There are several solutions for accessing blocked streaming sites or apps: VPN, Smart DNS, proxies. The one that brings you the smoothest streaming experience is Smart DNS, as it does not involve any encryption. For those using their MacBooks to relax after a long day, I am going to explain how to set Smart DNS on Mac.

Set up Smart DNS on Mac [Summary]

Setting up Smart DNS can be done in a matter of seconds. On Mac, you need to get to the macOS DNS settings and alter the DNS with server addresses provided by the Smart DNS service.

• Prerequisites:
  • A Smart DNS account.
• Setup:
  • Step 1: Get to the Network > DNS settings.
  • Step 2: Add the Smart DNS server addresses.
  • Step 3: (Recommended) Restart your Mac.

The Smart DNS alternative to unblocking channels is the well-known VPN (Virtual Private Network) technology. Even though VPN is slower than Smart DNS, it may be the only solution for certain media sites. In case you are interested in setting up a VPN on Apple Mac OS X, I recommend reading our tutorial.

Why use Smart DNS on Mac?

Smart DNS is a technology that can be used to unblock popular geo-restricted websites like Netflix, Hulu, or BBC iPlayer easily.

The main advantage of Smart DNS over VPN is that it does not involve any data encryption. Thus, the streaming speed is as good as your regular Internet connection can achieve.

Smart DNS uses proxy servers to bypass geo-restrictions, but it does not hide your public IP address. You should remember this and do not assume that Smart DNS offers any protection against data leaks and hackers.

If you want to use your Mac for watching your favorite show on a restricted streaming channel, you have two great options: VPN and SmartDNS. As mentioned above, Smart DNS is (most of the time) faster, but it involves some initial manual setup. However, it can be done in several minutes. Read on to see how to get started.

How to set up Smart DNS on Mac

Firstly, you need access to the IP address or the name of a Smart DNS server. There are several good Smart DNS providers you may subscribe to for a reasonable price. You will find our recommendations later in the article.

You will get access to one or two IP addresses (to have a backup solution if the primary server is down or blocked).

For example, if you choose the Smart DNS solution offered by Surfshark, you should log in to the Surfshark account and, from the left menu, click on Smart DNS. You will see the two DNS addresses available. Additionally, you need to Activate your current IP address such that you are granted access to the Smart DNS service.

Once you have the address(es) of the Smart DNS server(s), you have to follow this step-by-step tutorial:

1. Open System Preferences from the top left of your screen.
2. Click on Network.
   
3. Select the network you are connected to (Wireless or Ethernet) and click the Advanced button.
4. Access the DNS tab.
   
5. If there is any DNS listed, select it and press the “-” button (delete it).
6. Press the “+” button and enter the IP address of the SmartDNS server. In case, you have more DNS server IPs, repeat the process.
7. You are done with the DNS settings. It is advisable to restart your Mac.
8. Some SmartDNS services are able to verify the connection. Thus, you may log in into admin panel offered by the provider and check your connection status. If no such option is available, simply try to unblock the desired streaming channel. If everything is properly set up it should work smoothly.

An alternative to the above-explained setup is to change the DNS settings on your router. This may be a little bit more complicated, but you may achieve access to the desired channels on all devices connected to the router (on Wi-Fi or Ethernet cable).

Troubleshooting your Smart DNS connection

In case you are not able to access a specific streaming site, you may try one of the following:

• use another browser (if you access the channel with a web browser);
• clear the browser cookies;
• try the Incognito mode.

If you are still unsuccessful, you should contact the support team of your Smart DNS provider.

Smart DNS services for Mac

You may use any Smart DNS service on your Mac as the only required setup is to add the DNS addresses to the macOS DNS settings (as presented above).

However, we recommend subscribing to the SmartDNS services that also offer access to VPN. Thus, if the Smart DNS service is not able (temporarily or permanently) to unblock your favorite channel, you have the backup option to use the VPN.

Additionally, you may switch from Smart DNS to VPN when you get slow speed. SmartDNS is usually faster than VPN, but you may experience low-quality streaming due to DNS server issues.

We have tested several such SmartDNS+VPN services, and we gladly recommend you try one of the following: StrongVPN, CactusVPN, Surfshark, NordVPN. All these services have great compatibility, and you may use them on iOS (iPhone, iPad), Android, Windows, Mac, Linux.

Summary

Smart DNS is a great technology for unblocking streaming channels or various media channels. To set it up on Mac, you need to configure the macOS DNS settings such that the provider’s servers are used. We recommend subscribing to a Smart DNS provider that also offers access to VPN such that you have an alternative to unblock what you desire.

Have you found our article on how to set up Smart DNS on Mac useful? If so, subscribe to our newsletter! We will let you know when we publish new articles, and you will make a Transylvanian baby-bat happy.

One of the features not many Internet users know about is the obfuscated VPN specialty servers. Such special servers take VPNs out of the ordinary and place this technology on top of any list of technologies and solutions meant at helping users circumvent restrictions, bypass VPN blocking, firewalls, and avoid internet censorship.

Stay with me if you’re thirsty for tech and curious about finding out everything you need to know about what is an obfuscated VPN server and why you need to use an obfuscated VPN server for secured, fast, private and easy web surfing.

The Transylvanian explanation of what is an obfuscated VPN server

We all love Halloween and the way it makes us creative when it comes to the costumes that we wear. One of the biggest Halloween fans you will ever meet is TomBat. Why? Because he always dreamed about being a superhero and this event always gave him the perfect occasion to transform into one. The only problems with the Halloween parties organized in Castlevania were the late hour and the threats lurking at the corners. These are the main reasons why TomBat’s parents never agreed for their little BATby to leave the cave.

Helped by his creative spirit, TomBat was always able to identify a way to leave the cave and bypass his parents’ restrictions.

One of the best examples of how he tricked his parents into thinking that he is leaving the cave to spend the night with a friend was when he hid his superhero costume under a huge raincoat and left to his friend, not to spend the night over but to meet him and go to the party.

This is what happens when you connect to an obfuscated server. If you use a VPN, you are already a superhero. Yet, some firewalls can intercept your traffic, and be aware that you are using a VPN. In such a case, your access gets blocked, and you are not able to unblock the resources that you want. When you use an obfuscated server, you camouflage your superhero costume under a raincoat, so firewalls and ISP won’t be aware that you are using a privacy tool.

What is VPN obfuscation?

Obfuscation is a common term used in programming and software engineering. This technique is used mainly to hide certain values, exact code lines, and their logic. Therefore, obfuscation helps obscure and distort certain messages, to ensure data security, in the first place, and online freedom.

Translating this into the VPN language, we can almost guess what this technique is used for. Since this blog is not a place for guessing, let’s discuss this topic properly, shall we?

What is an obfuscated VPN server and how do they work?

Obfuscated VPN servers are like the unicorn of VPN servers. An obfuscated VPN server will make the traffic generated through VPN appear like regular web traffic (HTTPS). 

The “disguise” process is not as simple as you might think, as when you use a VPN connection, the OpenVPN encrypted data contains two parts that are visible as data generated via VPN traffic:

1. The first part is the header that includes the routing information and the packet identification.
2. The second part is the Payload representing the data that the VPN server forwarded to the web address you want to access.

So, now the magic kicks in. 

To remove all the information indicating OpenVPN traffic/VPN encryption from the header, an obfuscated VPN server disguises the data and makes it look like regular HTTPS traffic. The most convenient way is the one when the OpenVPN packet is double encrypted using the SSL or TLS protocol. This process is like encrypting traffic that is already encrypted, to make it undetectable by firewalls and DPI (deep packet inspection).

Why should I connect to an obfuscated VPN server?

If you can access popular websites like YouTube, Facebook, or streaming services like Netflix or BBC iPlayer, you must know that you’re a lucky internet user. There are people located in certain countries worldwide where accessing popular online content is limited and, even worse, it’s completely banned, so bypassing restrictions is mandatory.

VPN can help users facing censorship bypass restrictions and gain access to the websites of their choice. The only problem is that some of these websites use specialized algorithms that can track, detect, and block VPN traffic. In this case, a VPN becomes useless unless it uses special power-ups to trick websites into seeing the traffic as normal HTTPS traffic.

Alongside advanced options like Shadowsocks, there are complimentary VPN features to help users surf freely. Obfuscated VPN servers can easily be included in this category. Due to their advanced encryption method, users can easily bypass internet restrictions, government censorship, the Great Firewall of China, and network firewalls. 

Therefore, the main reason why you would want to focus on using obfuscated VPN servers is to regain the much-deserved online freedom and get access to any website with just a click. 

How can firewalls or the ISP tell that you use VPN?

Internet service providers and the detection algorithms used by firewalls can identify that you’re using a VPN only by looking at the traffic. Since VPN uses advanced techniques to encrypt your traffic, your data is not visible in plain text, so your traffic pattern looks very different than the regular HTTPS one. 

Therefore, the prying eyes spying on your traffic can detect that you use a VPN, but your identity and data are a complete mystery.

Obfuscated VPN server vs regular VPN server

The VPN server is one of the three main components of a VPN, alongside the VPN protocol and the VPN encryption. The VPN server works like a bridge between your device and the internet, being a combo of hardware and software technologies.

When you enable a VPN connection, you automatically connect to the VPN server, which changes your IP address and encrypts your traffic. Due to these two capabilities of a VPN server, you can surf privately and anonymously, gaining access to blocked content.

Remember that I said that VPN usage could be detected and blocked? In this case, the VPN server needs the obfuscation power-up.

Therefore, an obfuscated VPN server is an improved version of a regular VPN server, which uses obfuscation in order to encrypt the data packets using additional SSL/SSH encryption. So, it applies a second layer of encryption to hide the data and prevent trackers from identifying that you are using a VPN.

Obfuscated VPN server vs double VPN server

While describing how obfuscated VPN servers work, I mentioned that the main step to trick websites into seeing your traffic like HTTPS one, this type of server uses a second layer of encryption. As I don’t want you to confuse obfuscated servers with double VPN ones, I thought that it might be a good idea to tell you a few things about double VPN as well. 

Double VPN is a type of VPN developed to allow VPN users to enhance their level of encryption while going online. The technology behind this advanced security solution allows users to browse anonymously and securely by connecting to a chain of VPN servers.

In super easy terms, we can say that when you connect to a double VPN server, it’s like adding a VPN on top of another VPN or is like creating a VPN tunnel inside another VPN tunnel. 

Besides the military-grade encryption that a regular VPN server provides, a double VPN server will enhance your internet anonymity and cybersecurity by cascading your VPN server. When using this kind of solution, you can chain more than two VPN servers in one connection. The result is a highly secure connection. Even so, cascading more than two VPN servers would definitely affect your internet speed and VPN performance. 

So, even if both solutions use two (or more, in case of a multiple VPN cascading) layers of encryption, the mechanism behind the process is different therefore, the result is different. Obfuscated VPN uses the second layer of encryption to secure your connection, hide the metadata, and disguise your VPN traffic, while double VPN uses double encryption to enhance your security but, your VPN traffic remains detectable in front of firewalls and advanced tracking algorithms. 

Other options to enjoy the perks of an obfuscated VPN 

Stealth VPN not only guarantees your online freedom but also assures your security based on its encryption level.

Online privacy and freedom are not only necessities but are also your RIGHTS. Would you allow your neighbor to read your emails? No? Then why would you let your ISP? 

The word “Stealth” is a popular term used to describe the Airforce planes. Stealth planes’ design and features allow them to overfly any area because radars can’t detect them.

Stealth VPN is a protocol that uses obfuscation to allow a user to bypass any restriction he might face while browsing the internet.

The best obfuscated VPN

Obfuscation is all about disguising VPN traffic and helping internet users browse freely, securely, anonymously, and avoid throttling. To accomplish all of these requires using a performant service. When it comes to providing obfuscated VPN servers, there are a handful of VPN providers known for their top-notch services, lite apps (for the most popular OSes, like Windows, Android, iOS, Mac, and even Linux), and complex and complete lists of features including the most-wanted KillSwitch, Smart DNS, proxy, split tunneling, or specialty servers (gaming, double VPN, or P2P servers). 

My main three picks of best VPNs that provide obfuscated VPN servers are:

ExpressVPN

I must agree with what the provider states on the website, ExpressVPN is the VPN that just works. With a list of fine VPN apps, a huge global network, advanced VPN features, and even their own VPN protocol (Lightway), ExpressVPN provides obfuscated VPN servers as well. 

So, if you look for the proper way to surf securely and trick websites into thinking that your internet traffic is an eligible one, ExpressVPN is clearly one of the best solutions you could try!

NordVPN

The second on the list is another popular VPN service. NordVPN is on every VPN user’s lips due to its impressive capabilities, lite apps, and care to bring innovation through every implemented solution. 

As expected, NordVPN provides obfuscated VPN servers in plenty of VPN locations around the globe that are waiting to be tested.

Surfshark

Surfshark humanizes digital security to make it accessible to all, being an excellent VPN service, providing a lot of strong security features that the average VPNs won’t offer, it’s fast and super user-friendly, eating other VPNs alive. And, since it’s on this list, besides the fact that it offers lots of options you can choose between, it also provides obfuscated VPN servers. So, feel free to give it a try and test its performance by yourself!

Final thoughts.

Before closing the book on the obfuscated VPN servers topic, I feel the need to do a bit of recap.

An obfuscated VPN server is one of the best options to consider if you look to avoid internet censorship and firewalls while keeping your data secured and a low profile. This advanced VPN solution was developed to grant Internet users all around the world access to blocked websites and media content.

The great news is that this solution is tested by VPN providers, and it has been proved to work even for users located in countries like Iran, China, Russia, Turkey, or Egypt.

Therefore, if you strive for online freedom at your fingertips, obfuscated VPN servers are the right solution for you. And, if you strive to learn as many things as possible about VPNs, the right thing to do is to subscribe to my newsletter by using the form below. It takes less than 10 seconds, and it makes the Transylvanian baby bats happy!

As you probably know already, it is fundamentally important to secure your data when connected to the Internet, and it is equally important to use the right tools. When it comes to VPN, the communication protocol is the foundation stone of online security. If the VPN protocol implements strong encryption algorithms and high-level security policies, you may use it with confidence. IKEv2 is, from the public knowledge available at this time, a VPN protocol that you may trust.

This article explains what IKEv2 is, how this VPN protocol works, how to set IKEv2 up on your devices, and how it compares with other VPN protocols. We will also look at some of the advantages and disadvantages of the IKEv2 protocol.

What is IKEv2? The Transylvanian story.

Bats know, probably better than humans, that they need to exercise regularly to be in shape. Unfortunately, the bats from Castlevania know this all too well as they have to face (more precisely, have to run fast from) the Megabats, their unfriendly neighbors.

One early morning TomBat and AnonymousBat, the two bat friends, took their bikes and headed towards the woods surrounding Vlad’s castle. As you can imagine, cycling is not a popular sport among bats, but TomBat and AnonymousBat have joined Vlad in his cycling rounds, and they started to like pedaling.

After an hour of intensive and joyful pedaling in the middle of the forest, TomBat had to stop. Something was wrong. Indeed, it was: his bike had a flat tire. TomBat had a moment of panic when he remembered that he had forgotten his repairing kit at home. The situation didn’t look joyful anymore. The perspective of getting back on foot (so to speak) was not pleasant.

Fortunately, TomBat was not alone and AnonymousBat had his own repairing kit. In ten minutes they were back on the road.

Not long after, it was TomBat’s turn to return the favor to AnonymousBat. When they felt a little bit exhausted, TomBat pulled out a chocolate bar from his backpack. It was the best chocolate you may find in Castlevania, made by TomBat girlfriend, PonyBat. With renewed forces, they were able to get back safely and happy.

The moral of the story: don’t go into the woods alone; a friend may help when you need it, and, together, you are both safer.

IKEv2 and IPSec are two good friends that help each other and work together to make VPN communication great. So let’s find out more about the IKEv2/IPSec VPN protocol.

What is IKEv2, and how does IKEv2 work?

IKEv2 (Internet Key Exchange version 2), the successor of IKEv1, is a VPN protocol developed by Microsoft and Cisco that uses the authentication suite IPSec to secure communication between a VPN client and a VPN server. Sometimes it is called IKEv2/IPSec.

IKEv2/IPSec generates encryption keys, providing high-level data security. For those interested in more technical details, IKEv2/IPSec uses the AES-256-GCM cipher for encryption. Additionally, it has several important advantages over other VPN protocols (explained in detail below).

The IKEv2/IPSec protocol uses the Diffie-Hellman key exchange algorithm to secure the communication tunnel. IKEv2 establishes a security association (SA) to check that the VPN client (your device) and the VPN server use the same encryption keys and algorithms. Once the security association is validated, IPSec creates the tunnel and initiates the secure communication.

Other important IKEv2 technical details:

• The IKEv2 uses UDP packets and port 500.
• It supports Perfect Forward Secrecy (PFS).
• IKE builds upon the Oakley Key Determination Protocol and ISAKMP for defining data exchange methods.
• IKE uses X.509 certificates for the authentication process.
• Open-source implementation exists, such as strongSwan, OpenIKEv2, and Openswan.

Why IKEv2 & IPSec?

IKEv2 and IPSec are different technologies that work great when combined.

IPSec (Internet Protocol Security) is a network protocol suite that provides secure tunneling between devices over an Internet Protocol network. It is used for encrypting data in virtual private networks (VPNs).

IPSec can use various mechanisms for authentication and key exchange to create security associations. One of these mechanisms is the Internet Key Exchange (IKE and IKEv2).

As IPSec is secure and reliable. IKEv2 is fast, stable, and provides rapid re-connection in case of dropouts. IKEv2/IPSec expose the best of both into a great VPN protocol.

IKEv1 vs. IKEv2 – The main differences

IKEv2 is the upgraded version of IKEv1 and this translates into faster, safer, and more efficient communication:

• IKEv2 consumes less bandwidth than IKEv1.
• IKEv2 has built-in NAT traversal (IKEv1 doesn’t).
• IKEv2 supports MOBIKE (Mobility and Multi-homing Protocol) make it more stable.
• IKEv2 supports EAP (Extensible Authentication Protocol) authentication, for safer communication.
• IKEv2 can detect whether a tunnel is still alive and it has the Keep Alive option enabled by default.
• As IKEv2 uses a lower number of Security Associations (SA) required per tunnel, it reduces the required bandwidth.
• IKEv2 supports Asymmetric authentication.

Thus, you should choose IKEv2 over IKEv1 any time you can.

IKEv2 compatibility

The IKEv2 was adopted and can be set up on all major operating systems (including Windows, macOS, iOS, Android, Linux) and various devices (routers, SmartTVs).

Due to its security features and stability, many VPN providers (e.g., NordVPN) use IKEv2 as the default protocol in their apps.

Advantages and disadvantages of IKEv2

Before setting up an IKEv2 VPN connection, you should take a minute and read about this VPN protocol’s pros and cons.

Advantages of using IKEv2

IKEv2 has some important benefits:

• It is secure as it supports multiple high-end ciphers for maximum protection.
• It is fast, despite implementing strong encryption.
• It is stable, as it allows users to switch between connections without dropping the protection. The efficient auto-reconnect feature is one of the most important features of IKEv2.
• It is supported on a wide variety of devices.

Disadvantages of using IKEv2

There is not much negative to say about IKEv2. One common complaint is that IKEv2 traffic can be easily blocked by firewalls, as it runs only on port 500 on UDP.

How to set up IKEv2 on your devices

Several options are available when it comes to setting IKEv2 on your device. The simplest is to install a VPN app that support the IKEv2 protocol, but, if you need to connect to your own VPN server, then you should go for the manual setup.

Additionally, you may set up IKEv2 on a router (some routers offer access to the IKEv2 protocol) and connect the devices you need to get the traffic encrypted directly to the router.

Manual IKEv2 setup

IKEv2 is one of the standard VPN protocols that can be set up on most operating systems from the VPN built-in modules. More precisely, you may set up IKEv2 (as well as L2TP or IPSec) without installing any additional app.

Firstly, you need to know the IKEv2 server name or IP address and the username/password for authentication (you may also use a certificate or use no authentication). You may obtain this info either from a VPN service provider or from the VPN network administrator. The third option is to have your own VPN server to connect to.

The manual IKEv2 setup consists of creating a VPN connection on your operating system of choice and filling in the connection settings. For example, on macOS you should perform the following steps:

1. Open System Preferences and click on the Network.
2. Click on the “+” button from the left side of the window to Create a new service.
3. For the Interface, select VPN.
4. Further, choose IKEv2 as the VPN Type.
5. Enter the connection name and click on the Create button.
6. Start the VPN configuration: enter the VPN server address (name or IP) to both the Server Address textbox and to the Remote ID field. You may let the Local ID textbox empty.
7. Next, click the Authentication Settings … button.
8. You may choose the authentication method (Username, Certificate, or None). For Username fill in the username and password. For the Certificate choose a machine authentication certificate that is already installed on your machine.
9. Finally, click the Apply button and then Connect.

Use VPN client apps

As IKEv2 is a fast and secure protocol, many VPN providers use it in their own apps, besides OpenVPN (TCP or UDP), WireGuard, or L2TP. Some even recommend IKEv2 as the default, automatic protocol, as is the case with Surfshark. Another great VPN service that we recommend and that uses IKEv2 in its apps is NordVPN.

IKEv2 on routers

Unfortunately, IKEv2 is not largely supported by routers, unlike PPTP or L2TP. However, support for IKEv2 Wi-Fi routers is expanding as some VPN providers invest in such solutions. A great example is ExpressVPN and the routers they offer.

Do you need more info on how to use a VPN on a router? Take a look at our comprehensive article!

IKEv2 alternative protocols

IKEv2 is one of the strongest VPN protocols that you may use to encrypt your online communication. However, you should know what are the differences between IKEv2 and other VPN protocols.

OpenVPN

OpenVPN is probably the most popular VPN protocol due to its over features and performance. It offers excellent encryption options, great speed, and it can be easily integrated into third-party security solutions. Plus, it is open-source, unlike IKEv2.

IKEv2 offers a similar level of protection and encryption, but it surpasses OpenVPN on the followings:

• High-speed throughput.
• Stability.
• Auto-reconnection.

IKEv2 is usually faster than OpenVPN, but it is a little bit behind in terms of compatibility.

Overall, you may use both IKEv2 and OpenVPN with confidence.

WireGuard

WireGuard is a new and elegant protocol that seems to be the future of VPN. It is open-source, secure, and easy to use.

Both protocols (IKEv2 and Wireguard) are safe and really fast, but if you want a more modern approach, you should go with Wireguard.

L2TP/IPSec (Layer 2 Tunneling Protocol)

As L2TP/IPSec offers acceptable speed and great encryption, it may be a good option for encrypting your VPN channels. L2TP is paired with IPSec in the same manner IKEv2 and IPSec work together. However, there are signs that L2TP/IPSec is no longer secure, as Snowden has claimed that the NSA has hacked it.

IKEv2/IPSec is faster than L2TP/IPSec since L2TP/IPSec is more resource-intensive due to its double encapsulation feature and takes longer to negotiate a VPN tunnel.

Another aspect in favor of IKEv2 is stability. Switching from one network to another is a smooth process with IKEv2, while L2TP may let you disconnected.

Softether

It is difficult to compare IKEv2 and Softether, as the latter is more than a VPN protocol. However, if we refer only to the protocol itself, Softether and IKEv2 are both secure.

Softether has some important advantages as it is open-source and it runs on port 443 (HTTPS), and, consequently, it is more difficult to be blocked.

SSTP (Secure Socket Tunneling Protocol)

SSTP is a secure VPN protocol mostly available on Windows devices. It uses SSL 3.0, and it is quite speedy.

SSTP and IKEv2 offer a similar level of encryption, but SSTP is more firewall resistant as it uses port 443. SSTP is only built-in on Windows operating system, unlike IKEv2 that is available on multiple platforms and devices (iOS, Android, macOS, Linux, etc.).

PPTP

PPTP is an outdated protocol and you should not use it unless you have no other choice available. It has multiple security-related issues. However, it is really fast. But, you should always go for IKEv2 if you have to choose between these two.

What is IKEv2? Summary.

The IKEv2 VPN is a strong, secure, stable, and fast VPN protocol. IKEv2 has no significant downsides, and you may use it confidently anytime you need to encrypt your online communication.

As explained, IKEv2 is easy to set up, and it is available on VPN apps offered by most VPN providers. And, it is very suitable for usage on mobile devices due to its stability when switching networks.

Do you want to learn more about the IKEv2 Protocol and other VPN-related issues? Subscribe to our newsletter (below). You will make a Transylvanian baby-bat very happy.

Even in 2021, many internet users associate VPN with a solution mainly used by tech gurus when, in reality, a VPN is so easy to use that even dummies can deal with it. And, don’t get me wrong, when I say dummy, I don’t mean to offend anyone but let’s be honest, everyone has that friend who is completely left-handed and artless when it comes to technology. 

This article is supposed to enlighten all the internet users who are a novice in online privacy solutions and make-justice to the VPN, that is literally the easiest to use tool EVER.

So, let’s roll up our sleeves and and check this beginner’s guide! 

The Transylvanian explanation of VPN for dummies

Since TomBat was a little BATby, GrandMaBat used to spoil him in all of the ways possible. His favorite grandpa-nephew moment was when GrandMaBat laid in the bed next to him, reading him adventure bedtime stories. By far, his bedtime story of choice was “A bat’s day out”, a tale presenting a young bat’s adventures in an enchanted forest. 

ObeBAT was the name of the little bat who decided to enter a mystic forest in search of adventure, dragons, dwarfs, elves, fairies, and other creatures.

From the outside, the forest looked normal, but the magic happened as soon as the visitor stepped in. To enter it, there was a special opening inviting you inside. After you set your foot in, you could see the whole ground covered with the greener grass, the rocks shining underneath the fuzzy, soft, green moss, and the sound made by the trees was the most beautiful song you have ever heard. The flowers are as big as a car wheel, and the giant bees are flying around, creating an exciting bustle.

As beautiful as it was, the enchanted forest was a “hotspot” for unpredictable things and dangerous creatures.

ObeBAT started wandering around the trees, flying around the colorful flowers and huge mushrooms, quenching his thirst with the clearest dew, without realizing that he is adventuring in the heart of the forest where the day is filled with terrors. 

Here, the winds were cold, the flowers were wilted, and the sound made by the trees was frightening. While looking for a way to return, he started to feel like prying eyes were spying on him, watching his every move. He desperately started to bat around the threes looking for an escape, but it felt like there was no hope left for him. When, in the distance, he could finally see a way out. It was more like a shining tunnel he could enter, but what was at the end of it, it was a total mystery. 

ObeBat decided to fly to the tunnel and enter it, in search of his way home.

Said and done! When he entered the tunnel, a powerful light spoiled his face, and a group of fairies guided him through this trackless tunnel so no dangerous creature could follow him back home. 

This magical tunnel acts exactly like the one created by a VPN for your data to safely and tracklessly travel between your device and the internet without the prying eyes of your ISP and hackers spying on it.

What is the definition of a VPN, and what is it all about with this technology?

Virtual Private Network or, in short terms, VPN is a security technology meant for protecting and encrypting one’s connection. A VPN creates a secured and private VPN tunnel between two devices, allowing users to securely and privately surf the web, granting private internet access anywhere, anytime. 

A VPN for dummies definition would sound as follows – A VPN is like a train tunnel. Why? Because when the train is in the tunnel, no one can see it. And this is what happens to your data. When the VPN is enabled on your device, your data gets encrypted, and the prying eyes of hackers or your ISP can’t spy on your activities.

So, we can easily say that the VPN is a:

Virtual technology – as you enable a virtual encrypted tunnel for your data to be securely transferred over the web.

Private technology – as it uses encryption, so all your activities are kept private and hidden from curious eyes.

Network – using a VPN might sound like it is not a big deal when, in fact, every time you connect to a VPN server, you get access to an entire servers network covering the whole world.

Why do I need a VPN, and what does a VPN do?

It is kind of dumb to ask why you need a VPN, especially if you know what a VPN does and what its perks are. 

Yet, if you’re a beginner, these two questions are 100% legit, and providing you with a proper answer may take longer than you expect. However, I will do my best to keep it short while presenting you all the important aspects you must know about this technology.

Why should I consider using a VPN?

The main reason why you would want to use a VPN is to prevent your ISP from tracking your online activity. It is no news that your ISP (and even hackers) can see in plain text what websites you visit whenever you visit them. Browsing incognito doesn’t mean you browse privately. Incognito browsing will help you surf privately with your family members, as your activity is not saved in your web browser’s history. Incognito does not offer you any privacy or security in relation to your ISP or other online prying eyes. 

On the other hand, cybercrime should be another serious reason why you should consider using a VPN. Along with the Internet’s expansion and more people having internet access, the number of online-related dangers is increasing rapidly therefore, adopting a responsible attitude towards your online identity and activities should be mandatory.

Besides the VPN users who are deeply preoccupied with their online security and privacy, we have internet users who seek online freedom. In the era of technology, for some people, the Internet is not the information superhighway, but more like a pothole country road due to online censorship. For this user category, the VPN is the key that opens the door to online freedom, information, social media, or streaming websites.

Just like VPNs, remote working is gaining more and more popularity. For both employees and companies, VPNs are important tools to ensure work productivity and secure access to a company’s network and resources, with just a click, from the comfort of a sofa, a coffee shop, or from a sunny beach in Tulum. 

What does a VPN do?

Besides the pinch of magic it adds to your connection, the VPN is also capable of accomplishing the following tasks:

• It hides your online activities and IP address. As already mentioned, the VPN uses encryption to disguise your online activities and is also capable of hiding your IP, allowing you to browse securely, freely, and anonymously.
• A VPN changes your IP address. Remember that when you enable the VPN, you are connected to a VPN server? The VPN server has an IP address you are assigned with, as soon as you are successfully connected to the server. 
• Performant VPNs help you unblock websites. Based on its capability of changing your IP address, a VPN can help you forget about bandwidth throttling and unblock geo-restricted websites like BBC iPlayer, Netflix, or, from countries like China or Egypt, websites like Facebook or VoIP services like Skype. An important thing to mention is that not all VPNs are capable of bypassing DPI and firewalls, as only providers with a performant server network can help you surf freely.
• It helps you secure your activities. The Internet brings efficiency to your fingertips. We work online, we chat online, and we shop online. All these important activities imply using sensitive data like credit card details and private conversations that a VPN can secure.
• A VPN is capable of enhancing your online experience. A gaming VPN may be the perfect tool to troubleshoot unreliable connections and protect the users against attacks. Besides gamers, torrenters also use a VPN to maximize their security while performing P2P file sharing. And if you think I’m crazy because I am promoting torrenting, you must know that, just like the VPN, torrenting is perfectly legal, as long as you do not share or download copyrighted content.
• It provides security for all your devices. In every household, there is at least one smart TV, a laptop, a PC, maybe a gaming console, and other devices permanently connected to the internet. All these require a secure and encrypted connection (and your phone/laptop needs it the most, especially when you use a public Wi-Fi network). VPN software is compatible with the most popular operating systems, so with one single subscription, you may secure all your devices. And where the VPN software won’t work, VPN hardware comes in handy to solve the issue with the devices that natively do not support a VPN connection or app.
• It helps you save money. Who doesn’t love a discount? Since international eCommerce platforms and even travel agencies apply preferential prices for certain counties, with a VPN, you can save money while shopping for your favorite items or booking a flight for your next vacation. 

Keep in mind that a VPN has its limitations too!

If you’re not an experienced technician or if you’re using a VPN for the very first time, make sure you won’t dig that deep into the VPN’s settings. Before checking advanced settings into your app, please make sure you know what you’re doing, otherwise, you might risk having leaks or your activity exposed.

Another thing that you should know is that, from time to time, a secure VPN can have connection drops or it can slow down your connection. These drops are perfectly normal, this is why you should make sure you’re connecting to a VPN server that’s not overloaded.

What types of VPN exist, and what are your options?

Based on users’ particular needs, there are personal VPNs, business VPNs, and self-made VPNs. If you’re asking me, there are also free VPNs which you should totally avoid.

Personal VPN

The personal VPN is also known as a commercial VPN. This type of VPN service is the most popular, as it is specially designed and shaped for personal use. 

Personal VPNs are filled with out-of-the-box features and are usually transformed into Swiss army knives ready to achieve the most stringent criteria in terms of fast, secure, private, and anonymous connections. 

Business VPN

The business VPN or corporate VPN are developed to help companies secure their connection, work resources and improve work productivity. Business VPNs hand in hand with advanced VPN routers or even VPN concentrators can transform a company’s connection into a temple of security. 

Self-made VPN

A self-made VPN or a hand-made VPN is a VPN connection enabled directly by its user. Compared to a personal VPN, a self-made VPN brings the same level of security but it lacks the advanced features that normally boost a VPN user’s experience.

Free VPN

The world-wide-web is filled with free VPN services. Among the endless number of options, VPN Gate, for example, is a free VPN solution with millions of users, developed as an academic project. Yet, the level of protection provided by such a service is not always the expected one. Therefore, my advice would be to avoid falling into the trap of thinking that you don’t have something to hide and start using free services when, in reality, your online privacy and security are as important as your real-life ones.

How does a VPN work?

Since we started this article with a bedtime story, I think we should keep it on the same register. In most bedtime stories, there’s a witch who stirs in her magic potion, adding all sorts of ingredients. Considering the benefits a VPN brings, some of us might think it is witchcraft. But what are the special ingredients added to the magic potion?

A VPN consists of a combination of three main ingredients – a VPN server, a VPN protocol, and VPN encryption.

So, what do we do with all these goodies? We take a huge pot, also known as the VPN app. To obtain a magic potion at the end, we should start with the VPN server, which would be the first ingredient. Right after adding the server and stirring a little bit, we must add the VPN protocol and the VPN encryption. When the three ingredients start to mix, they will automatically encrypt your data and transport it to its destination on the web. The whole procedure is reversible, so your internet connection is secured from an end to another, back and forth. 

How to use a VPN for dummies?

Using a VPN is as easy as breathing. Let’s face it! You don’t have to be a tech guru to know how to install an app on your device and click or tap on a button. When it comes to using a VPN, things as no different than that. Of course, there are advanced methods, like buying your server and manually setting up your connection to create your self-made VPN but, who has time for that in the digital transformation era? 

VPN software is taking users’ online experience to the next level due to ease of use, speed, performance, and features. VPN software is none other than the popular apps, once installed on a device, help you connect to a VPN server and enable a VPN connection within seconds.

A VPN client or app is a controlled and automatic method that integrates all the VPN components. Moreover, it comes with advanced security features that add up to the whole process. Such features are obfuscated VPN servers, VPN split tunneling, VPN KillSwitch, leak protection, and even top-notch protocols like WireGuard, Stealth VPN, SoftEther, or Shadowsocks. 

Getting your hands on a performant VPN is not a hard task, as plenty of great options are literally at a click away. Providers like NordVPN, ExpressVPN, CyberGhost or StrongVPN go the extra mile for their customers in order to provide highly performant apps compatible with the most popular operating systems like Windows, Mac, iOS, Android, and even Linux. 

Steps for enabling a VPN connection.

Now that we know how easy it is to surf the web securely and anonymously, let’s recap what we need to do and learn tips and tricks for improved privacy.

1. Find the best VPN provider that meets your needs. Before starting your research, keep in mind to never opt for a free VPN and that there are VPNs that do NOT protect your privacy. Choose wisely, and don’t be stingy. Your online privacy is more valuable than you might think.
2. Now that you found your provider, proceed with creating your account and download their app.
3. Log in, open the app and start exploring it. Check the list of features and the selection of the protocol. Tip: for both enhanced security and ultra-fast connections, go for protocols like OpenVPN or Wireguard.
4. Connect to the server. Tip: if you’re not interested in unblocking a website available only in certain countries, make sure to pick a server close to your location. The speed of your connection is influenced by many factors, including the physical distance between your real location and your server’s.
5. Test your VPN by checking your IP address via existing online tools. Keep in mind that testing your VPN connection is mandatory every time you switch the server.
6. Surf the web in complete privacy, security, and anonymity. But, before that, check the images below and see how easy is to get and use a VPN app for Apple’s iPhone.

We are almost there…

Is double VPN a type of VPN?

The double VPN solution is not a type of VPN. Double VPN is a type of VPN server that some services provide that allows you to browse anonymously and securely by connecting to a chain of VPN servers. In simple words: VPN on top of VPN (or VPN tunnel inside another VPN tunnel/VPN chains).

While browsing the internet without a VPN, your connection to any remote server is like this: you -> destination server.

When you are using a regular VPN, the connection is like this: you -> encrypted connection to VPN server -> destination server.

With Double VPN: you -> encrypted connection to VPN server #1 -> encrypted connection to VPN server #2 -> destination server.

Besides the military-grade encryption that a regular VPN server provides, a Double VPN server will enhance your internet anonymity and security by adding an extra layer of encryption to your connection. 

The result is a double encrypted, 100% secure internet connection. Cracking this type of military-grade encryption is impossible, even if a hacker would have the skill or the patience to do it.

Is the VPN related to proxy or SmartDNS?

While looking for the best tool to avoid censorship, you might find these three main solutions. Novice users can fall into the trap of thinking that these solutions are the same, especially since top VPN services are providing them all. In reality, the only resemblance between them is that all are fit for bypassing internet restrictions.

The VPN definition is already clear. What we should keep in mind while comparing these three technologies is that the VPN provides encryption. 

Compared to the VPN, proxy, on the other hand, uses a proxy server to help you change your IP address and to access blocked websites. In most cases, this proxy server is just another computer acting as a middleman, changing your IP address, and helping you surf freely. A proxy is incapable of encrypting your personal data and, obviously, providing a secure connection. The most popular tool that enables you to connect to a proxy server is a proxy extension for your browser. Additionally, you can, of course, set up a proxy connection for your device manually.

When it comes to SmartDNS technology, this solution won’t hide your IP, nor encrypt your traffic. Instead, it will trick websites into seeing your location as an eligible one and, of course, granting you access to the website you wish to unblock. As it does not use encryption, SmartDNS is considered the fastest and easiest way to unblock websites.

What VPN alternatives do users have?

First of all, I am not sure why someone would want to use a VPN alternative when nothing is beating a VPN. 

When it comes to online privacy and security less is not more. Yet, for users who settle for less, they can opt for proxy or SmartDNS. On the other hand, we have Tor. Tor is a bold choice, as is not safe and private. 

Tor is an open-source software developed as a solution to help people in the NRL enable a secure and encrypted means of communication. Nowadays, Tor is used to access onion websites. Even if it is legal to use Tor, the constant use of this browser can mark you for surveillance by your ISP. Plus, let’s not forget what content is shared on the dark web. So, always think twice before deciding to swing between Tor nodes!

What to look after when choosing a VPN?

When you decide to upgrade your online experience by using a VPN, it is important to do a bit of research before picking the best VPN for you. 

A trustworthy VPN provider brings plus-value to the market via the security features or other benefits it provides to its customers.

Here are a few things you should look after:

1. Zero logging – the first thing to keep in mind is that you should choose VPN providers with a clear NO Logs policy. Also, your future VPN should respect the data retention law and should be GDPR compliant.
2. VPN servers – the VPN servers have an important role in your VPN connection, and so do the number of VPN server locations. That’s why it is mandatory to pick a VPN that provides servers located all around the world. 
3. Customer support – because you’re about to start your VPN journey, it is not enough to find a VPN that just works. You need to make sure you will receive all the support you need. Choose a service that allows you to ask for support via multiple channels like live chat support, social media, or support ticket systems. Prompt customer support is gold in hard times.
4. VPN apps – a VPN service should also provide a generous list of VPN apps, for the most popular operating systems. 
5. VPN protocols – less is not more when it comes to VPN protocols either. The longer the list of protocols provided, the better. 
6. Advanced VPN features – if you think that you’re a novice and you don’t need advanced features, you’re wrong. VPNs are not rocket science, and you will get used to the VPN software really fast, as it doesn’t imply any manual settings or advanced technical knowledge. Advanced VPN features will be, in short time, the cherry on top of a yummy VPN pie.
7. The most-wanted free VPN trial (and even the money-back guarantee policy) – reading about certain VPNs on the specialized reviews websites is helpful, but testing its performance on your own is even better.

VPN for dummies FAQ.

Here is a list of short answers to the most popular FAQ on VPNs

Are you still here?

As you can see, we could talk about VPNs for days.

What you should keep in mind after reading this article is that no matter if you’re looking for the best option to browse anonymously, unblock your favorite online content, download torrents, or search for the cheapest plane tickets, a VPN can always help you.

There are lots of goldfishes in the sea, so make sure you choose the one that is capable of making your online-security related wishes come true.

Always browse safely!

VPNs should, by definition, protect your data, but sometimes they don’t. Don’t be fooled by marketing headlines and incomplete service descriptions! Take care of your data, do your own research, and avoid services that are too good to be true (e.g., free ones).

Do you remember the story of Pinocchio and the chapter when he meets the Fox and the Cat? Due to his naivety, Pinocchio not only trusts the two, but he even offers them a sum of money from the potential gain. Their answer is well-known:

“We do not work for gain,” answered the Fox. “We work only to enrich others.”

“To enrich others!” repeated the Cat.

“What good people,” thought Pinocchio to himself.

Even small children understand that the Fox and the Cat do not have good intentions. However, Pinocchio is blinded by their sweet words.

When it comes to online privacy, don’t be a Pinocchio. Look around, read between the lines, and assume the worst. Consider the possibility that the service intends to get the most of your private data.

This article explains why privacy is important when it comes to VPN services, how you can do your own research, why you should stay away from free VPNs, and lists several VPNs that may not be your best friend for keeping your private data safe.

What is VPN privacy important, and how can a VPN get your data?

A VPN (Virtual Private Network) can see everything you do online, and it may log your activities. Moreover, by ignoring your right to privacy, malicious VPNs may use or sell your data.

According to a scientific study on Android VPN apps, the following practices are quite common:

• Third-party user tracking – 75% of the apps analyzed used tracking libraries to monitor user activities.
• Malware injection – over 38% of the studied apps contained some malware presence detected by VirusTotal.
• Traffic interception – about 16% of the analyzed apps might forward traffic in a peer-forwarding fashion rather than using their own hosted machines.
• Traffic manipulation – 16% of the analyzed VPN apps deployed non-transparent proxies to modify user’s HTTP traffic. Also, several apps actively injected JavaScript code for serving ads and redirecting e-commerce traffic to external ad partners.
• App permissions abuses – 4% of the analyzed VPN apps used the app permissions to implement localhost proxies to intercept and inspect user traffic locally.

Unfortunately, most VPN users are not aware of these practices. The same study analyzed the public user reviews of the VPN apps on Google Play and showed that only a small number of VPN users have publicly raised any concerns.

For your own sake, you need to be one of those concerned about their online privacy. It would help if you did your homework, did your own research, and looked for red flags when choosing your VPN provider.

How to do your own research

Every time you subscribe to a VPN service (as a matter of fact you should do this with every service or app you subscribe to that has access to your data) you should take at least five minutes and look for:

• the contact information;
• the company running the service;
• the privacy policy page;
• any news or articles on the Internet related to the service.

And you should ask yourself questions like:

• Is the contact information easily available on the website? Is the physical address listed clearly?
• Is the company running the service listed with identification info (e.g., tax id)?
• Does the privacy policy present the way the service process users’ private data? Does the service log data? Does it share the data with third parties?
• Are there any independent audits publicly available? Take a search on “[VPN name] audit.” Look for independently performed audits by reputable companies (e.g., PricewaterhouseCoopers) rather than self-made audits.
• What info can you find regarding the reputation of a VPN service by searching online? You can try, for example, “[VPN name] privacy concerns” or “is [VPN name] safe?”. Take your time and read 2-3 articles and judge for yourself.

If you have the slightest doubts that the VPN is fully engaged in protecting users’ privacy, search for another provider. There are plenty of excellent ones. Just take a look at the list of VPN services that offer access to the WireGuard protocol.

Are free VPNs safe?

You have probably heard this before: “If the app you are using is free, then you are the product!”. It means that one way or another, sooner or later, the free app or service will get paid for letting you use it.

Does that mean that your data is sold and your privacy is endangered? Not necessarily, but there is no way you, as a user and private person, can verify how your data is managed and the consequences of using a free service.

A VPN service has access to many private data based on its functioning principle. It can “see” your browsing habits, for example, and it may use this info in various ways (it can sell this data to interested companies or partner with companies that target you for numerous products).

Taking all these into accounts I do not consider free VPNs safe.

You may be tempted to believe that freemium services (those offering both free and paid plans) are safer. And, generally speaking, they should be. However, as the cost of providing free VPN services are high (due to infrastructure costs), many freemium VPN services look for additional ways to monetize their users. Thus, my advice is to stay away from them too.

VPN services that may not protect your privacy

Several VPN services are either transparent of exploiting user data or exposed publicly for unfair practices. We have gathered a list of such services and explained why it is advisable to avoid them. If you know of other similar services, please let us know in the comments sections.

[1] Hotspot Shield

Hotspot Shield apps are installed on millions of devices all over the World, and the VPN service is considered to be one of the most popular VPNs available on the market. Of course, Hotspot Shield began as a free service and later switched to the freemium model. However, it seems that Hotspot Shield’s practices are not as transparent and privacy-oriented as one expects from a VPN provider.

1. The company behind the HotspotShield service

Hotspot Shield is (now) run by Aura, a group of companies (most of them located in the United States) that manage several VPN services. This should not be a problem by itself if there were no privacy and security concerns related to several VPNs owned by this group.

2. Aura’s privacy policy

Strangely, Aura’s privacy policy page does not mention Hotspot Shield but lists other VPNs like Betternet, Hexatech, and Touch VPN.

The privacy policy of Aura clearly states that their applications use various tracking technologies (Cookies, Pixel Tags / Page Tags / Web Beacons / Tracking Links, SDKs) to collect information about their users.

The user-related info is used, among others, to serve ads (!).

Moreover, it looks like the data collected from Aura apps is shared with third-party services that may, in their turn, use the data for marketing purposes and serve ads.

3. Service security

In 2018 a security researcher found a way to identify Hotspot Shield users. The data leaked (country where the user was located and the user’s Wi-Fi name) could have been used to locate the user. The Hotspot Shield development team rapidly fixed the problem, but the Hotspot Shield apps’ security policies’ concern remains.

4. Third party auditing

In 2017, CDT (the Center for Democracy and Technology) filed a complaint signaling “undisclosed and unclear data sharing and traffic redirection occurring in Hotspot Shield Free VPN.” In plain words, CDT said that Hotspot Shield was misleading users related to the amount of data shared with third-party partners.

And the CDT conclusion says it all:

“Consumers who employ Hotspot Shield VPN do so to protect their privacy, and Hotspot Shield’s use of aggressive logging practices and third-party partnerships harm its consumers’ declared privacy interests.”

Additionally, Hotspot Shield was also found using various shady practices such as:

• injecting Javascript code for advertising and tracking;
• using various tracking libraries;
• redirecting traffic to e-commerce sites.

Conclusion: Hotspot Shields and the companies running the service do not seem to be interested in complete privacy and anonymity. Hiding the IP address and encrypting traffic is not enough! Thus, my advice is to avoid them.

[2] Betternet (asa well as Hexatech and TouchVPN)

Betternet is a hugely popular VPN service with millions of users from all over the World. It started as a free service, and then, a few years back, it switched to the freemium model.

However, there are some red flags regarding the Betternet service.

1. The company behind the Betternet service

It is quite a challenge to find out who runs the service. On the Betternet website, Betternet LLC is listed. However, the Terms and conditions page mentions Pango and Pango GmbH as the entities behind Betternet. Strangely, when one clicks on the link to the Pango privacy policy, one is redirected to … (surprise!) Aura, the same group of companies that own Hotspot Shield. Additionally, other VPN services are mentioned, such as Hexatech and TouchVPN.

Of course, the same privacy policy applies to all services managed by the group, which implies that user tracking is performed at scale.

2. Service security

A service vulnerability that allowed hackers to push fake updates and install malicious apps was discovered in 2020. The Betternet team fixed the issue rapidly after it came out, but the question regarding Betternet security practices remains.

3. Third party auditing

The Betternet Android app was listed in the article that presented VPN apps that included tracking technologies. The Betternet app had, at the time of the study (2017), no less than 14 tracking libraries!

Conclusion: is Betternet safe to use? I don’t think it is. You should better find other VPNs that have a better reputation.

As Hexatech and TouchVPN are also run by Aura my advice is to stay away from them too.

[3] Hola VPN

Hola is another hugely popular free VPN service. However, it logs as much info about you as it can. On the positive side, their privacy policy is transparent about their extensive logging policy.

And, here it is what Hola logs:

• your IP address;
• name and email address, screen name;
• payment, billing information, and any other information you provide to the service;
• when you register through a third-party website (such as Gmail), Hola gets access and logs your user name, email address, profile picture, birth date, gender, and preferences.
• when you register through a social network account (e.g., Facebook), Hola gets and stores the followings: your full name, home address, email address, birth date, profile picture, friends list, personal description, as well as any other information you made publicly available on your social media account;
• installed applications from your devices;
• browser type, web pages you visit, time spent on those pages, access times, and dates (for free users).

As you can see, by using Hola, your private data stops being private. It is transferred, stored, and probably used by Hola.

Moreover, Hola shares gathered data with “trusted third-party service providers or partners for the purposes of providing you with the Services, storage, and analytics.” This means that your data is furthered processed and used, probably, against you.

And, yes, Hola may hand you your data and your profile to authorities, even though Israel, where Hola headquarters are located, is not a “Fourteen eyes” country.

Conclusion: stay away from Hola if you consider that your data should remain private!

[4] PureVPN

PureVPN is a solid VPN provider with a privacy policy that states clearly that the service does not keep “any logs that can identify or help in monitoring a user’s activity”.

However, PureVPN was caught logging user data. In 2017, an investigation made public revealed that PureVPN provided data to the FBI for the criminal case. That proved that the “no logs” claim was untrue. This should raise some concerns for those interested in privacy and anonymity.

It is fair to mention that in 2019 and 2020, PureVPN completed two no-logs audits conducted by Altius IT and KPMG, respectively. The audits confirmed that, at the time of the audit, PureVPN kept not logs, and they “did not find any evidence of system configurations and/or system/service log files that independently, or collectively, could lead to identifying a specific person and/or the person’s activity when using the PureVPN service.”

Conclusion: Is PureVPN safe? Taking into account the latest audits, we may say it is. However, the fact that at some point, PureVPN shared user data with authorities remains a red flag.

Summary

Your personal data is important, and you should keep it private. It sounds obvious, but sometimes it is not. Especially when it comes to data privacy in the Internet world.

Plenty of apps and services gather access to your data and use them for their own gain. Don’t let this happen!

Online privacy and security are built on trust. That is why we have listed several VPN services that may have trust issues and that you should, in my opinion, avoid.

Do you know another VPN provider that should be on the list? Feel free to let us know in the comments below. Would you like to be notified when we publish new articles? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

So, on this post’s menu, we have the following selection: why is VPN important for our peace of mind, what is VPN software, and what makes it different than VPN hardware?

Let’s have a soft start to this article and begin with the Transylvanian explanation of VPN hardware vs. VPN software.

VPN hardware vs VPN software. The Transylvanian explanation

One upon a time, a friendly vampire lived in Transylvania. No matter how amiable he was, people avoided him. Therefore, he lived a very lonely life, a thing that made him really sad. Immortality was a heavy burden on his shoulders, as an eternity of loneliness sounds depressing even for vampires.

The fear he aroused among the people made him take the radical decision of never leaving his castle again. In just a few months, he read all the books in his library, watched all the series and movies on Netflix, and deep cleaned even the most hidden corners of his attic.

Driven by despair, he ordered a large mirror from VAMazon, the biggest e-commerce platform for vampires. In just a matter of days, he had the mirror delivered and installed in his castle chamber. He was excited beyond words that he will be finally able to see something moving around, except his shadow.

Despite his expectations, the idea of ordering a mirror proved to be a bad one. Why? Because he learned with astonishment that vampires’ reflection is not visible when they stand in front of a mirror. So, he started crying so loud that TomBat’s flock heard him from the far. They all gathered and decided to fly and follow the sounds. When they arrived at the castle’s open window, they saw the friendly vampire crying and crawling in pain.

Just like superheroes, they entered the room and surrounded the crying vampire. When he saw that some living creatures entered their chamber, he couldn’t believe his eyes. The friendly bats and our lonely vampire became best friends and, from that day on, as soon as the sun went down, they roamed the Transylvanian streets, having fun and enjoying the beauty of life.

Why is this story relevant to our VPN hardware vs VPN software discussion?

Because, my friends, hardware is a physical component of a computer, something we can see, like a mouse, a monitor, firewall, or a router. The software is a collection of instructions, tasks, and procedures, that are not visible, even if there are running “in front of us” on our computer.

So, our friendly vampire is, basically, hardware, as we can see it (and if we are brave enough, we can touch it), while the vampire in the mirror is the software since is there, but we can’t see it.

VPN technology is like a dose of chocolate for your internet connection. If chocolate would be able to help even a vampire hide his sadness on a Friday night, what do VPNs hide and do precisely to ensure peace of mind?

To use… or not to use a VPN?

I feel like we’re still at that point where internet users know stuff about VPN (Virtual Private Network) but consider this technology a tool for IT staff and tech gurus. In reality, the VPN is legal and easy-to-use, and it helps you accomplish the most basic online activities in complete online privacy, anonymity, and security.

The real question remains: What option does an internet surfer have when it comes to using a VPN? The answer is pretty simple; he can manually set up a VPN on the device of choice or go for VPN hardware or VPN software.

What is VPN hardware?

In IT, hardware (abbreviated as HW) is described as a physical and tangible component of a computer. Even its name leaks its definition. So, any component with a cord, or wirelessly attached to your computer or laptop is hardware. I also like to say that, without hardware, a computer would not exist, and without software, your hardware would be useless. Some examples of hardware: mouse, keyboard, webcam, hard drive, VPN firewall, RAM.

When it comes to the VPN world, there is VPN hardware that helps internet users protect one or more devices simultaneously. The best examples would be a VPN router or a VPN concentrator.

What is a VPN router?

Let’s be honest, nowadays, in every household or company, there are several computer and mobile devices connected to the Internet at the same time.

When you need to connect to the VPN from a bunch of devices simultaneously, having to connect to a series of applications might be time-consuming. To skip a few annoying steps, you can use a VPN router that helps you have a continuous active VPN connection fast and easily.

A VPN router is a regular router that supports various VPN protocols. Therefore, with the help of a VPN router, you can skip the manual configuration of the VPN on each device and enjoy a safer internet in a facile way.

Plus, a VPN router helps you ensure a secure and reliability for devices that otherwise are incapable of running a VPN service (Roku, Apple TV, or Xbox), cuts out the necessity of installing a VPN app, is easy to set up, and a great option for small businesses.

VPN users have a wide range of VPN routers to choose from. If you think about expanding your horizon and look for a VPN router to test its capabilities, Asus, Linksys, and Vilfo are three options worth trying.

What is a VPN concentrator?

Just like the VPN router, the VPN concentrator is hardware that acts like a networking device, capable of establishing multiple VPN connections and manage all of them at the same time.  The most important aspect any user should know about a VPN concentrator is that this standalone device suitable for large-scale corporations who want to provide a secure connection for their employees and allow their remote workers to easily and securely access the company’s resources.

These devices allow data encryption/decryption and create and manage multiple VPN tunnels in a single corporate network and manage users’ authentication and cryptographic keys.

The huge downside of a VPN concentrator is the price. Yet, companies decide to make a smart investment for their business and network security. From what I have read and heard, Cisco Meraki is a top-notch device that changes the way corporations manage their VPN network. 

What is VPN software?

It’s not much to say that software is your hardware’s boss. Software represents the set of programs and procedures that ensure the operation of a computer or device.

Just like any other application, VPN software allows users to enable a connection with a VPN server.

The VPN client software is an automated and controlled method developed to connect to a VPN server easily. The VPN providers are usually developing these kinds of security solutions for the most common operating systems (Windows, Mac, iOS, Android, and Linux).

Therefore, VPN software combines the VPN components (VPN server, VPN protocol, and encryption) in a single and compact application that allows users to activate a VPN connection with just a click.

Due to its ease of use, which requires no technical knowledge, a VPN app is a great option for people who don’t own technology at their fingertips. Plus, it allows users access to out-of-the-box features designed for advanced security or speedy connections. Among these VPN functions, I would mention Double VPN, Tor over VPN, obfuscated VPN, KillSwitch, selection of special servers for gaming or torrenting, split tunneling, secure protocols like WireGuard, OpenVPN, or Shardowsocks, SoftEther, or options that allow you to connect to the fastest server, based on your location.

Just check how, in two steps, you are able to surf the web securely and without restrictions.

When it comes to the available option, you must know that there is native VPN software created by VPN protocol developers (OpenVPN, WireGuard, SoftEther) or third-party VPN apps created by the best VPN service providers (NordVPN, ExpressVPN, StrongVPN, CyberGhost, etc.).

VPN hardware vs VPN software

Maybe you think that comparing software with hardware is inappropriate. Since the purpose of both VPN hardware and VPN software is to create a VPN tunnel and ensure a private means of communication between one’s device and the Internet, I see no problem comparing them.

Security, the capability of unlocking restricted content, seamless connections, or speed are just a few important aspects a VPN-related product should meet. So, let’s see how VPN hardware and VPN software perform when it comes to users’ key expectations.

Security

A VPN’s main purpose is to create a private and secured connection between a user’s device and the world-wide-web. Security is also important, no matter if you’re a company or a person. In both these cases, sensitive information that needs to be protected is sent over the web.

The great news is that VPN concentrators and reputable VPN apps do a great job at encrypting and securing the traffic.

Speed

In the era of ultra-fast Internet connections, who has the time to wait for his page to load? It’s no news that a VPN may cause connection speed loss, so it’s mandatory to test a VPN before actually subscribing. Just like in the case of security, when it comes to fast connections and an awesome online experience while working (or better, while unblocking BBC iPlayer or Netflix), both solutions do a great job fulfilling these goals.

Setup

Now that we know VPN hardware and software are great for security purposes and provide satisfying speed let’s find out what setting up such solutions implies.

I am pretty sure you’ve installed a bunch of apps so far. You know how things go – download the app, click on the install button, wait a few seconds, and, just like magic, the app is there, at your disposal. Installing VPN software is not different. Therefore you don’t have to be a geek to accomplish the task.

On the other side of the bridge, we have a hardware VPN that requires some nerves and tech knowledge, as you will need to do mainly everything manually.

The capability of unblocking websites

Internet censorship and other online restrictions take over users’ online freedom. Users in China or Korea are not able to surf the web regularly. Youtube, Google, even Facebook or Instagram are banned in these countries. Therefore, regaining their online freedom and rights are essential aspects for plenty of internet users.

VPN proves to do a pretty good job at unblocking geo-restricted content. There are even special protocols integrated into VPN apps developed for such purposes.

Unfortunately, hardware VPN is not capable of unblocking restricted content. I am not sure if this is a drawn-back, as the purpose of a VPN concentrator, for example, is not to allow employees to access Netflix but to work securely, safely, and to improve productivity.

Remote access

It’s clear who’s the winner, right? Hardware VPN is specially developed to provide secure remote access. Therefore, it does a stellar job fulfilling this task.

On the other hand, software VPN does not provide you the exact IP address every time you connect to a server. Yet, there is the possibility to opt for static or dedicated IP addresses, a benefit that VPN providers usually support.

Scalability

Let’s say that you’re a company that goes for a hardware VPN. In time, your company expands, and your number of employees grows. If your device supports only 150 connections, then your 151st employee will not use the VPN connection. Therefore, in the case of hardware VPN, scaling is not something that defines this solution.

It is known that VPN apps are more popular among regular internet users. VPN services usually provide up to 15 simultaneous connections, which should be more than plenty for a household.

Price

A VPN is a must-have these days. But if a VPN solution is too pricy, that it will remain only nice to have.

The price for a hardware VPN ranges from $50 to “shy is the limit.” On the other hand, you can get a VPN subscription from a top provider that comes with plenty of apps and lots of perks for just a few bucks. Moreover, VPN providers spoil their customers with generous discount campaigns when anyone interested can get a VPN with up to 80% OFF.

Before closing the book on the price subject, I must highlight that, no matter how low on a budget you are, never opt for a free VPN or lifetime subscriptions. NEVER!

Final thoughts.

VPN hardware vs. VPN software subject brings to light the pros and cons of these two solutions. Yet, security, the most important aspect that these two technologies must meet, is checked.

When it comes to their target market, hardware VPN is more popular among companies who need to secure access to their network. Simultaneously, software VPN is suitable for private users who want to secure their traffic while connected to a public WiFi network, avoid ISP surveillance, unblock websites, avoid bandwidth throttling, encrypt their connection, and other VPN appliances.

Price is another important decision-maker, and, in this particular case, software VPN is way cheaper than hardware VPN.

Another thing that you should keep in mind is that subscribing to my newsletter is free of charge. I promise you newsletters, filled with catchy tech talks, sent to your inbox straight from Transylvania.

WireGuard Windows setup [Summary]

To use WireGuard on Windows you may either install the WireGuard VPN client or a third-party VPN app (also known as VPN software) that uses the WireGuard protocol.

• Prerequisites:
  • Access to a WireGuard config file provided by the server admin or to a VPN service that implements the WireGuard protocol.
• Option 1: Download and configure the WireGuard VPN client for Windows.
  • Step 1: Install the official WireGuard app.
  • Step 2: Import the configuration info or create a new tunnel from scratch.
  • Step 3: Enable the WireGuard connection.
• Option 2: Subscribe to a VPN provider that offers access to the WireGuard protocol. Download the Windows app, select the WireGuard protocol (if needed), and connect.

If your goal is to set up a VPN connection on Windows, you may also take a look at our article on how to set up a VPN on Windows. `You will find out how to choose your Windows VPN provider wisely.

Why is WireGuard great for Windows

WireGuard is a new VPN protocol created by Jason A. Donenfeld that is considered an excellent replacement for OpenVPN. Even though it was initially developed for Linux, WireGuard works excellent on Windows as well as on other operating systems (macOS, iOS, Android).

WireGuard is a great choice for Windows users as:

• It is free and open-source.
• It uses state-of-the-art encryption and cryptography.
• WireGuard is remarkably fast and faster than OpenVPN.
• The WireGuard Windows client app is stable and easy to use.

WireGuard works great on all types of devices, including those with limited computing power. It uses fewer resources and, thus, offers great performance.

To sum up, the WireGuard protocol is a great choice for Windows, and you should consider it as your main tool for encrypting your data.

How to install WireGuard on Windows

You may use WireGuard on Windows either by installing the WireGuard Windows client app or using a VPN app provided by a VPN service that implements the WireGuard protocol.

Use the WireGuard VPN client for Windows

Firstly you need the connection credentials of a WireGuard server. You may obtain them from a VPN provider (e.g., OVPN, Mullvad) or the VPN server administrator (you may also set up your own server).

Most of the time, you will get a configuration file that contains all the necessary info (server address, private/public keys, DNS addresses, allowed IP addresses, etc.) that looks similar to this one:

[Interface]
PrivateKey = 6EP+8PVo57wONjvOD9LM/V/Ttdr+2XyGz2FzQrdY23s=
Address = 172.18.80.148/32, fd00:0000:1337:cafe:1111:1111:15e7:e4c0/128
DNS = 46.227.67.134, 192.165.9.158

[Peer]
PublicKey = r83LIc0W2F8s3dY9x5y17Yz8wTAQJc7giW1t5eSmeXc=
AllowedIPs = 0.0.0.0/0, ::/0
Endpoint = vpn44.prd.vienna.ovpn.com:9929

To set up the WireGuard connection on Windows 10 proceed as follows:

1. Open the WireGuard official website.
2. Download the Windows Installer.
3. Start the WireGuard Windows app.
4. You have two options:
   • Create a new tunnel (Add Tunnel from the bottom-left corner of the window app) – enter a name for the tunnel, the public key, and the other connection properties.
   • Import tunnel(s) from file – in case you have received a WireGuard conf file from your VPN provider or the VPN administrator you may import it and get all the tunnel properties at once.
5. Next, turn on the VPN connection by clicking the Activate button.
6. If the connection credentials are correct, you will see the connection succesful message on the bottom-right of the screen.
7. To disconnect, open the WireGuard app and click the Deactivate button.

Blocked untunneled traffic (kill switch)

If you edit an existing connection you will notice the Block untunneled traffic option. It is a Kill Switch mechanism that adds Windows Firewall rules to block traffic that tries to bypass the VPN connection. This option can be enabled if the configuration has exactly one Peer section and AllowedIPs is set to a catch-all address.

Install a Windows VPN app that offers access to WireGuard

If you are interested only in the benefits exposed by WireGuard (fast connections, great download/upload speed) and you don’t want to know more about the technical implementation, you may use a VPN app provided by a WireGuard VPN service.

The first step is to find such a VPN service. We recommend one of the following: NordVPN, Surfshark, Hide.me, PrivateInternetAccess, but there are many more.

Next, download the Windows app from the provider’s website and install it. Further, enable the WireGuard protocol (for most of the apps WireGuard is not yet the default protocol), and connect to the VPN. You are all set up with WireGuard on Windows!

WireGuard on Windows FAQs

Summary

WireGuard is a secure and fast VPN protocol, and it works great on Windows, as well as on Android, on iOS, on Mac, or Linux. Installing a VPN app that supports WireGuard is the fastest way to get started. However, you may use the official WireGuard VPN client app and set the connection manually.

Have you found our article on how to use WireGuard on Windows useful? If so, subscribe to our newsletter! We will let you know when we publish new WireGuard-related articles, and you will make a Transylvanian baby-bat happy.

With the Internet expanding and cybersecurity blooming, VPN technology transformed into one of the most powerful and easy-to-use tools for enhanced online security and privacy.

Large corporations spotted the potential behind this technology, and the VPN became popular among businesses from the very beginning. Due to the market’s constant request for advanced security solutions, another option came to life – the VPN concentrator.

What is a VPN concentrator, who uses a VPN concentrator, and why is a VPN concentrator different than a VPN router – are just some of the questions I will answer in this article.

So, CONCENTRATE and stick with me!

The Transylvanian explanation

For a while now, the MegaBats are terrorizing the pacifist bat colonies. Moving to my castle was only a temporary solution. As soon as TomBat and his bat gang decided to return to their cave, the MegaBats started to bother them again. Not only do the little evil creatures bully their neighbors but, since the winter is not showing signs of leaving and their food supply is going low, the MegaBats started some attacks against TomBat’s colony, meant for stealing their food.

The intruders conducted some successful missions, and if they continue to do so, TomBat and his neighbors are at risk of remaining without food and starve.

Since the aftermath is not in the good bats’ favor, they needed to come up with a fast and efficient solution to keep the MegaBats away from their cave.

After a bat-council meeting, the final decision was to install not only one but a bunch of surveillance cameras around the entrance of their cave, placed in different positions and angles, so they can spot the MegaBats ready to attack, spying around the corners. In this way, they can gather forces and guard the main entrance of the cave, preventing MegaBats from entering and reaching the supply pantry.

The investment in the surveillance system proved to be the right decision as it helped the bats to keep away the mighty intruders.

When it comes to real-life challenges, a solution that would help more than one individual keep away mighty hackers and online threats would be a VPN concentrator.

“How?“, you may ask! This is how!

What is a VPN concentrator?

A VPN uses three main components (VPN server, VPN protocol, encryption) to create a private connection over a public network. Such a connection is also known as a VPN tunnel.

Anytime a VPN user enables a VPN connection, the VPN components combine and securely transport the data over the Internet.

VPNs meet the most stringent criteria in terms of online security, privacy, and anonymity. Therefore, they are a must-have for most businesses who operate multiple systems connected via a network. Enjoying a VPN’s perks implies that each remote employee has a VPN installed on his device. This condition translates into costs directly proportional to the organization’s dimension and the number of employees. Hence, a way to overcome this inconvenience but still enjoy the benefits of a VPN was mandatory. The answer to all of the pains is a VPN concentrator.

The VPN concentrator is a networking device capable of establishing multiple VPN connections and managing plenty of VPN connections remotely.

This solution for extensive security can manage VPN connections on a multi-user level in a “compact” and secure manner, making it the perfect solution for private and encrypted communication.

At this very point, you may think that there’s not much difference between a VPN concentrator and a VPN router when, in reality, there is more than one distinction.

Stick with me, and you’ll learn why I support this statement!

Why is a VPN concentrator useful?

If you’re curious what does a VPN concentrator do, then you must know that it puts the light on the same benefits as a regular VPN, and it also brings its pluses. 

Here are a few of the most important things a VPN concentrator accomplishes:

• Encrypt and decrypt the connection from an end to another
• Multiple VPN tunnels in a single corporate network
• New IP address for all users
• Manages users’ authentication and cryptographic keys

How does a VPN concentrator work?

A VPN concentrator is a device designed to ensure and facilitate communication between different VPN nodes, that uses either IPsec (Internet Protocol Security) or SSL (Secure Socket Layer) encryption protocols. This advanced solution helps remote users access a network and, implicitly, access files on certain computers.

Since it grants access to users located in different parts of the world, it is the most ready-to-hand solution for big companies that have to find a way to allow their remote workers to access the company’s resources so they can stick to their work and complete their daily tasks.

Looking again at things from this perspective, we may assume that a VPN concentrator is more like a VPN router.

VPN concentrators are often confused with site-to-site VPN services. The difference is that site-to-site VPNs have a fixed location limitation. They allow users to enable a connection only between fixed points (several offices, office-home office, etc.).

VPN concentrators are picked and set up based on a series of important factors – the type and the scale of the organization, the type of files that are about to be accessed and shared over the secured connection, and, of course, the security standards the company wants to achieve.

VPN concentrator vs. VPN router

VPN concentrators and VPN routers are similar devices (VPN hardware) that operate in the same way but are differentiated by a series of, let’s say, features.

The most important thing that makes these solutions so different is the number of simultaneous connections that can be established. If a VPN router has some limitations, you must know that a VPN concentrator can support thousands of users connected at the same time.

Yet, we have our first important conclusions: for meeting your corporate needs, you shall consider a VPN concentrator, and for multiple connections at home, go for a VPN router.

More connections bring along increased costs. A VPN concentrator is much more expensive than a router, that’s why not many people are just falling all over themselves to buy such an advanced and expensive device.

VPN concentrator encryption protocols

IPsec encryption

Internet Protocol Security (IPsec) is a secure network used by VPNs to facilitate secure and encrypted communication on the Internet. VPN concentrator providers consider IPsec as a good option since it is a secure and effective protocol. Through IPsec, apps are able to run without being aware that the client is coming from outside the network. The only disadvantage to his option is that, for enhanced security, additional tools should be configured and used to decrease the risks. Due to its working mode, an IPsec connection is the best way for connecting branch offices with the headquarter.

SSL encryption

SSL (Secure Sockets Layer) is the successor of TLS (Transport Layer Security) and is a protocol meant for establishing encrypted and authenticated connections between computers on the same network.

SSL VPN clients are installed into the browsers or operating systems, granting access based on a username and password.  

SSL VPNs eliminate the need to manually configure each end-to-end device. The downside of an SSL connection is that only web-based applications will work, therefore, users will not have access to shared resources like printers, or similar resources that they can access via an IPsec connection.

Which is the best VPN concentrator?

Folks, I need to spill the beans. I have never used or configured a VPN concentrator. Since some of you may be curious about which is the best VPN concentrator, I have decided to invest some time in researching which would be the best solution from the available options. 

After digging into the subject, the award goes to Cisco.

Cisco Meraki changes the way companies manage their VPN network, its VPN concentrators provide comprehensive security in a single box, are easy to deploy, and bring an impressive list of features, like the ones presented below:

• Intrusion prevention
• Auto VPN
• Next-gen firewall
• Content filtering
• Malware protection
• High availability & failover
• Centralized management

VPN concentrator FAQ

VPN concentrator – let’s concentrate on conclusions!

It is safe to say that VPNs come in lots of forms. Depending on the VPN provider you choose, you can use advanced VPN features like the VPN Killswitch, split tunneling, Smart DNS, state-of-the-art VPN protocols like Wireguard or OpenVPN, ultra-fast connections, and ready-to-use VPN servers designed for gaming, torrenting, streaming, online freedom or double protection. We can enjoy all these perks bundled with other benefits, with just a click, anytime we want to secure our internet access and sensitive information.

The sensitive information comes into question when we speak about the online tasks we perform at work as well. Our employer should pay as much attention to these details as we are paying as individuals. Can you imagine what an effort would be for a multinational corporation to buy and provide NordVPN or ExpressVPN client software for each employee? To overcome this difficulty, organizations have a great option at their fingertips – the VPN concentrator.

This device comes as a compact solution for managing thousands of VPN connections and securing all the information and traffic generated by employees based in different locations. Since its main purpose is to serve companies’ need for security and privacy, this powerful device is not suitable for regular internet users. For folks looking to secure multiple devices at the same time, a VPN router like Vilfo would do the job really, really well.

Are you curious what’s the other thing that goes great with online security? My bi-monthly newsletter you must subscribe to by using the form below. It will help you stay up to date with the latest tech news, and it will also make a Transylvanian-bat happy! It’s a win-win situation, trust me!

See you on my blog and in your inbox?

Smart DNS is a technology that can easily unblock streaming channels from all over the World. There are two main benefits of Smart DNS: it offers great speed while accessing streaming content, and it can be installed on devices that are not VPN-enabled.

This article briefly explains what SmartDNS is, emphasizes its advantages, explains why VPN providers have embraced the technology, and lists the best Smart DNS services that we have tested.

What is Smart DNS, and what are its main advantages?

Smart DNS is a technology that can unblock geo-restricted streaming channels like Netflix, Amazon Prime, Disney Plus, HBO, Hulu, BBC iPlayer.

Unlike VPN, which can also be used to access streaming sites, Smart DNS does not hide your IP address nor encrypt your data (more details regarding VPN vs. Smart DNS can be found here). It solely redirected requests to streaming sites through proxy servers from different locations (e.g., in the United States for accessing Hulu or Amazon Prime). Thus, the proxy server plays the middleman role and facilitates a connection between your device and the streaming servers.

When Smart DNS is enabled, the ISP-assigned DNS (Domain Name Server) address of the device is replaced with the Smart DNS server’s address. When you access a streaming channel that the service can unblock, the streaming servers’ requests are redirected to a proxy service that does the trick of changing the request’s location.

The main advantage of unblocking streaming websites or apps with SmartDNS is that the approach does not slow down your connection (as no encryption is performed). Of course, the downside is that Smart DNS does not provide the same level of privacy and anonymity as a VPN.

Another significant advantage is that SmartDNS can be set up on devices not VPN-enabled, for example, on Smart TVs. Thus, such a service can unblock streaming services directly on your TV without extra tweaks.

Why are VPN providers offering SmartDNS services?

Some VPN providers have decided to include a Smart DNS service along with the VPN offer. This is a “smart” decision as it brings benefits to both the users and the providers:

• The Smart DNS technology offers better speed and greater stability for online streaming compared to the VPN (Virtual Private Network).
• It is a complementary service, and clients may use both Smart DNS and VPN.
• Smart DNS can be used on devices that do not support VPN connections.
• Unblocking streaming channels consumes a lot of server bandwidth. The Smart DNS technology reduces the load on VPN servers and lets the users in need of encryption benefit from smoother and faster connections.

What you need to run SmartDNS

Smart DNS can be set up on a large variety of operating systems (Windows, Mac, Linux, iOS, Android) and devices: desktops, mobile devices (Android, iPhone, iPad), gaming consoles (PlayStation, Xbox), Smart TVs (Sony, Samsung, LG), Apple TV, Roku, routers.

You don’t need to install anything. The manuals setup consists of modifying the DNS settings of your device or an app. Also, some SmartDNS providers offer the functionality of setting up the DNS from within the VPN apps (which are easy-to-use VPN software).

Before you start installing SmartDNS, you need to get the IP(s) of the Smart DNS server(s). You may usually find the DNS IP in the tutorials provided by the SmartDNS service.

Next, you need to modify the DNS settings for your device. For example, on Windows 10, you have to:

1. Search for the Control Panel.
2. Click on Network and Internet and, further, on Network and Sharing Center.
3. Next, on the left side, click on Change adapter settings.
4. Right-click on the interface through which you are connected to the Internet and click “Properties.”
5. Uncheck the Internet Protocol Version 6 (TCP/IPv6) option.
6. Double-click on Internet Protocol Version 4 (TCP/IPv4).
7. In the General tab, select Use the following DNS server addresses and enter the DNS server address provided by the SmartDNS service.
8. You may check the Validate settings upon exit. If you do, the Windows Network Diagnostics will start after you click the OK button, and it will check the DNS settings.
9. It is advisable to restart your computer.

After you have finished the Smart DNS setup you may load the streaming website or the streaming app.

Important! A Smart DNS service will unblock only specific streaming services listed on the provider’s website. It is not an unblocking technology that works on any website.

VPN providers that offer the best Smart DNS services

For some time now, VPN services have successfully integrated the Smart DNS technology in their services. The most well-known services that popularised SmartDNS were Overplay.net (now part of StrongVPN) and StrongVPN with its StrongDNS. Other VPNs followed, and now there are plenty of VPN providers that offer SmartDNS.

Of course, several services only offer SmartDNS, like SmartyDNS, SmartDNSProxy, or Unlocator. However, we consider that VPN services with SmartDNS bring more value for the money as they offer alternatives to unblocking streaming content.

Now, let’s get started with the list.

[1] StrongVPN

StrongDNS is the name of the Smart DNS service offered by StrongVPN. And, it is exceptional. The number of unblocked channels is fantastic and the exposed features are very useful.

To get started with SmartDNS, you need to create a StrongVPN account first. Next, from the Customer Area, click the StrongDNS link. You will be redirected to the StrongDNS website to continue with the setup.

From the Setup Instruction page click on the Configure your channels button. You may turn StrongDNS on or off for your IP address.

The best part is that you have a large selection of channels; for each channel, you may choose a country/location (if available), and you may see on which devices StrongDNS works. For example, you may unblock Netflix from one of the many locations listed but only from your browser.

Other advantages of Strong DNS:

• You may update your IP using the URL provided on the Setup Instruction page.
• You may set it up easily on DD-WRT, Tomato, Sabai routers (tutorials are available).

Overall, I consider StrongDNS the most advanced Smart DNS service offered by a VPN provider.

[2] CactusVPN

The Smart DNS service offered by CactusVPN is also impressive. It unblocks more than 300 streaming channels from many countries and locations, and it exposes several advanced features that may be useful in various scenarios.

You may use the service from devices located in one local network at a time. First, you need to validate the public IP address of your network (Admin area > Settings > Validate Your IP address), then change the DNS settings on your device(s) as shown in the provided tutorials. Next, you need to select the country/region you want to unblock (Settings > Smart DNS Manual Setup > Websites Region).

In case your IP address is dynamic and it gets changed a lot, you have several convenient options instead of logging in to the admin panel and validate the IP manually (as shown above):

• Validate your new IP address with an URL and access the URL every time your IP is changed.
• Use a Dynamic DNS service and set the domain to the CactusVPN admin panel (Settings > Smart DNS Advanced > Dynamic DNS Settings). Your IP will be updated automatically.

Several channels that may be unblocked by the CactusVPN Smart DNS service are listed below:

• US – Netflix US, Amazon Prime, Disney+, Hulu, Pandora, Crunchyroll, HBO Go, HBO Max, NBC, Fox, ESPN Player, etc.
• Canada – History, MTV.ca, ShowCase, CBC, SportsNet, CTV, CraveTV, TVA, TSN, etc.
• UK – BBC iPlayer, ITV Player, Channel 4, Channel 5, NowTV, Eurosport Player, Demand 5, Sky Go, etc.
• Germany – Zattoo Germany, RTL, Vox Now, Super RTL, Alles Kino, Arte Germany, 2DF, ZDF, ARD.de, DMAX, TV.de, Maxdome, SAT.1, etc.
• France – France.TV, France 1, France 2, France.TV Sport, myCanal, Canal Play, My TFI, Arte France, Molotov.TV
• Italy – Netflix, Rai Play, Infinity, Mediaset Play, Dplay Italy, NowTV Italy
• Poland – Netflix Poland, HBO Go, TVP.Pl, TVP VOD, iPla, VOD, KinoPlex, Nowa, WP, Vectra, etc.
• Switzerland – Zattoo Switzerland, Swisscom, Play RTS, Play SFR, Teleboy, Wilmaa, etc.
• Sweden – HBO Nordic, Plejmo, SVT Play, Viafree, UR
• Rusia – Wink, Amediateka, DivanTV, THT, Okko
• India – Disney+ Hotstar, Voot, Zee5, Star, TVF Play, MX Player, ALT Balaji, etc.
• Australia – 7 Plus, 9 Now, SBS, Fox Sports, Anime Lab, iView, Stan, Kayo, Binge.

[3] Surfshark

Surfshark includes access to their Smart DNS services without extra charge. You may activate it for one IP address at a time and it helps you bypass geo-restrictions for the US content (US Netflix, Amazon Prime, Disney+, US Hulu, etc.).

To activate SmartDNS, log in to the Surfshark account and click on Smart DNS from the left menu. Your current visible IP address will be shown, and you may Activate Smart DNS for it. You may change it later if your IP address is changed. If you intend to use SmartDNS on a device from another network, type in the IP address corresponding to that device.

Next, you will see the DNS address you need to use for the Smart DNS setup on your device.

[4] NordVPN

NordVPN is one the best VPN providers available on the market, with excellent features, fantastic performance, and great apps. It also has a strict zero-log policy audited by independent IP security companies.

With the Smart DNS service offered by NordVPN you may access the following streaming services:

• ABC Go (US region)
• Amazon Prime (US region)
• Fox Now, Sports Go, News, Showtime (US region)
• HBO Now (US region)
• Disney Plus (German region)
• Netflix Originals

One IP address is supported, so you may use it on multiple devices, but located in the same network. Thus, if you use a router at home you may set the Smart DNS on all devices that connect to the router and share the same public IP address.

To activate Smart DNS, log in to the NordVPN account, click on the View Details button from the NordVPN service. Next, click on the Activate button from the Smart DNS section. Your current public IP address is picked up, and you will be granted access only to devices using this IP. You will receive an email with the DNS addresses and set up instructions.

Important! If you want to activate Smart DNS for a Smart TV, you may need to activate the service from the same network used by the TV.

[5] ExpressVPN

MediaStreamer is the Smart DNS service designed by ExpressVPN to help you unblock geo-restricted streaming channels. Even though the websites and apps that can be accessed using MediaStreamer are not listed, it seems that it works only for US-based channels (Netflix, Hulu, Amazon Prime, etc.).

To get MediaStreamer activated, login to the ExpressVPN account and select DNS settings from the left menu. You will get your current IP address registered.

Every time your IP changes, you need to update it to the ExpressVPN systems. You may select to have your IP address updated automatically. Thus, every time you sign in to the ExpressVPN website or use an ExpressVPN app, your current IP will get re-registered.

The last step is to set ExpressVPN DNS IP addresses to your device. Click the Configure DNS on this device to proceed.

Best Smart DNS FAQ

Summary

We have listed 5 VPN providers that offer access to their own Smart DNS service. The main advantage for you is that you may unblock streaming channels on devices that can not connect to VPN, such as Smart TVs and game consoles. Additionally, Smart DNS is faster than a VPN.

Do you know another VPN provider with Smart DNS that is not on the list? Feel free to let us know in the comments below.

Would you like to be notified when we add new VPN services to the Smart DNS list? Subscribe to our newsletter! It will make a Transylvanian baby-bat happy.

I briefly explain what VPN split tunneling is, why you may need it, and how to set up an OpenVPN split tunnel.

OpenVPN split tunnel [Summary]

Depending on the type of OpenVPN VPN server you want to connect to (OpenVPN Access Server or OpenVPN Community Edition server), you have the following options:

• Connect to an OpenVPN Access Server:
  • Set up the split tunnel from the OpenVPN Access Server admin interface.
• Connect to an OpenVPN Community Edition server:
  • Option 1: Modify the OpenVPN config file.
  • Option 2: Use a VPN client app with split tunneling on OpenVPN.

What is VPN split tunneling, and why you may need it with OpenVPN?

VPN split tunneling is an advanced but useful feature provided by several VPN apps/VPN software and technologies. It controls the VPN traffic; more precisely, it directs some of the traffic through the VPN’s encrypted tunnel and some traffic to the standard, unencrypted channel through the ISP to the Internet.

It is a very convenient way to use a VPN for specific activities (e.g., unblock streaming channels or download torrents securely) and let other apps access local resources with your regular IP address.

A well set up VPN split tunnel provides a perfectly balanced approach for better security and great speed while using VPN only for specific apps or websites.

OpenVPN is (probably) the most commonly used protocol by the VPN services available on the market, even though WireGuard looks like a serious challenger. Thus, it is useful to know and understand how you can set up split tunneling on OpenVPN.

Solutions for setting up an OpenVPN split tunnel

You may connect to two types of servers with the OpenVPN protocol: the OpenVPN Access Server (the commercial one) and the OpenVPN Community Edition server (the free server used by most of the VPN providers). And, of course, the approaches to implementing the split tunnel depend on the type of server.

Split tunneling with the OpenVPN Access Server

OpenVPN Access Server is the commercial version of the OpenVPN server, designed and optimized for businesses.

If you are using the OpenVPN Access Server, then you may set up a split tunnel easily from the administration dashboard:

• Log in to the Admin Web UI.
• Navigate to Configuration > VPN Settings > Routing.
• Turn Should client Internet traffic be routed through the VPN? to No. From now on, the traffic intended for your private networks will cross the VPN. Other traffic will bypass the VPN.
• Additionally, you may specify subnets in the input field: Specify the private subnets to which all clients should be given access (one per line).

For more details regarding split tunneling on the OpenVPN Access Server, take a look here.

OpenVPN manual modifying config files

When you connect to an OpenVPN Community Edition server and access the OpenVPN config files, you may modify them and implement the split tunnel as you please. This is the case when you set up your own OpenVPN server or when you are subscribed to a VPN service that allows you to download the config files and use the OpenVPN client app to connect (e.g., NordVPN or OVPN).

To instruct OpenVPN use the VPN tunnel only for specific websites, here is what you have to do:

1. First, find the IP of the site you want to access via VPN. You may use the nslookup command or load an IP locator website (e.g., XMyIP.com), enter the URL of the website and get the IP address.
2. Open and edit the OpenVPN conf file (.ovpn). Any text editor will do.
3. Add the following commands:
   route-nopull
route [IP address of the website] 255.255.255.255
4. Save changes and restart the OpenVPN connection.
5. To remove the split tunnel, delete the two rows, and restart the OpenVPN connection.

The result is that only the traffic to the selected website(s) will use the OpenVPN encrypted tunnel, and the rest of the traffic will remain unencrypted.

You may need to additionally configure VPN DNS Servers to stop DNS leaks, as described here, at step 6.

This works on operating systems like Windows, macOS, or Linux (Fedora, CentOS, Ubuntu, etc.), and even on routers (here it is how to set up a VPN on a router).

VPN apps with split tunneling on OpenVPN

Several VPN apps that use the OpenVPN protocol can also split the data traffic depending on the user’s needs. The setup is usually quite simple, and it consists of selecting the apps that you want to use the VPN tunnel (or, reversely, the apps that you don’t want to use the encrypted Internet connection) and turning the split option on.

Great VPNs that offer OpenVPN split tunneling are Hide.me, ExpressVPN, PrivateInternetAccess, NordVPN (on Windows and Android), and Surfshark (on Windows and Android).

For example, for enabling the OpenVPN split tunnel on Hide.me apps you have to:

1. Open the Hide.me app (in this case, the macOS app).
2. Make sure you use the OpenVPN protocol: Menu > VPN Protocol > OpenVPN.
3. Next, open the Split Tunnel tab from the left menu.
4. Select one of the two options:
   • Do not allow selected apps to use the VPN (inverse split tunneling)
   • Only allow selected apps to use the VPN
5. The split tunnel will be turned on once the VPN connection is initialized.

How to test the OpenVPN split tunnel

My recommendation is to test your split-tunnel setup, no matter the solution you have chosen. For example, do not assume that a split-tunneling feature exposed by a VPN app works just because the feature is available. Many factors may influence the proper functioning of the app. For example, some users have reported that the ExpressVPN app does not properly establish a VPN split tunnel on Mac.

It would be best if you did not assume that your split-tunnel works perfectly as soon as you have finalized the setup. Many aspects may not go as planned.

My recommendation is to do the followings:

1. With no VPN enabled, load, for example, xmyip.com (IP: 67.227.194.148). Notice your public IP address.
2. Set the VPN split for xmyip (either within the OpenVPN config file, or by adding your favorite browser to the split tunnel list, as explained above).
3. Enable the VPN connection.
4. Re-load xmyip. Observe that your public IP address is no longer shown and the IP of the VPN server replaced it.
5. If the test was successful, you may proceed with the website or websites you want to access through the VPN.

OpenVPN split tunnel FAQs

Summary

OpenVPN is probably the most used VPN protocol and a prevalent option for all VPN usage scenarios. VPN split tunneling, which brings significant benefits, can be easily set up with OpenVPN either by adding commands in the config files or by enabling the option from the VPN apps’ settings.

This is the end of our tutorial on how to get set up VPN split tunneling on OpenVPN. Subscribe to our newsletter to get notified when we publish new articles. Additionally, you will make a Transylvanian baby-bat happy.