We may earn a commission when you make a purchase via links on this site.

The 10 Best VPN for Malaysia (2023 Update)

By Tibor Moes / November 2022

Why do you need a VPN? Personalized ads follow you across the web, hackers are trying to steal your data, and streaming services hide movies from you. A Virtual Private Network (VPN) can solve that.

  • A VPN encrypts your data, like passwords and credit card details, making it impossible for hackers to intercept it on public Wi-Fi networks.
  • A VPN allows you to watch TV shows from other countries. Log into a foreign VPN server and see all the local movies and series.
  • A VPN hides your IP address and stops advertisers like Google and Facebook from tracking what you do online.

With the best VPN for Malaysia you can protect yourself against hackers and advertisers, and bring anonymity back to your web browsing.

CyberGhost VPN - The best VPN

CyberGhost VPN

Limited Time: Save 83% 🔥

  • Security and Privacy 100% 100%
  • Speed 100% 100%

CyberGhost is the best affordable VPN of 2023. It’s ultra-fast, private, and secure. And it temporarily offers deep discounts.

✓ Stream: Netflix, Amazon, Disney, and more
✓ Torrent: Optimized P2P servers
✓ Return: 45-day money-back guarantee
✓ Privacy: Maximum (no logs)
✓ Servers: 91 countries
✓ Protect: 7 devices

Try it risk-free, thanks to its 45-day return policy.

NordVPN - The most advanced VPN

NordVPN

Exclusive: Save 68% 🔥

  • Security and Privacy 100% 100%
  • Speed 100% 100%

NordVPN is the most advanced VPN of 2023. It has the best privacy technology (RAM-Servers and Double VPN) and a beautiful design.

✓ Stream: Netflix, Amazon, Disney, and more
✓ Torrent: Optimized P2P servers
✓ Return: 30-day money-back guarantee
✓ Privacy: Maximum (no logs)
✓ Servers: 59 countries
✓ Protect: 6 devices

Try it risk-free, thanks to its 30-day return policy.

Ranking of the best VPN services of 2023

We have tested cybersecurity software since 2014. Below, we have selected the top 4 from 30 paid and free VPN services (Virtual Private Networks).

Click the links or scroll down for more.

CyberGhost VPN

CyberGhost VPN Review

Ranked #1 out of 30 VPNs

CyberGhost VPN Review

CyberGhost: Temporarily save up to 83%  🔥

CyberGhost VPN Review

CyberGhost is the fastest VPN in our test. It also has the lowest price and the biggest server network. It's one of the best VPN services you can buy.

Specifications

  • Streaming: Works with Netflix US, Disney, Amazon, HBO Max, and more
  • Torrenting: Allowed on P2P servers
  • Logging: No Logs
  • Servers & Countries: 9,000 Servers in 91 countries
  • Connections: 7
  • 1-Year Price: € 47.64
  • Money-Back Guarantee: 45 days

Streaming

CyberGhost has dedicated streaming servers for Netflix, Disney Plus, Amazon Prime, HBO Max, Hulu, and more.

Torrenting

CyberGhost has optimized P2P servers. It is an excellent VPN for torrenting, thanks to its kill switch, IP- and DNS-leak protection, and no logs policy.

Privacy

CyberGhost has a strict no-logs policy: It does not monitor or record what you do online, and it does not store your IP address. Therefore, you are completely anonymous when using CyberGhost.

Ownership

CyberGhost is owned and operated by CyberGhost S.A. from Romania. Its parent company is Kape Technologies from the UK, which also owns ExpressVPN, Private Internet Access, and ZenMate.

Speed

We test all VPN services on a 1,000 Mbps (1 Gbps) internet connection, with the VPN set to the WireGuard protocol, which is the fastest. These are the test results of the best VPN services:

VPN WireGuard
CyberGhost 825-850 Mbps
NordVPN 725-800 Mbps
Surfshark 700-800 Mbps
IPVanish 700-725 Mbps

Security

CyberGhost applies the most important security and privacy features:

  • AES-256 encryption
  • WireGuard and OpenVPN (TCP and UDP)
  • Kill switch
  • Split tunneling (on Windows and Android)
  • Ad, tracker, and malicious website blocker
  • Dedicated IP

But it lacks RAM-only servers and Double VPN, which NordVPN does offer.

Censorship

CyberGhost does not use obfuscation technology, which hides your VPN usage. Therefore, it is not the right VPN for high-censorship countries like China, Russia, Iran, Turkey, or the UAE.

Servers

CyberGhost has a huge number of servers: 9,000 in 91 countries.

60 Countries have physical servers within their borders, while the other 31 are virtual servers. Although virtual servers are not located within the indicated country, they will give you a local IP address from that country.

It also offers specialized servers:

  • Servers optimized for P2P
  • Servers optimized for streaming
  • Servers with static IP addresses
  • Servers with dedicated IP addresses
  • Fully owned NoSpy servers

Devices

You can install CyberGhost on 7 devices at the same time. It works with Windows, Mac, Android, iOS, Linux, Android TV, Amazon Fire TV, and a range of routers. It also has browser extensions for Google Chrome and Mozilla Firefox.

Prices

CyberGhost has the lowest 1-year price in the industry.

VPN 1-Year Price
CyberGhost € 47.64
Surfshark € 47.88
IPVanish $ 47.89
NordVPN € 52.68
ExpressVPN € 99.84

Is CyberGhost VPN the best VPN software of 2023?

CyberGhost is the fastest VPN in our test and has the most affordable 1-year contract. On top of that, it is secure, private, and has one of the largest server networks. It's excellent.

You can try CyberGhost risk-free, thanks to its 45-day return policy.

NordVPN

NordVPN Review

Ranked #2 out of 30 VPNs

NordVPN Review

NordVPN Review

NordVPN is the most advanced VPN service you can buy. It uses the latest privacy technology, like RAM servers and double VPN, and works in China. It's one of the best VPN providers you can buy.

Specifications

  • Streaming: Works with Netflix, Disney+, Amazon Prime, Hulu, and more
  • Torrenting: Allowed on 80% of its servers
  • Logging: No Logs
  • Servers & Countries: 5,600 Servers in 59 countries
  • Connections: 6
  • 1-Year Price: € 52.68
  • Money-Back Guarantee: 30 days

Streaming

NordVPN unblocks Netflix in 10 countries, including the United States. It also works with Disney Plus, Amazon Prime, HBO Max, Hulu, and BBC iPlayer.

Torrenting

NordVPN allows torrenting on most of its servers. On top of that, it has optimized P2P servers for extra high download speeds.

Thanks to its no-logs policy, kill switch, DNS- and IP-leak blocking, it is a safe choice for torrenting.

Privacy

NordVPN has a strict no-log policy. So it does not record your IP address or online activities. It was the first VPN company to subject its privacy policy to an independent audit by PricewaterhouseCoopers.

Ownership

NordVPN is owned and operated by NordVPN S.A. from Panama. Its parent company, Nord Security, merged with the parent company of SurfShark to form Cyberspace BV in the Netherlands.

Speed

We test all VPN services on a 1,000 Mbps (1 Gbps) internet connection, with the VPN set to the WireGuard protocol, which is the fastest. These are the test results of the best VPN providers:

VPN WireGuard
CyberGhost 825-850 Mbps
NordVPN 725-800 Mbps
Surfshark 700-800 Mbps
IPVanish 700-725 Mbps

Security

NordVPN is the most advanced VPN in our comparison. It includes both the mainstream security features and the highly advanced ones:

  • AES-256 encryption
  • WireGuard and OpenVPN (TCP and UDP)
  • Kill switch
  • Split tunneling
  • Ad, tracker, and malicious website blocker
  • Dedicated IP
  • RAM-only servers
  • Double VPN
  • Onion over VPN
  • Obfuscated servers
  • Meshnet (on Windows and Linux)

NordVPN is also available in a bundle, including NordLocker (encrypted cloud storage) and NordPass (password manager and data breach scanner).

Censorship

NordVPN is one of the few VPNs that work in highly censored countries like China, the UAE, Iran, Russia, and Turkey. This is thanks to its obfuscation technology that hides your VPN traffic.

Servers

NordVPN has an extensive VPN server network, with 5,600 servers in 59 countries. They are all physical servers, meaning every server is located within the country's borders.

It also offers specialty servers:

  • P2P servers
  • Streaming servers
  • Static IP address servers
  • Double VPN servers
  • Onion over VPN servers
  • Obfuscated servers

Devices

You can install NordVPN on 6 devices at the same time. It works with Windows, Mac, Android, iOS, Linux, Android TV, Amazon Fire TV, and some routers. It also has browser extensions for Google Chrome, Mozilla Firefox, and Microsoft Edge.

Prices

Considering that NordVPN is the most advanced VPN, it is a bargain.

VPN 1-Year Price
CyberGhost € 47.64
Surfshark € 47.88
IPVanish $ 47.89
NordVPN € 52.68
ExpressVPN € 99.84

Is NordVPN the best VPN service of 2023?

NordVPN is the most advanced VPN software you can buy, thanks to its RAM servers, double VPN, Onion over VPN, and obfuscated servers.

You can try NordVPN risk-free, thanks to its 30-day return policy.

SurfShark VPN

Surfshark VPN Review

Ranked #3 out of 30 VPNs

SurfShark VPN Review

Surfshark VPN Review

Surfshark offers the best value for money. It is fast, secure, and affordable. And it allows you to install it on an unlimited number of devices. It's one of the best VPN programs you can buy.

Specifications

  • Streaming: Works with Netflix, Disney+, Amazon Prime, Hulu, and more
  • Torrenting: Allowed on all of its servers
  • Logging: No Logs
  • Servers & Countries: 3,200 Servers in 95 countries
  • Connections: Unlimited
  • 1-Year Price: € 47.88
  • Money-Back Guarantee: 30 days

Streaming

Surfshark can stream Netflix in 10 countries, including the United States. It also works with Disney Plus, Amazon Prime, HBO Max, BBC iPlayer, and Hulu.

Torrenting

Surfshark allows P2P file-sharing on all of its servers and offers optimized P2P servers for higher download speeds. Due to its kill-switch, no-logs policy, and leak-blocking, Surfshark is a safe choice for torrenting.

Privacy

Surfshark has a clear no-logs policy. It does not track what you do online and does not store your IP address. In 2021, Surfshark underwent an independent server audit by Cure53, a German cybersecurity firm.

Ownership

Surfshark BV from the Netherlands owns Surfshark. In 2022, its parent company merged with Nord Security, creating the holding company Cyberspace BV, also located in the Netherlands.

Speed

We test all VPN services on a 1,000 Mbps (1 Gbps) internet connection, with the VPN set to the WireGuard protocol, which is the fastest. These are the test results of the best VPN programs:

VPN WireGuard
CyberGhost 825-850 Mbps
NordVPN 725-800 Mbps
Surfshark 700-800 Mbps
IPVanish 700-725 Mbps

Security

After NordVPN, Surfshark is the most advanced VPN in our comparison. It covers all mainstream and advanced features:

  • AES-256 encryption
  • WireGuard and OpenVPN (TCP and UDP)
  • Kill switch
  • Split tunneling
  • Ad, tracker, and malicious website blocker
  • Dedicated IP
  • RAM-only servers
  • Double VPN
  • Onion over VPN
  • Obfuscated servers
  • Rotating IP
  • Override GPS Location on Android

Next to its VPN service, Surfshark also offers antivirus software, personal data breach alert, and a private search engine. These features are sold separately or together with the VPN in SurfShark One.

Censorship

Thanks to its Camouflage and NoBorders Mode, Surfshark works well in censored countries like Russia, the UAE, Turkey, and Iran. However, it does not consistently work in China.

Servers

Surfshark has an extensive network, with 3,200 servers in 95 countries. However, some of these servers are virtual. That means that although you get a local IP address from the country of your choice, the physical server is located in a different country.

Surfshark also offers specialized servers, including:

  • P2P servers
  • Static IP address servers
  • Double VPN servers (Multihop servers)

Devices

Surfshark allows unlimited simultaneous connections. It works with Windows, Mac, Android, iOS, Linux, Android TV, Amazon Fire TV, and some routers. It also has browser extensions for Google Chrome, Mozilla Firefox, and Microsoft Edge.

Prices

Surfshark's price is excellent. Especially considering that you can install it on an unlimited number of devices.

VPN 1-Year Price
CyberGhost € 47.64
Surfshark € 47.88
IPVanish $ 47.89
NordVPN € 52.68
ExpressVPN € 99.84

Is Surfshark the best VPN service of 2023?

Surfshark offers the best value for money in the VPN industry. It is advanced, affordable, and allows you to protect an unlimited number of devices. It is one of the best VPN deals out there.

You can try Surfshark risk-free, thanks to its 30-day return policy.

IPVanish VPN

IPVanish Review

Ranked #4 out of 30 VPNs

IPVanish VPN Review

IPVanish: Temporarily get 61% OFF  🔥

IPVanish VPN Review

IPVanish is an excellent VPN. It's fast, secure, and affordable. And it allows you to install it on an unlimited number of devices. However, it's not as advanced as the others in this list and has a smaller server network.

Specifications

  • Streaming: Works with Netflix USA, BBC iPlayer, and Hulu
  • Torrenting: Allowed on all of its servers
  • Logging: No Logs
  • Servers & Countries: 2,000 Servers in 50 countries
  • Connections: Unlimited
  • 1-Year Price: $ 47.89
  • Money-Back Guarantee: 30 days

Streaming

IPVanish is not the best VPN service for streaming. Although it works with Netflix in the United States, Hulu, and BBC iPlayer, it has problems with streaming services like Amazon Prime Video and HBO Max.

Torrenting

IPVanish allows torrenting on all its servers. And thanks to its no-log policy, kill switch, and no DNS leaks, it is a safe option to do so. The kill switch is necessary because it will block the internet traffic if the VPN connection drops.

Privacy

IPVanish has a clear no-logs policy. However, in 2018, it handed user data to the US government. Data it wasn't supposed to have, according to its log policy. Since then, it has changed owners twice, but the reputation remains.

Speed

We test every VPN service on a 1,000 Mbps (1 Gbps) internet connection, with the VPN connection set to the WireGuard protocol, which is the fastest. These are the test results of the fastest VPN connections:

VPN WireGuard
CyberGhost 825-850 Mbps
NordVPN 725-800 Mbps
Surfshark 700-800 Mbps
IPVanish 700-725 Mbps

Security

IPVanish is the only VPN in our comparison that owns all of its servers and doesn't rely on third-party server parks, which is excellent. That said, it is not the most advanced VPN in our test.

It includes the following mainstream features:

  • AES-256 encryption
  • WireGuard and OpenVPN (TCP and UDP)
  • Kill switch
  • Split tunneling

But it misses many of the advanced features:

  • Ad, tracker, and malicious website blocker
  • Dedicated IP
  • RAM-only servers
  • Double VPN
  • Onion over VPN
  • Obfuscated servers

Censorship

IPVanish does not work in censored countries like China, the UAE, Iran, Turkey, or Russia.

Servers

IPVanish has 2,000 VPN servers in 50 countries. All servers are physically located within the country and entirely owned by IPVanish. Because it doesn't rely on third-party server providers, it has complete control over the hardware and software, which theoretically should increase its security.

Devices

IPVanish allows an unlimited number of simultaneous connections. It works with Windows, Mac, Android, iOS, Linux, Android TV, Amazon Fire TV, and some routers. But it has no browser extensions.

Prices

IPVanish has a very attractive price, especially as you can install it on an unlimited number of devices.

VPN 1-Year Price
CyberGhost € 47.64
Surfshark € 47.88
IPVanish $ 47.89
NordVPN € 52.68
ExpressVPN € 99.84

Is IPVanish the best VPN provider of 2023?

IPVanish is fast, secure, and affordable. It owns its entire server network and allows you to install the software on unlimited devices. But it's not the most advanced VPN in our test and not the best option for streaming.

You can try IPVanish risk-free, thanks to its 30-day return policy.

Comparison table of the best VPN services 

CyberGhost
NordVPN
Surfshark
IPVanish
Icon
CyberGhost VPN Icon
NordVPN Icon
Surfshark VPN Icon
IPVanish VPN Icon
Ranking
#1 / 30
#2 / 30
#3 / 30
#4 / 30
Logging Policy
No Logs
No Logs
No Logs
No Logs
Operating Company
CyberGhost S.A. (Romania)
NordVPN S.A. (Panama)
Surfshark BV (Netherlands)
Ziff Davis, Inc (USA)
Holding Company
Kape Technologies PLC (UK)
Cyberspace BV (Netherlands)
Cyberspace BV (Netherlands)
Ziff Davis, Inc (USA)
VPN Protocols
IKEv2/IPSec, OpenVPN, WireGuard
IKEv2/IPSec, OpenVPN, NordLynx (WireGuard)
IKEv2/IPSec, OpenVPN, WireGuard
IKEv2/IPSec, OpenVPN, WireGuard
Encryption
AES-256
AES-256
AES-256
AES-256
US Netflix




Torrenting




VPN Kill Switch




Split Tunneling




Ad & Tracker Blocker



No
Smart DNS



No
First-Party DNS


No

Dedicated IP


No
No
Double VPN
No


No
RAM Servers
No


No
Works in China
No


No
Countries
91
59
95
50
Servers
9,000+
5,600+
3,200+
2,000+
Speed on WireGuard or proprietary protocol
825-850 Mbps
725-800 Mbps
700-800 Mbps
700-725 Mbps
Comptatible Devices
Windows, Mac, Android, iOS, Linux, Router
Windows, Mac, Android, iOS, Linux, Router
Windows, Mac, Android, iOS, Linux, Router
Windows, Mac, Android, iOS, Linux, Router
Number of Connections
7
6
Unlimited
Unlimited
1-Month Price
€ 12.65
€ 10.49
€ 12.95
$ 10.99
1-Year Price
€ 47.64
€ 52.68
€ 47.88
$ 47.89
2-Year Price
€ 74.88
€ 69.36
€ 59.76
-
3-Year Price
€ 82.29
-
-
-
Customer Support
24/7 Live Chat & Email
24/7 Live Chat & Email
24/7 Live Chat & Email
24/7 Live Chat & Email
Free Trial
1 Day
7 Days
7 Days
No
Money Back Guarantee
45 Days
30 Days
30 Days
30 Days

How we test the best VPN for Malaysia

We looked at 30 VPN services across macOS, iOS, Android, and both Windows 10 and 11. Each of those services underwent a battery of tests, including all of the following.

> Test 1: Logging policy

What is a logging policy?

VPNs are supposed to offer complete privacy. That’s why you’re using one. But just like your internet service provider (ISP), a VPN can track what you’re doing with the IP address assigned to you. After all, that data gets routed through the VPN’s servers.

From that data, a VPN can use your public IP address to get an idea of where you live. It could even take a look at what websites you’re visiting and what you’re doing on those websites.

A logging policy is a VPN’s way of telling you that it isn’t (or is) going to do that. The policy outlines what data, if any, the VPN keeps or tracks related to its users. It should also tell you what the VPN does with that data.

For example, Hola VPN is a free VPN service. But to offer a free service, the creators have to make money elsewhere. They do that by selling the data they gather about their customers to advertisers and data brokers.

And they’re not alone.

About 30% of VPN services store your original IP address before giving you access to a new one. About 5% of them track what you’re doing online.

What do we test for?

First, we want to see that the VPN has a logging policy. Second, we need to know what that policy says so we understand the rights the service grants to itself when it comes to your data.

Now, some data tracking is essential. A VPN needs to keep track of server load and aggregated bandwidths, for example. But there are two things we want to see a VPN cover in its logging policy:

  • Check browsing activity: The privacy a VPN is supposed to provide doesn’t mean much when the VPN tracks what you’re doing. We want to see that the VPN doesn’t track what you’re doing. Ideally, we’d like to see the VPN collect zero data on its users.
  • IP address tracking: Simply put, we don’t want to see a VPN track your originating IP address. It shouldn’t even be able to see which ISP you have. The logging policy should tell us that IP addresses aren’t stored or monitored.

> Test 2: Ownership

What do we mean by ownership?

The name you see on the box is rarely the name of the company behind the product. That’s as true for VPNs as it is for anything else. In many cases, the VPN you use is actually owned by another company, which may be owned by a bigger umbrella company.

That’s a problem because these weird ownership structures affect your data. In addition to giving more companies access to data, corporate holding structures create legal issues. For example, a VPN that comes from the Netherlands but is offered in the United States has to account for laws in both countries.

While there are dozens of VPNs on the market, the reality is that they’re all owned by a handful of companies. Here are some examples:

  • Cyberspace is a Netherlands-based company that owns some major VPNs, including Atlas VPN, NordVPN, and Surfshark. You’ve probably seen all three advertised regularly if you watch YouTube content.
  • Kape Technologies owns ZenMate, CyberGhost VPN, Express VPN, and several others from its base in the UK.
  • Aura, also known as Pango, is a U.S.-based company that owns JustVPN, TouchVPN, and Hotspot Shield. It also provides VPN tech for some major security firms, such as Kaspersky.
  • The American company Ziff Davis owns Strong VPN, Perimeter 81, SaferVPN, and a host of other services.
  • Gaditek is a VPN company based in Pakistan that owns Ivacy VPN, PureVPN, and Unblock VPN.

What do we test for?

We look at who owns the VPN, what country they’re registered in, and what data retention laws they follow. Our tests also aim to show us as much as possible about the company’s history.

For example, you’d like to know if a VPN company has associations with malware. Until 2018, Kape Technologies was known as Crossrider. A development platform for browser extensions, Crossrider was regularly used by malware creators and ad injection developers. When Crossrider entered the VPN sector, it changed its name to avoid the association.

That’s the sort of information we think you need to know about the people behind the VPNs you consider using.

> Test 3: Independent audit

What is an independent audit?

Every claim a VPN service makes needs evidence. You can’t just take buzzwords like “Military Grade Encryption” as given. Ideally, a VPN needs to undergo an independent audit to prove the legitimacy of its claims.

In an independent audit, the VPN hires an outside company to check specific aspects of its service. These audits tend to focus on infrastructure and operations, ensuring the VPN only makes promises it can keep.

There are plenty of recent examples of these types of audits:

  • ExpressVPN brought in PricewaterhouseCooper (PwC) to conduct an audit on its TrustedServer technology in 2019. It wanted to confirm that the server wiped data stored on it every time it was rebooted.
  • Deloitte conducted an audit on Private Internet Access’s (PIA) server environment in 2022. This audit checked that the servers met the promises made in PIA’s privacy policy.

Independent audits tell us that a VPN provider cares about its service. By bringing a third party in to check claims, the VPN can ensure it keeps its promises.

What do we test for?

We look for any evidence that the VPN has undergone an independent audit. Our research shows us what that audit related to, what it showed, and how it affects you as a user.

> Test 4: Available VPN protocols

What is a VPN protocol?

The VPN app you download has to communicate with the service provider’s VPN server. VPN protocols ensure that communication is safe and secure at all times. The protocol determines how apps and servers identify each other, in addition to outlining how the app logs in and what encryption it issues.

There are several VPN protocols providers can use. Each impacts several aspects of the VPN service provided, including security and download speeds. Here are the most common protocols:

  • OpenVPN: The majority of VPN services use this open-source VPN protocol. It’s customizable, offers fast download speeds, and is compatible with most major operating systems.
  • WireGuard: Another open-source protocol, WireGuard is starting to become more popular with VPN service providers. It’s faster and leaner than OpenVPN, with its fewer lines of code making debugging much easier.
  • L2TP/IPSec: This is one of the older VPN protocols. Some services still use it, though it’s slower and less secure than OpenVPN.
  • IKEv2: If you want security, this joint offering from Microsoft and Cisco is the best protocol. However, our tests show us that the increased security often comes at the cost of download speed.
  • PPTP: An old VPN protocol that is rarely used today because of its security vulnerabilities.

A few VPN providers prefer to use their own protocols rather than relying on the above options. For example, NordVPN uses a protocol called NordLynx that is based on the WireGuard protocol. Hotspot Shield has Catapult Hydra.

The issue with these protocols is that they’re not open source, meaning others can’t inspect the code.

What do we test for?

We look at which VPN protocols the app offers to users. Our tests show that most offer OpenVPN as standard, with either WireGuard or IKEv2 as alternatives. Once we know which protocols are offered, we test the devices and operating systems they’re compatible with.

> Test 5: Supported encryption standard

What is an encryption standard?

Encryption standards set the rules for how a VPN encrypts your data. The Data Encryption Standard (DES) was the first symmetric key algorithm used for encryption. Created in 1977, it allowed the use of the same encryption key when encrypting or decrypting data.

The Advanced Encryption Standard (AES) came along to replace DES in 2002. Using a version of the Rijndael block cipher, AES has key sizes ranging between 128 and 256 bits. Most VPNs use some form of the AES standard.

What do we test for?

First, we look to see which is the VPN’s default encryption standard. If we see AES-128, we expect it to be the GCM version because it’s faster than the CBC version and allows independent encryption of each block of data.

If we don’t see AES-128 GCM, we prefer to see AES-256 used over AES-128 CBC.

> Test 6: Basic security features

What are basic security features?

If a VPN doesn’t have even the most basic security features, you can’t trust it. This is the minimum that we expect to see:

  • AES 128 GCM or AES 256 encryption: Ideally, we’ll see AES 256 because it’s stronger and almost impossible to hack using brute force.
  • Kill switch: If a VPN tunnel fails, the VPN should shut off internet connectivity instantly.
  • A good VPN protocol: If the VPN doesn’t use OpenVPN or WireGuard, we’re instantly wary. These are the gold standards in open-source VPN protocols.
  • Split tunneling: A VPN should allow specific programs to bypass the VPN tunnel so they have access to the web outside the VPN.

What do we test for?

This one is really simple. We test the VPN to see if it has these four basic security features. The kill switch and split tunneling functions get special attention because we want to know they work as advertised.

> Test 7: Advanced security features

What are advanced security features?

The more advanced a VPN’s security, the more protected you feel when browsing the web. Here are a few advanced security features we look for:

  • Obfuscated servers: These special servers change your data to hide that you’re using a VPN. That’s really useful for services and countries that track VPN use.
  • Ad trackers and malicious website blockers: If a URL is associated with dangerous malware or ads, we want a VPN that blocks it.
  • Override GPS location: VPN servers are often thousands of miles away from their users. With this feature, the user gets to set their location to that of the server, meaning nobody knows where they are.
  • Dedicated IP address: This feature allows you to generate a unique IP address that you can use to get into certain websites. Having a dedicated IP also helps with issues like avoiding blacklists and getting through captchas.
  • RAM-only servers: A traditional server stores data permanently, or at least until its deleted. Some VPNs use Random Access Memory (RAM) servers that get wiped every time the server restarts. That means the server loses its data as soon as the power goes off.
  • Double VPN: This allows your internet traffic to go through two VPN servers, doubling your protection and encryption in the process.

What do we test for?

This is a simple test where we look for the above security features and confirm they’re working as intended.

> Test 8: IP leak

What is an IP leak?

Every device has a pair of IP addresses – public and private. You use the private IP address when communicating with devices on the same network, such as other computers or printers. The public address comes into play when you use the internet.

That public IP address usually comes from your ISP. The problem is that an IP address says more about you than you may like:

  • IP addresses indicate your approximate location down to the neighborhood or zip code level.
  • Somebody who can track your IP code can also track your browsing habits. This allows them to build a general profile of who you are based on your browsing activity.

As mentioned, VPNs help with this by assigning you a new IP address. In most cases, that IP address is the one the VPN server uses. That means your ISP can see you’re using a VPN, but can’t see what you’re doing beyond that. Plus, any websites or web services you use only see the VPN’s IP address, rather than yours.

So, what does all of this have to do with an IP leak?

An IP leak happens if your VPN fails to obscure the public IP address your ISP assigned to you.

What do we test for?

After connecting to the VPN service, we run an IP address lookup. If we see our own IP address, we have a leak on our hands.

> Test 9: DNS leak

What is a DNS leak?

A domain name system (DNS) plays an important role in helping you browse the web easily. It takes the URL you type into your browser and turns it into the IP address of the website you’re trying to access. It’s thanks to a DNS that you can type softwarelab.org into your browser instead of 165.227.148.211.

Think of the DNS as a phonebook full of the IP addresses of websites. But with so many websites around, we need a little help to get people where they want to go. DNS servers give us that help, making them the phone operators of the internet.

Who operates DNS servers?

Usually, it’s your ISP. And that’s a problem because it means your ISP gets to see all of your browsing history based on the requests you’re sending to their servers.

VPN services solve this problem by providing their own DNS servers. Assuming the service has its own servers, a DNS leak happens if your queries get routed through your ISP’s DNS servers instead of the VPN’s DNS servers.

What do we test for?

We run a DNS server lookup on the VPN to make sure it has its own servers. If it doesn’t, we know that web traffic has to get routed through your ISP’s servers, making using a VPN almost pointless.

> Test 10: WebRTC leak

What is a WebRTC leak?

Web browsers have to form lines of communication between themselves and the websites you access. Those connections have to occur in real time. Web Real-Time Communication (WebRTC) makes it happen.

Without WebRTC, you can’t stream video or audio in real time. You’d have to wait for whatever you want to view to load first. Of course, data gets exchanged as part of a WebRTC connection, with that data including your IP address.

There’s nothing you can do about this. Blocking WebRTC requests in your browser reduces functionality. A good VPN ensures that the IP address comes from its own servers. If your IP address gets sent during WebRTC communications, we have a leak on our hands.

What do we test for?

We use a WebRTC lookup test to ensure our IP address isn’t displayed when a WebRTC connection is opened.

> Test 11: Download speed via OpenVPN

What is OpenVPN?

As an open-source VPN protocol, OpenVPN lives up to its name. It’s open for anybody to inspect and critique it, which ensures continued improvement. That iterative improvement means OpenVPN is one of the fastest and most secure VPN protocols available.

Most VPN services use one of the two versions of OpenVPN currently available:

  • OpenVPN TCP: Transmission Control Protocol gives the VPN more control over data transmission, though it loses some speed in the process.
  • OpenVPN UDP: User Datagram Protocol is usually the default option for VPNs because it offers the fastest downloads.

Though some VPNs have started using WireGuard, OpenVPN is still the most common VPN protocol. We want it to be as fast as possible for our VPNs.

What do we test for?

After setting the Windows version of the VPN to the OpenVPN protocol, we test it on a 1 Gbps connection. We want to see how close the VPN gets to delivering 1 Gbps.

> Test 12: Supported speed via WireGuard

What is WireGuard?

WireGuard is a faster and leaner VPN protocol than OpenVPN. We can see that in the code, as WireGuard has 4,000 lines compared to OpenVPN’s 500,000. For that reason, the code is easier to debug and simply runs a lot faster.

In recent years, WireGuard has been used on more operating systems. Though originally designed for the Linux kernel, it’s not available for macOS, iOS, Android, and Windows. That means it’s also a viable choice for VPN service providers.

Our tests show that VPNs using WireGuard are an average of 60% faster than those using OpenVPN. Of course, we need to confirm that’s the case for individual VPNs.

What do we test for?

Like the OpenVPN test, we connect to the VPN service with a 1 Gbps internet connection. This time, the Windows version of the VPN gets set to WireGuard before we run the test.

> Test 13: (Virtual) VPN servers and locations

What are (virtual) VPN servers?

Most VPN servers are physical. The hardware is located in the same country as the VPN itself, and your web traffic gets routed through that physical server stack. These servers typically have special software allowing the creation of VPN tunnels. Some VPN services even use RAM-only servers that wipe themselves as soon as they’re powered off.

But what if the VPN service wants to offer IP addresses from smaller countries that don’t have server farms?

That’s where virtual servers come in. These servers can give you an IP address local to one country despite being located in another. For example, a server could claim to give you an address from Luxembourg even though it’s actually located in the Netherlands.

We’ve found that the largest physical server networks top out at about 60 countries. If a VPN offers IP addresses from more than 60 countries, that’s a good sign that it uses virtual servers.

What do we test for?

We check the number of locations and servers the VPN offers. Then we analyze whether those servers are physical or virtual, in addition to checking if they give IP addresses from the country or city level.

> Test 14: Streaming compatibility

What is compatibility with a streaming service?

A lot of people use VPNs to access content on streaming platforms that they can’t view in their own countries. For example, somebody in the UK might use a VPN to access Hulu, which isn’t available in the UK. Alternatively, somebody in the U.S. may use a VPN to access the original version of the WWE Network instead of watching wrestling content via the Peacock services.

The problem is that streaming services don’t want you to access content from other countries. They’re constantly developing technology to catch VPN users out, creating a cat-and-mouse game between streaming companies and VPN providers. If a VPN isn’t compatible with a big streaming service, it isn’t of much use to a lot of users.

What do we test for?

We run the VPN while accessing major streaming services, including Netflix, Amazon Prime Video, HBO Max, Disney Plus, and Hulu. We also test BBC iPlayer in the United States. Finally, we run more in-depth tests on Netflix by checking it for Australia, Brazil, Mexico, Germany, Japan, and the UK.

> Test 15: Torrenting compatibility

What is compatibility with a torrent network?

Peer-to-peer (P2P) downloading has been around for decades. Torrents are the most popular form of P2P in the 21st century. A torrent has no central server, with users instead downloading directly from other users’ devices.

The act of torrenting isn’t illegal. However, many people use torrents to share copyrighted material, which is illegal. Hence, many people associate torrenting with piracy, even though the tech has many other uses.

What do we test for?

After starting the VPN, we test that it allows downloading via P2P networks using a torrenting client, like BitTorrent or μTorrent.

> Test 16: Annual price and price per device

What is the annual price and price per device?

Most VPN services offer a price per month with the option to commit to a contract for a set amount of time. As a general rule, you’ll pay less per month if you commit to a 12-month contract than you would when buying a single-month subscription.

These tests involved checking each VPN service’s price for a 12-month contract. That’s the apples-to-apples test. Then, we wanted to see how much the per-device cost would be. That can be a challenge because some VPNs limit the number of devices you connect to them while others offer unlimited devices.

For example, Surfshark allows you to install it on an unlimited number of devices. That makes it great for sharing with friends because it means the cost per device is super low. Other VPNs limit you, making the cost per device higher.

What do we test for?

First, we check the annual price for a 12-month contract. Then, we figure out the cost per device by dividing that annual price by the number of connections the VPN allows.

What VPNs for Malaysia have we tested?

We have tested 30 paid and free VPNs (Virtual Private Networks). Proton VPN is the best free VPN service. But if you have the money, we recommend getting a paid VPN service.

In the best case, the free version allows you to protect only one device and doesn’t offer you unlimited bandwidth / unlimited data. And in the worst case, the free VPN providers show you ads or secretly sell your browsing history to advertisers and your internet service provider.

And should you be strapped for cash, don’t opt for an expensive VPN like ExpressVPN. Instead, get a cheap VPN, like Surfshark, that allows you to install it on an unlimited number of devices and share the cost with a friend.

  • Astrill VPN
  • Atlas VPN
  • Avast SecureLine VPN
  • Betternet VPN
  • Bitdefender VPN
  • CactusVPN
  • CyberGhost VPN
  • ExpressVPN
  • HideME VPN
  • HMA VPN (HideMyAss VPN)
  • Hola VPN
  • Hotspot Shield VPN
  • IPVanish VPN
  • Ivacy VPN
  • IVPN
  • Kaspersky VPN Secure Connection
  • McAfee Safe Connect VPN
  • Mozilla VPN
  • MullVad VPN
  • NordVPN
  • Norton Secure VPN
  • Private Internet Access VPN
  • PrivateVPN
  • Proton VPN
  • PureVPN
  • StrongVPN
  • Surfshark VPN
  • Tunnelbear VPN
  • VyprVPN
  • Windscribe VPN

The best are: CyberGhost, NordVPN, and Surfshark.

Frequently asked questions

What is a VPN?

A Virtual Private Network (VPN) protects your online privacy. It creates an encrypted VPN tunnel between your device and a VPN server. This tunnel hides your IP address, restores your anonymity online and makes you safe on public Wi-Fi networks.

Why do you need a VPN?

You need a VPN to restore your online privacy and security. Without a VPN, your Internet Service Provider (ISP) and advertisers can track everything you read, watch and download online. On top of that, if you don’t use a VPN, hackers will be able to steal your data on public Wi-Fi networks, which can lead to identity theft.

How does a VPN work?

A VPN creates an encrypted connection, called a VPN tunnel, between your devices and a VPN server. This hides your IP address and what you do online. As a result, your ISP won’t be able to see what websites you visit, and advertisers won’t be able to know what your IP address is.

What is the best VPN?

CyberGhost, NordVPN, and Surfshark are the best VPN services of 2022. NordVPN is the most advanced VPN service. CyberGhost has the highest download speeds and the lowest one-year price. And Surfshark allows you to install the software on unlimited devices.

What is the fastest VPN?

CyberGhost, NordVPN, and Surfshark are the fastest VPN services of 2022. Although CyberGhost is slightly faster than the other two, the difference is not noticeable for most users.

About the author

Tibor Moes

Tibor Moes

Founder & Chief Editor at SoftwareLab

Tibor is a Dutch engineer and entrepreneur. He has tested security software since 2014.

He uses Norton to protect his devices, CyberGhost for his privacy, and Dashlane for his passwords.

This website is hosted on a Digital Ocean server via Cloudways and is built with DIVI on WordPress.

You can find him on LinkedIn or contact him here.

[class^="wpforms-"]
[class^="wpforms-"]
[class^="wpforms-"]
[class^="wpforms-"]
[class^="wpforms-"]
[class^="wpforms-"]