Being the most famous VPN, ExpressVPN is often a subject of many debates. Those who didn’t use it sometimes tend to think that what it offers is too good to be true. On the other hand, its loyal user base claims otherwise.
As with every VPN, this provider promises rock-solid security, impenetrable privacy, and everything you’ve already heard. However, is ExpressVPN safe and secure as it claims to be? Is it REALLY legit?
These are the questions that I’m going to address in today’s article. I’m going to examine every relevant security feature of this VPN and glance into its privacy policy to see if its no-logging claims ring true.
Simply put, with this analysis, I want to prove, once and for all, that ExpressVPN is indeed legit and safe to use. But don’t take my word for it. Just keep reading and you’ll get your answers.
Is ExpressVPN Safe to Use? Security Features Examined
In my full ExpressVPN review, I talked in-depth about its features, performance, streaming, and other relevant stuff. Here, my task is to answer the question “Is ExpressVPN safe to use?” so this whole part of the analysis will be aimed toward security features.
The provider offers quite a few of them, so let’s line them up and see what’s on the table.
3000 servers
105 covered countries
30 days money-back guarantee
8 simultaneous connections
9.4 /10
256-bit Encryption
If you’re wondering if ExpressVPN is legit and safe, let me tell you about its 256-bit AES encryption. Simply put, this is the highest level of encryption you can get, which goes to show why governments and the military are using it as well.
It’s here to encrypt your connection and make it untraceable by anyone, which protects you even from the most skilled hackers. With it in place, you can browse the web without anyone snooping around, ensuring that your anonymity remains intact.
Automatic Kill Switch
Sometimes, a server you’re connected to might unexpectedly shut down and you can end up losing the VPN connection. This exposes your IP to the public eye and eliminates a thick layer of security you had with ExpressVPN.
However, with this VPN that won’t be the case. Its automatic kill switch will react immediately, shutting down your internet connection upon losing the connection to one of its servers. This way, it prevents any potential IP and DNS leaks that will appear as a result.
Just to remind you, the kill switch in this provider is now available for all platforms. ExpressVPN used to offer it only on desktop platforms but now, you’ll find it on iOS and Android too. This comes in handy for protecting yourself from IP leaks on the fly.
Trusted Server Technology
ExpressVPN has another trick up its sleeve. Namely, it is known that VPN servers are usually based on traditional hard drives, which makes them prone to malfunctions and disconnections. Not to mention that hard drives store information even when they’re shut down.
As such, this makes a VPN vulnerable to hacker attacks that could result in stealing user information and compromising thousands of accounts. ExpressVPN remedies this issue with its Trusted Server technology.
Instead of using HDD, it bases all of its servers on RAM (Random Access Memory). RAM is a volatile type of memory, so upon restart, it loses all information, making sure that with each restart, every bit of user information is wiped.
This ensures that, even if the hacker compromises the server, he won’t be able to extract anything. What’s more, ExpressVPN’s bug bounty program offers $100,000 to anyone who can penetrate its security.
As it stands, you’ll make $100,000 by selling toothpicks before you end up hacking through ExpressVPN’s defenses, so don’t hold your hopes up.
Lightway VPN Protocol
Is ExpressVPN safe to use when it comes to protocols? Absolutely. If you’re wondering if it’s legit, you might want to check its Lightway VPN protocol. This proprietary protocol boosts performance and security, making it the best on the market.
ExpressVPN’s patent made security even stronger, all while keeping the connection quality and unblocking capabilities at the highest level. Moreover, this protocol is accompanied by OpenVPN, which is a tried-and-tested solution.
Threat Manager/Advanced Protection
The newest feature in ExpressVPN’s roster is called Advanced Protection. We get the same feature on iOS and Android but here, it’s called Threat Manager. Essentially, ExpressVPN is now a VPN that can block ads, malicious sites, trackers, and other annoyances.
On top of that, the provider includes Parental Control, which is a sub-feature that makes it even better. This one will block adult sites, which can be useful if you want to protect your children from the content you don’t want them to consume.
ExpressVPN Keys
ExpressVPN is safe and secure, especially when talking about its Keys password manager. This app comes with every subscription plan for free and is doing what every password manager does. It helps you store your passwords securely across all your devices!
Even better, it can help you create strong and secure passwords for new accounts. You can now make complex passwords that can’t be hacked, and let Keys keep them safe for you. Also, the password manager of ExpressVPN can store unlimited passwords on unlimited devices!
We found this extremely useful for the dozens of accounts we have on VPN sites, streaming services, and so on. Rest assured, ExpressVPN Keys is also audited by Cure 53 across all of the supported platforms. At the moment, these platforms are Android, iOS, and Chrome.
Private DNS
When browsing the web without a Virtual Private Network, your traffic goes through a free DNS owned by your ISP (in many cases). This makes it easy for it to trace your internet traffic and read its content. The problem is that even some VPNs fail to offer private DNS.
Thus, even though you’re connected to a VPN server, a third-party DNS will interfere, which still renders you vulnerable. ExpressVPN came up with its own private DNS that prevents DNS filtering, tracking, and blocking, resulting in an awesome experience.
Free DNS providers can not only see what you’re doing online but also block certain websites and control your internet freedom. With ExpressVPN’s private DNS, you’re free to browse whatever websites you want all while enjoying superb encryption and security.
Does ExpressVPN Store Logs? Analysis of Its Privacy Policy & Jurisdiction
Now, what about ExpressVPN’s logging practices? Is the provider safe in this regard? Is it a scam? Obviously, it isn’t a scam, as you’ve clearly seen by now.
Thus, in this part of the analysis, I’ll analyze its privacy policy, jurisdiction, and a few more tidbits that should give you a good image of how the VPN functions and why it’s a good idea to use this VPN.
Where Is the Company Based?
Let’s start with the jurisdiction. ExpressVPN is based in the British Virgin Islands, which is a rest haven for privacy. This off-shore location has no data-retention laws and surveillance, making it the best place to base your VPN company in.
Just for reference, Surfshark (check our Surfshark test here) is also stationed here, as well as PureVPN which recently changed its jurisdiction. All of this should lay the groundwork for non-intrusive logging habits, but let’s see if this is really the case here.
Is ExpressVPN Safe in Terms of Logging Practices?
When it comes to its privacy policy, you don’t have to dig deep to find out that it stores no logs. Besides, it has a special page dedicated to its logs, so it’s easy to get a hold of the required information.
As you can see, ExpressVPN will never store info on your IP addresses, browsing history, traffic destination, DNS queries, activity logs, connection logs, timestamps, and geo-location.
Needless to say, with no such information in its hands, it’s impossible to track your activities online and infringe on your privacy. As there are no 100% no-log VPNs, ExpressVPN stores some logs necessary for your subscription to function.
They include the dates of your connection, the choice of server location, the amount of MB transferred per day, and your app version. This information is used purely for technical purposes and through it, ExpressVPN can’t connect any dots in identifying you.
Of course, it must store your email and billing info before charging you for a subscription. However, every bit of information is stored in an anonymized form and on RAM servers, which, as said, lose this information upon each reset.
Third-Party Audits
To complement its bold but true claims, ExpressVPN underwent a third-party check-up by PwC. The British company checked ExpressVPN’s servers and the whole infrastructure for potential weaknesses and holes in its claims.
As expected, they found that all the claims are true, including its no-logging policy, but also the security features I talked about. In addition, the provider is one of many advocates for digital freedom.
They financially support organizations like OpenMedia, Access Now, EFF, and many more. So if you’re wondering “Is ExpressVPN safe and secure?”, I think you have your answer by now. Although, we can also mention a few more audits that ExpressVPN underwent recently.
For example, the company also has an audit from Cure53, a very popular auditor, that, this time, focused its efforts on the Lightway protocol. This in-house protocol received only praise from Cure53, which concluded that it’s safe, secure, and without security vulnerabilities.
Last but not least, there’s also an audit from KPMG. This is actually the latest audit in September 2022 (at the time of writing), which was about the provider’s no-logging policy. Indeed, KPMG proved that ExpressVPN really keeps no logs, adhering to its promises 100%.
IP & DNS Leak Tests: Let’s See if There Are Any Leaks
In the end, I decided to include a few IP and DNS leak tests to make sure that ExpressVPN is really safe.
I’m using the website called ipleak.net, and without using a VPN, you can see my location and DNS addresses – I’m blurring my IP for obvious reasons.
For this test, I used 3 server locations – the US, the UK, and Japan, so here are my test results:
US:
UK:
Japan:
Needless to say, all 3 tests were a colossal success, as the service showed no leaks across the 3 very different locations. I’d say it’s impressive – don’t try to claim otherwise.
So, Is ExpressVPN Safe to Use?
With everything said, is ExpressVPN safe and secure and should you use it? I think you already know that the answer to all questions is – YES. The provider offers state-of-the-art security, stores absolutely no logs, and shows an impressive performance in preventing any potential leaks.
With the addition of private DNS and Trusted Server technology, this provider is still offering the most reliable VPN that sets the benchmark for other providers to follow.
Best of all, ExpressVPN doesn’t have to be very expensive. You can get a huge 49% discount and 3 months free for the 1-year plan, which significantly drops the price. And with a 30-day money-back guarantee for all plans, you can test it out 100% risk-free!
