ExpressVPN Review

ExpressVPN: What Sets It Apart

ExpressVPN combines a proprietary protocol, RAM-only servers (by ExpressVPN’s account), and a 105-country network into one of the most polished VPN packages available. It scores 85/100 in our trust evaluation, reflecting strong technical execution tempered by legitimate ownership questions that buyers should weigh before subscribing.

The product was founded in 2009 and incorporated in the British Virgin Islands. BVI sits outside the Five Eyes and Fourteen Eyes intelligence alliances. We did not verify what data-retention rules apply there. For over a decade, ExpressVPN built a reputation as a premium, privacy-first service.

That reputation grew more complicated in September 2021. Kape Technologies announced it would acquire ExpressVPN in a deal reported at $936 million. Kape also owns CyberGhost, Private Internet Access, and ZenMate. The company previously operated as Crossrider, which a 2015 Google study named among about 1,000 businesses distributing ad-injecting software, before rebranding in 2018. ExpressVPN has responded with commissioned audits, transparency reports, and continued BVI incorporation. Whether those steps satisfy your personal risk threshold is a judgment only you can make.

ExpressVPN Speed and Performance

ExpressVPN recorded 630 Mbps in our speed lab, ranking 8th out of 22 providers tested. Latency measured 22 ms. Those numbers tell part of the story. Real-world consistency across distant servers tells the rest.

The Lightway protocol drives most of that performance. Built on the wolfSSL cryptography library, Lightway establishes connections faster than OpenVPN and often matches WireGuard in throughput. Its real advantage shows during network transitions. Switching from Wi-Fi to cellular causes minimal disruption. Mobile users see fewer dropped connections and lower battery drain compared to OpenVPN.

On nearby servers, expect speeds above 600 Mbps on a gigabit connection. Cross-continental routes to Asia or South America typically deliver 250 to 400 Mbps. That range handles 4K streaming, large file downloads, and video calls without issue. Gaming performance stays solid with 22 ms base latency, though connecting to servers across oceans adds 50 to 100 ms depending on distance.

OpenVPN remains available as a fallback. It runs roughly 30 to 40 percent slower than Lightway in typical use but offers broader compatibility with older routers and niche setups. IKEv2 is also supported on select platforms.

ExpressVPN Security and Privacy

ExpressVPN’s technical privacy infrastructure is genuinely strong. The gap between ownership controversy and actual product security is wider than most critics acknowledge.

Jurisdiction and logging policy

ExpressVPN’s operating company is registered in the British Virgin Islands, and we did not verify what data-retention rules apply there. The company publishes a no-logs policy covering connection timestamps, IP addresses, DNS queries, and browsing history. It has commissioned no-logs assurance work from PwC (2019) and KPMG (2022, 2023 and 2025). The 2023 and 2025 KPMG reports are published, but they are Type I reports covering a single date, were commissioned and paid for by ExpressVPN, and exclude the apps and billing. Cure53 and Praetorian have published full reports on the Lightway protocol, but those are security assessments, not no-logs audits.

ExpressVPN says Turkish authorities seized one of its servers in 2017 during a murder investigation and found no logs. That is ExpressVPN’s own account and the only source we found, so it is not independent proof of its no-logs claim.

TrustedServer RAM-only infrastructure

ExpressVPN states that every server runs its TrustedServer architecture, which runs on volatile RAM with no hard drive writes, so each reboot wipes all data. If that description holds, persistent storage of user activity is technically impossible.

PwC reviewed TrustedServer and ExpressVPN’s privacy-policy compliance in 2019, but that report is not public. KPMG’s 2025 report found ExpressVPN’s description of the design fairly presented as at 28 February 2025. Neither is an inspection of every physical server.

Encryption and protocols

Lightway uses AES-256-GCM encryption by default, with ChaCha20-Poly1305 available on some configurations. OpenVPN connections also use AES-256. Perfect forward secrecy generates new encryption keys for each session, preventing retroactive decryption of captured traffic.

Kill switch and leak protection

The kill switch, called Network Lock, blocks all internet traffic if the VPN connection drops. It activates by default on desktop apps. DNS leak protection routes all queries through ExpressVPN’s private DNS servers on every connected server. IPv6 leak protection is also enabled by default. It is not leak-free, though: the Windows app sent some DNS requests outside the tunnel when split tunneling was used (from May 2022 until ExpressVPN disabled it in February 2024, CVE-2024-25728), and in 2025 versions let port 3389 traffic bypass the VPN until a fix shipped.

Ownership context

Kape Technologies’ history as Crossrider remains a legitimate concern. Daniel Gericke, who was later reported to be an ExpressVPN executive, was one of three former US intelligence or military personnel who entered a deferred prosecution agreement with the US Justice Department in 2021 over services to a UAE hacking unit between 2016 and 2019. The Justice Department statement does not allege that any ExpressVPN system was misused. ExpressVPN has since published half-yearly transparency reports. These actions matter. They also do not fully erase the reputational baggage. Buyers with extreme threat models may prefer providers like Mullvad that carry no comparable ownership questions.

ExpressVPN Streaming and Content Access

ExpressVPN reliably accesses major streaming platforms. This has been one of its core selling points for years, and it continues to deliver.

Netflix works across multiple regional libraries including the US, UK, Japan, and Canada. Amazon Prime Video, Disney+, Hulu, BBC iPlayer, and HBO Max are all commonly used with it, though results vary by region and change over time. YouTube TV and ESPN+ are also commonly accessed through US servers.

The MediaStreamer feature acts as a SmartDNS tool for devices that cannot run VPN apps natively. Smart TVs, older gaming consoles, and streaming sticks can route DNS queries through ExpressVPN without encrypting all traffic. This sacrifices privacy for compatibility and speed on devices like Apple TV or PlayStation.

Across 3,000 servers in 105 countries, geographic coverage is among the broadest available. Less common regions like Mongolia, Bangladesh, and Bhutan are included. This breadth helps users access localized content that competitors with 60 to 70 country networks simply cannot reach.

Streaming reliability stays high because ExpressVPN actively rotates server IPs to counter platform blocking. Occasional outages with specific services happen, but reconnecting to a different server in the same country usually resolves the issue within minutes.

ExpressVPN Device Compatibility

ExpressVPN supports 8 simultaneous connections per account. That covers most households but falls short of competitors offering 10 or unlimited connections.

Native apps exist for Windows, macOS, Linux, iOS, and Android. Browser extensions for Chrome, Firefox, and Edge act as remote controls for the desktop app rather than standalone proxies. This means the extension routes all device traffic through the VPN, not just browser traffic.

Router support is a standout feature. ExpressVPN sells its own Aircove router with built-in VPN firmware. It also provides firmware for Asus, Linksys, and Netgear models. A router connection counts as 1 device but covers everything on your network, effectively bypassing the 8-device limit.

The app design is clean and consistent across platforms. Connection takes 1 to 3 seconds with Lightway. Server selection uses a favorites system and a speed test tool to identify the fastest nearby option. Settings are minimal by design. Power users wanting granular controls like split tunneling per app will find it on Windows, Mac, and Android. iOS offers a more limited split tunneling implementation.

Fire TV, Apple TV, and Android TV all have dedicated apps. Chromebook support works through the Android app. Linux runs via command line or a newer graphical interface depending on the distribution.

Who Should Use ExpressVPN

ExpressVPN fits users who want a polished, reliable VPN that works immediately with minimal configuration. Streaming enthusiasts benefit from its broad accessing capability across 105 countries. Frequent travelers gain from Lightway’s fast reconnection on unstable networks. Households with mixed device types benefit from Aircove router integration.

It is not the cheapest option. Users on tight budgets should look at Surfshark or Private Internet Access for better value per dollar. Privacy purists who refuse to trust any Kape-owned product have legitimate grounds for choosing Mullvad or Proton VPN instead. Power users wanting advanced features like multihop, port forwarding, or custom DNS rules will find more flexibility with competitors.

The 30-day money-back guarantee limits financial risk from trying the service. If speed, streaming access, and app quality matter more to you than price or ideological purity about corporate ownership, ExpressVPN delivers on its promises.

Resources for this page

Charts and reference images from our research, free to view and share.

• 

• ExpressVPN Review: Lightway Protocol, Fast Global SpeedsPDF · 1.2 MB