3 hours ago
2
ZDNET's key takeaways
- A VPN focused on security technologies, including Mixnet, rather than traditional VPN features
- Open-source components
- In active development
- Limited servers, but you can control entry and exit points
- Delinked payments and online activities
Have you heard of NymVPN? You'd be forgiven if this name doesn't immediately come to mind when you think about virtual private networks (VPNs). But it's a VPN project that should now be on your radar, considering how the minds behind it want to redefine what a VPN can do for you and your privacy -- and what can be done now to safeguard against future threats.
Also: The best VPN services: Expert tested
Based in Switzerland, Nym Technologies' NymVPN piqued ZDNET's interest as a VPN outside of the typical offerings on the market. This VPN harnesses decentralized technologies, typically associated with the blockchain, to provide Wireguard protection alongside Mixnet for increased anonymity. There's also a focus on masking metadata, and a development roadmap that promises new features throughout 2025.
Should you try out this VPN? ZDNET finds out.
"The team behind NymVPN is a world-class community of researchers, developers, cryptographers, privacy activists, and philosophers. Nym's goal is to make the internet private by default for all of humanity. We're building some of the tools to achieve it."
Lofty goals, to be sure. But if you take a look at NymVPN's litepaper, the minds behind this new VPN offering highlight some important issues and challenges in the VPN industry today. It's difficult to know what VPN is right for you, or what technologies -- such as onion routing, encryption, and routing methods -- are best suited to your use case.
"This complexity creates a fragmented approach to privacy and forces individuals to switch between applications, depending on their usage requirements," NymVPN says. "Adding to the complexity, users often lack a clear understanding of the specific privacy properties offered by different systems."
Fragmentation is certainly a problem, with VPN providers today promoting different encryption protocols (some of which are custom), varying privacy standards, separate approaches to user transparency, and more.
This is where NymVPN appears to want to stand out from the crowd.
Setup and usability
When you download NymVPN and sign up for the service, you'll encounter a very different way of authentication, which we haven't seen other VPN providers employ.
You'll be given a QR code that, once scanned, will reveal a 24-word access code. You don't have to use a traditional email and password combination.
The VPN interface, on both PC and mobile, is very basic at the moment. The default interface shows you whether you're connected to the VPN network, whether you're using Wireguard or Mixnet, and what your entry and exit points into the NymVPN network are.
If you click the top-right settings button, you'll see your device ID, a support tab, locally stored logs, and an option to send anonymous error reports if you wish, but no other data points or configurations are available (yet).
There are also light and dark themes to choose from. Apps are available for Windows, MacOS, Android, iOS, and Linux.
NymVPN technologies
What interested us about NymVPN were the two main modes of connection to its decentralized network.
One of those options is Wireguard, which is encouraged if you're doing general browsing and if your primary concern is speed rather than enhanced security. The Wireguard connection is based on AmneziaWG, an open-source fork of the Wireguard-Go protocol. AmneziaWG is designed to reduce the risk of deep packet inspection (DPI) and sophisticated ways to examine and analyze internet traffic.
Your other option is the Nym Noise Generating Mixnet (NGM). NymVPN attempts to mask your metadata -- such as online activity patterns -- by automatically generating noise in the network and introducing dummy packets that confuse systems attempting to track your traffic's journey.
The NymVPN decentralized network is backed by the exchange of crypto tokens and is made up of about 600 nodes -- including relays, validators, and API nodes -- that the VPN provider says are "managed by individuals, not central authorities." Participants are incentivized through token issuance to provide a trustworthy service.
Because the network isn't centralized, logs aren't kept by the VPN provider. Instead, each node manager is asked to agree not to collect or store user data and will be kicked out of the network if these rules are broken.
Multihops are a feature that many VPN providers offer, but NymVPN utilizes this practice by default. Whether you choose Wireguard or Mixnet, you'll multihop; the only difference is the number of jumps you make.
Multihopping creates a chain of servers for your connection to go through, further reducing the risk of tracking and man-in-the-middle (MITM) attacks. For example, if you're in the US and you choose a server in Germany, you may be routed through two German servers rather than just one.
In NymVPN's case, its Wireguard option funnels traffic through two proxy nodes, whereas the Mixnet implements a total of five steps. Both setups run through the same network, therefore adding additional noise.
"This multi-hop approach adds an additional layer of privacy, making it significantly more challenging for websites, advertisers, and malicious actors to track your online behavior. Your online identity remains safeguarded, ensuring that your digital privacy is fortified," NymVPN says.
NymVPN says there are 50 entry and exit locations available for use. At the time of testing, I counted 53 country options, many of which offered multiple servers to choose from. This is, however, a small country network in the VPN world and something I hope to see expand in the future.
I like that users can choose their entry and exit points. For instance, you can choose to enter the network via the US and exit through South Africa. There's also a kill switch, a feature most VPN providers offer to protect your connection if your internet suddenly drops, which worked properly during testing.
It should also be noted that NymVPN is open source, which allows anyone to audit or comment on the service's code, as well as flag security weaknesses or vulnerabilities. Nym also says security firms regularly audit the system. Encryption protocols and systems in use include AES-GCM-SIV-256, AES-CTR-128, ChaChaPoly, and Curve25519.
Speeds and connection times
Connection times were reasonable, taking around 3 to 4 seconds to connect. However, if you're switching between Wireguard and Mixnet, you should expect these connection times to be slower.
I'd put NymVPN's Wireguard speeds on par with speeds from some midrange VPN providers, including Surfshark and Private Internet Access, with a speed loss of around 21% to 28% on Wi-Fi. There was a marginal further drop on cellular.
In other words, the speed reduction you typically expect when using a VPN is acceptable on this setting -- and as with other services, you'll likely experience the best speeds when you choose servers closest to your original location.
You can simultaneously connect up to 10 devices under one account.
Also: The best password managers: Expert tested
Thoughts on Mixnet
Before I share my thoughts on the Mixnet connection, it's important to note that at my location in the UK, I live in a walled city with heavy infrastructure restrictions and, therefore, slow fiber and cellular rollouts. So on a good day, my internet speeds will reach only around 50Mbps to 65Mbps (though, thankfully, this is soon to change), and I'm limited to 4G in my city.
I use a VPN by default, but this does mean multihops can drastically affect my online experience, since I'm already starting from a low speed.
Mixnet was noticeably slower for me. In some ways, it reminded me of the Tor network, as it struggled to load resource-intensive and script-heavy websites, some of which ended up being unreachable when my speed plummeted to around 5% of what I typically experience. The Android mobile app also crashed several times while I was running upload speed tests.
My takeaway is that a five-step multihop might simply be too much for those on low-speed connections from the start, but considering the point of the Mixnet connection, it's not a deal-breaker for anyone who really needs anonymization. In the same way that Tor users expect a slowdown, if you're the type of user who needs the most secure and masked connection possible -- such as in cases where states and governments are watching you -- you likely won't mind waiting to reach your online destination.
I also extensively tested for the presence of DNS leaks, which occur when you're still bouncing from your Internet service provider's DNS servers despite using a VPN. If this happens, your personal information or online activities may be exposed. There were none, which is great to see, especially considering NymVPN's emphasis on user security.
NymVPN's future
NymVPN says its noise-generating server sprawl can help protect users from being tracked, even by upcoming AI systems. Speaking of future developments, the organization has released a public roadmap to document upgrades, changes, and fixes.
Future plans include introducing split tunneling, allowing users to choose their node operator, key rotation and forward secrecy, improvements to encryption, and more payment options.
NymVPN is, in my opinion, a VPN with a potentially successful future as a security-first VPN for people with the greatest need for anonymization, perhaps including activists, journalists, and folks involved in civil rights movements. I don't think it'll suit many consumers at its current stage, as you can enjoy more bang for your buck with other, more-developed VPNs offering extensive server networks and more features. But I appreciate the organization's transparent approach to development, and I think it could attract a loyal following over the next few years should it continue to focus on security and improve the performance of its Mixnet.
Pricing
If you want to try out NymVPN, you can now purchase and download the software. Subscriptions mirror those of many other VPN contenders, and you can pick between a one-month plan, a one-year subscription, or a two-year contract. Monthly plans are priced at $12.99 per month, whereas you'll pay the equivalent of $6.99 per month on annual plans. The best price on offer is for subscribers to two-year plans for $5.49 per month. You'll also need to factor tax into the equation.
NymVPN also offers a 30-day money-back guarantee. You can opt for a one- or two-year plan, try it for a month, and request a refund if the VPN doesn't suit you at its current stage.
ZDNET's buying advice
NymVPN is one of many VPNs the ZDNET team has tested throughout the years. I've extensively tested and researched more than a dozen VPNs, and with NymVPN being a relatively new contender in the space, I've been quite impressed with what I've seen so far. NymVPN has a simple user interface and would suit users who, in particular, want a security-focused VPN with a range of server locations across the UK and US.
It's not the cheapest on the market, with the best deal being the equivalent of $5.49 per month on a two-year term, but if you're intrigued by Mixnet and want to heighten your online security, it's still a VPN worth considering. You should, however, consider this VPN as something akin to Tor in terms of trade-off: You'll likely exchange speed for anonymization.
I'm going to look forward to seeing how the VPN develops over 2025.
English (US) ·