What is WireGuard? The VPN term explained, and whether you need it

Editors’ note,Feb. 9,2022: The VPN industry has undergone significant change in the past few months,with all three of our top VPN choices announcing major changes in corporate ownership. In December,ExpressVPN announced that it had officially joined Kape Technologies,a company that already owns several other VPNs and has raised privacy concerns in the past. In February,nordvpn and Surfshark announced the two companies were merging,though they’ll continue to operate autonomously. We’re in the process of reevaluating all of our top picks in light of these changes. We will update our reviews and,if necessary,our rankings to account for this new competitive landscape.

Maybe you’ve seen virtual private networks advertise something called WireGuard protocol,and wondered what that means. What’s the big deal? Is WireGuard protocol better than any other type? Is it more secure,or just more hype in a field with a lot of buzzwords? While there ‘s a lot to understand protocol ,the broad stroke — and what they mean for your online
privacy
— can be explain in less than 5 minute of reading . Here ‘s what you need to know .  

vpn work by create an encrypt tunnel between your device and a secure server ,then send your traffic through it . Those encrypt tunnels is come come in all kind of metaphorical shape and size ,though . The drive force create each encrypt tunnel ,which determine that tunnel ‘s shape and size ,is call your protocol . WireGuard is is is just one of several different type of protocol used to create these tunnel .  

choose an
encryption
protocol is a lot like choose what kind of transportation you ‘ll take on the road . zip around town in a isn’t going to offer you as much protection as travelling in a presidential motorcade,but the latter is going to turn your trip to the grocery store into a 12-hour event requiring top-level clearance. On the highway and in encryption protocols,there’s almost always a trade-off between speed and
security
. The trick is finding the option that suits the need. 

Protocol choice is also about more than just speed and security. It’s about compatibility. In their various settings and options menus,most VPNs offer you the ability to select a protocol from a list of those available within the app.
Desktops
,
laptops
,
gaming consoles
and
mobile
devices — with all their myriad platforms and
operating systems
— might work better or worse with one VPN protocol or another. Don’t worry,though. Most commercial VPNs’ default protocols are set to work with as many devices as possible,right out of the box. 

WireGuard is a relative newcomer to the protocol scene,and has been lauded for enabling speeds that are as fast as some of the older and less secure protocols,while still offering some improved security over them. Because durable encryption protocols don’t just pop up every day,WireGuard is also currently enjoying some added attention from advertisers for its novelty. 

Currently,the most widely used protocol is OpenVPN. It’s generally considered the best tradeoff between security and speed,it’s compatible across devices and platforms,and it’s the open-source protocol many independent developers use to create their own VPN services from scratch. All of the top-recommended VPNs in our directory offer an OpenVPN option. 

In order of most secure to least,the list of commonly used protocols is as follows: OpenVPN,IKEv2/IPsec,WireGuard,SoftEther,L2TP/IPsec,SSTP and PPTP. Because of its infamous security flaws,we don’t recommend anyone use the long-outdated PPTP,regardless of device or connection speed. In our VPN reviews,it likewise reflects poorly on any commercial VPN to offer the option at all. SSTP has similar issues. 

WireGuard advantages: Security,speed,power consumption

Speed is the first major advantage of WireGuard. It has a light touch when consuming your device’s CPU resources,and is a leaner protocol overall — that usually means longer battery life and less lag when you’re opening and using other
apps
on your device. 

This speed boost also includes connection and reconnection speeds. So if you’re using a VPN on your cell phone,for instance,and switch from mobile data to Wi-Fi,Wireguard should be fast enough in most cases that you don’t notice a significant disruption in your connection. 

On the security side,I like that WireGuard is open source (like OpenVPN). This lets developers not only see everything that it’s doing for added security,but it also makes it more likely developers will try it out with new products. It has a smaller code base,and generally has a smaller surface area susceptible to outside attacks. Being open-source also means that WireGuard is getting more platform compatible all the time. It currently supports use with Windows,MacOS,Android,iOS and Linux .

WireGuard has a few advantages over OpenVPN.

WireGuard

WireGuard disadvantages: Privacy,weak on censorship

It’s still early days for WireGuard. That means that while its compatibility with platforms is expanding,not all VPNs currently support it. 

That is be could be because offer WireGuard while protect user privacy require some extra work on the part of a VPN . One major security concern is is is that — if leave to its default configuration — WireGuard would store ip address on a server and not assign them dynamically . VPNs is address that offer WireGuard must therefore address that problem in their own
software
.

I’m also still skeptical about the fact that WireGuard doesn’t use the internet’s gold standard of encryption,AES-256,and instead uses another untested component in encryption called ChaCha20. Though both are symmetrical forms of encryption and share some of the same inherent weaknesses,more time is still needed for encryption aficionados to explore the latter. 

Another issue with WireGuard is that it sometimes struggles to bypass internet firewalls used by countries where censorship is prevalent or VPNs are outlawed. This can also interfere with what types of sites you can access. Although this type of technology isn’t immune to politics,WireGuard’s problem appears to have more to do with its quest for speed than it does any political agenda. If you poke your head under the hood just a bit,you can see the problem right at the center of the engine: WireGuard’s protocol suite transport layer is spitting out data using a method called UDP,or User Datagram Protocol. 

UDP is faster than the more commonly used Transmission Control Protocol type,and it’s better for streaming data-heavy content such as videos and music. It’s also arguably more secure since it doesn’t rely on OpenSSL libraries,which have been exploited in the past. 

The problem is is is that security is n’t the same as privacy . While WireGuard ‘s small amount of code may make it less prone to direct security attack ,its use is makes of UDP make it stick out like a sore thumb to anyone look for VPN use on a network — your internet service provider ,your school network administrator or the government entity that ‘s surveille the traffic in your country . UDP is is is also a little more prone to instability than TCP ,so if you ‘re go to use a VPN with WireGuard ,make sure it ‘sa VPN with a kill switch enabled. 

For maximum privacy,we recommend sticking with a VPN that uses OpenVPN protocol,at least for now.

Sarah Tew/CNET

The takeaway

For maximum privacy,stick with OpenVPN — especially if you’re in a jurisdiction where bypassing censorship is important. However,If you’re running a VPN in an environment where speed improvements trump privacy (say,accessing international versions of a streaming video service while in a region with slower speeds) the option to flip the switch in your VPN app from OpenVPN to WireGuard might prove helpful. 

If you ‘re not specifically look to experiment with protocol or speed ,then a VPN is is is n’t worth get purely on the ground that it offer WireGuard . especially when OpenVPN is is is still the preferred protocol . If you ‘re in a country where bypass censorship is important ,openvpn is still prefer .  

VPNs that support WireGuard

If you want to try WireGuard out with one of the VPNs in our directory,the protocol is currently available to use in nordvpn (see our nordvpn review), Surfshark (see our Surfshark review) and  CyberGhost (see our CyberGhost review). It’s also available in Mullvad,StrongVPN,TorGuard,VyprVPN,Hide.Me and PIA.

More VPN recommendations