What is a VPN protocol?

VPN protocol names in a word cloud
(Image credit: WordArt.com)

Using a VPN doesn't require a lot of technical know-how. Launch app, click Connect, and a few seconds later your internet traffic is encrypted, and you're protected from snoopers. Easy.

Browse the app menus or your VPN's website, though, and you'll come across more technical details. In particular, you'll read about VPN protocols, and how important they are to keeping you safe.

Many providers weigh this topic down with so much jargon and geek-level network-speak that it's tempting to just close the browser tab, and move on. But it doesn't have to be that way. You don't need to be any kind of expert to understand the protocol basics, and learning just a few key details can make a real difference to your VPN experience.

VPN protocol basics

A VPN protocol is a set of instructions a VPN app and server use to set up a connection, then securely communicate with each other.

The protocol defines how the app logs into the server; how the server proves its identity to the app; the methods used to send data in each direction, the encryption used, and every other aspect of how your VPN connection works.

Your choice of protocol often has a major effect on the VPN. We've seen connection times drop from 20 seconds to less than one, just by swapping protocols, and overall speeds might be two or three times faster with one protocol than another.

There are less visible effects, too. Take your security, for instance. Modern protocols typically give you industrial-strength protection, but a few older options are so outdated that they should be avoided at all costs. Learning which to use, and which to ignore can save you a lot of problems later.

The VyprVPN website displays supported protocols

(Image credit: VyprVPN)

Which VPN protocols are available?

VPN apps typically offer a choice of several protocols. These are some of the most common options.

OpenVPN

OpenVPN is a popular protocol, available from most providers, and it's easy to see why. It's secure, fast and highly configurable. It's open source, which means anyone can look at the code to confirm it works as promised. And it's supported by mobiles, desktops, routers and just about every other device type, so you can be sure it'll run almost anywhere.

WireGuard

WireGuard is the new VPN protocol on the block with a more stripped back design. It doesn't have a fraction of OpenVPN's features, but WireGuard still does more than most people will ever need, and its leaner approach delivers some of the fastest VPN download speeds around. Indeed, our reviews often show WireGuard connections are two to three times faster than OpenVPN.

IKEv2

IKEv2 is a Microsoft and Cisco-developed protocol which offers strong security, and works well on both desktops and mobile devices. But although in theory it should be speedy, our performance tests usually find it's significantly slower than both WireGuard and OpenVPN.

L2TP/IPSec

L2TP/IPSec is an older, simpler VPN protocol. It's widely supported on many device types, but it can be slow, and doesn't have any special features to help it bypass VPN blocking or get through firewalls.

PPTP

PPTP has been around for more than 30 years, making it one of the oldest VPN protocols. It runs almost everywhere, and the lack of features makes it relatively fast. But it's so insecure, with several known vulnerabilities, that most VPNs have dropped it from their lineup.

WireGuard logo

(Image credit: WireGuard)

What are proprietary VPN protocols?

Some of the best VPN providers have custom protocols of their own.

ExpressVPN has developed Lightway, for instance; NordVPN has a protocol called NordLynx, and Hotspot Shield's offering is Catapult Hydra.

These are usually fast and very secure (NordLynx is an adapted version of WireGuard we discussed above), but there are down sides, too. Although Lightway is open source, NordLynx and Catapult Hydra are not, so there's no way for experts to verify how they work. And because these are proprietary protocols, they're not supported by other providers or device manufacturers. You can only use them via the provider's own apps and hardware.

Which protocol is best?

There's no single protocol that best covers everyone, in every situation. But following a few general rules can get you good results.

Many VPN apps have an 'Automatic' setting, which tells the app to choose the best protocol for you. Leave this on and you're unlikely to have any problems.

If you're selecting a protocol manually, and your provider has a custom protocol such as ExpressVPN's Lightway, then that will typically get you the best performance.

Working down the list, WireGuard is likely to deliver excellent speeds, with OpenVPN next, and IKEv2 third. All are very secure.

L2TP isn't a great performer, but it's enough to protect your web banking, shopping and other sensitive activities.

PPTP, by comparison, has weak encryption and is usually best avoided. But if you don't care about security or privacy - you're using your VPN for Netflix or unblocking some other website, for instance - and there's no other option available, it might, just about, be good enough.

Mike Williams
Lead security reviewer

Mike is a lead security reviewer at Future, where he stress-tests VPNs, antivirus and more to find out which services are sure to keep you safe, and which are best avoided. Mike began his career as a lead software developer in the engineering world, where his creations were used by big-name companies from Rolls Royce to British Nuclear Fuels and British Aerospace. The early PC viruses caught Mike's attention, and he developed an interest in analyzing malware, and learning the low-level technical details of how Windows and network security work under the hood.

Read more
ExpressVPN Lightway Protocol
ExpressVPN Lightway: Everything you need to know about the protocol
An illustration of a mobile phone running a VPN
How does a VPN work?
Illustration of the word VPN on a circuit board
What is a VPN? VPN meaning explained in 2025
ExpressVPN's Lightway Turbo upgrade – promo image
Can fast be faster? ExpressVPN promises it’s possible
Someone using a VPN on a PC.
How to buy a VPN – a jargon-free guide
best Secure VPN
Secure VPN providers 2025: safe options for the best security and encryption
Latest in VPN
Proton VPN and Vivaldi partnership – promo image
Proton joins forces with Vivaldi browser to help you break free from Big Tech
Swiss flag with view of Geneva city, Switzerland
Secure encryption and online anonymity are now at risk in Switzerland – here's what you need to know
Demonstrators protesting against the arrest of the Mayor of Istanbul Ekrem Imamoglu block Atatürk Boulevard on March 22, 2025 in Ankara, Türkiye.
Turkey's social media ban has been lifted, but VPN usage is still high
Shape of Russia filled with Russian flag-colored internet codes on a black hacking background
A new wave of blocks in Russia targets VPN apps and Cloudflare subnets
A hand holds a smartphone displaying the NordVPN logo
NordVPN Prime hits lowest-ever price in VPN Spring sale
Digital hand set location on map with two pins. AI technology in GPs, innovation delivery, map location, future transport logistic, route path concept. GPs point. New office location, change address
What does your IP address reveal about you?
Latest in Features
Assassin's Creed
Assassin's Creed Shadows has Max subscribers streaming the 2016 movie flop – here are 3 better video game adaptations with over 90% on Rotten Tomatoes
David Kampf #64 of the Toronto Maple Leafs warms-up before playing the Philadelphia Flyers at the Scotiabank Arena on March 25, 2025 in Toronto, Ontario, Canada.
ChatGPT and Gemini Deep Research helped me choose an NHL team to support, and now I'm obsessed with ice hockey
Context Windows
Why are AI context windows important?
A collage of a demasked Spider-Man, Captain Marvel staring into the camera, and Daredevil shouting
17 Marvel heroes I want to see added to the Avengers: Doomsday cast – Spider-Man, Ms Marvel, Wolverine, and more
BERT
What is BERT, and why should we care?
Google Gemini 2.5 and ChatGPT o3-mini
I pitted Gemini 2.5 Pro against ChatGPT o3-mini to find out which AI reasoning model is best