpenVPN, SSTP, L2TP/IPSec) simultaneously.

Both the Softether protocol and the Softether server are open-sourced, free, and cross-platform. Softether is presented as an alternative to OpenVPN, and it is considered to be faster.

All the features SoftEther provides strengthen its ability to help users navigate safely and bypass any government firewall, making it a popular VPN (Virtual Private Network) protocol.

Several of the SoftEther important features are listed below:

• Available under GNU GPL license;
• Uses 256-bit AES encryption;
• Supports SSL VPN, OpenVPN, EtherIP, L2TP, L2TPv3, and Microsoft’s SSTP protocols;
• Supports IPV6, packet filtering, and dynamic DNS function;
• It accepts both TCP and UDP connections;
• SoftEther VPN uses RSA certificate authentication and deep inspect packet logging function;
• SoftEther VPN client software implements Virtual Network Adapter, and the SoftEther server implements Virtual Ethernet Switch (called Virtual Hub);
• It runs on Windows, macOS, Linux, FreeBSD, Solaris, iOS, and Android.

How does SoftEther work?

The SoftEther VPN server is the central piece of the SoftEther architecture. As listed above, it supports a lot of features, and it provides great performance. The most important aspect is the fact that the server supports multiple protocols: VPN over HTTPS (SoftEther), OpenVPN, SSTP, L2TP/IPSec. Thus, you may use a SoftEther server as a gateway for various devices (PC, Mac, iPhone/iPad, Android devices, etc.) and VPN tunnels.

The SoftEther protocol uses HTTPS to establish a VPN tunnel and port 443 on TCP/IP as the destination. This port is open for most of the firewalls, proxy servers, and NATs. The result is that the SoftEther protocol can be used for bypassing Internet censorship successfully.

Besides the SoftEther protocol, the SoftEther server supports L2TP/IPSec and exposes “clone functions” for OpenVPN and Microsoft SSTP VPN.

When to use the SoftEther VPN protocol?

Now that you know how SoftEther works, you are probably wondering when to use SoftEther. The SoftEther protocol is highly useful in certain scenarios:

• Bypass firewalls. As it works on HTTPS, the SoftEther VPN protocol can overcome internet censorship and bypass most firewalls, including the Great Wall of China.
• Bypass geo-restrictions. As you might already know, some content is accessible only for specific countries or regions. With SoftEther VPN, you can enjoy an awesome online experience without any restrictions.
• Browse safely while using a public Wi-Fi network. Public Wi-fi networks are real threats. It would help if you always think twice before choosing to connect to one without using any protection. Due to its high encryption, SoftEther is a good option as it is secure and fast.

Advantages and disadvantages of SoftEther

Just like any other thing on this planet, SoftEther has its advantages and disadvantages. Let’s take a closer look at the strengths of this technology.

Advantages of using SoftEther

Softether has some important benefits:

• The Softether VPN project is open-source. Thus, free and constantly updated.
• The Softether protocol is fast, as it provides exceptional throughput and low latency.
• The Softether traffic can penetrate highly-restricted firewalls.
• The protocol uses high-level encryption (AES 256-bit and RSA 4096-bit).
• Softether fully supports both IPv4 and IPv6.
• No static nor fixed IP is required for Softether as it supports dynamic-DNS and the NAT traversal function.
• The SoftEther server software can successfully replace expensive Cisco routers.
• The SoftEther server may provide remote access to LAN or a remote location network with the SoftEther VPN Bridge module.

Disadvantages of using SoftEther

The SoftEther technologies has several drawbacks:

• To benefit from the SoftEther protocol’s advantages, users must install and run the SoftEther apps on intended devices.
• The macOS compatibility is not great.
• It is a pretty new technology compared to other protocols (OpenVPN, L2TP, SSTP).
• The SoftEther server does not (yet?) support the WireGuard protocol.

SoftEther vs. other protocols

SoftEther has often been compared to other similar VPN technologies, especially to OpenVPN. Take a look below to understand how SoftEther is related to other VPN protocols.

SoftEther vs. OpenVPN

OpenVPN is considered the de-facto standard when it comes to VPN protocols. However, SoftEther technology brings in useful features and high performance:

• According to some tests, the SoftEther protocol is faster than OpenVPN.
• SoftEther VPN server is multi-protocol. It is also a big plus compared to OpenVPN.
• All operating systems which support OpenVPN (e.g., Windows, Linux, macOS, Linux, iOS, and Android) can connect to the SoftEther VPN server.
• The configuration of the SoftEther server is more straightforward than the one of the OpenVPN server.
• User admin settings can be configured by GUI (graphical user interface) tools.

I believe that the strongest point of SoftEther is that it can “clone” the OpenVPN server and, additionally, offers access to other VPN protocols. Thus, you may replace your existing OpenVPN servers, keep your existing VPN client settings, and still get access to the SoftEther protocol for future network development.

SoftEther seems to be a solid technology and, it may, in time, replace OpenVPN. However, there are no guarantees that this will happen. Only time will tell.

SoftEther vs. L2TP/IPSec (Layer 2 Tunneling Protocol)

L2TP/IPSec is a popular VPN protocol supported by all operating systems and by the majority of VPN providers. With acceptable speed and great encryption, L2TP is a good option to secure your Internet traffic. Operating systems offer access to built-in VPN clients for L2TP/IPSec, making the VPN connection setup easy.

However, the SoftEther protocol is superior both as to speed and encryption. Additionally, the SoftEther server supports L2TP/IPSec and provides easier integration from mobile phones or devices that can not, for various reasons, install the SoftEther client software.

SoftEther vs. SSTP (Secure Socket Tunneling Protocol)

The SSTP protocol, created by Microsoft, provides great security and performance, but its usage is limited to Windows devices (with some exceptions).

SoftEther comes with similar encryption and speed, and it can integrate (clone) the SSTP server. Thus, you may benefit from the SoftEther advantages and still offer SSTP to a slice of your VPN users. That means easier server administration, more flexibility, and lower costs (as you don’t need to purchase the expensive Windows Server operating system).

SoftEther vs. WireGuard

WireGuard is the new kid on the block when it comes to VPN protocol. Everybody is amazed by its simplicity, by its performances, and by its security features. WireGuard seemed to be faster than OpenVPN in our tests, but we have not (yet) performed any side-by-side comparison between WireGuard and SoftEther.

It is hard to compare WireGuard and SoftEther. The first one has chosen the simplicity path implementing the “less is more” principle. In contrast, the second one integrates more features than any other VPN protocol, and it may be regarded as a super VPN technology.

Again, time will tell which of these protocols will benefit from larger adoption.

SoftEther vs. PPTP

PPTP (Point to Point Tunneling Protocol) is an outdated VPN protocol known to have security issues. It is no longer supported on iOS and macOS. By design, the SoftEther server does not offer the possibility to connect to it using the PPTP protocol, probably for the same reasons.

The SoftEther protocol is considered safe, and if you can choose between PPTP and SoftEther, you should definitely choose the latter one.

SoftEther VPN compatibility

The SoftEther VPN client can be installed on Windows, Linux, Mac, Android, iOS, and Windows Mobile.

On macOS, there is no simple way to connect to a SoftEther VPN server with the SoftEther protocol: you may install the SoftEtherVPN GUI outdated app or use the official, but not recommended, SoftEther VPN software app. You may read more about using SoftEther on Mac here.

The SoftEther VPN server runs on Windows, Linux, FreeBSD, Solaris, and Mac OS.

How to set up SoftEther VPN on your devices

The next question to be answered is how to use the SoftEther VPN technology.

If you are the administrator of a server network or want to test SoftEther, you need to install the SoftEther VPN server first. It supports Windows (2000 or later), Linux, macOS, FreeBSD, and Solaris.

Alternatively, you may get started with SoftEther by testing VPN services exposed by the VPN Gate project.

Secondly, you need to connect to the SoftEther server with a VPN client. A SoftEther VPN server can “speak” multiple protocols such as Softether VPN/SSL VPN, OpenVPN, L2TP/IPSec, L2TPv3/IPSec, or SSTP. To connect to such a server, you have the following options:

• Connect using the Softether VPN protocol:
  • Option 1: Set up the official SoftEther client app on your device and connect to the VPN server.
  • Option 2: Use a third-party software app that can use the Softether protocol.
• Connect using OpenVPN:
  • Install an OpenVPN client app and connect to the SoftEther server using the OpenVPN protocol.
• Connect using the L2TP/IPSec protocol:
  • Set up an L2TP connection using the built-in VPN client available on your device.
• Connect using SSTP:
  • For devices that support the SSTP protocol (Windows-based), you may use the built-in VPN client and connect to the SoftEther server.

All these options are further presented below.

Connect using the SoftEther VPN protocol

For connecting to a SoftEther server, it is recommended to use the SoftEther protocol as it is faster and more secure than the other ones.

The most straightforward option for all operating systems (except for macOS) is to download and install the official SoftEther VPN client apps and set up the connection.

For example, on Windows, you may proceed as follows:

1. Go to the SoftEther official download page.
2. Select the component as SoftEther VPN Client.
3. Select the platform (Windows in our case).
4. Choose your CPU depending on your device.
5. Download the latest build.
6. Run the installer and open the SoftEther VPN client.
7. The next step is to create a new Virtual Network Adapter. Click on the Add VPN Connection and, then, the Yes button.
8. Choose the name of the adapter (it has to start with VPN) and click OK. You will have to wait for several seconds, up to a minute, to get the adapter creation completed.
9. Next, click again on the Add VPN Connection and fill in the connection settings (connection name, VPN server IP address or hostname, connection port, user authentication properties). You may choose from Anonymous Authentication, Radius or NT Domain Authentication, Client Certificate Authentication, and Smart Card Authentication for authentication type.
10. To connect to the SoftEther server using the SSL VPN protocol, double-click the name of the VPN connection or right-click and choose Connect.
11. You are now connected.
12. To disconnect, right-click on the name of the active VPN connection and choose Disconnect.

Alternatively, you may import SoftEther config files (.vpn) provided by the server administrator (right-click in the SoftEther VPN Client Manager app and choose Import VPN Connection Setting).

For macOS, the official SoftEther client is not recommended as it does not provide a graphical user interface. However, you may try using the third-party SoftEther GUI app, as explained here.

Connect using OpenVPN

Another option to connect to a Softether VPN server is to use the popular OpenVPN protocol. To do that, you need an OpenVPN configuration file (.ovpn) from the SoftEther server administrator containing the connection properties (server address, username, password, other settings). Download it from your email or the URL sent by the administrator.

The process of setting up the connection consists of downloading the OpenVPN client app (it is preferred that you use the official OpenVPN apps), load the config files, and connect.

For Mac, you may install Tunnelblick or Viscosity, and proceed in a similar manner.

Connect using the L2TP/IPSec protocol

To connect to a SoftEther server using the L2TP/IPSec protocol, you need to create a manual connection using the built-in VPN client available on all popular operating systems (Windows, macOS, Linux, Android, iOS).

Depending on your device you may follow one of the tutorials listed below (you will need to fill in the SoftEther server info, as well as the authentication data):

• How to set up an L2TP connection on Windows
• How to connect on L2TP from macOS
• How to use L2TP on Linux
• How to set up L2TP on Android
• How to create an L2TP connection on iOS.

Connect using the SSTP protocol

Similarly to L2TP/IPSec, a connection to the SoftEther server using the SSTP (Secure Socket Tunneling Protocol) protocol is possible from devices using Windows. Configure the built-in VPN client and select SSTP as the VPN Type.

VPN services that offer access to the SoftEther protocol

Besides installing your own SoftEther VPN server or getting access from a network administrator, there are still options to use the SoftEther protocol.

The first one is to connect to servers from the VPN Gate network. VPN Gate is a project (created by the same university that created SoftEther) that manages a network of SoftEther servers. Volunteers from all over the World provide the servers. That means that (1) you may use them free of charge and (2) you don’t know who is behind a certain server and if your private data is really safe. The VPN Gate architecture seems to be strong and secure, but you may still consider that your data travels unregulated servers.

To get started with VPN Gate, install the SoftEther client app (as described above), choose a VPN server from the VPN Gate server list, and fill in the server’s connection data to the VPN program app.

A safer solution is to subscribe to a commercial VPN service that exposes SoftEther servers. One of these services, and there are not many, is CactusVPN.

CactusVPN offers access to the SoftEther protocol on all its servers. If you are interested, create a CactusVPN account and fill in the provided server credentials into the SoftEther client software.

SoftEther FAQ

Summary

The call for help from people living in countries where censorship is a real problem is currently answered with solutions like the SoftEther VPN protocol.

The censorship problem walks hand in hand with the threats users face while surfing the web unprotected. The awareness of this problem is not at the highest point, as it should be, but we are more than sure that all the internet surfers will realize the dangers they might face if no encryption is used for their connection.

With the SoftEther VPN technology, you can solve two problems at once – browse the Internet freely and 100% safely.

Finally, please subscribe to our newsletter (below), and we promise to keep you updated with news and tutorials on how to use the SoftEther protocol. Plus, you will make a Transylvanian baby-bat very happy.

This short tutorial helps you set up a PPTP VPN connection on your Linux machine. It is well-known that PPTP is not a secure protocol. However, there are still options to set up PPTP on Linux. But, if you can, you should switch to an alternative VPN protocol.

PPTP VPN setup on Linux [Summary]

Setting up PPTP on Linux is easy and several options are available:

• Option 1: Use the Network Manager (GUI) to set up PPTP on Linux manually.
• Option 2: Use the command line (CLI) for more control on the PPTP setup.
• Option 3: Install a VPN client app for Linux.

Additionally, you may consider a more general solution to set PPTP on your router and connect all your devices in need of using the encrypted tunnel (including your Linux machines) to the router.

What is PPTP and when to use it on Linux?

The Microsoft Point-to-Point Tunneling Protocol (PPTP) is outdated and insecure. However, it may still be useful for hiding your IP address and changing your location when no sensitive data is involved, such as unblocking streaming channels or accessing gaming servers.

PPTP became popular due to its speed and simplicity. However, due to security vulnerabilities exposed by various parties, PPTP is no longer seen as suitable for securing VPN tunnels.

PPTP can no longer be set up on iOS; on Mac, you need to use some workarounds, but you may still use PPTP on Windows, to create PPTP tunnels on Android, and, of course, on Linux. Again, make sure you use PPTP only when you are comfortable with a weakly secured VPN tunnel.

How to set up PPTP VPN on Linux

There are several options to set PPTP on Linux, from the simplest by installing a VPN (Virtual Private Network) app to the more complicated by using the command line. Here are the available options.

Use the Network Manager (GUI)

Setting up a PPTP connection using the graphical interface is similar for various Linux distributions, and it is a simple way to proceed. I am going to exemplify the setup on Ubuntu GNU/Linux (v20):

1. Open the Settings app.
2. Click on the Network connections panel from the left menu.
3. Click the “+” (Add) button next to VPN.
4. From the Add VPN window, choose Point-to-Point Tunneling Protocol (PPTP).
5. Fill in the connection Name (whatever you want), the server IP or hostname (Gateway), the username, and the password of your VPN account (optional).
6. Click on the Advanced button and check Use Point-to-Point encryption (MPPE).
7. Click OK, and then Save.
8. Switch ON the PPTP connection you have just set up.
9. Once you are connected to the VPN, you will see a lock icon on the network icon from the top-right on the screen. You may also connect/disconnect from the network menu.

Use the command line (CLI)

Most Linux distributions install the PPTP client by default. However, if not present, you may install it as follows:

• On Debian/Ubuntu, by using the apt-get command (pptp-linux is the command-line PPTP client and network-manager-pptp is the GUI management tool):

$ sudo apt-get install pptp-linux network-manager-pptp

• On Fedora/CentOS, by running the yum command (check the PPTP client docs for other distros):

# rpm -Uvh http://pptpclient.sourceforge.net/yum/stable/fc6/pptp-release-current.noarch.rpm
# yum --enablerepo=pptp-stable install pptpconfig

Next, you need to edit or create the configuration files:

• The CHAP secrets file (/etc/ppp/chap-secrets) for authenticating the user to the VPN channel.
• The VPN connection config file (/etc/ppp/peers/vpnname) to add connection-related info such as the VPN server name, encryption settings, etc.

Suppose that you want to connect to a PPTP server with the following connection data (you will need to fill in your own data):

• PPTP VPN server name: pptp-us1.vladtalks.tech
• PPTP username: anonymousbat
• PPTP password: whoiam

Proceed with the following steps:

• Edit the CHAP secrets file:

# sudo vi /etc/ppp/chap-secrets

The syntax for the authentication info using CHAP is:

DOMAIN\\username      PPTP      vpnpassword     *

Thus, you need to enter something similar to:

anonymousbat      PPTP      whoiam     *

Save and close the chap-secrets file.

• Create a file that contains the tunnel configuration data (where pptp-us1 is the name you will use to connect to the VPN):

# vi /etc/ppp/peers/pptp-us1

• Append the config file with the following commands and options:

pty "pptp pptp-us1.vladtalks.tech --nolaunchpppd"
name anonymousbat
remotename PPTP
require-mppe-128
file /etc/ppp/options.pptp
ipparam pptp-us1

Note that you need to replace the VPN server name (pptp-us1.vladtalks.tech), VPN username (anonymousbat), connection file name (pptp-us1) with your own data.

• Finally, you need to route all the traffic through the VPN interface. An entry must be added to the routing table.

Create the following file:

# vi /etc/ppp/ip-up.d/vpn-traffic

And, add the code:

#!/bin/bash
route add -net 10.0.0.0/8 dev ppp0

Save and close. Make the file vpn-traffic executable:

chmod +x /etc/ppp/ip-up.d/vpn-traffic

• Now, you are ready to connect to the encrypted tunnel:

pppd call pptp-us1

• To disable the VPN stop the pppd process:

killall pppd

You may create a separate configuration file for every VPN server you want to connect to and initiate the PPTP connection as needed.

Install a Linux VPN client app

If you are looking for a VPN client on Linux similar to the easy-to-use and friendly VPN apps available on Windows or macOS, you will be disappointed.

Major VPN providers have retired their PPTP clients for all operating systems. For example, Hide.me had a PPTP client app for Linux but discontinued it at the end of 2019.

Thus, theoretically, you may still find VPN services that offer VPN client apps for Linux with the PPTP protocol. But I strongly recommend that you don’t use them. Instead, set up a manual connection (as explained above, if you really have to) or switch to a more secure protocol (check the alternatives listed below).

PPTP VPN alternatives on Linux

PPTP is not the protocol that you want to use to secure your VPN connections. Other VPN protocols are safer and more reliable, and you should use them on Linux:

• WireGuard, the new VPN protocol, is included in the Linux kernel, and you may set it up easily.
• OpenVPN works great on Linux.
• L2TP/IPSec can be set up similarly to PPTP.

Summary

You may still set PPTP up on Linux. Even though it is seen as a legacy VPN protocol, there are still options to use PPTP from the command line or using the Network manager graphical interface.

Would you like to know more about VPN? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.