Best VPNs That Support WireGuard [September 2020 Update]
- WireGuard Pros and Cons
- The Best VPNs that Work With WireGuard – Full Analysis (Updated 2020)
- NordVPN – Best WireGuard Support With Fast and Safe Browsing
- PIA – Safe, Reliable VPN with WireGuard Support
- CyberGhost – User-Friendly VPN with WireGuard for Linux and iOS
- The VPNs That Don’t Support WireGuard Yet
- Research Methodology
- The Bottom Line
Are the rumors about WireGuard true? Can this new VPN protocol really boost your streaming speeds while simultaneously doubling down on security? And is there a dark side to these new abilities?
WireGuard is so new that out of the 300 VPNs I’ve researched, only 3 have started implementing it safely. I’ve reviewed their WireGuard abilities, and NordVPN has the most complete WireGuard support. The performance leap is huge, but I can also understand why other leading VPNs are not adopting this fresh technology yet.
- NordVPN – The best all-round VPN supports WireGuard and became even faster in browsing and streaming.
- Private Internet Access – Strong security features and WireGuard support for anonymity and fast speeds.
- CyberGhost – Easy-to-use VPN with WireGuard for Linux and iOS.
WireGuard Pros and Cons
WireGuard is an incredibly sleek protocol. Where OpenVPN requires roughly 40,000 lines of code, WireGuard has under 4000. That makes it more lightweight and easier for VPNs to implement, reduces the risk of flaws or vulnerabilities, and makes the code easier to audit.
WireGuard also uses the very latest super-fast cryptographic primitives (the algorithms used to encrypt your data).
This combination of simplicity and high-speed encryption methods allows for excellent performance and reliability. Where the complexities of OpenVPN or IPSec sometimes lead to slowed connections, WireGuard can actually boost your speeds.
It also allows you to connect or reconnect to your VPN almost instantaneously, with fewer disconnections.
This is especially useful if you use your VPN on your smartphone or other mobile devices. With WireGuard, you experience no downtime from your VPN even when switching between networks (i.e. when you move from using your WiFi to your cellular network).
But this new technology isn’t perfect. For starters, WireGuard admits that it’s not entirely finished. It’s still undergoing testing and has yet to be independently audited.
Next, the way WireGuard assigns you an IP address could contradict the strict no-logs policies employed by most VPNs.
Unlike OpenVPN or other tunneling protocols, WireGuard can’t dynamically assign IP addresses. Instead, it assigns you a static IP address.
That means your assigned IP address doesn’t change every time to connect to the VPN. It also means your public IP address and timestamps have to be stored at server level so the protocol knows which IP address to connect you to and whether it can reuse that IP address when you no longer need it.
All of this is bad news for your privacy. None of your identifying information should ever be logged or stored on a VPN server. If a third party was able to link your true address to your static VPN IP address, it could, theoretically, trace everything you did while you were connected to the VPN.
So far, NordVPN has the best WireGuard implementation. Other providers are trialing different methods, too. However, the testing process is time-consuming, which is why many VPNs are taking longer to roll out WireGuard support or are waiting to see if WireGuard itself provides a solution.
The Best VPNs that Work With WireGuard – Full Analysis (Updated 2020)
I researched over 300 premium VPNs to see which services are safely implementing WireGuard support. I looked at how each VPN deals with WireGuard compatibility, as well as their general speeds, reliability, and security.
Since the situation with WireGuard is ever-changing, and more VPNs are implementing the protocol by the minute, this list is constantly checked and updated to reflect the latest announcements.
- 5,900+ servers in 59 countries
- The fastest VPN speeds, and even faster with WireGuard
- Built-in ad and malware blocking
- Six simultaneous connections
- 30-day money-back guarantee
- Works with: Netflix, Hulu, Disney+, HBO, BBC iPlayer, Amazon Prime Video, Vudu
- Compatible with: Windows, Android, iOS, MacOS, Linux, routers and browsers with OpenVPN
NordVPN is a fantastic all-round VPN. It’s optimized for streaming, has excellent unblocking abilities, supports torrenting, and boasts world-leading security measures.
It’s also lightning-fast. Since it was already the fastest VPN in our latest speed tests, I was excited to see what it could do when paired with WireGuard.
NordVPN is one of the first and only services to provide a dedicated WireGuard solution, which it calls NordLynx. It layers a double NAT (network address translation) system onto WireGuard to compensate for its weakened security while it’s still in development.
This double NAT system steps in to assign you a dynamic IP address where WireGuard can’t. You get a secure, high-speed, and private connection without any of your information being stored on NordVPN’s servers.
That means NordVPN’s existing zero-logs policy is not compromised.
I was keen to test whether this double NAT interface had any negative effects on the connection speeds offered by WireGuard. I’m pleased to say that NordLynx is even faster than NordVPN’s existing speeds.
Before connecting to NordVPN, my speed was 18.79 Mbps. When I connect to a NordVPN server using OpenVPN, my speeds decreased a little to 14.66 Mbps, which is normal. When I connected with NordLynx, my speeds shot up to an impressive 20 Mbps.
Using NordLynx, I streamed Ozark on Netflix, downloaded some 4K movies with BitTorrent, and jumped on a Zoom call with some friends—everything worked flawlessly with fast speeds and no interruptions.
To further test NordVPN’s 5,400+ server network, I also called on our researchers in 15 other countries to speed test NordLynx. Most reported similar speed increases, but some experienced speeds upwards of 800Mbps. This is incredibly fast for a VPN.
|Connection||Ping (ms)||Download Speed (Mbps)||Upload Speed (Mbps)|
|Base Speed in AU||3||18.79||13.33|
|AU Server with OpenVPN||13||14.66||10.18|
|AU Server with NordLynx||4||20.00||13.24|
To make sure NordVPN’s other security measures were on a level with WireGuard, I ran some DNS and IPv6 leak detection tests across several platforms and devices. I couldn’t detect any DNS or IPv6 leaks on any of the apps I tested, which means your DNS requests and IP address are completely secure with NordVPN.
Its CyberSec security software also blocks ads, malware, and phishing. Some of the sites I regularly visit, like Facebook and YouTube, are notorious for ads. But with NordVPN, I had a completely ad-free experience.
Best of all? NordLynx is super easy to setup. All I had to do was enable it in my Auto Connect settings and it’s currently compatible with Linux, Windows, iOS, macOS, and Android.
If you do need assistance getting set up, NordVPN offers a friendly and helpful 24/7 live chat service to talk you through any difficulties. They were extremely helpful and polite when I got in touch, and my question was answered in less than a minute.
Try NordLynx for yourself risk-free with NordVPN’s 30-day money-back guarantee.
Want to know more? Explore our NordVPN review to see the full results of our research and testing.
- RESTful API for privacy protection
- 3,381 WireGuard servers in 41 countries
- 10 simultaneous connections
- 30-day money-back guarantee
- Works with: Netflix, Amazon Prime Video, HBO Go, Showtime, DAZN
- Compatible with: Windows, Android, iOS, macOS, Linux
Private Internet Access (PIA) offers one of the most comprehensive WireGuard solutions I trialed after NordLynx. PIA initially only made WireGuard available to its beta testers, while the VPN explored different ways of mitigating the protocol’s privacy issues. However, WireGuard support is now out of beta and available on all PIA Windows, Android, iOS, macOS, and Linux apps.
Connecting was easy, all you have to do is select WireGuard in your protocol settings. Just make sure you have the latest version of the PIA app installed to access WireGuard. If you run into any problems, there’s a useful 24/7 live chat on hand to help you get started.
PIA also created a daemon that deletes all of your connection data after three minutes of inactivity. I didn’t notice these drops; they just happened automatically in the background.
Alongside these additional privacy methods, IVPN shores up WireGuard’s world-class encryption with built-in blockers for ads, adware, and malicious websites. I checked its DNS, IPv6, and WebRTC leak protection with an independent leak test and didn’t detect any leaks.
Its speeds are good with OpenVPN, but with WireGuard, I achieved an increase in my usual connection speeds—which is unusual for a VPN. During my tests, I could unlock Netflix, Amazon Prime Video, HBO Go and more, although I couldn’t access BBC iPlayer, Vudu, or Hulu.
PIA offers a range of reasonably-priced subscriptions and a 30-day money-back guarantee if you want to test it out for yourself without making an initial payment.
Want to know more? Explore our PIA review to see the full results of our research and testing.
- RESTful API ensures your traffic isn’t logged
- 6,400 WireGuard servers in 90 countries
- 7 simultaneous connections
- 45-day money-back guarantee
- Works with: Netflix, BBC iPlayer, Hulu, Vudu, HBO Go, Showtime, DAZN
- Compatible with: Linux and iOS (beta)
CyberGhost is an easy-to-use VPN that’s tailored to streaming. While it doesn’t support the new protocol on all of its apps, WireGuard is available to Linux users and on the CyberGhost beta iOS app. Calling WireGuard “a step in the right direction”, CyberGhost has also made public donations to the team behind the protocol to support its continued development.
WireGuard is easy to set up on the CyberGhost iOS app. All you have to do is select WireGuard in the app’s Protocol settings. Setup on Linux is a bit more complicated and I had to contact the VPN’s 24/7 live chat to ask how to enable the new protocol. The answer was fairly simple though: just add “–wireguard” in the CyberGhost command-line app to get started.
CyberGhost’s WireGuard announcement wasn’t particularly clear on how the VPN was mitigating the protocol’s privacy concerns so I went back to the customer support team. After making some inquiries, I discovered that—like PIA— CyberGhost runs a RESTful API protected by an RSA certificate to protect your privacy. This makes sure your traffic is never logged, backing up CyberGhost’s strict no-logs policy.
CyberGhost also uses an additional daemon that works as a middle-man between you and WireGuard, assigning dynamic IP addresses so that none of your activity can be traced back to you. The daemon then deletes these IP addresses every few minutes, to make sure no record of your session is stored.
I ran CyberGhost through a speed test with both WireGuard and OpenVPN. While my speeds with OpenVPN were good, WireGuard managed to improve on my base connection speeds. I tested these fast speeds by streaming my old-time favorite The Sopranos on HBO Go and torrenting a few movies with BitTorrent. I experienced no buffering and my files downloaded quickly—these speeds are real.
CyberGhost’s additional security features include blockers for ads, malware, and trackers, DNS and IP leak protection, and a kill switch to safeguard your data in the event of a dropped connection—although this should be less of an issue when connected with WireGuard.
If you want to test out CyberGhost with WireGuard first, you can try it risk-free using the 45-day money-back guarantee.
Want to know more? Explore our CyberGhost review to see the full results of our research and testing.
The VPNs That Don’t Support WireGuard Yet
ExpressVPN describes WireGuard as “a great idea in development”. The VPN has expressed an interest in implementing the new protocol and has pledged to work with the WireGuard team in reviewing and auditing its code. However, ExpressVPN has stated that it will not be rolling out WireGuard support until further testing has taken place.
Still, ExpressVPN is a secure service that is optimal for streaming and browsing without WireGuard. Take a look at our full ExpressVPN review to see why it’s still worth getting in the meantime.
Surfshark includes WireGuard in its list of supported protocols but says that it’s not currently available. Its statement claims that WireGuard “should provide better performance than other available protocols” and that you can expect the new protocol to be rolled out soon.
In the meantime, Surfshark is a high-speed service for streaming and torrenting, and it offers unlimited simultaneous connections. Our complete Surfshark review can tell you more about the other protocols Surfshark supports.
To bring you the best VPNs currently supporting WireGuard, I tested more than 300 premium services for compatibility and general performance.
During my research, I looked for:
- WireGuard support that also takes the protocol’s privacy flaws into account and provides you with a safe and secure solution
- Excellent existing speeds so that you can enjoy the full benefits of WireGuard’s performance
- Watertight security features that won’t compromise WireGuard’s encryption
- Ease of implementing WireGuard on your VPN app or client
- A dedicated customer support service that provides you with assistance when setting up and using WireGuard
🛡️ What is WireGuard?
WireGuard is a secure tunneling protocol, like OpenVPN or IPSec. Unlike its predecessors, however, WireGuard aims to be simpler, faster, and more secure.
📋 Is WireGuard better than OpenVPN?
Both WireGuard and OpenVPN have benefits and flaws.
WireGuard is much simpler than OpenVPN and is, therefore, faster, easier to use, and less vulnerable to cyber attacks. It’s also just as, if not more, secure when it comes to encryption.
However, OpenVPN can guarantee your privacy in a way WireGuard currently can’t. Most VPNs are configured to work with OpenVPN and require additional solutions to implement WireGuard and combat the new protocol’s privacy flaws.
☠️ Is WireGuard safe?
WireGuard’s stripped-down code and state-of-the-art cryptography mean its incredibly safe when it comes to your online security.
It also provides increased reliability in the form of reduced disconnections and faster reconnections to your VPN, decreasing the amount of time in which you’re vulnerable to detection, monitoring, or hacking.
When it comes to privacy, however, WireGuard is not so advanced. The way it assigns IP addresses currently requires your VPN to log identifying information like your true IP address or time stamps. If a third party manages to access your VPN’s servers, they could potentially use this information to identify you and track your activity.
The solution? This is where NordVPN’s NordLynx system steps in. Its double NAT assigns you a dynamic IP address, resolving the WireGuard IP dilemma.
We take an even more in-depth look into WireGuard’s security in our 2020 safety update.
❓ Does ExpressVPN support WireGuard?
ExpressVPN applauds WireGuard’s efforts and has been helping its developers with reviews and audits. However, as the protocol is still a work in progress, ExpressVPN is not ready to implement it across its apps.
✔️ Does WireGuard work on Android?
Yes, WireGuard is compatible with Android. Both NordVPN and PIA support WireGuard for Android.
The Bottom Line
WireGuard has been hailed as the future of VPNs. The speed and security tests I conducted on it yield very exciting results.
However, even the team behind WireGuard admits that the protocol isn’t fully tested or complete. It seems like we’ll have to wait a little longer before WireGuard is in good enough shape to be implemented in VPNs across the board.
That being said, some VPNs are ahead of the game and are either working with WireGuard or coming up with their own solutions to the protocol’s current privacy issues.
Of all of these, NordVPN offers the most comprehensive and trustworthy WireGuard solution. NordLynx is incredibly fast, reliable, and secure while maintaining NordVPN’s high standards when it comes to privacy and logging.