Which VPN works best on iPad, iPhone, and Mac?

Hello, for me ExpressVPN

• Native, easy-to-use apps for iOS and macOS
• Fast and stable connections (Lightway protocol optimized for Apple Silicon)
• Top-tier security and AES-256 encryption
• Strict no-logs policy (audited)
• Works with streaming (Netflix, Hulu, BBC iPlayer, etc.)
• Cons: Slightly more expensive than others
• Best for: All-around performance, privacy, and usability
• Free trial: 7 days on iOS

source

jane666 wrote:

Thank you for all your replies 👍🏻

You're very welcome.

If you are attempting to ameliorate recently introduced controls surrounding the UK's Online Safety Act, or other geo-restrictions, a commercial VPN might be a useful tool. As for additional security, beyond the very specific attributes and instances that I have outlined in some detail, a commercial VPN service is unlikely to add significant additional privacy to your activities.

For the most part a commercial VPN service will also provide no greater threat exposure to data-brokers and data-harvesting than is already the case when connecting to the internet via your domestic ISP or Cellular Operator - although there are documented instances of where this particular threat from unscrupulous VPN Operators have been exposed. It is these threats to your privacy that negative or cautionary comments offered elsewhere are likely focused.

Be aware that other "security" Apps (e.g. Norton or MacAfee) may also decrypt your traffic to permit traffic examination/screening. You should also be mindful that due to additional protocol overheads, a VPN-secured connection will typically be 10% slower than without - which for a slow connection may be the difference between usable and unusable; for a fast connection, the protocol overheads will be insignificant to the quality of your connection.

In summary, if you decide to use a commercial VPN, choose with care. Advertising is often sponsored and cannot, of itself, be relied upon for accuracy. Consider that some Commercial VPN Operators don't bother to advertise, being properly funded through subscription (i.e. paid) and surviving entirely upon reputation and audit. While not endorsing any particular service, you might consider using hide.me for secure and affordable commercial VPN service.

As outlined by others, avoid "free" VPN services - these, in the main, being fundamentally untrustworthy. VPN services and infrastructure cost money to run. If you aren't paying for the service, you are giving something else away in return for access to these services.

With the benefit of a little knowledge and contextual guidance, you will be better able to determine suitably for your specific needs.

JohnPotter70 wrote:

Hello, for me ExpressVPN•

Native, easy-to-use apps for iOS and macOS

• Fast and stable connections (Lightway protocol optimized for Apple Silicon)

• Top-tier security and AES-256 encryption

• Strict no-logs policy (audited)

• Works with streaming (Netflix, Hulu, BBC iPlayer, etc.)

Cons:• Slightly more expensive than others

Best for:• All-around performance, privacy, and usability

Free trial:• 7 days on iOS

source

VPN does NOT protect your privacy online. It actually can compromise your privacy, ESPECIALLY if you use a “free” VPN; the provider has to make money somehow; they do that by selling your browsing data.

As you didn’t read any of the thread before posting, start here→VPN: What you need to know - Apple Community

There's a lot of negative hype about VPNs - some of which is true, some is exaggerated and some is downright misleading.

Here is some additional information which, with benefit of a greater understanding, you may be better able to make a balanced and educated judgement as to whether or not a VPN will be help or hinderance for your specific needs.

A VPN connection can only protect traffic between the VPN Client and the VPN Gateway. If you are running your own Gateway, while the VPN is active, your network traffic will have protection of the VPN tunnel between your device and your VPN Gateway endpoints. Similarly, when connecting to an Enterprise (such as your employers business network) a correctly configured VPN connection can provide robust network security for this type of connection.

If instead you are connecting to a commercial VPN Service, your VPN traffic will be protected as far as your VPN Provider's Gateway - where it will be delivered to (and traverse) the internet without benefit of the VPN. As such, when connecting to an untrusted public WiFi, all of your network traffic will be protected over the least-trustworthy public WiFi connection - but receive no additional protection from where your traffic exits the VPN at the Gateway.

It is when using untrusted WiFi networks that Commercial VPN Apps may have some useful utility - but you must consider that your unencrypted data remains visible to the VPN Provider. Choose your Provider with care - as not all are themselves trustworthy.

Also consider that much of your network traffic is already encrypted by default using TLS/SSL. That said, there are some network protocols (such as DNS) that do not have benefit of encryption - and this traffic can be intercepted or maliciously manipulated. This risk can be mitigated using DoH, DoT or ODoH protocols.

In more detail...

Part #1

Much of the hype and negative comment that you will observe throughout the Apple Support Communities are derived from a bias against, or a fundamental misunderstanding of, VPN technologies and their uses/benefits - in addition to misguided faith in Apple products being immune to cyber-threat. In many cases, negative viewpoint will be based upon consumption of misinformed commentary of others; such commentary often reinforces preconceived faith in both invulnerability and perceived immutable truth.

It is impossible to provide an in-depth discussion of Information Security and IP networking with the limited space that this forum allows. The following is intended to provide brief overview and insight - from which you are free to ask additional questions, draw conclusions as to efficacy, and/or make informed decision as to potential benefit in securing your internet communications.

Enterprise applications may use VPN technologies to securely connect remote users to corporate systems - security benefit being derived through the entire path being protected. Commercial VPNs, as used by private individuals, do not offer protection over the entire path as the encrypted tunnel terminates at the VPN Gateway from which your traffic is routed over the internet to its destination(s). Properly configured commercial VPN services do, however, provide useful mitigation against very specific threats. In using these services, It is important to understand the risks against which a commercial VPN can provide useful protection - and those that it can not. A commercial VPN cannot provide total protection against all monitoring of your internet traffic - as the end-to-end path is not protected by the VPN in its entirety.

A high proportion of your traffic (such as browser traffic) already benefits from encryption (e.g., SSL/TLS) without use of a VPN - but some protocols (such as DNS) are entirely “in-clear” and can be intercepted and manipulated. Header and routing information are also unencrypted - and is available to anyone that is able to monitor your local network connection. Where utilised, VPN encapsulation ensures that all your traffic, including unencrypted data, is contained within the VPN tunnel away from prying eyes and threat actors.

I use Proton VPN on all 3 devices. There is a free version. It works well with no problems or conflicts. It is definitely worth having a VPN to protect your privacy online. Check out their website to reassure yourself that Proton is a reputable privacy focused organisation.

Your iPhone already uses strong encryption; VPN does not add any protection, and actually decreases your security because the VPN provider is a “middleman” in all of your communications, so that’s actually an additional security risk as you have no idea how honest or protective of your browsing data the VPN provider is. Some are known to be untrustworthy, and even the trustworthy ones can potentially be hacked by evildoers.

See→VPN: What you need to know - Apple Community

The first post by LotusPilot opens with 

“There's a lot of negative hype about VPNs - some of which is true, some is exaggerated and some is downright misleading.”

And continues under Part #1 with 

“Much of the hype and negative comment that you will observe throughout the Apple Support Communities are derived from a bias against, or a fundamental misunderstanding of, VPN technologies and their uses/benefits…”

All I would add is that there are reports that “…Proton VPN leads the top free apps on the UK’s Apple App Store. The Swiss VPN provider reported a 1,800% increase in signups in the weekend following the new law’s implementation.”

So if you do not wish to verify your age each and every time you are now required by law to do so I would suggest you download, install, sign up and use the free Proton VPN and join the tech savvy youngsters in circumventing this authoritarian censorship.

jane666 wrote:

Surely it will give me more online safety with encryption etc, esp re online banking?

Some banking apps will actually stop working if you have a VPN installed. If your location doesn't match up with what the bank is expecting, they may prevent you from logging in. You might want to read this:

Don't Use VPN Services

There are few reasons that I can think of where using a VPN is necessary. One is if your employer provides you with one to access a secure server. People do use them to get around geographic restrictions for streaming media apps (questionable ethically) and if they live under repressive regimes that don't allow the access to things like internet search engines. I'm not entirely sure I'd put the UK in that category. Even if I did, I would investigate VPNs very carefully as many of them sell your data. I think that's well beyond the scope of this forum.

Part #2

One of the arguments against the use of commercial VPN - frequently cited within the Apple Support Community - is that all your traffic is routed via the VPN provider”s VPN Gateway. This of course is completely true - however, in many cases presents no greater risk to you, or your privacy, than routing all your internet traffic via your ISP or mobile phone operator.

Reputable “paid” commercial VPN services have no vested interest in your internet traffic beyond statutory obligations imposed by the authorities in whose territory in which they operate. Again, from a regulatory a technical perspective, this is no different to your ISP or mobile phone operator. Reputable commercial VPN services are fully and profitably monetised by service subscriptions.

Free or “low cost” VPN operators are funded differently. Clearly, these VPN operators have cost overheads that must be fully funded; such services are often funded through commercial advertising served via the VPN connection, or traffic analysis and data mining - this data being sold-on to other interested parties. Dishonest VPN operators may attract business with express intention of misusing your data - or to facilitate criminal activity.

Looking now at areas where a commercial VPN provides useful threat mitigation…

Assuming that your home wired/WiFi network is secure - and that other network devices using the network are trusted - use of a VPN within your local network offers little if any tangible benefit. By contrast, public WIFi networks (such as Airports and Hotels) are high risk; other users of these networks can access and manipulate your network traffic - and it is here that a commercial VPN provides useful protection. Here, when using a VPN, all your traffic is fully protected from actors over the high-risk elements of the network path - between your client device and the VPN Gateway.

Remember, the local WiFi connection is likely to be the least-trustworthy network segment.

VPN does NOT protect your privacy on line. It actually can compromise your privacy, ESPECIALLY if you use a “free” VPN; the provider has to make money somehow; they do that by selling your browsing data.

As you didn’t read any of the thread before posting, start here→VPN: What you need to know - Apple Community

ButterflyWings888 wrote:

The first post by LotusPilot opens with 

“There's a lot of negative hype about VPNs - some of which is true, some is exaggerated and some is downright misleading.”

And continues under Part #1 with 

“Much of the hype and negative comment that you will observe throughout the Apple Support Communities are derived from a bias against, or a fundamental misunderstanding of, VPN technologies and their uses/benefits…”

All I would add is that there are reports that “…Proton VPN leads the top free apps on the UK’s Apple App Store. The Swiss VPN provider reported a 1,800% increase in signups in the weekend following the new law’s implementation.”

So if you do not wish to verify your age each and every time you are now required by law to do so I would suggest you download, install, sign up and use the free Proton VPN and join the tech savvy youngsters in circumventing this authoritarian censorship.

I cannot recommend VPNs for that purpose.

There is nothing to prevent even incidental connection data from being obtained by legal means, and various police and other government-affiliated organizations have previously run various communications services specifically to collect information on those using those services.

The entities involved can also be the recipients of “traditional” legal warrants, National Security Letters, Technical Capability Notices, or whatever else we may not even be aware of.

Too many of the “no logs” services have been found to be keeping logs over the years, too.

For dissidents, investigative journalists, and others performing activities that may be monitored, get yourself better technical help, and assume “coffee shop” VPNs — even the properly implemented ones, and those with no logs, and no flaws, and no leaks — can be an immense beacon calling attention to your activities.

Even connections using Tor and I2P are risky, and those are better in various ways than are “coffee shop” VPNs.

Got complains about what is or is not legally permissible in your country or region, contact your legislators.

Got questions about the risks of VPNs, or the designs of the coffee shop VPNs, ask.

While the warnings regarding “free” VPNs may apply to many service providers, Proton is a privacy focussed organisation (with a primary shareholder that is a nonprofit foundation) and offers free versions of their products without selling your data (they don’t have access to it) or requiring you to give anything away. 

Proton states their “…Free plans are funded by those who choose to support us by subscribing to one of our paid plans.”

So in my opinion there is nothing “fundamentally untrustworthy” about Proton as a consequence of their offering a “free” VPN version. They simply have a mission and service offering that differs from others.

There is one type of VPN that is secure; where you are your own middleman. To do this you need to install a VPN host on your local network, and then connect to it using VPN from your devices; the same way that business and school VPN works. This is fairly complicated to install and manage, however. If you are interested I can ask another ASC community leader to post some details.

ButterflyWings888 wrote:

I use Proton VPN on all 3 devices. There is a free version. It works well with no problems or conflicts. It is definitely worth having a VPN to protect your privacy online. Check out their website to reassure yourself that Proton is a reputable privacy focused organisation.

The free ones are the worst. For Proton specifically:

• https://circleid.com/posts/over-2-million-vpn-passwords-compromised-by-malware-attacks
• https://gbhackers.com/500-million-proton-vpn-pass-users/

Of course there website is going to tell you how great they are, would you seriously expect anything else?

The link provided by Idris shows the reason why that is the case:

https://gist.github.com/joepie91/5a9909939e6ce7d09e29#dont-use-vpn-services

And, even another one here:

https://overengineer.dev/blog/2019/04/08/very-precarious-narrative/

Unfortunately the marketing efforts by these companies have convinced many people that they need it, and the truth is that they need you to sell your data and simply want your money through subscription services. They do not protect your privacy or offer any security, the opposite is true.

jane666 wrote:

Ok thank you Lawrence. I had been under the impression that VPNs were the ultimate in keeping us safe online, which is why I thought about getting one.

That’s what the people making money selling VPN services want you to think🤔

There are legitimate reasons for VPN, but additional security is not one of them.