CyberGhost VPN Review

4 User Reviews

Brett F (TrustPilot)

on 2020-07-22 08:11:21.

Overall score: 5

First-class, five start performance!! CyberGhost is the first VPN I've used that actively switches routing when difficulties are encountered in the connection. Intelligent VPN routing is an amazing feature, and it makes CyberGhost worth every penny.

Harold Alley Jr (TrustPilot)

on 2020-07-21 09:28:30.

Overall score: 5

CyberGhost, in my testing, simply gives the fastest throughput I’ve yet to see from any VPN I’ve tested. I haven’t even mentioned their no tracking, and no logs policy. That combined with their vast number of server’s located throughout the world means you can truly customize your browsing, and p2p activities without the fear of losing your privacy.

Mike Chen

on 2020-07-08 13:53:58.

Overall score: 5

Great service - connects really fast and lets me watch Netflix US without any messing about. Hardly notice it's there.

Does CyberGhost unblock Netflix?

This is often the main question on VPN users' lips, and the good news is that CyberGhost can unblock Netflix US, UK, Germany, and Japan.

In addition, you'll be able to connect to specially optimized servers that unblock over 35 popular streaming services. These include Fox Sports in Brazil, Comedy Central, YouTube in various countries, Netflix in various countries, hulu, and many more.

It even unblocks Disney+ from anywhere in the world, despite its US-only availability at launch. Plus, it has servers that are optimized for unblocking iPlayer for those who want to stream British TV!

Pricing

As you might expect, CyberGhost offers a steep reduction in price when purchasing long-term subscriptions, making it a cheap VPN for anyone looking for a long-term subscription. Otherwise, the plans are identical.

A very generous 45-day VPN money-back guarantee is available when you subscribe for 6 or 18 months, which means that you can pay for a subscription risk-free to test the service.

A card-free 24-hour free trial is also available if you want to try the VPN, which is great. Admittedly, that free trial can seem a little elusive – sometimes it's advertised, sometimes it's not. However, a quick Google search should point you in the right direction.

Clicking on the free trial for macOS can also lead to a Windows .exe file being downloaded, requiring you to chase through the CyberGhost VPN help pages to find a .pkg download for macOS.

If you already have an account (you can sign-up via the Android or iOS apps), or once you've tracked down the Windows or macOS free trial download, the entire process is simple.

Payments

CyberGhost VPN accepts payment via credit/debit card, PayPal, or direct debit. Additional payment options may be available depending on your country of residence.

Those looking for privacy can pay for this VPN in Bitcoin, although remember that no matter how anonymously you pay a VPN company will know your real IP address.

Payments are processed by third party services such as Cleverbridge, Stripe, and PayPal. Bitcoin payments are processed by BitPay.

Features

CyberGhost is a well-rounded provider – so let’s take a look at exactly what you’re getting in your subscription.

With up to seven simultaneous connections on offer, you’ll be able to keep all of your devices secure at home or on the go.

Torrenters will rejoice, too, as CyberGhost has a number of dedicated P2P servers. These servers have been specifically optimized for torrenting, and the provider’s unlimited bandwidth will make downloading files a cinch.

Even if you’re not interested in torrenting, CyberGhost has a broad network of bare metal, and virtual servers – users can take their pick from more than 6,200 servers in 111 locations (88 countries).

For the more security conscious, the option exists to use CyberGhost’s NoSpy servers. The NoSpy data center is based in Romania, putting it outside the reach of the 5 Eyes jurisdiction.

Only CyberGhost personnel have access to these servers, which boast extended bandwidth for resource-intensive tasks and super high premium hardware in addition to a dedicated uplink. Claims of 100% anonymity should be viewed with some skepticism, though.

If you’d like to install CyberGhost on your router, you absolutely can, and you’ll be able to protect an unlimited number of devices by doing so – so long as they’re connected to the router. There are configuration guides on the CyberGhost site, and you can also purchase a range of pre-configured routers with a built-in kill-switch if you’d rather avoid the hassle.

When it comes to customer service, CyberGhost’s support team is available 24/7 via live chat or email. There are also a number of how-to guides on the provider website which cover common issues, from set up on iOS and Android to troubleshooting problems when connecting to Netflix.

Secure Dedicated IP addresses

For those who need a dedicated IP address, CyberGhost VPN is a VPN service that can provide access to these at a small extra cost. Static dedicated IPs can be rented in the US, Germany, France, UK, or Canada.

What's more, CyberGhost is the first VPN to implement an automated token system that allocates that static IP address without revealing it to CyberGhost devs.

This unique system prevents CyberGhost from knowing the IP address of the dedicated static IP, which massively increases privacy for those users. We are impressed that CyberGhost has managed to remove any ties between a user's CyberGhost VPN account and their Dedicated IP.

WireGuard

With version 8 of CyberGhost, the VPN has added WireGuard to its clients, which is great news for users who want access to the very latest in VPN encryption protocols.

WireGuard is a forward-thinking protocol that uses highly secure, modern cryptographic principles, and best of all it is super fast. This makes it well worth trying if you want to do data-intensive tasks like streaming in HD with your VPN. 

Bare metal servers

Also impressive, CyberGhost has a network of bare-metal, single occupancy servers that are firmly under the control of CyberGhost’s staff.

Connection Features

The CyberGhost 8 VPN clients offer a number of special "Connection features". Block ads, Block Malicious Websites, and Block Online Traffic use DNS blocklists to protect your device from online threats. This allows you to surf the web without fear of running into websites that track you or attempt to infect you with malware.

Automated HTTPS is CyberGhost 8's implementation of the useful open-source HTTPS Everywhere browser extension, which ensures a secure HTTPS connection is established if the domain supports it. This prevents you from connection using HTTP by accident.

Data compression reduces your bandwidth usage and can therefore be useful (depending on what you download), but it should be noted that many VPN services enable data compression by default without feeling the need to mention it.

"Smart rules"

"Smart rules" cover a number of features that are available in some of CyberGhost VPN apps, but not others.

• Wi-Fi protection (Windows, macOS, Android, iOS) – detects when you connect to an unknown network and can automatically turn on your VPN, ask what to do, or never protect, as you specify.
• Exceptions (Windows, Android, iOS) – also known as split-tunneling, this feature allows you to exclude some websites from the VPN. This is very useful, for example, if you usually connect to a VPN server overseas but wish to connect to local versions of some websites without disconnecting the VPN.
• App protection (Windows, Android) – auto-launches CyberGhost and automatically connects to a specified server whenever you open named apps. So you could set this up to auto-connect to the US Netflix server every time you open the Netflix app.

Does CyberGhost VPN allow torrenting?

Torrenting is another major use case for VPNs. Anyone familiar with the BitTorrent protocol will know that it exposes your IP address when torrenting files.

A fast VPN protects your privacy and lets you download without having to wait around. However, many VPNs don't allow torrenting traffic on their network, which is why you must be sure before subscribing. 

Luckily, CyberGhost has several servers specifically optimized for torrenting which means that you can use this service to gain total privacy while you download anything that interests you.

We tested these servers using uTorrent to download a few files, and CyberGhost worked flawlessly.

Speed & Performance: How fast is CyberGhost VPN?

Average download speed of 51.6 Mbits/s put CyberGhost VPN in the bottom half of some of the fastest VPNs in the world, which is actually very impressive. Less than a Mbit/s or two separate most of the providers, which makes them all pretty similar in practice.

Again, it's not at the top of our list, but CyberGhost VPN's max burst speed result of 658.5 Mbit/s proves that its servers have great capacity, and show that the service competes with the very best VPNs on the market. This means you should have no issues torrenting or streaming in HD with this VPN. 

Finally, it is also worth mentioning that CyberGhost 8 now also includes WireGuard connections. This is a modern VPN protocol that is famous for providing super-fast speeds. So, if you really need that extra bit of speed for torrenting or streaming, it is definitely worth giving it a go. 

IP, DNS, and WebRTC leak tests

To ensure that a VPN is working as advertised, it is important to perform leak tests. If a VPN has IP leaks, DNS leaks, or WebRTC leaks, this will mean that it is not providing the robust privacy that you require to gain complete privacy online.

We tested CyberGhost VPN on both Mac and Windows using the new CyberGhost 8 client. We tested it using our in-house leak test tool (which you can use to test the VPN yourself for leaks on your own system if you wish). 

In our tests, we encountered no leak problems with the macOS client. The same was true of the Windows client, which we found to suffer from no leaks of any kind.

However, we were only able to test CyberGhost 8 on an IPv4 connection from home due to lockdown. Thus, if you do have an IPV6 connection, you should test yourself (or simply go ahead and revert back to IPV4 manually on your computer). 

It is worth noting that CLI Linux app provides no DNS or WebRTC leak protection, so you may want to check this for leaks on your own system if you're running Linux. 

Please see our Complete guide to IP leak protection for further information on leaks and leak testing.

Privacy & Security

Jurisdiction

CyberGhost is a Romanian VPN company that is owned by Kape Technologies.

Romania is generally considered to be privacy-friendly. Romanian courts struck down the EU Data Retention Directive on constitutional grounds long before it was declared illegal by the European Court of Justice.

It is also not a 14-Eyes spying alliance nation and has no known ties to the NSA. This generally makes Romania a great place for a VPN to be based.

It is worth noting that according to its TOS, "the relationship between you and KAPE shall be governed by and construed in accordance with the laws of England." 

That said, the VPN company was quick to remind us that CyberGhost is a separate entity to ape that is a Romanian company, operating under the Romanian jurisdiction. And it publishes a transparency report that proves it is not having to comply with any UK warrants. 

Overall this earns CyberGhost a thumbs up with us. 

Logs

"When using the CyberGhost VPN, the user's traffic data such as browsing history, traffic destination, data content, and search preferences are not monitored, recorded, logged or stored by the Company. More than this, when using the CyberGhost VPN, we are not storing connection logs, meaning that we don't have any logs tied to your IP address, connection timestamp or session duration."

So CyberGhost VPN easily qualifies as no logs VPN, although some aggregate metadata is sent anonymously to third-party services (MixPanel) for trend analysis.

More concerning is that CyberGhost VPN performs a considerable amount of web tracking on visits to its site, which it shares with a number of third parties (although I didn’t spot any Google Analytics trackers). This kind of tracking has no effect on the privacy of VPN sessions, though,

Technical security

The Windows app provides OpenVPN, IKEv2, or WireGuard encryption. The Android app also provides those protocols. macOS and iOS apps use IKEv2 by default with WireGuard also available.

CyberGhost uses the following OpenVPN settings:

Data channel: an AES-256-CBC cipher with SHA-256 hash authentication.

Control channel: an AES-256 cipher, RSA-4096 key encryption, and SHA384 hash authentication. Perfect forward secrecy is provided by an ECDH-4096 key exchange.

This is a very strong setup. And as already mentioned, CyberGhost VPN uses 100% bare metal servers, which is great news for privacy.

Ease of Use

Signing up for an account on the CyberGhost website is super easy. The apps can be downloaded even if you are not a member, which makes getting hold of them faff-free. 

CyberGhost VPN has custom apps for Windows, macOS, Android, and Android TV/ Amazon Fire TV. It also offers a command-line (CLI) app for Linux and free browser extensions for Chrome and Firefox.

TO help users out, it provides manual setup guides for a range of other devices such as DD-WRT and Tomato routers, Raspberry Pi, and Chromebook. this makes CyberGhost a great VPN for all users, no matter which device they happen to own.

And, because CyberGhost lets users install and use the VPN on up to 7 devices simultaneously you can take advantage of all those apps with a single subscription. 

The Windows client

CyberGhost VPN has definitely upped the game with its CG8 client in terms of aesthetics. It looks good and is easy to navigate. You can let the app choose a nearby server for you, or you can choose your preferred location from the list.

As always with CyberGhost advanced VPN apps, you can select a country or individual server within a country based on distance and load. You can also select servers that have been optimized for torrenting and streaming various online VoD services.

The Windows VPN app features all of Cyberghost's advanced "Connection feature" and Smart rule" on offer. By default, the CyberGhost uses the OpenVPN protocol, but you can choose from IKEv2 or L2TP/IPsec, too. WireGuard is now also available.

OpenVPN users can switch from UDP to TCP, which is useful for evading moderate VPN blocks. The client offers a random port scanning feature to OpenVPN users, which can be used to evade more casual VPN blocks.

IPv4 DNS leak protection and a kill-switch are enabled by default, though IPv6 connections are not blocked – the reasons for this are unclear. As already noted, IPv6 should be disabled in Settings to prevent IPv6 leaks in Windows.

We ran tests on CyberGhost's kill-switch and discovered that it works at the system firewall level. This is good, meaning that even if the VPN client and OpenVPN daemon crash, your IP address will not be exposed.

We also like the addition of gaming-specific servers that people who need fast speeds will welcome!

The macOS client

The macOS client is very similar to the Windows one. A system-level kill-switch and effective IPv4 and IPv6 DNS leak protection are sensibly baked-in, rather than being a user-configurable option.

Unlike its Windows counterpart, that Mac VPN app uses IKEv2. However, this is a higly robust encryption protocol that is fine for privacy and security. 

All "connection features" are present in the app, and they all work excellently - though the only "smart rule" available is Wi-Fi protection. Overall a superb app.

The Android app

The Android VPN app provides the choice of OpenVPN encryption, IKEv2, and WireGuard. Similar to its Windows sibling, it supports TCP and random port selection. It also supports all the "Connection features," plus the Wi-Fi Protection and Exceptions "Smart rules." This makes it a super, advanced VPn client. 

It also has an automatic killswitch, and DNS blocking that prevents you from accessing websites that contain malware or tracking. 

Overall, we found the Android app to be a pleasure to use. It is fast, and effective for gaining privacy online both at home and on public Wi-Fi. And we enjoy using it for unblocking content, including Netflix US. 

The iOS app

Unsurprisingly, the iOS VPN app looks very similar to the Android app.

Under the hood, it opts for the IKEv2 protocol rather than OpenVPN. This is pretty normal for an iOS VPN app, and it is great in terms of security because IKEv2 is widely considered excellent encryption that even has performance advantages over OpenVPN in terms of speeds.

As with the Android app, WireGuard connections are now also available, for those who want the best speeds possible. 

Admittedly the "Connection features" and "Smart rules" are not present in the iOS app. However, Wi-Fi Protection and a built-in kill-switch are which is great news and makes this a reliable iOS VPN app.

Linux

CyberGhost’s Command-line Linux VPN client is little more than the open-source OpenVPN client pre-configured to use CyberGhost’s servers. This does, however, provide real convenience over downloading and running the .ovpn files manually.

The client is available for Ubuntu and Fedora, and appears to be optimized for different versions of those distros. The DEB and RPM packages should work on any systems that support those distribution formats, though.

Browser add-ons

The VPNs browser extensions for Firefox and Chrome are available for free to everyone, and having a CyberGhost account does not improve their functionality. There are only four proxy server locations available: Germany, Netherlands, Romania, and the United States.

They are simple HTTPS proxies. As such, they will spoof your location and protect your data with HTTPS encryption at the click of a button. They do not provide any WebRTC protection, however.

Customer Service

The CyberGhost site hosts extensive setup guides that cover a variety of topics – from setting up the client, troubleshooting streaming issues, and help with protocol usage.

An FAQ is also available, as well as a dedicated Troubleshooting page, and CyberGhost even has its own blog that reports on the latest news from the privacy sphere.

For more direct assistance, email and 24/7 live chat are available in English, German, French, and Romanian, and the team responded quickly, fielding all questions I asked of it.

Final Thoughts

CyberGhost VPN is a fully-featured and no-logs VPN service, and I think that beginners and VPN veterans alike will be able to use the service with few issues. Whilst it's not the fastest VPN out there in terms of average download speed, it is in the top half of the VPN market -you will be able to stream comfortably and play online games with friends.

The CyberGhost 8 software is elegant on all platforms, and it is a highly secure VPN that unblocks just about everything (including a wide variety of streaming platforms). What's more, you'll benefit from a whole host of useful bells and whistles depending on the platform you're using it on.

The only important feature I'd like to see in the future is more robust obfuscation technology capable of defeating VPN blocks in places such as China, Egypt, and Iran.

But for the vast majority of users who don’t need this, CyberGhost VPN is a highly professional service that provides everything you could wish for at a staggeringly low price point!