ExpressVPN review: our verdict
This ExpressVPN review looks at one of the best-known premium VPNs and asks whether its reputation for polish and privacy still justifies its higher price. For many people it does. ExpressVPN builds its own fast protocol, Lightway, with post-quantum protection switched on by default; runs every server from memory only, so nothing is written to disk; publishes a long list of independent audits, including KPMG assessments of its no-logs claims; and offers some of the easiest apps in the category on almost every platform. Its plans now cover between ten and fourteen devices at once.
The drawbacks are mostly about value. Reviewers consistently describe it as expensive, it has no multi-hop option, and speed on its standard Lightway protocol has been uneven in some recent testing. Its ownership by Kape Technologies also gives some privacy-minded buyers pause. If you want a dependable, easy VPN with a strong audit record and do not mind paying more, ExpressVPN is a safe pick; if price matters most, cheaper rivals come close.
NerdBible did not run its own hands-on trial for this review. It is an editorial assessment based on ExpressVPN's plan, feature and audit pages and the findings of independent review outlets, which are credited and linked below.
What is ExpressVPN and who is it for?
ExpressVPN is a subscription VPN that encrypts your connection and routes it through its own servers, which the ExpressVPN plans page says are spread across 113 countries. Apps cover Windows, macOS, Linux, iPhone and iPad, Android, Apple TV, Fire TV and Android TV, plus browser extensions for Chrome, Firefox and Edge, router firmware and the company's own Aircove routers.
It suits:
- People who want something that just works. Reviewers repeatedly praise its simple, consistent apps and one-click connection.
- Frequent travellers. PCMag's bottom line singles it out for travellers because of its wide server spread, and its automatic obfuscation helps connections work on restrictive hotel and airport networks.
- Households with many devices. Even the entry plan covers ten devices at once.
- Buyers who value audits. ExpressVPN has published more third-party audits than most rivals.
It is a poorer fit for budget-focused buyers and for anyone who specifically wants multi-hop routing or a free plan.
Key features
Lightway protocol with post-quantum protection
The Lightway page explains that ExpressVPN built its own protocol to connect faster, use less battery and recover quickly when a network changes. It has been rewritten in the Rust programming language, its core code is open source, it has been assessed by Cure53 and Praetorian, and it now uses ML-KEM, the NIST-standard post-quantum algorithm, by default. TechRadar found the newer Lightway Turbo variant among the fastest protocols it has measured, though it is currently limited to Windows.
TrustedServer: RAM-only servers
According to the TrustedServer page, every ExpressVPN server runs entirely in volatile memory, never writes to a hard drive, and reloads a fresh read-only image of the whole software stack at each restart. The practical effect is that a rebooted or seized server holds no stored data. ExpressVPN says TrustedServer has been audited by PwC and later by Cure53.
Network Lock, leak protection and private DNS
Network Lock is ExpressVPN's kill switch, which blocks internet traffic if the VPN drops. The ExpressVPN features page says the apps guard against IP, DNS and WebRTC leaks and that every server runs its own private, encrypted DNS. CNET found the kill switch easy to enable and reliable, while TechRadar wanted clearer warnings when it cuts the connection.
Threat Manager and Advanced Protection
Depending on plan, ExpressVPN can block ads, malicious sites, trackers and adult sites. The plans page lists ad, malicious-site and adult-site blocking on Basic, with tracker blocking added on Advanced and Pro.
Split tunnelling and extras
Split tunnelling lets you choose which apps use the VPN; CNET found it worked well on Windows and Android. The higher tiers bundle extra products: the ExpressKeys password manager, an email alias service, identity monitoring for US customers, a travel eSIM allowance and, on Pro, a dedicated IP address and an AI assistant.
How much does ExpressVPN cost? Plans and pricing structure
Current prices for your region appear in our comparison above. According to the plans page, there are three tiers:
- Basic: the full VPN with Lightway and post-quantum protection, ten simultaneous devices and basic blocking. A dedicated IP is an optional add-on.
- Advanced: twelve devices, tracker blocking, the ExpressKeys password manager, a larger email alias allowance and identity alerts.
- Pro: fourteen devices, a dedicated IP included, the highest alias and identity allowances, and the ExpressAI assistant.
Each tier is sold on monthly, one-year and two-year terms, and the longest plan currently includes extra bonus months on top of the two years. Introductory prices renew at a higher annual rate, which the plans page states. New customers get a 30-day money-back guarantee, and TechRadar and ZDNET report a seven-day free trial for app store downloads on Android and iPhone. ExpressVPN also sells a Teams version for businesses with at least five users.
Is ExpressVPN safe? Privacy and security
ExpressVPN's privacy case rests on design and verification. The RAM-only TrustedServer setup means servers have nothing stored to hand over, and the company's KPMG audit announcement says KPMG examined TrustedServer and the privacy policy claims under the ISAE 3000 assurance standard and found no issues with the safeguards against activity logging. The same post says ExpressVPN has published more than twenty third-party audits in total, and the full KPMG report is available to anyone who accepts KPMG's terms.
The company is based in the British Virgin Islands, which PCMag and ZDNET note has no data retention laws. PCMag also explains that the parent company is Kape Technologies, formerly known as Crossrider, which faced criticism over adware before it refocused on privacy products. TechRadar scored ExpressVPN's track record lower for that reason, while noting that the company fixed a recent DNS leak issue quickly. Your view of that history is a personal call; the audits relate to how ExpressVPN's systems work today.
As with any VPN, ExpressVPN protects your connection, not your identity: accounts, cookies and browser fingerprints can still identify you online.
What could be better
- Price. PCMag, CNET, TechRadar and ZDNET all describe ExpressVPN as on the expensive side, and CNET felt the newer tiered pricing does not add much value.
- No multi-hop. PCMag and CNET both note there is no double-VPN option.
- Uneven speeds on standard Lightway. TechRadar measured strong results with Lightway Turbo on Windows but weaker ones on standard Lightway elsewhere, and ZDNET saw slow server switching at times.
- No port forwarding. TechRadar lists this among its missing features.
- Ownership history. Kape's past as Crossrider remains a concern for some reviewers.
Who should choose something else?
If you want the most VPN for the least money, several large rivals offer comparable core protection for less, some with unlimited devices. If you want multi-hop routing or a free plan to try first, Proton VPN offers both. And if you only need occasional protection on public Wi-Fi, a lower-cost or free plan may be enough.
Is ExpressVPN worth it? The bottom line
ExpressVPN is worth it if you value reliability, clean apps and a long audit record and are willing to pay more for them. Its RAM-only servers, KPMG-assessed no-logs design and default post-quantum encryption put it among the most security-minded VPNs, and its ten-device minimum covers most households. The Basic tier is the sensible starting point; the higher tiers only make sense if you want the bundled password manager, identity tools or dedicated IP. Buyers who mainly care about price, or want multi-hop, should look elsewhere.
What other reviewers found
- PCMag called it a top service for frequent travellers, citing its widely distributed servers, fast speed results, strong privacy practices and post-quantum support, but marked it down for expensive plans and no multi-hop.
- TechRadar recommended it mainly for its security, praised fast Lightway Turbo speeds on Windows and user-friendly apps, but found standard Lightway slower and the service still pricey with fewer extras than rivals.
- CNET rated its privacy and transparency among the best it has reviewed and called the apps easy across platforms, while listing the cost, lack of multi-hop and limited value of the new tiers as drawbacks.
- ZDNET found it one of the fastest VPNs it has tested and could rarely tell when the VPN was on, but noted slow server switching and that cheaper services come close in reliability.
Where they agree, where they differ, and what it means for you
The outlets agree that ExpressVPN is secure, transparent and easy to use, and they agree just as firmly that it costs more than most rivals. None of them question its privacy engineering; the RAM-only servers, audits and post-quantum Lightway are consistently credited.
The main disagreement is speed. ZDNET and CNET found it fast, with CNET reporting that recent protocol changes fixed earlier slowdowns, while TechRadar saw strong Lightway Turbo results on Windows but weaker standard Lightway performance on other platforms. TechRadar is also more cautious about the parent company's history than the others. For a buyer, the takeaway is that ExpressVPN delivers the security it promises, speed is likely to be good but varies by platform, and the real question is whether the premium price is worth it to you.
Frequently asked questions
How many devices can I use with ExpressVPN?
It depends on the plan. ExpressVPN's plans page lists ten simultaneous devices on Basic, twelve on Advanced and fourteen on Pro. Apps cover Windows, macOS, Linux, iPhone and iPad, Android, smart TVs and browsers. ExpressVPN also offers router firmware and its own Aircove routers for devices that cannot run a VPN app themselves.
Is ExpressVPN safe and does it keep logs?
ExpressVPN says it keeps no activity or connection logs, and its servers run from memory only, so data is wiped at each reboot. KPMG has assessed its TrustedServer design and privacy policy claims and reported no issues with its safeguards against activity logging. It is based in the British Virgin Islands, which has no data retention laws.
Does ExpressVPN have a free trial or money-back guarantee?
New customers get a 30-day money-back guarantee on every plan, according to ExpressVPN's plans page. TechRadar and ZDNET also report a seven-day free trial when you sign up through the app store on Android or iPhone. There is no permanent free plan, so anyone wanting a free VPN long term will need a different provider.
Who owns ExpressVPN?
ExpressVPN is owned by Kape Technologies, which also owns other VPN brands, as PCMag and CNET explain. The VPN is operated by a company in the British Virgin Islands, and its privacy policy says user data is controlled by ExpressVPN rather than its holding company. Kape was formerly called Crossrider, a past that some reviewers still weigh.
What is the Lightway protocol?
Lightway is ExpressVPN's own VPN protocol, designed to connect quickly, use less battery and reconnect smoothly when your network changes. ExpressVPN says it has been rewritten in Rust, its core code is open source, it has been audited by Cure53 and Praetorian, and it uses ML-KEM post-quantum encryption by default to protect today's traffic from future decryption.