ExpressVPN

ExpressVPN is among the most popular and trusted names in the industry. It’s known for being one of the safest and fastest VPNs around, so I wanted to see if it can live up to these claims. Its longer plans often come with discounts that improve the overall value.

To find out, we performed extensive tests on desktop and mobile devices running Windows, Mac, Linux, Android, and iOS. We checked its speeds while gaming, streaming, and torrenting. I also explored its security features, device compatibility, and its own Lightway protocol. To see if it’s still trustworthy, I dove into its privacy policy, independent audits, and company history.

My conclusion: ExpressVPN is a top premium VPN for users who value consistency, powerful security features, and a smooth experience across devices.

Try ExpressVPN Risk-Free

[pro_con_v0][/pro_con_v0]

[features-overview-table]

Can ExpressVPN Stream in HD and UHD?

ExpressVPN worked with every streaming platform we tried, including Netflix, Disney+, Amazon Prime Video, and BBC iPlayer. From what we saw, streams loaded quickly in HD or UHD, and we didn’t need to switch servers or change settings for smooth playback.

While testing, we focused on its speed, stability, and compatibility with popular streaming platforms. ExpressVPN constantly updates its servers, and all 3000 servers are optimized for streaming, so we simply hit connect and started watching.

It’s possible to securely access the following platforms with ExpressVPN:

Which Netflix Libraries Worked With ExpressVPN?

ExpressVPN safely accessed 20+ Netflix libraries, including the US, UK, and Japan. We watched Netflix for several hours without delays, and its UK servers loaded Netflix UK consistently.

[imageEditor template_id=”2008″]

Our checks covered the following libraries:

Does ExpressVPN Work With Disney+?

Disney+ played reliably with ExpressVPN across the US, Australia, Canada, Italy, and the UK. Shows like Welcome to Wrexham opened almost instantly, with no quality drops during the stream.

[imageEditor template_id=”2010″]

Does ExpressVPN Work With Prime Video?

Prime Video UK and US streamed in HD without changing servers or settings. Canada, Germany, and Australia also loaded without issue, despite using the platform’s standalone primevideo domain.

[imageEditor template_id=”2011″]

How Did ExpressVPN Perform With BBC iPlayer?

ExpressVPN accessed BBC iPlayer on the first attempt. Because the platform is so popular, we also tried servers in all 6 UK locations; each one reached iPlayer without extra setup, and we binge-watched coverage of Radio 1’s Big Weekend.

[imageEditor template_id=”2012″]

How Did ExpressVPN Handle Hulu?

Hulu ran in HD on ExpressVPN’s US servers, with short load times for the shows and movies we watched. That result matters because Hulu’s VPN detection can make the platform difficult for some VPNs, but the video stayed stable throughout.

[imageEditor template_id=”2013″]

Which Other Platforms Worked With ExpressVPN?

ExpressVPN also handled Max, Peacock, Crunchyroll, ESPN+, DAZN, RTL, Kodi, and the other platforms we reviewed. We streamed the public-domain movie Night of the Living Dead on Kodi; for setup help, see our guide on how to install Kodi addons and builds.

Beyond streaming platforms, ExpressVPN also connected normally to popular sites and apps, including Facebook, Instagram, Google services like Gmail, Twitter/X, YouTube, WhatsApp, Snapchat, Tinder, and more.

We didn’t find a major platform that needed a separate “doesn’t work with” note in this round.

How Fast Is ExpressVPN? — Speed Test Results

ExpressVPN recorded the fastest results in our speed tests, with steady performance on both local and long-distance servers. Its speeds rarely dropped by more than 40%, even on the farthest locations we tested.

We have a dedicated VPN speed tester who regularly checks ExpressVPN and other leading VPNs from the same location in the US. This helps us create fair comparisons because every entry in the table below comes from the same connection. ExpressVPN was measured with the Lightway UDP protocol, which performed best in these checks.

See how ExpressVPN compares to other fast VPNs

[markup type=”VPN Speed comparison table” hash=”3142″][/markup]

For context, even fast VPNs commonly reduce speeds by around 20% on local servers and up to 60% at long distances.

Is ExpressVPN Good for Gaming?

ExpressVPN is a good VPN for gaming on nearby and mid-range servers. From our gaming test location, the closest UK server lowered ping from 32ms without a VPN to 29ms, and ExpressVPN kept ping below 85ms on all European servers.

Ping is the key metric for gaming because it measures the delay between your actions and the on-screen response. When it gets too high, even small delays can make competitive games feel less responsive.

[imageEditor template_id=”2017″]

We could play different genres comfortably, including fast-paced shooters. In Counter-Strike 2, matches opened normally, and gameplay felt close to using no VPN on nearby servers.

Distant servers are less suitable for online gaming, but that’s common. Sending data across the world almost always increases ping, even with high-performing VPNs.

How Many Servers and Locations Does ExpressVPN Offer?

ExpressVPN has 3000+ servers in 105 countries. That’s a smaller server count than Private Internet Access, which has 29,650 servers, but ExpressVPN avoided overcrowding in our tests and rarely took longer than 2 seconds to connect.

Most of its servers are 10Gbps, meaning each server has enough bandwidth to handle very high traffic from multiple users. We also used the same UK Midlands server across several UK-based checks to show that ExpressVPN’s performance isn’t limited to one type of activity.

Its network includes:

• 6 locations in the UK
• 62 locations in the US, covering every US state
• City-level servers in countries like Germany, Italy, Japan, Australia, and Canada
• Coverage in less common VPN locations, including Panama, Honduras, Lebanon, Kenya, Macau, Mongolia, Armenia, and Malta

ExpressVPN also offers dedicated IPs, which are useful if you want the same IP every time you connect. They can help with school platforms, business accounts, and online banking by reducing repeated verification checks.

While ExpressVPN owns its IP addresses, it works with third-party data centers to maintain the servers. After contacting ExpressVPN, I was told those partners can see traffic coming in and out of a server, but they don’t have the credentials needed to tie online activity to individual users.

How Does ExpressVPN’s TrustedServer Technology Work?

ExpressVPN’s TrustedServer Technology uses RAM-only, or diskless, servers to reduce the risk of data being stored after a session ends. Since RAM is wiped when restarted, any session data is deleted during reboot. Everything, including the operating system, is loaded fresh from a secure read-only image.

[imageEditor template_id=”2018″]

This is different from traditional hard-drive setups, where data can remain until it’s manually deleted. ExpressVPN’s servers are rebooted every 1–2 weeks, which helps ensure they run updated software and don’t keep session data.

ExpressVPN also offers a $100,000 bug bounty for anyone who finds flaws in its servers. This is one of the highest sums offered on Bugcrowd, where it hosts its bug bounty program, and it adds another layer of external security testing.

How Well Does ExpressVPN’s Smart Location Work?

Smart Location is convenient, but it didn’t always choose the quickest server in our results. For example, it kept connecting our US-based speed tester to Dallas, while Houston was 2–3% faster.

Does ExpressVPN Obfuscate VPN Traffic?

All of ExpressVPN’s servers include automatic obfuscation, so you don’t need specialty servers, extra settings, or a separate obfuscating protocol. Keep the protocol set to Automatic, and ExpressVPN detects VPN blocks and applies obfuscation when needed.

This helps on networks that block VPN traffic, such as some media services, workplaces, colleges, or public WiFi hotspots. In practice, you may not notice it working because the feature runs in the background.

Why Does ExpressVPN Use Virtual Servers for India?

ExpressVPN uses virtual servers for India because the country’s data-sharing rules could conflict with a VPN no-logs policy. These servers provide an Indian IP address, but they aren’t located in India — they’re hosted in Singapore and the UK.

These are ExpressVPN’s only virtual servers, letting users connect to an Indian IP while keeping the underlying infrastructure outside the country.

How Secure Is ExpressVPN?

ExpressVPN is secure, with industry-standard encryption and a strong set of privacy tools that protect your data. I thoroughly tested its kill switch, split tunneling, and Tor compatibility, compared its protocols, and took a closer look at its proprietary Lightway technology.

Lightway is one of ExpressVPN’s biggest technical advantages because it’s designed for both security and efficiency without making the app harder to use.

Encryption — AES-256, ChaCha20, and Perfect Forward Secrecy

ExpressVPN protects your private information with AES-256 encryption, a 4096-bit RSA key, and SHA-512 HMAC authentication. This is the same level of encryption used by militaries, banks, and governments, and it makes your data extremely difficult to decrypt.

A 256-bit key creates an enormous number of possible combinations. For comparison, 1 bit gives 2 combinations and 8 bits gives 256; with 256 bits, the number is 78 digits long, making brute-force decryption unrealistic.

The Lightway protocol also supports ChaCha20. ExpressVPN chooses the best cipher automatically, but you can switch between them yourself. This can be useful on older devices that might not be optimized for AES-256, so it’s worth testing both ciphers if your connection feels slow.

ExpressVPN uses SHA-512 HMAC authentication to verify data transfers, including P2P file sharing. It relies on a shared secret key so the sender and receiver can confirm a file’s authenticity; if the key changes, it can indicate tampering.

It also uses perfect forward secrecy, which changes your encryption key with each session. This means that even if one key were compromised, previous and future VPN sessions would remain protected by different keys.

Security Protocols — Lightway, OpenVPN, and IKEv2

VPN protocols are the rules a VPN uses to encrypt and route your information. ExpressVPN lets you switch them in the Protocols tab on Windows, Mac, Android, and iOS, though the available options vary slightly by device.

[imageEditor template_id=”2019″]

The main options are:

• Lightway: ExpressVPN’s in-house protocol, built in Rust for security, performance, and efficiency. It drains less battery and transitions smoothly between networks, which makes it a good choice for phones. Lightway has UDP and TCP options; UDP was faster in our speed tests, while TCP can be more reliable on unstable networks.
• OpenVPN: A widely trusted open-source protocol that is continuously reviewed to strengthen its security. It also offers UDP and TCP options.
• IKEv2: Available on Mac.
• Lightway Turbo: Available on Windows as ExpressVPN’s faster, low-latency upgrade to Lightway. ExpressVPN is also rolling it out to more platforms.

There’s also an Automatic setting, which chooses a protocol based on your setup and situation. Overall, I’d recommend Lightway UDP because it offers the best balance of speed and security.

Lightway Protocol — Rust, Audits, and Post-Quantum Protection

Lightway is ExpressVPN’s proprietary protocol, now reimplemented in Rust, a modern programming language designed to reduce common code-level risks. Its code base has just 2,000 lines, which makes it easier to audit and helps keep the protocol lightweight, power-efficient, and suitable for safer multi-core processing.

To validate the Rust upgrade, ExpressVPN commissioned independent audits from Cure53 and Praetorian in late 2024. Lightway also remains open-source on GitHub, so others can review, adopt, and build on it.

Aircove, ExpressVPN’s router, also benefits from Lightway’s Rust integration. The AircoveOS v5 update introduced guest WiFi for better privacy control, enhanced security from that integration, and up to two times faster VPN speeds. Aircove’s security has also been audited by Cure53.

On mobile devices, Lightway can move between WiFi and mobile networks without ending the VPN connection. When the signal drops, it idles and reconnects quickly, establishing connections in under a second and maintaining an advantage over OpenVPN — up to 14% faster.

Lightway also has two practical advantages over WireGuard: it supports obfuscation and offers a TCP option. With some VPNs, obfuscation requires switching to the slower OpenVPN protocol, while WireGuard doesn’t include TCP.

Lightway now includes post-quantum protection as well. Standard encryption is still unrealistic for most computers to crack, but quantum attacks could change that risk in the future. This update helps protect VPN sessions if quantum-based attacks become more practical later on.

Leak Tests — No IP, DNS, IPv6, or WebRTC Leaks Found

ExpressVPN passed all of my leak tests on Windows, Mac, Android, and iPhone apps. For the first round, I used ipleak.net with 10 different servers, and every result only showed the VPN’s Canada IP address and DNS server I was connected to in the app.

[imageEditor template_id=”2020″]

IPv4, IPv6, WebRTC, and DNS leaks can expose data even when a VPN is connected. ExpressVPN’s built-in leak protection helps prevent these issues by keeping your real IP address, DNS requests, and browser-based WebRTC data hidden.

The IP Shuffle feature enhances your privacy by changing the assigned IP address for each website or session. This makes it harder for trackers to link activities or profiles to you, and it works without disconnecting the VPN.

Private DNS — Safer DNS Requests

ExpressVPN uses private DNS on every server, which helped confirm that DNS requests stayed protected. DNS, or the Domain Name System, translates website names into the addresses your device uses to load them. By handling DNS requests on its own servers, ExpressVPN removes an extra third-party step where browsing information could leak.

You can choose your own DNS, but I recommend sticking with ExpressVPN’s private DNS servers whenever possible because they keep DNS requests inside the VPN tunnel.

Kill Switch — Network Lock

ExpressVPN’s kill switch, called Network Lock, stops internet access if the VPN disconnects. This prevents your traffic from continuing outside the VPN tunnel, making it an essential security feature.

[imageEditor template_id=”2021″]

On Windows, Linux, and Mac, Network Lock is enabled by default. You can also allow access to devices on your local network (LAN), which is useful if you have a printer or other Wi-Fi-connected devices.

Tor Compatibility — Tor Over VPN

ExpressVPN can be used with Tor through the Tor over VPN method. Tor, short for The Onion Router, is a separate browser that encrypts traffic within its own network. It was originally built for anonymous browsing on the regular web, but it can also be used to access the dark web.

The dark web is often associated with criminal activity, but it also gives activists and whistleblowers a way to share information anonymously. Since ISPs and government agencies can detect Tor Browser use, connecting to a VPN first adds privacy before opening Tor.

Crypto Trading Compatibility — Tested on Bitpanda and Blockchain

ExpressVPN worked with the crypto platforms we tried, but compatibility can depend on the exchange or app. On Mac, I logged into Bitpanda and sold IOTA after responding to an “Authenticate this new browser” security email. On iPhone, I logged into Blockchain and bought Litecoin.

I also asked ExpressVPN’s live chat about this, and they said some websites and apps block proxies and VPNs.

Advanced Protection — Threat Manager, Ad Blocker, and Parental Controls

ExpressVPN’s Advanced Protection features add browsing safeguards beyond the VPN tunnel. They’re available on all ExpressVPN apps and on the Aircove router.

These tools include:

• Threat Manager: Stops websites and apps from communicating with third parties known for tracking activity or malicious behavior.
• Ad Blocker: Works with Threat Manager; together, they stopped 59% of ads and trackers in my tests.
  [imageEditor template_id=”2022″]
• Parental Controls: Blocks adult sites, which is useful for family PCs and children’s devices.

The blocker performed well for a VPN-based tool, but you can still pair it with a dedicated free ad blocker if you want stronger ad filtering.

Identity Defender — ID Alerts, Insurance, Data Removal, and Credit Scanner

Identity Defender is ExpressVPN’s identity protection suite for monitoring personal information, removing exposed data, and checking for signs of fraud. Currently, Identity Defender is available only to new US-based users on iOS and Android. ExpressVPN says support for more devices and regions is coming soon.

The tools are:

• ID Alerts: Free with all ExpressVPN offers. It monitors sensitive information, such as Social Security numbers, and alerts you to potential identity risks, including unauthorized address changes or mail redirection.
• ID Theft Insurance: Comes with the 1-year and 2-year deals. It offers up to $1 million in coverage for identity theft-related damages, including support for recovering stolen accounts and addressing fraud-related expenses.
• Data Removal: Part of the 2-year offer. It helps identify and remove personal information from data brokers and people-search websites, with monitoring for future exposures.
• Credit Scanner: Bundled with the 1-year and 2-year offers. It tracks credit changes that may signal fraudulent activity, while the 2-year offer also gives you a detailed monthly credit report covering credit status, accounts, balances, and payments.

If you subscribe to the 1-month or 1-year offer, you can still get Data Removal for an additional fee.

Privacy — No-Logs Policy and Company Ownership

ExpressVPN has a no-logs policy and is based outside the 14 Eyes Alliance. Its privacy policy has also been tested in court several times, giving its claims stronger real-world support than many VPNs can show. ExpressVPN is owned by Kape Technologies, which also owns CyberGhost and Private Internet Access. Reuters reported that Kape’s 2021 ExpressVPN acquisition was intended to create a larger digital privacy and security company.¹

Does ExpressVPN Keep Logs?

[imageEditor template_id=”2023″]

ExpressVPN doesn’t store activity tied to your browsing or app use. The service states it only collects:

• Information used to sign up, such as billing details and email address
• How many apps and app versions you’ve activated
• The day a connection was made, but not the specific time
• The server location you connect to, but not the IP address assigned to you
• The amount of data transferred in one day

These details can show that you used the VPN on a given day and server location, but not what you did while connected.

A key example is from 2017, when Turkish authorities seized one of ExpressVPN’s servers during a criminal investigation. ExpressVPN said it couldn’t identify which customer used the IPs cited by investigators because it doesn’t keep connection logs, and its no-activity-logs policy meant it couldn’t see which customers accessed Gmail or Facebook.² The server inspection supported the company’s logging claims.

Was ExpressVPN Audited?

ExpressVPN has completed 27 independent audits and security assessments by several reputable firms. These reports didn’t find major issues, and reported vulnerabilities were fixed quickly.

According to TechRadar, KPMG’s 2025 assessment found “no exception noted” when reviewing ExpressVPN’s TrustedServer controls.³

Notable audits and assessments include:

• Cure53: Audited Lightway in 2021 and 2024, TrustedServer technology in 2022, and the Chrome and Firefox extensions in 2018. The browser extensions are open-source, so others can inspect them too. Separate app assessments also covered Linux and macOS in 2022.
• Cure53: Audited ExpressMailGuard and Identity Defender in May 2026. The audits covered its email relay service and identity protection tools.
• PricewaterhouseCoopers: Reviewed ExpressVPN’s privacy policy and TrustedServer technology for a month in 2019 by examining code and interviewing team members.
• KPMG: Audited TrustedServer technology and ExpressVPN’s privacy policy in 2022, with a third audit of its privacy commitments completed in June 2025.
• F-Secure: Tested the Windows v.12 app in 2022 and found no weaknesses.
• ioXt Alliance: Certified the Android app in 2021 after checking for low-level security issues.
• Nettitude: Ran a Windows app penetration test in March 2024 after a tech writer reported leaks. It found a medium-level risk that ExpressVPN quickly fixed. The testing also led ExpressVPN to publish a paper in the engrXiv Engineering Archive about more thorough DNS leak testing methods.

You can read these audit results in ExpressVPN’s Trust Center. This section of its site also includes biannual transparency reports, which show legal requests received in the previous 6 months, plus details about its bug bounty program and privacy initiatives.

Where Is ExpressVPN Based?

ExpressVPN is based in the British Virgin Islands, a jurisdiction with no mandatory data retention laws. This matters because a VPN company must follow the laws of the country where it’s incorporated, and legal requests for user data are handled under BVI law.

The BVI is also outside the 14 Eyes Alliance, also known as SIGINT Seniors Europe, which is an intelligence-sharing group between member countries. Combined with ExpressVPN’s no-logs policy, this gives the company a stronger privacy position than VPNs located in countries with stricter data-sharing rules.

Does ExpressVPN Work in China?

ExpressVPN can work in China, but access isn’t guaranteed because the Great Firewall can block VPN traffic and cause downtime. The service has a dedicated China support page, and its 30-day money-back guarantee gives you time to test it.

For the best chance of connecting, ExpressVPN suggests:

• Using the Automatic protocol option
• Trying recommended servers such as US — Los Angeles 5 and UK — Wembley
• Checking the recommended server list before traveling or contacting support for the latest options
• Installing the app before arriving in China, since the ExpressVPN website may be blocked there

[imageEditor template_id=”2024″]

ExpressVPN also maintains a mirror URL for use in China, but it’s best to contact customer support for the latest link. Live chat also told me the service works in other restrictive countries, including Iran, the UAE, Turkey, Russia, and Saudi Arabia.

China has banned many VPNs, but there have been no publicly reported cases of tourists being targeted for using one. My teammates and I don’t condone illegal activity, and we advise checking local laws before using a VPN.

Can You Torrent With ExpressVPN?

ExpressVPN supports torrenting on every server, with unlimited bandwidth and compatibility with major P2P apps. Many VPNs restrict P2P to specialty servers, but ExpressVPN lets you choose the closest or fastest location instead. It works with qBittorrent, Transmission, Vuze, Deluge, uTorrent, and other widely used clients.

To test its torrenting performance, I used Vuze to download the public-domain movie Night of the Living Dead. Using the UK — Midlands server, the download reached 8.3 MB/s, and the 1.76 GB file finished in under 4 minutes. That was only 1% slower than the same transfer without a VPN.

ExpressVPN doesn’t offer a SOCKS5 proxy. It does support port forwarding, but only at router level, so it takes more setup than using the regular VPN app. For most users, the standard VPN connection is the better option because it includes leak protection and the Network Lock kill switch.

Torrenting is legal in most countries, but downloading copyrighted files usually isn’t. We strongly urge you to only access public-domain torrents to avoid breaking any laws.