Which protocol should I pick right now?
Leave the default alone unless something feels wrong. Then use this list.
- Regular browsing at home or at work: WireGuard
- A phone that keeps jumping between Wi-Fi and LTE: IKEv2
- WireGuard fails to connect: OpenVPN UDP
- Hotel, campus or company Wi-Fi blocks everything else: OpenVPN TCP
What makes WireGuard the starting choice?
It is the newest and lightest of the three. It connects in a blink and usually gives the highest speeds. Encryption is ChaCha20.
It is also what routers will use. We are making the router profile at the same time as the apps, and you will find it under Get the apps in My info once it is done.
When does IKEv2 make sense?
Network changes barely bother IKEv2. Leave a cafe, lose the Wi-Fi, and after a brief pause the session carries on over LTE.
Our IKEv2 servers encrypt with AES-256-GCM. It suits phones and tablets that move between networks all day.
What if a network blocks the others?
Try OpenVPN. It has been around the longest, and only a few networks manage to block it fully. Ours uses AES-256-GCM.
Start with UDP mode, which is quicker. If the network blocks or slows UDP, switch to TCP. It is a little slower, but it looks like normal web traffic and gets through more often.