ExpressVPN is a virtual private network (VPN) service founded in 2009. The service provides encrypted internet connections through VPN servers located around the world and offers applications for computers, mobile devices, browsers, and routers. ExpressVPN includes features such as split tunneling, a kill switch, Threat Manager, TrustedServer technology, and its Lightway VPN protocol.
Company History
ExpressVPN was founded in 2009 by technology entrepreneurs Peter Burckhardt and Dan Pomerantz, with the goal of making the Internet more open and accessible.
ExpressVPN is based in the British Virgin Islands (BVI). The company has developed its VPN service around online privacy, security, and access to the Internet while expanding its network of VPN servers to locations around the world.
Products and Services
ExpressVPN provides VPN software and related privacy and security tools for a variety of devices and operating systems.
VPN Software
ExpressVPN provides VPN software compatible with Windows, Android, iOS, Linux, macOS, and other supported platforms. When connected, the software creates an encrypted connection between a user's device and an ExpressVPN server, allowing Internet traffic to pass through the VPN connection.
Browser Extensions
ExpressVPN provides browser extensions for supported web browsers including Chrome and Firefox. The extensions provide browser-based access to ExpressVPN controls and work in conjunction with the ExpressVPN application.
Routers
ExpressVPN can also be used with compatible routers, allowing devices connected to a network to use the VPN without requiring an individual VPN configuration for every device. This can be useful in homes and other environments containing numerous Internet-connected devices.
ExpressVPN Features
ExpressVPN includes a collection of features designed to control how Internet traffic passes through the VPN and provide additional privacy and security functionality.
Split Tunneling
Split tunneling allows users to control which applications use the VPN connection and which connect directly to the Internet. Depending on the device and configuration, traffic can be handled in several ways:
- Internet traffic can be routed through the VPN by default.
- Specific applications can be excluded from the VPN and connect directly to the Internet.
- Only selected applications can be configured to use the VPN.
This allows a user to use the VPN for certain applications while maintaining a direct Internet connection for others.
MediaStreamer
MediaStreamer is ExpressVPN's Smart DNS service. It is intended primarily for devices that do not support conventional VPN applications.
Unlike a VPN connection, MediaStreamer does not provide the same encryption or privacy protections as ExpressVPN's VPN software. Instead, it modifies how supported devices resolve certain Internet services through DNS.
Obfuscation
Some networks and Internet services use Deep Packet Inspection (DPI) and other methods to identify VPN traffic. Obfuscation is a technique designed to make VPN traffic more difficult to distinguish from ordinary Internet traffic. [1]
ExpressVPN can use obfuscation automatically with supported protocols and network conditions.
Password Manager
ExpressVPN also provides a password management tool for supported devices and browsers. The password manager can store login credentials in an encrypted vault and automatically fill supported login forms.
Threat Manager
Threat Manager is a privacy feature designed to limit connections to known trackers and potentially malicious Internet destinations.
The feature uses a blocklist to prevent supported applications and websites from communicating with listed third parties. Availability and functionality can vary by operating system and device.
Security and Privacy
ExpressVPN incorporates several security and privacy features designed to protect VPN traffic and reduce the exposure of user activity while connected to the service.
Kill Switch
ExpressVPN's kill switch, known as Network Lock, is designed to prevent Internet traffic from leaving a device if its VPN connection is unexpectedly interrupted. [2]
This can help prevent a device's regular Internet connection and IP address from becoming exposed when the VPN connection fails. Network Lock behavior and configuration options can vary by platform.
Logging
ExpressVPN states that it does not collect activity logs containing browsing history, traffic destinations, data content, or DNS queries.
Like other online services, ExpressVPN collects certain account information necessary to provide and maintain its service. It also collects limited diagnostic and usage information. The company's logging practices and privacy policies have been examined through independent audits.
Independent Audits
ExpressVPN has undergone independent security and privacy audits covering portions of its infrastructure, applications, policies, and technologies. [3]
The company also operates a bug bounty program that allows security researchers to report vulnerabilities affecting supported systems and software.
TrustedServer Technology
ExpressVPN uses a server architecture called TrustedServer. The system is designed to operate VPN servers using volatile memory rather than relying on conventional hard-drive storage for the operating environment.
Because RAM loses its contents when power is removed, restarting a TrustedServer clears the server's operating state. The server software can then be loaded again from a controlled system image. This approach is intended to reduce persistent data and configuration changes on individual VPN servers.
ExpressVPN Protocols
A VPN protocol is a set of rules used to establish and maintain communication between a device and a VPN server. [4]
ExpressVPN supports multiple VPN protocols, with availability varying by device and operating system. These include:
- Lightway protocol: It's overall the best ExpressVPN protocol since it's designed to deliver a faster, more reliable, and more secure VPN experience.
- OpenVPN (UDP/TCP): It offers well-rounded security and availability. UDP uses less bandwidth and is more efficient. Although TCP protocol isn't as fast as UDP, it's less likely to encounter connection drops.
- L2TP/IPsec: This combines L2TP and IPsec to provide a robust and secure connection.
- IKEv2: It's ideal for mobile devices and Wi-Fi/ cellular data. It provides good speeds for bandwidth-intensive activities, including streaming.
Pricing and Plans
ExpressVPN is a paid VPN service that offers subscription plans of varying lengths. Pricing can change depending on the subscription period, promotions, purchasing method, and other factors.
Longer subscription periods generally provide a lower average monthly cost than shorter subscriptions. ExpressVPN may also offer introductory promotions, trial periods, or money-back guarantees depending on the plan and method of purchase.
Current ExpressVPN pricing, available plans, and subscription terms can be found on the company's official website.
Conclusion
ExpressVPN is a commercial VPN service that provides encrypted Internet connections through a network of VPN servers. Its software is available across a variety of computers, mobile devices, browsers, and networking equipment.
In addition to its core VPN service, ExpressVPN provides features and technologies including split tunneling, Network Lock, Threat Manager, TrustedServer, Lightway, and tools for devices that cannot run conventional VPN applications. These technologies are primarily designed around Internet privacy, security, and control over how a device connects to online services.
Related-topics
References
- Cybernews [ What are obfuscated servers? ] Nov 15, 2023
- Cybernews [ What is a VPN kill switch and how does it work? ] January 19, 2024
- ExpressVPN [ ExpressVPN Trust Center ] July 7, 2024
- Cybernews [ VPN protocols explained ] November 15, 2023
Contributors
Last Modified: September 24, 2026