Privaroo score: 4.4/5 Reviewed January 2026 iOS App Store: 4.7 (600K+ reviews)
Our ExpressVPN review for 2026 tests the VPN where it matters most: real public Wi-Fi across 30 days of travel. Eight networks, 3 hotels, JFK and LHR airports, 2 cafes, 1 Airbnb, measured speeds against each venue’s baseline, the same leak tests we run on every VPN, plus the ownership question every honest review needs to address.
Quick verdict
ExpressVPN passes every leak test, has the highest speed retention we measured on public Wi-Fi (86%), and handles captive portals well. The Lightway protocol reconnects faster than WireGuard or OpenVPN after a network drop. The catch: ExpressVPN is owned by Kape Technologies, which raises ownership-transparency concerns for some users.
ExpressVPN at a glance
| iOS App Store | 4.7 600K+ reviews |
| Pricing | $6.67/mo (12-month) $9.99/mo (6-month) $12.95/mo (monthly) |
| Audits | PwC (2019), Cure53 (2023) |
| Servers | 3,000+ across 105 countries |
| Protocols | Lightway (default), WireGuard, OpenVPN |
| Devices per account | 8 simultaneous |
| Logs | None (audit-checked, RAM-only servers) |
| Headquarters | British Virgin Islands |
| Owned by | Kape Technologies (since 2021) |
| Privaroo leak test | Passed all 5 checks |
What ExpressVPN is and isn’t
ExpressVPN was built in 2009 in the British Virgin Islands and ran independently until Kape Technologies acquired it in 2021 for $936M. The product itself is well-engineered: their proprietary Lightway protocol handles bad networks better than WireGuard or OpenVPN in our testing, and their TrustedServer infrastructure (every server runs in RAM only, wiped on each reboot) means there’s no persistent disk for logs even if Kape’s policies changed.
SCREENSHOT: ExpressVPN iOS app main connection screen with Smart Location auto-pick
It is not the cheapest VPN on the market. It is not built primarily for privacy hardliners Mullvad and IVPN are stronger picks there. It is not a free tier provider.
What it is: the most polished travel-focused VPN we’ve tested, with credible engineering and a real ownership disclosure question.
Features that actually matter
Leak protection our methodology
Same 5-test sequence we run on every VPN, but specifically across travel networks:
- IPv6 leak protection on by default. Tested across 8 public Wi-Fi networks: no IPv6 leak detected. Test passed.
- DNS leak protection on by default. ExpressVPN runs its own DNS. dnsleaktest.com consistently showed only ExpressVPN DNS, never the venue’s. Test passed.
- WebRTC handling the iOS app routes WebRTC through the tunnel. Browser leak tests showed VPN IP, not real IP. Test passed.
- Kill switch Network Lock on by default. We disconnected Wi-Fi 14 times across the 30-day test window. Traffic stopped cold every time. Test passed.
- Captive portal handling the app auto-detects the captive portal screen, lets you log in to the venue’s Wi-Fi, then automatically reconnects. The most reliable portal handling among the 11 VPNs we tested.
All 5 leak checks: passed across every network.
Speed performance our public Wi-Fi data
Setup: Tested at venues with 30-80 Mbps baseline Wi-Fi, typical public network speeds, Lightway protocol, 7 days of travel.
- Marriott Wi-Fi 62 Mbps baseline: 53 Mbps with VPN (86% retention)
- JFK Airport Wi-Fi 38 Mbps: 32 Mbps (84% retention)
- Hilton Wi-Fi 45 Mbps: 38 Mbps (84% retention)
- Starbucks Wi-Fi 28 Mbps: 24 Mbps (86% retention)
- Average across all venues: 85% retention
This is the highest speed retention we measured on real public Wi-Fi across 11 VPNs. Lightway’s edge is most visible on networks with packet loss or high latency exactly what hotel and airport Wi-Fi tend to be.
Streaming on the road
ExpressVPN handled every streaming service we tested while traveling internationally:
- Netflix US from London hotel: Worked (16 of 16 sessions)
- BBC iPlayer from US hotel: Worked (12 of 12 sessions)
- Disney+ in US/UK/Canada catalogs: Worked everywhere
- Hulu from US hotel: Worked
- Amazon Prime Video with regional content: Worked
Most VPNs fail at least one of these. ExpressVPN didn’t.
TrustedServer technology
ExpressVPN’s servers run entirely in RAM there’s no persistent disk. Every reboot wipes all data. This is more than marketing: it means even if a server were physically seized, there’d be nothing to extract. PwC audited this infrastructure in2019 and confirmed the implementation matches the claim.
SCREENSHOT: ExpressVPN iOS app TrustedServer info panel showing RAM-only status
Lightway protocol
ExpressVPN built its own VPN protocol from scratch, open-sourced the code onGitHub, and had it audited by Cure53 in2023. It’s optimized for mobile and unstable connections meaning faster handoffs between Wi-Fi and cellular, and lower battery use than OpenVPN.
In our testing, Lightway reconnected after a network drop in 1.2 seconds on average. WireGuard took 2.8 seconds on the same VPN. OpenVPN took 6+ seconds.
What we liked
- 86% speed retention on public Wi-Fi. Highest of any VPN we tested in real-world travel conditions.
- Captive portal handling is smooth. Other VPNs require disconnecting completely; ExpressVPN auto-detects and reconnects.
- Lightway is fast on bad networks. Not just marketing measurable difference in real conditions 1.2s reconnect vs 2.8s for WireGuard.
- Streaming works everywhere. No failed sessions across 5 major services in our 30-day test.
- TrustedServer RAM-only infrastructure. Verified by outside auditors at PwC.
- British Virgin Islands jurisdiction. Outside Five Eyes intelligence-sharing alliance.
- 8-device limit. More generous than NordVPN (6) or Mullvad (5).
- Apps available in 105 countries. Widest server presence of any VPN we tested.
What we didn’t
- Higher price than alternatives. $6.67/mo on annual is more than NordVPN’s $3.39 or or Mullvad’s 5.
- Owned by Kape Technologies since 2021. Kape also owns CyberGhost, ZenMate, Private Internet Access, and several VPN review sites concentrated ownership of the VPN review ecosystem is worth knowing about.
- No free tier or trial. 30-day money-back guarantee instead.
- No multi-hop routing. Mullvad and ProtonVPN offer this; ExpressVPN doesn’t.
- iOS app upsells the password manager. Not aggressive but visible.
The Kape Technologies ownership question
Kape Technologies acquired ExpressVPN in 2021. Here’s what that means. Kape also owns:
- CyberGhost VPN acquired 2017
- Private Internet Access acquired 2020
- ZenMate VPN acquired 2018
- Several best VPN review websites that… rank Kape-owned VPNs highly
This isn’t unique to ExpressVPN the VPN industry has consolidated significantly. But it’s worth knowing:
- The ExpressVPN product itself is solid we tested it ourselves, with no Kape relationship
- The audits are real and recent
- The TrustedServer infrastructure is verified
- But the broader transparency picture is more complicated than ExpressVPN’s marketing suggests
For most users, this doesn’t change the buying decision. For privacy-focused users specifically, Mullvad or IVPN have cleaner ownership disclosures.
We’ll cover the broader VPN ownership concentration story in a future Receipts article.
Pricing breakdown
| Plan | Monthly equivalent | Total upfront |
| 12-month | $6.67/mo | $99.95 |
| 6-month | $9.99/mo | $59.95 |
| Monthly | $12.95/mo | $12.95 |
Renewal pricing on the 12-month plan stays at $99.95/year no doubling at renewal like NordVPN. That’s actually a positive on the pricing model.
Payment options: credit card, PayPal, Bitcoin, Apple Pay (iOS).
Who ExpressVPN is for
Best fit for:
- Frequent travelers who hit public Wi-Fi often
- Streaming enthusiasts who need reliable international access
- Users on flaky connections rural, hotel, airport
- Anyone who values server presence in many countries 105 vs Mullvad’s 40
Less of a fit for:
- Privacy hardliners who care about ownership transparency
- Bargain hunters NordVPN’s annual prices are lower
- Free tier users ExpressVPN doesn’t offer one
- Users wanting multi-hop routing
Is ExpressVPN safe in 2026?
For most users, yes. The infrastructure passes every leak test, the audits by PwC (2019) and Cure53 (2023) verify the no-logs claim, the TrustedServer (RAM-only) design adds an extra layer beyond what most VPNs offer, and the British Virgin Islands jurisdiction sits outside Five Eyes intelligence-sharing. The one open question is the Kape ownership concentration, addressed in detail above.
ExpressVPN review 2026: verdict
ExpressVPN matched its claims on the travel use case better than any other VPN we tested in this round. Lightway’s speed retention on public Wi-Fi was the highest measured (86%). Captive portal handling was the most reliable across the 11 VPNs. Streaming worked everywhere we tested. Two outside-auditor reports (PwC, Cure53) back the engineering claims.
The Kape ownership question matters more or less depending on your threat model. For everyday public Wi-Fi protection, ExpressVPN is the strongest pick. For users who want a VPN provider with maximum ownership transparency, Mullvad or IVPN are cleaner choices.
The 30-day money-back guarantee means you can run our 5-minute leak test yourself on real travel Wi-Fi and decide.
For broader comparison, see our Top 5 best VPNs for public Wi-Fi 2026.
Not sure which criteria to focus on for travel? See our guide to choosing a VPN for public Wi-Fi in 2026.
Want plain-English privacy explainers in your inbox every Friday? Subscribe to the Privaroo newsletter no spin, no spam.