ExpressVPN review: A fine VPN service, but is it worth the price?

ExpressVPN is a popular VPN that's easy to set up and easy to use. Oddly enough, though, it's not much of a standout. Compared to other recommended VPN services, pricing is middle of the road, as are performance and features.

Also: How does ExpressVPN work? Plus how to set it up and use it

I tried to find out exactly how many servers and IP addresses ExpressVPN has - since other VPN providers tout their numbers. Unfortunately, all the company told me (which is probably more honest and transparent than their stat-driven competitors) was this:

Update: Upon publication, a company spokesperson reached out and told me, "We have 3,000+ VPN servers. While we are one of the leaders by this "metric," we don't believe server count is particularly meaningful here and written about why." That link is worth following. They have an interesting blog post that goes into some detail on VPN infrastructure and competitive metrics. It's worth a read.

The one place where ExpressVPN does stand out is in its vast number of client implementations. Whatever computing device you have - be it mobile, tablet, laptop or desktop of any OS flavor - ExpressVPN offers a version for your platform.

Choosing a fast server connection

When I evaluate a VPN, I avoid the big "Connect" button for a while after install. I'm usually far more curious about the various options and settings. In the case of ExpressVPN, I found an option under the "hamburger" menu that I like right away.

This isn't a point-to-point speed test like Fast.com or Speedtest.net. This is a test of all (or a subset) ExpressVPNs servers from your location.

It took about five minutes, but it was worth the wait. ExpressVPN scans across all their servers to show which were faster in terms of both download speed and latency. Plus, it adds a speed index to tell you which server is faster overall. For me, here in Oregon, it was no surprise that a West Coast server was the fastest overall.

It's also possible to see servers in different countries and how they stack up.

This is a relatively simple and obvious feature. It's a wonder more VPN providers don't offer it.

More connection options

By default, ExpressVPN provides a very simple startup screen. Just hit the magic button and it will assign you to a server it recommends. Because I live in the Pacific Northwest, Seattle is an obvious choice for location.

Many users will prefer to choose a location to connect. The ExpressVPN connection screen is clean and clear. You can choose from one of the recommended locations, as this screen shows.

You can also browse through all locations.

Or you can use the search bar to quickly pick a destination server at a desired location.

The application allows you to set servers as favorites, so if you have a few you regularly return to, they're easy to find.

Settings and options

The hamburger menu also provides access to ExpressVPN's options screens. The General tab provides some insight into the capabilities ExpressVPN offers.

While not a particularly unique feature, the fact that you can open the VPN on Windows startup and connect to the last used location when the app launches means that you can set up a default behavior to connect to a VPN as soon as your computer boots up.

The app also supports a kill switch option, which you can enable or disable, as well as providing access to local devices like printers while connected to a remote server. It allows for traffic sculpting, too, enabling you to use the VPN for certain apps and not for other apps. This is a key feature if you want VPN protection or location translation for some connections, but want to use the full power and speed of your connection for other applications.

The protocol setting screen has a lot of options for protocol geeks. You're probably best just leaving it on Automatic unless you know what you're doing or have a very specific preference.

The Shortcuts tab simply lets you put a few web addresses on the main screen. The Browsers tab allows you to control the connection directly from a browser extension. Right now, it supports Chrome and Firefox. Edge is not supported.

Finally, let's look at the Advanced tab. ExpressVPN does allow you to share telemetry back to the company, but that option is properly disabled by default. You can eliminate IPv6 detection, a feature most will leave on. It's always nice to optimize Windows networking. But the option that interests me most is the option to only use ExpressVPN DNS servers.

Since a lot of leakage comes via DNS, it's interesting that ExpressVPN is locking connections to their servers. Let's see how well that works for them.

Performance testing

I installed the ExpressVPN application on a fresh, fully-updated Windows 10 install. To do this kind of testing, I always use a fresh install so some other company's VPN leftovers aren't clogging up the system and possibly influencing results. I have a 1Gb fiber feed, so my baseline network speed is rockin' fast.

To provide a fair US performance comparison, rather than comparing to my local fiber broadband provider, I used speedtest.net and picked a Comcast server in Chicago to test download speed.

For each test, I connected to each server three times. The number shown below is the average result of the three connections.

In looking at these numbers, it's possible to get carried away by the difference in the baseline speed compared to the VPN speed. That's not the best measurement, mostly because I have broadband over fiber so my connection speed is extremely high.

Also, if you look at the baseline speeds between my reviews, you may notice that they differ considerably going to the same cities. Keep in mind that speed tests are entirely dependent on the performance of all the links between the two locations, and that also includes the time of day, how active those servers are, and how slow or fast the internet is on a given day.

Normally, I include a connection to Russia among my tests. But because ExpressVPN does not have a server presence in Russia, I was unable to test performance to Rossiyskaya Federatsiya.

Here are the results of my tests:

When you use a VPN service, it's natural for performance to drop. After all, you're running all your packets through an entirely artificial infrastructure designed to hide your path. The real numbers you should look at are the download speed and the ping speed. Are they high enough to do the work you need to do?

For all connections, ExpressVPN was...meh. It wasn't unusable, but it wasn't stellar, either. That said, all VPN-based connection speeds were more than enough for almost all kinds of video, so it really was good enough. Ping speeds, on the other hand, were too slow to allow any sort of gaming where responsiveness is required.

Ping speed is an indication of how quickly a response gets back after a network request is sent from your computer. The lag limitations here are due to actual physics. If you're sending a packet across the planet, it will take longer to hear back than if you're sending a packet across town.

Security

There are many different ways a VPN can fail you when it comes to security. But one of the most troublesome is when it reveals you as a potentially untrustworthy user. DNSLeak.com and dnsleaktest.com both identified my international connections as possible DNS leaks. This is not the case, because all of them (like the one below for Stockholm) showed the VPN-connected city, rather than my location here in Oregon.

But there was another problem. Note that both DNS testing services identified my connection as coming from Security Firewall Ltd. No, that's not ExpressVPN. But then, there's this:

Yeah, if I were running a site and I was concerned about fraud or VPN usage, I'd block these guys. And so, if your connection appears to be coming from such a concerning set of IPs, I'd call this a security connection fail. Security Firewall Ltd was identified for not just my Sweden connection, but for my Taiwan connection as well. 

So if you're using servers in Sweden and Taiwan and sites you're connecting to either don't allow a connection or make usage difficult, you'll know it's because, by virtue of your connection through Security Firewall Ltd, you're considered a potentially troublesome user. Special.

ZDNET Recommends

How the top VPNs compare: Plus, should you try a free VPN?

We tested the best VPN services -- focusing on the number of servers, ability to unlock streaming services, and more -- to determine a No. 1 overall. Plus, we tell you whether free VPNs are worth trying.

Read now

I didn't see this problem universally. When connecting to Australia, the DNS identified ServersAustralia as the ISP. When testing a connection to India, the ISP was identified as Host1Plus. Both have relatively benign reputations.

It's weird, though, unless ExpressVPN simply didn't know about Security Firewall Ltd's bad Google juice. I would have thought that since ExpressVPN is providing its own DNS, it would have changed up DNS entries for providers that have a tarnished reputation.

Update: We often get pushback when we run reviews that are honest and fair, and even -- as this one was -- generally positive, but not exactly what the vendor wanted to see. While I stand by my observations, I've always felt you deserve to read the vendor's perspective, when provided. A representative from ExpressVPN told us this (their reply has been posted unedited):

As with many VPN providers, we lease servers from data centers around the world, which results in certain IPs being associated with internet infrastructure companies such as Security Firewall Ltd, Host1Plus, and others. If you click through the scamalytics.com article captured in the screenshot of your Google search result, you will see that the website gave Security Firewall Ltd a fraud score of 39. However, many VPN providers have even higher fraud scores: Tefincom (linked to Nord) has a score of 46, and Avast has a score of 67. Even non-VPN providers like GoDaddy have a score of 56. 

While it's not immediately clear how scamalytics.com comes up with these scores, I'd like to assure you that you have nothing to worry about when it comes to Security Firewall Ltd.

I'd also like to confirm that there are no leaks of any sort in our Sweden and Taiwan servers. As long as your DNS leak tests don't show your real IP address, there are no DNS leaks. (Note that the screenshot you used in your article is from dnsleak.com, a site owned and operated by Private Internet Access.)

The bottom line

I like ExpressVPN, I do. It's a breeze to set up and configure. I like how you can determine server speed across the entire network. And searching, saving, and configuring locations is dead simple.

But there are a few things that might hold this product back versus its competitors. It's more expensive than many. That's not to say it's wildly overpriced. But at $99 a year, it's going to have trouble holding its own against those with cheaper plans.

Performance was also not standout. Like I said above, it's good enough for video, so performance really is good enough to get the job done. It's just not a wow -- except in the ping sense. There, it's wow, pings take soooo long. Connection speed wasn't annoying either.

But then there's that connection to Security Firewall Ltd. You never want an account to be associated with high fraud risk ISPs or IP addresses. Also, if you're trying to hide the fact that you're using a VPN, this might not do it.

So, let's use my two-criteria metric on ExpressVPN:

• If you're counting on this VPN to protect your life: Don't use it.
• If you're counting on this VPN to protect coffee shop surfing: Sure, it's fine.

And there you go. There's nothing really standout about ExpressVPN, but it's fine. I'd use it when out and about, sipping my peanut butter mocha. Mmm. Peanut butter mocha...

You can follow my day-to-day project updates on social media. Be sure to follow me on Twitter at @DavidGewirtz, on Facebook at Facebook.com/DavidGewirtz, on Instagram at Instagram.com/DavidGewirtz, and on YouTube at YouTube.com/DavidGewirtzTV.

ZDNET Recommends

The best smartwatches you can buy: Apple, Samsung, Google, and more compared

The 5 best VPN services (and tips to choose the right one for you)

The best Android phones you can buy (including a surprise pick)

The best robot vacuum and mop combos (and if they're worth the money)

• The best smartwatches you can buy: Apple, Samsung, Google, and more compared
• The 5 best VPN services (and tips to choose the right one for you)
• The best Android phones you can buy (including a surprise pick)
• The best robot vacuum and mop combos (and if they're worth the money)