PrivateVPN Review (2024)

PrivateVPN was established by internet privacy advocates dedicated to defending personal freedoms online and staying abreast of global regulations concerning the monitoring of private online activities. This VPN service is highly regarded for torrenting.

We may receive compensation from the companies whose products we review. The opinions expressed here are our own.

Features

Rating: 3.5/5
Price: $2.00 – $9.90 per month
Refund Period: 30 days
Headquarters: Sweden
Devices per License: 10
Servers: 200
Server Locations: 85 locations across 63 countries, including the USA, Canada, the UK, Japan, and France
Streaming Sites Unblocked: Netflix, ITV, BBC iPlayer, NBC
Supports Torrenting: Yes
Logging Policy: No logs kept
24/7 Customer Support: No
Website: privatevpn.com

Operating since 2012, PrivateVPN is distinct from Private Internet Access (PIA), despite some confusion between the two. The service is managed by Privat Kommunikation Sverige AB, located in Sollentuna, a suburb of Stockholm, Sweden.

PrivateVPN delivers a solid performance with minimal technical issues and an easy-to-install VPN application. However, it does not offer a Linux app, requiring manual configuration. This also applies to routers and Blackberry devices.

Unlike leading VPN services, PrivateVPN lacks a browser extension and does not provide features such as double-hop VPN connections or split tunneling. Additionally, it does not include several advanced privacy features commonly offered by top VPN providers, such as ad and tracker blocking, antivirus protection, or hacker detection.

Privacy and Security

PrivateVPN prioritizes privacy through various mechanisms:

Legal Compliance
Procedural Protections
Internet Connection Encryption
Logging Policy
IP Address Masking

Legal Domicile:

A VPN provider’s headquarters plays a crucial role, as it is subject to the laws of that location. Although VPN servers may be rented cloud space in various countries, the main office is significant due to its legal obligations and potential vulnerability. Some countries, like China and Cuba, have strict regulations or outright bans on VPN services, while others, such as Russia and India, require VPN providers to log user activities.

PrivateVPN is headquartered in Sweden. Despite recent data retention laws requiring ISPs in Sweden to store internet activity records for 10 months, these regulations do not extend to VPN services. Consequently, PrivateVPN effectively obscures user activities from ISPs.

PrivateVPN Procedures

A Virtual Private Network (VPN) establishes a secure connection between a remote device and a network via the internet. This connection is protected through encryption, aiming to provide a level of privacy comparable to that enjoyed by devices within a network in a secure office environment. Hence, the term “Virtual Private Network.”

The encryption creates a “tunnel,” which refers to the secure passage through which data travels, analogous to someone moving through a tunnel in secrecy to an unknown destination.

Data transmitted over the internet is segmented into packets, each carrying a header that contains source and destination IP addresses. Routers read these destination IP addresses to direct the packets appropriately. However, this information is also recorded by Internet Service Providers (ISPs), documenting all accessed websites and services.

To safeguard this data, PrivateVPN encrypts the entire packet, including the header, preventing ISPs from recording connection destinations. To enable packet transmission despite this encryption, the packet is encapsulated within another packet. This outer packet is addressed to the VPN server, so the ISP records a connection between your device and the VPN server. PrivateVPN operates servers globally; upon subscribing to the service, you download a VPN client app, select a server location, and activate the service.

When PrivateVPN is enabled, the app negotiates an encryption protocol with the chosen server and establishes a secure tunnel. All internet traffic from your device is routed through this tunnel, encrypting each packet and enclosing it within an outer packet directed to the VPN server.

Your web browser interacts with the VPN server without awareness of the diversion. For instance, if you request Google’s address, the browser generates a packet with the destination IP address. Upon reaching the VPN server, this packet is decrypted, and the original request is forwarded. Responses are sent back to the VPN server, re-encrypted, and then addressed to your device. The VPN client decrypts and forwards these responses to your browser.

This seamless process ensures that your device remains unaware of the VPN’s intervention, as the traffic appears to flow normally despite being routed through a different location.

PrivateVPN Protocols

The protocols used by PrivateVPN to establish secure tunnels are sets of standardized guidelines. These protocols are publicly available and ensure compatibility with other systems following the same standards.

PrivateVPN supports five VPN protocols:

OpenVPN
IPsec
IKEv2
L2TP
PPTP

OpenVPN is widely recognized as the most effective and is extensively used. IPsec operates at the packet level, providing efficient encryption but lacking in session management capabilities. Therefore, IPsec is paired with other protocols to handle encryption key negotiation tasks. PrivateVPN offers two such options: L2TP and IKEv2, allowing users to select between L2TP/IPsec or IKEv2/IPsec.

PPTP is an older standard that offers lower security compared to newer protocols. PrivateVPN includes PPTP for users who face issues with other protocols and only require location masking without strong security.

Transport Layer protocols, which manage connection negotiations over networks, include:

Transmission Control Protocol (TCP): A connection-oriented protocol ensuring packet retransmission and proper sequencing.
User Datagram Protocol (UDP): A connectionless protocol that is faster but does not guarantee packet delivery or order.

Within the VPN app, you can choose to use OpenVPN with either TCP or UDP. Other VPN protocols operate over UDP. TCP provides reliable connections, while UDP is faster and preferable for interactive applications such as online gaming, internet telephony, and video chats. The minor data loss in UDP is generally less noticeable than the delay caused by retransmission.

PrivateVPN Encryption

PrivateVPN does not disclose specific details about its encryption protocols for all VPN options, but the encryption utilized for OpenVPN implementations is known.

Encryption ciphers are algorithms that transform readable text into an unreadable format. This process ensures that only the intended recipient, who possesses the correct decryption key, can restore the original text.

VPNs commonly use a limited set of ciphers. These ciphers operate based on a mathematical formula, which is publicly known. What secures the cipher is a variable element within the formula known as the key. Changes to this key significantly alter the outcome of the encryption, making it essential for decryption.

Cybercriminals might attempt to crack an encryption cipher by guessing the key, employing computer programs that rapidly try all possible combinations—a method known as a brute force attack. Longer encryption keys generally require more time to decipher through such methods, thus enhancing security. Consequently, the effectiveness of an encryption system is largely dependent on the key length.

PrivateVPN employs two encryption systems. For tunneling encryption, it utilizes the Advanced Encryption Standard (AES) with a 256-bit key (AES-256). For session establishment, PrivateVPN uses the Diffie-Hellman protocol with a 2048-bit key (DH-2048).

AES-256 is recognized as the most robust encryption cipher available globally, utilized by financial institutions and intelligence agencies to secure data and communications.

AES is a symmetric cipher, meaning the same key is used for both encryption and decryption. This introduces a potential vulnerability: the key must be transmitted securely between parties. Until the key is shared, it cannot be used, and any interception of the key compromises the encrypted messages.

Diffie-Hellman addresses the key exchange issue inherent in AES. It is a public key cryptography system involving a key pair—one for encryption and one for decryption. Although the keys are mathematically linked, it is not feasible to derive the decryption key from the encryption key or to decrypt a message using another key pair’s decryption key.

In this system, the encryption key (public key) can be openly shared, while the decryption key (private key) remains confidential. With Diffie-Hellman, both the server and client possess a key pair used in encryption and decryption processes. This method ensures that each side of the connection can decrypt messages using its private key and the public key of the other party.

Outsiders are unable to decrypt messages without the private keys. While guessing the keys is theoretically possible, it is time-consuming. Periodic key renewal and unique keys for each session further enhance security against brute force attacks.

Though PrivateVPN’s 2048-bit key may seem impressive compared to AES-256, public key systems generally require longer keys to achieve equivalent security levels. For reference, the public key equivalent of a 256-bit symmetric key is approximately 4098 bits.

Competitors like ExpressVPN, NordVPN, and CyberGhost use a 4096-bit key for public key encryption. Other services such as Surfshark, Private Internet Access, and IPVanish also use 2048-bit keys. Thus, while PrivateVPN’s encryption may not be the strongest in the market, it remains competitive.

PrivateVPN Server Functionality

PrivateVPN operates by connecting remote devices to a network via the internet, ensuring this connection is secured through encryption. This process mirrors the privacy of an office network, hence the term “virtual private network.”

The encryption creates a “tunnel,” analogous to traveling through a tunnel to maintain secrecy about the destination. Data transmitted over the internet is divided into packets, each containing a header with source and destination IP addresses. ISPs monitor these headers to track browsing activity.

PrivateVPN encrypts the entire packet, including the header, preventing ISPs from recording the destination. To ensure the encrypted packet can traverse the internet, it is encapsulated within another packet.

The outer packet is directed to the PrivateVPN server, which causes the ISP to log a connection between your computer and the VPN server. PrivateVPN operates servers globally. Upon subscribing to the service, you download the VPN client app, which allows you to choose a server location.

Activating the PrivateVPN service initiates the app, which negotiates the encryption protocol with the selected server and establishes a secure tunnel. From this point, all internet traffic from your device is transmitted through this tunnel, with each packet encrypted and encapsulated in a packet addressed to the VPN server.

Although your web browser does not directly interact with the VPN server, it sends requests such as those to Google. These requests are encapsulated and encrypted by the VPN server before being sent. The server decrypts incoming responses, re-packages them, and forwards them to your computer. The VPN client on your device then processes these responses and delivers them to your browser.

In summary, PrivateVPN effectively routes your internet traffic through a different location, maintaining the appearance of a direct connection to your browser.

PrivateVPN Protocols

PrivateVPN employs various protocols to establish secure connections, each defined by a set of guidelines. These protocols ensure interoperability between different software and systems globally, as they adhere to standardized practices.

PrivateVPN supports five distinct VPN protocols:

OpenVPN
IPsec
IKEv2
L2TP
PPTP

OpenVPN is widely regarded as the most robust and versatile option. It is extensively used due to its high level of security and adaptability. IPsec, known for its efficiency, operates at the packet formation level, providing a fundamental layer of security. However, since networking and internet systems function in layers of abstraction, IPsec is too low-level to manage session control on its own.

To complement IPsec, PrivateVPN offers two higher-layer protocols for encryption key negotiation: L2TP and IKEv2. Users can choose between L2TP/IPsec and IKEv2/IPsec for enhanced encryption and session management.

Additionally, PrivateVPN supports PPTP, an older protocol with limited security features. While PPTP is less secure compared to modern alternatives, it may be used by individuals facing difficulties with other protocols and requiring basic location masking without strong security.

Transport Layer protocols, including TCP and UDP, manage connection negotiations between devices over a network. TCP, a connection-oriented protocol, ensures packet reliability by retransmitting lost packets and ordering them correctly. In contrast, UDP is a connectionless protocol that offers faster performance but lacks these reliability features. Within the VPN application, users can select OpenVPN with either TCP or UDP, while other protocols default to UDP.

TCP provides a more stable connection, whereas UDP is preferable for real-time applications such as online gaming, VoIP, and video conferencing, where occasional packet loss is less disruptive than the delay caused by retransmission.

Protocol availability varies by application and operating system, but all platforms offer OpenVPN, the most recommended option. Manual setup of PrivateVPN is also possible within the network settings of your device.

PrivateVPN Encryption

PrivateVPN does not disclose the encryption specifics for all VPN protocols, but details are available for OpenVPN implementations.

Encryption ciphers convert readable text into an unreadable format to protect its content. The security of this process depends on the complexity of the encryption key used. The longer the key, the more resistant the cipher is to brute force attacks, where attackers attempt to guess the key through exhaustive trial and error.

PrivateVPN utilizes two encryption systems:

Tunneling Encryption: Advanced Encryption Standard (AES) with a 256-bit key (AES-256).
Session Establishment: Diffie-Hellman with a 2048-bit key (DH-2048).

AES-256 is currently the most secure encryption method available, widely used by financial institutions and intelligence agencies for its robustness. AES is a symmetric cipher, meaning the same key is used for both encryption and decryption, which introduces a potential vulnerability during key exchange.

To address this, PrivateVPN uses Diffie-Hellman for secure key exchange. This public key cryptography system employs a key pair – one for encryption and another for decryption – ensuring that the encryption key can be shared openly while keeping the decryption key confidential. This method protects against unauthorized access, as only the intended recipient can decrypt the messages.

Despite PrivateVPN’s 2048-bit key for Diffie-Hellman offering substantial security, it is less robust compared to the 4096-bit keys used by services like ExpressVPN, NordVPN, and CyberGhost. While PrivateVPN’s encryption is not the most advanced, it remains competitive within the industry.

PrivateVPN Server Functionality

A Virtual Private Network (VPN) operates similarly to a proxy service. In legal terms, a proxy represents another party, and a proxy server performs this role within the digital realm. The primary function of a VPN is to allow a remote computer to connect to an office network as if it were physically present within the office environment.

When using a computer on an office network, internet traffic is routed through the network’s internet gateway. Consequently, communications on the internet display the gateway’s IP address as the source IP address in packet headers. This creates the appearance that the user is located at the gateway’s physical location, even though the user is not. Essentially, the proxy server is representing the user.

For instance, if you have access to your favorite TV stations online, you may notice restrictions when trying to access these services from abroad. TV channel websites often block access based on geographical location due to IP address registration.

Streaming platforms like Amazon Prime Video and Netflix allow users to continue accessing services while traveling internationally. However, the content available may be restricted to the library of the country you are in, rather than your home country.

With PrivateVPN, users can select a server location before activating the VPN. The VPN system then makes all web servers perceive the user as being in the chosen location.

PrivateVPN servers utilize Network Address Translation (NAT). Each server manages a pool of IP addresses, and an IP address from this pool is allocated to a customer when a VPN session is initiated. Incoming packets are decrypted, but before being forwarded to their intended destination, the VPN server replaces the original source address with the allocated IP address.

The recipient of the packet reads the source address, determines its location, and sends a response to that address. Routers then forward this response to the VPN server, which encrypts and encapsulates it in an outer packet addressed to the original customer.

The VPN server tracks which customer is associated with which IP address using a NAT table. When the customer disconnects, the allocation record is removed from the NAT table, and the IP address is returned to the pool for reuse. This approach ensures that no customer is permanently linked to a specific IP address. PrivateVPN refers to this system as a “public dynamic dedicated IP address.”

PrivateVPN Activity Logging Policy

The effectiveness of a VPN’s IP address masking is compromised if the provider maintains records linking users to specific IP addresses and timestamps. This type of record is known as an activity log.

PrivateVPN differentiates itself by emphasizing strong privacy protections. Consequently, it adheres to a strict no-logs policy. Maintaining activity logs, such as archiving NAT table records, would require significant server storage and analysis resources, without providing any practical benefit.

However, PrivateVPN’s logging policy may not align with regulations in certain countries. For instance, both Russia and India have legal requirements mandating that VPN providers log user activity. The Indian government requires these logs to be retained for five years. Many VPN services have ceased operations in these countries in response to such regulations.

VPN providers that continue to operate in Russia and India often use “virtual locations” – a method of assigning IP addresses registered in one country to servers located in another. For example, a server based in Singapore might use IP addresses registered in India.

PrivateVPN does not explicitly detail its compliance with Russian and Indian regulations. The company lists servers in India as being located in Mumbai and Bangalore, and in Russia as being in Krasnoyarsk and Moscow. Consequently, it is likely that VPN servers in India are logging user activity, while those in Russia may be subject to activity logging and content filtering.

PrivateVPN IP Leak and DNS Leak Protection

The VPN tunnel connecting a device to a VPN server is designed to conceal the user’s internet activities from their Internet Service Provider (ISP). ISPs can also block access to websites through their position as the internet gateway.

An IP leak occurs when the ISP can view the real destination IP address. Such leaks are unlikely with robust encryption, as provided by PrivateVPN, unless the VPN connection is interrupted without the user’s knowledge.

VPN connections can occasionally break while the underlying internet connection remains active due to protocols like UDP and TCP. TCP includes a “keep alive” packet mechanism to maintain connections, whereas UDP does not. If no traffic is detected, the VPN session may terminate, leaving the unprotected underlying connection active, exposing destination IP addresses to the ISP.

To prevent IP leaks, many VPN services include a kill switch feature that blocks all internet access if the VPN tunnel disconnects, thereby alerting the user. PrivateVPN provides this kill switch functionality in its Windows, macOS, and Android applications, but not in its iOS app or for manually configured systems like Linux and routers.

The Domain Name System (DNS) translates web addresses into IP addresses needed for browsing. Typically, DNS queries are handled by the ISP’s DNS resolver. ISPs can block websites by altering DNS records.

PrivateVPN’s DNS resolver ensures that DNS queries are routed through the VPN tunnel, making blocked websites accessible again.

Website Blocking Performance

We conducted tests on various geo-restricted video services using different server locations in the PrivateVPN app. The results are as follows:

Netflix: Successfully accessed with servers in the USA, the UK, France, and Japan.
Disney+: Successfully accessed with servers in the USA, the UK, France, and Japan.
BBC iPlayer: Accessed.
ITV Hub: Accessed.
Channel 4: Accessed.
ABC: Accessed.
NBC: Accessed.

This performance is noteworthy, as few VPNs can bypass the proxy detection systems employed by these streaming services. Notably, Disney+, Channel 4, and ABC are particularly effective at blocking cross-border access and VPN activities.

Pricing

PrivateVPN offers a single package with three subscription options. The cost varies depending on the subscription length:

One-month plan: $9.90 per month.
Three-month plan: $17.99 ($6.00 per month).
Three-year plan: $72.00 ($2.00 per month).

All subscription plans come with a 30-day money-back guarantee. Payment can be made via credit card, PayPal, Google Pay, Apple Pay, or Bitcoin.

Installation Instructions for PrivateVPN

Visit the PrivateVPN Pricing page. Choose a plan, provide your email address and create a password. Enter your payment details and click “Pay Now.”Upon successful payment, you will be redirected to the Getting Started page, which includes links for downloading the app.
Click the “View Guide” button for the app corresponding to your operating system.
Follow the download link in Step 1 of the guide and wait for the download to complete.Note: If other VPNs are installed on your computer, remove them before installing PrivateVPN, as they may interfere with the installation and functionality of PrivateVPN.
Open the downloaded file to start the PrivateVPN installer. Once the installation is complete, log into the app using the email address and password you provided during payment.
Skip through the usage guide to access the main screen of the VPN app.
On the Advanced View page, configure essential settings, including the VPN protocol under the Connection Type field and the encryption key length in the OpenVPN Encryption field.
On the main screen, click “Change” in the location field to access the server selection list. Server locations are listed by country, along with the current return trip time to each location.
Double-click your chosen location. The server list will close, and the selected location will appear in the server field. The connection will then initiate.

PrivateVPN App for Android

To obtain the PrivateVPN app for an Android device, navigate to the Google Play Store and search for “PrivateVPN.” Once the app appears, select the “Install” button. You can then either click “Open” directly in the Google Play Store or locate the PrivateVPN icon on your Home screen and tap it to launch the app.
Upon launching the app, you will be prompted to grant access to the device’s networking functions. Select “Allow” to proceed. The app is now ready for use.
To access the settings, tap the hamburger menu icon located in the top left corner of the app. You will find options to select the VPN protocol, either OpenVPN over TCP or UDP. Choose your preferred option from the VPN Protocol section. Additionally, you can select the encryption key size in the OpenVPN Encryption section.

PrivateVPN App for iOS

Download the PrivateVPN app for iOS from the Apple App Store.
Search for “PrivateVPN” and install the application.

Speed Tests

We conducted performance tests on the PrivateVPN system, utilizing the OpenVPN protocol over UDP with AES encryption using a 256-bit key. These tests were performed on the Three network in the UK, with each test conducted three times, and the median result reported.

Initially, we tested a connection to a nearby server without VPN activation to establish a baseline performance:

Download Speed: 11.64 Mbps
Upload Speed: 6.75 Mbps

Subsequently, we tested the PrivateVPN service using its UK VPN server and connected to a test server within the UK:

Download Speed: 10.76 Mbps
Upload Speed: 6.09 Mbps

These results are close to the baseline speeds observed without the VPN. While some VPNs significantly reduce connection speeds, particularly with AES encryption using a 256-bit key (as compared to a 128-bit key), PrivateVPN maintained relatively high performance.

Testing a long-distance connection to a server in Sydney, Australia, revealed unexpected results:

Download Speed: 9.95 Mbps
Upload Speed: 5.40 Mbps

These speeds were higher than those observed on the local connection. Further tests later in the day confirmed consistent download speeds around 15 Mbps.

When re-testing the connection to the Sydney server with the PrivateVPN service enabled (using the UK VPN server), the connection speed decreased:

Download Speed: 8.20 Mbps
Upload Speed: 5.54 Mbps

Despite the significant drop in speed for long-distance connections, the performance impact on local connections was minimal. These results are competitive with other VPN services, with the observed slowdowns on long-distance connections aligning with typical VPN behavior.