Quick pick
The default suits most people. Come back to this list when a connection feels off.
- Everyday use at home or the office: WireGuard
- Phone that keeps moving between Wi-Fi and mobile data: IKEv2
- WireGuard will not connect: OpenVPN UDP
- Hotel, school or office Wi-Fi blocks the rest: OpenVPN TCP
WireGuard, the default
Of the three, WireGuard is the youngest and the leanest. Tunnels come up almost instantly and speeds are usually the best you will see. ChaCha20 handles the cipher.
Router setups rely on it too. A router profile is being prepared along with the apps and will appear in My info > Get the apps once it is ready.
IKEv2: built for switching networks
IKEv2 is quick to rebuild a tunnel after the network underneath changes. Walk out of a cafe, lose its Wi-Fi, and the session picks up over LTE after a short pause.
VPNPass pairs it with AES-256-GCM. A phone or tablet that hops networks all day is the natural match.
OpenVPN when other protocols get blocked
OpenVPN is the veteran here, and few networks stop it completely. We run it with AES-256-GCM.
UDP mode is the faster of its two modes, so start there. If a network blocks or throttles UDP, move to TCP. You lose a little speed, but TCP traffic resembles ordinary web browsing and slips through more often.