Note: Only the top VPNs are included in this list. ffsKISS uses Mullvad.
Criteria and Comparison Tables
Technology:
Protocols: Look for support of strong protocols like WireGuard & OpenVPN.
Killswitch: Should have highly configurable options (enable/disable on specific networks, on boot, etc.)
Multihop Support: Important to keep data private in case a single node is compromised.
Open-Source Clients: If the VPN provider has its own software, it should be open-source for better transparency.
IPv6 Support: The VPN should support and provide access to IPv6 addresses.
Remote Port Forwarding: This aids in creating connections for P2P file sharing or hosting services.
Own DNS Servers: VPNs that operate their own DNS servers can offer an additional layer of privacy and security, reducing reliance on third-party DNS providers and ensuring that DNS queries remain within their controlled infrastructure.
Feature
Weight (1-5)
ProtonVPN
AirVPN
Windscribe
IVPN
Mullvad
NordVPN
Protocols
5
✅
✅
✅
✅
✅
✅
Killswitch
3
✅
✅
✅
✅
✅
✅
Multihop Support
2
✅
❌
❌
✅
✅
✅
Open-Source Clients
2
✅
✅
✅
✅
✅
❌
IPv6 Support
1
❌
✅
❌
✅
✅
✅
Remote Port Forwarding
3
✅
✅
✅
❌
❌
❌
Own DNS Servers
4
✅
✅
✅
✅
✅
✅
Total Score
20
19
18
17
17
17
15
Security:
Encryption: Utilization of strong encryption such as OpenVPN with SHA-256 authentication, RSA-2048 or superior handshake, and AES-256-GCM or AES-256-CBC data encryption.
Forward Secrecy: Ensures that even if encryption keys are compromised, past sessions remain secure.
Security Audits: Regular, published security audits from reputable third-party firms.
Payment Methods: Acceptance of anonymous methods like cryptocurrency or cash.
Minimal Personal Data: Providers don’t require any identifying personal data including emails.
Feature
Weight (1-5)
Mullvad
IVPN
Windscribe
AirVPN
ProtonVPN
NordVPN
Payment Methods
5
✅
✅
✅
✅
✅
✅
Minimal Personal Data
2
✅
✅
✅
✅
❌
❌
Total Score
7
7
7
7
7
5
5
Policies & Terms:
Logging Policy: It’s vital to know if the VPN logs your activities and, if so, what kind and for how long. Ideally, choose a no-log VPN.
Fair Use Policy: Some VPNs might restrict certain activities or have bandwidth limits.
Refund Policy: Understand the conditions under which you can get a refund if you’re not satisfied with the service within 30 days.
Feature
Weight (1-5)
ProtonVPN
IVPN
Windscribe
Mullvad
AirVPN
NordVPN
Logging Policy
5
✅
✅
✅
✅
✅
✅
Fair Use Policy
3
✅
✅
✅
✅
✅
❌
Refund Policy
1
✅
✅
❌
✅
❌
✅
Total Score
9
9
9
8
8
8
6
Trust:
Transparent Leadership: The company’s leadership and ownership should be public-facing.
Transparency Reports: Regular and comprehensive transparency reports detailing requests for user data, etc.
Feature
Weight (1-5)
ProtonVPN
IVPN
Windscribe
Mullvad
AirVPN
NordVPN
Transparent Leadership
3
✅
✅
✅
✅
✅
❌
Transparency Reports
2
✅
✅
✅
❌
❌
❌
Total Score
5
5
5
5
3
3
0
Marketing:
Self-Hosted Analytics: Avoids third-party trackers like Google Analytics on websites.
Responsible Language & Clear Communication: Avoids use of alarming or misleading language in its interfaces and marketing materials. Accurate explanation of scenarios where Tor or other security measures might be more appropriate than their VPN.
Feature
Weight (1-5)
ProtonVPN
Windscribe
Mullvad
IVPN
AirVPN
NordVPN
Self-Hosted Analytics
2
✅
✅
✅
✅
✅
❌
Responsible Language
1
✅
✅
✅
✅
✅
❌
Total Score
3
3
3
3
3
3
0
Note: No single VPN will be the best fit for everyone. It’s essential to prioritize your needs and balance them against any trade-offs to find the VPN that works best for you.