Bottom line: ExpressVPN is the VPN for people who read the security fine print. It publishes the longest list of third-party audits we’ve seen, from KPMG checks of its privacy commitments to Cure53 and Praetorian reviews of its apps, routers and its own Lightway protocol. Its servers run on RAM only, in 113 countries and every US state. The cost is the cost: Basic renews at close to three times its intro yearly rate, and each plan caps your devices.
Best for: security-minded users who want audits of the apps and protocol, not just the no-logs policy.
Skip it if: value over several years matters more to you than the audit list, or you need more than 14 devices.
We have no affiliate deal with ExpressVPN; links go to its official site. How we score.
Updated 29 October 2026. This ExpressVPN review rests on what ExpressVPN publishes and what we could check that day: its pricing page, its server page, its Trust Center and its privacy policy. We haven’t run speed tests, so there is no speed score here.
ExpressVPN review at a glance
| What we checked | What ExpressVPN publishes |
|---|---|
| Privacy audits | 3 by KPMG of its privacy commitments, the latest in June 2025 |
| Other audits | Many, by Cure53, Praetorian and others: apps, extensions, routers, Lightway |
| Servers | 113 countries plus all 50 US states, RAM-only (TrustedServer) |
| Protocol | Lightway, its own, with obfuscation |
| Devices | 10 (Basic), 12 (Advanced), 14 (Express Pro) |
| Based in | British Virgin Islands |
| Refund window | 30 days for new users |
What ExpressVPN does well
The audit list is the longest we’ve seen
Most VPNs audit one thing: the no-logs claim. ExpressVPN audits nearly everything and lists it in its Trust Center, in date order. KPMG has audited its privacy commitments three times, most recently in June 2025. PwC has audited its TrustedServer technology. Cure53 and Praetorian have reviewed its Lightway protocol several times, and Cure53 has checked its browser extensions, its Aircove routers and newer products.
This is where ExpressVPN beats NordVPN, and we’ll say so plainly. NordVPN has the longer run of reviews focused on its no-logs policy. ExpressVPN has the broader spread of audits across its whole product. If you care whether the app itself and the protocol it runs on have been checked by outsiders, ExpressVPN shows you more.
RAM-only servers in 113 countries
ExpressVPN’s server page says its TrustedServer technology runs servers “entirely on RAM, which erases all data with every reboot, leaving nothing behind.” It lists servers in 113 countries and in all 50 US states. That US coverage is unusually fine-grained, and handy if you need an address in a particular state, for example when a local news site, a regional sports stream or an employer’s system only works from one part of the country. When you need that, don’t forget to check the state list before you buy.
Its own protocol, with obfuscation
Lightway is ExpressVPN’s own VPN protocol. Its server page says Lightway offers “advanced obfuscation,” which helps on networks that block VPN traffic. Building your own protocol is a bold choice. In practice, the repeated audits of it are what make that choice trustworthy.
A clear jurisdiction statement
ExpressVPN’s privacy policy says its “headquarters and registered place of business is in the British Virgin Islands (BVI).” It also says a parent or related company “cannot be compelled to, nor would it voluntarily, provide Personal Data stored by Express Technologies Ltd.” That’s a direct statement, and it’s worth reading in full if jurisdiction matters to you, because the privacy policy also explains which data the company does keep to run the service.
What the audits tell you, and what they don’t
An audit list this long is easy to admire and hard to read, so here’s how to use it.
A privacy audit checks a promise. KPMG’s three reviews look at whether ExpressVPN does what its privacy policy says. That’s the closest thing to proof that a no-logs claim is true at the time of the check.
A security audit checks software. The Cure53 and Praetorian reviews look for bugs and weak spots in apps, browser extensions, routers and the Lightway protocol. They usually come with findings, and the useful part is whether those findings were fixed. ExpressVPN’s list even includes an audit to confirm the fix for a Windows split-tunneling DNS issue, which is exactly the kind of follow-up you want to see.
Neither covers the future. Every audit describes a moment. That’s why repeated audits over the years matter more than any single one, and why ExpressVPN’s steady run from 2022 to 2026 counts in its favour.
None of them measures speed or streaming. Audits say nothing about how fast a server is tonight, or whether a streaming service will work. When you want to know that, use the 30-day refund window on your own connection.
Most people skim an audit page and stop at the logos. Honestly, read two summaries, the latest KPMG privacy audit and the latest Lightway review, and you’ll know more than most reviewers bother to find out.
Where ExpressVPN falls short
The renewal price
Intro prices cover the first 28 months of a 2-year plan. After that, Basic renews at a yearly price close to three times its intro yearly rate, and Advanced and Express Pro renew higher still. ExpressVPN shows the renewal on its pricing page next to each plan, so it’s not hidden, but it’s the number that decides value in year three.
The fix is the same as for any VPN: when you buy, put the renewal date in your calendar. Honestly, it’s the single most useful thing you can do.
Device caps by plan
Basic covers 10 devices, Advanced 12 and Express Pro 14. In practice, that’s plenty for most people. A house full of gadgets can still hit the ceiling, and our second-ranked VPN, Surfshark, has no limit at all.
Dedicated IP only included at the top
Basic and Advanced offer a Dedicated IP as an add-on. Only Express Pro includes one.
ExpressVPN plans and prices
| Plan | What it adds | Best for |
|---|---|---|
| Basic | VPN on 10 devices; Dedicated IP as an add-on | VPN only |
| Advanced | 12 devices, Advanced Protection, password manager, 2FA authenticator | Most people |
| Express Pro | 14 devices, Dedicated IP included | Needs a Dedicated IP |
The intro and renewal prices sit in the plans table below, with the date we checked them. Check the live page before you pay; prices change.
| Plan | Intro price |
|---|---|
| Basic VPN on 10 devices |
$2.99/mo |
| Advanced Most people |
$4.49/mo |
| Express Pro Needs a Dedicated IP |
$7.49/mo |
2-year plans billed for the first 28 months ($83.72, $125.72 and $209.72), shown per month. Renews at $99.95 (Basic), $119.95 (Advanced) and $199.95 (Express Pro) per year.
Prices checked Oct 29, 2026 on ExpressVPN’s own pricing page. Intro prices usually rise at renewal, so check the live page before you buy.
Who should buy ExpressVPN
- You want the app and protocol audited, not just the policy. ExpressVPN’s list is the longest we’ve seen.
- You need an IP in a specific US state. Servers in all 50 states.
- You’re often on networks that block VPNs. Lightway’s obfuscation is built for that.
- You want a clear jurisdiction statement. The privacy policy spells it out.
Who should skip it
- You plan to keep a VPN for many years. The renewal price changes the value a lot.
- You have more than 14 devices. Look at Surfshark’s unlimited plans.
- You want a Dedicated IP without the top plan. It’s an add-on below Express Pro.
Three buyers, three answers
A journalist who works on sensitive stories. The question isn’t only “does it log?” but “has anyone checked the apps and the protocol?” ExpressVPN’s Trust Center answers that more fully than any other VPN we cover. When security of the software itself is the point, honestly, this is the list to read.
A family that wants one subscription for years. Value over time matters most here, and so does device count. ExpressVPN’s renewal and its device caps both count against it. Proton VPN or Surfshark will usually fit better.
A remote worker who needs a US address. Servers in all 50 states make it easy to pick a location close to your employer’s. If the work system flags shared addresses, Express Pro’s included Dedicated IP is worth comparing.
Four ExpressVPN mistakes worth avoiding
Buying Express Pro for the VPN alone. Don’t. Unless you need 14 devices or a Dedicated IP, Basic or Advanced runs the same VPN.
Forgetting the renewal date. Most people miss it until the bill arrives. Put it in your calendar on day one.
Skipping the Trust Center. If the audits are why you’re buying, read them. In practice, the summaries tell you what was tested and what was fixed.
Assuming every device is covered. When you’re near the cap, count your devices before you choose a plan, because the cap is set by the plan.
How we checked ExpressVPN
We don’t claim tests we didn’t run. For this review we read ExpressVPN’s pricing page, server page, Trust Center and privacy policy on 29 October 2026, and quote them where it matters. Our scores weigh privacy, security features, the server network, the apps and value, on what each VPN publishes; How we score explains each one. Compare it with the rest of our VPN section.
FAQ: ExpressVPN questions
Is ExpressVPN worth it?
Yes, if you value audited security across the whole product, and RAM-only servers in 113 countries. It’s less good value after the intro period, so plan for the renewal price.
Has ExpressVPN been audited?
Many times. KPMG has audited its privacy commitments three times, most recently in June 2025, and Cure53, Praetorian and PwC have audited its apps, protocol, servers and routers.
Where is ExpressVPN based?
Its privacy policy says its headquarters and registered place of business is in the British Virgin Islands.
How many devices can I use with ExpressVPN?
Ten on Basic, 12 on Advanced and 14 on Express Pro.
Does ExpressVPN offer refunds?
Yes. New users get a 30-day money-back guarantee on every plan.
The verdict
ExpressVPN earns its place on the strength of its audit list: privacy checks by KPMG, a server audit by PwC, and repeated reviews of its own Lightway protocol and apps. Few VPNs show as much. It ranks fourth of five because of value: device caps by plan and a renewal that runs close to three times the intro rate on Basic. If audited security across the product is what you’re paying for, it’s an easy recommendation. Just put the renewal date in your calendar.
ExpressVPN on our desks
Our YouTube channels cover ExpressVPN from different angles. Each video opens on YouTube.
NordVPN vs ExpressVPN in 2026 — Almost Every Row Is a Tie
NordVPN vs The Other Two: Surfshark & ExpressVPN Compared on Every Spec
Which VPN Should You Buy? NordVPN vs Surfshark vs ExpressVPN Compared
NordVPN vs Surfshark vs ExpressVPN — One of These Actually Wins (Full Spec Table)
Guides on VPN & Privacy
- What a VPN Can and Can’t Hide: Who Sees What, ExplainedYour internet provider, the Wi-Fi owner, the websites you visit, the accounts you sign in to: who sees what with a VPN on, and what a VPN can never hide.