 | This article has multiple issues. Please helpimprove it or discuss these issues on thetalk page.(Learn how and when to remove these messages) (Learn how and when to remove this message)
|
 | |
| Developer | Kape Technologies |
|---|---|
| Type | Virtual private network service |
| Launch date | 2009; 17 years ago (2009) |
| Platforms | |
| Operating system | |
| Status | Active |
| Website | expressvpn |
ExpressVPN is aVPN service and apassword manager.[1] Since September 2021, ExpressVPN has been a subsidiary ofKape Technologies,[2] a company wholly owned by Israeli billionaireTeddy Sagi.[3]
The service is operated by Express Technologies Ltd.,[4] a company registered and based in the British Virgin Islands.[5]
ExpressVPN was founded in 2009 byPeter Burchhardt andDan Pomerantz, two serialentrepreneurs who were alsoWharton School alumni.[6]
In July 2017, ExpressVPN announced in an open letter and later a public statement byApple, that Apple had removed allVPN apps from itsApp Store inChina, a revelation that was later picked up byThe New York Times and other news outlets.[7][8][9] In response to questions from U.S. Senators, Apple stated it removed the VPNs due to a request from theChinese government.[10]
In December, ExpressVPN came into the spotlight in relation to the investigation of theassassination of Russian ambassador to Turkey,Andrei Karlov. Turkish investigators seized an ExpressVPN server which they say was used to delete relevant information from the assassin'sGmail andFacebook accounts.[11][12] Turkish authorities were unable to find any logs to aid their investigation, which the company said verified its claim that it did not store user activity or connection logs, adding,"while it's unfortunate that security tools like VPNs can be abused for illicit purposes, they are critical for our safety and the preservation of our right to privacy online. ExpressVPN is fundamentally opposed to any efforts to install 'backdoors' or attempts by governments to otherwise undermine such technologies."[13][independent source needed]
In December 2019, ExpressVPN became a founding member of the VPN Trust Initiative, an industry group to promote an accreditation program.[14]
In May 2020, the company released a new protocol it developed for ExpressVPN called Lightway, designed to improve connectivity speeds and reduce power consumption.[15] In October, Yale Privacy Lab founder Sean O'Brien joined the ExpressVPN Digital Security Lab to conduct original research in the areas of privacy and cybersecurity.[16]
On April 28, 2022,Indian Computer Emergency Response Team (CERT-In) under the Ministry of Electronics and Information Technology issued a new directive that asked the VPN providers to collect and store user data for up to five years.[17][18] In response to the new VPN rules that require private network providers to store user information, ExpressVPN announced it would move its India-based servers to Singapore and the UK.[19]
In 2023, ExpressVPN launched its app forApple TV.[20][21]
On September 13, 2021, it was reported that ExpressVPN had been acquired byKape Technologies, anLSE-listed digital privacy and security company.[22][23] At the time of the acquisition, ExpressVPN reportedly had over 4 million active users.[24] ExpressVPN announced in September 2021 that it would remain a separate service from existing Kape brands.[25]
In May 2023, Kape Technologies was delisted from the LSE in a transaction by Unikmind Holdings Limited, a company owned by the Israeli and Cypriot businessmanTeddy Sagi.[26]
In September 2021, ExpressVPNCIODaniel Gericke paid a $335,000 fine for previously carrying out hacking operations on behalf of theU.A.E. government without having a valid export license from the US government.[27][28][29]
In February 2024, it was revealed that ExpressVPN software had contained a bug for nearly two years that exposed the domains users were visiting. The bug was present in Windows versions published between May 19, 2022, and February 7, 2024, affecting those who were using the split tunneling feature.[30]
ExpressVPN has released apps forWindows,macOS,iOS,Android,Linux, androuters.[31] The apps use a4096-bit CA,AES-256-CBC encryption, andTLSv1.2 to secure user traffic.[32] Available VPN protocols include Lightway,OpenVPN (withTCP/UDP),SSTP,L2TP/IPSec, andPPTP.[33]
The software also features a SmartDNS feature called MediaStreamer, to add VPN capabilities to devices that do not support them, and a router app, allowing the VPN to be set up on a router, bypassing unsupported devices such asgaming consoles.[34]
ExpressVPN is incorporated in the British Virgin Islands, a country that has nodata retention laws, and is a separate legaljurisdiction to the United Kingdom.[35]
ExpressVPN's parent company also develops leak testing tools, which enable users to determine if their VPN provider is leakingnetwork traffic,DNS, or true IP addresses while connected to the VPN, such as when switching from awireless to awired internet connection.[36]
In December 2021, ExpressVPN modified its product to protect againstLog4Shell, updating its VPN to automatically block all outgoing traffic on ports used byLDAP.[37]
In January 2022, ExpressVPN launched Parallel Connections, a backend feature which simultaneously runs multiple methods of connecting a user to a given server, automatically picking the one that connects a user first.
In April 2019, ExpressVPN announced that all their VPN servers ran solely onrandom-access memory (RAM), without the need of hard disk drives. In theory, as soon as a computer is shut down, all information on the server vanishes and cannot be recovered; the next time the server reboots, a fresh version of the VPN infrastructure is spawned. This was the first example in the VPN industry for such a server security setup, and was referred to as TrustedServer.[38]
In February 2022, ExpressVPN announced a $100,000bug bounty for anyone who was able to hack its in-house technology, TrustedServer.[39]
As of August 2022, ExpressVPN's server network covered 94 countries.[40]
Lightway is ExpressVPN's open source VPN protocol. Launched in 2020, it is similar to theWireGuard protocol, but uses thewolfSSL library to improve speed onembedded devices such as routers andsmartphones. It does not run in theoperating system'skernel, but is lightweight to support auditing. In 2021, as the protocol was leaving thebeta phase, the company claimed it was at least 2.5% faster thanOpenVPN and other older protocols, improved reliability by 40%, and supported TCP and UDP.[41][42]
In August 2021, ExpressVPN announced the full public release of Lightway as well as full open-sourcing of Lightway's code.[42]
In 2020, ExpressVPN announced its new digital security research initiativeDigital Security Lab, which investigates digital rights and security issues while educating consumers.[43]
In 2021, Digital Security Lab released a new report that examined data collection practices in apps foropioid addiction and recovery. Research found that the large majority of all these apps provided third parties, includingFacebook,Stripe, Inc., andGoogle, access to user data.[44][45] In a similar 2021 study, Digital Security Lab analyzed 450 apps and found that all the studied apps contained questionablelocation trackers.[46]
