NordVPN

OpenVPN GUI Review

Our summary

OpenVPN GUI now supports key features such as DNS and WebRTC leak protection and full IPv6 routing.

Highlights

  • Full DNS leak protection (both IPv4 and IPv6)
  • Full IPv6 routing
  • WebRTC protection
  • Open source
  • Always uses up-to-date OpenVPN

As fully discussed in VPN Encryption: The Complete Guide, OpenVPN is the go-to Virtual Private Network (VPN) protocol (at least for commercial VPN services). And rightly so. OpenVPN is community-supported, open source software that is primarily developed by OpenVPN Technologies, Inc.

PROS:
  • Full DNS leak protection (both IPv4 and IPv6)
  • Full IPv6 routing
  • WebRTC protection
  • Open source
  • Always uses up-to-date OpenVPN
CONS:
  • No kill switch
  • Slightly complicated setup

In addition to the OpenVPN protocol itself (backend), the community has developed a standalone open source graphical user interface (GUI) frontend – OpenVPN GUI.

Most VPN services these days offer custom OpenVPN clients. These always use the open source OpenVPN backend (the protocol itself), and are almost always based on a modified version of the open source OpenVPN GUI client. Sometimes this is heavily skinned (modified), sometimes only slightly so.

Price

As free and open source software (FOSS), OpenVPN GUI is free in every sense of the word. Do please be aware, however, that in order to use it you must either subscribe to a commercial VPN service or set up your own private OpenVPN server.

OpenVPN GUI, as such, is only available for Windows. Mac OS users can instead use open source Tunnelblick, while Android users have OpenVPN for Android by Arne Schwabe (also open source). A non-GUI open source OpenVPN client is available for Linux (sudo apt-get install openvpn).

OpenVPN GUI 2.4.3 Features

In the past, Open GUI was a very basic piece of software that was sorely lacking in features. It got you connected, and that was about it.

Recent versions of OpenVPN GUI, however, have improved dramatically in terms of important features. Version 2.4.3 now offers the following key features:

  • Full Domain Name System (DNS) leak protection – both Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6)
  • Full IPv6 routing
  • Web Real-Time Communication (WebRTC) leak protection

Simple edits to the OpenVPN configuration (.ovpn) file allow for a high level of customisation (if supported by your provider). This includes port selection, cipher, and cipher bit-length selection, and the choice of running OpenVPN over User Datagram Protocol (UDP) or Transmission Control Protocol (TCP).

This last allows you to run OpenVPN over TCP port 443, which is a great way to defeat censorship blocks (although horribly inefficient from a technical standpoint).

Pretty much every VPN service provides OpenVPN configuration files that can be used by OpenVPN GUI. This means that you always have the option to use OpenVPN GUI instead of a provider’s custom software (if it has any).

Check out 5 Best VPNs for OpenVPN! »

OpenVPN GUI Vs. Custom OpenVPN Clients

Custom OpenVPN clients offer two main advantages over OpenVPN GUI:

  1. They are slightly easier to set up, as you do not need to separately download and import OpenVPN configuration (.ovpn) files.
  2. They often provide additional features that are not available in OpenVPN GUI.

It should be noted, though, that OpenVPN 2.4.3 GUI now includes the most important features that were once only available via custom software – DNS and WebRTC leak protection. Indeed, OpenVPN GUI fully supports IPv6 routing, which is something that no custom client yet does (with the exception of Mullvad’s).

Arguably the most useful feature offered by custom clients, but not OpenVPN GUI, is a kill switch. Other more useful features include Secure Shell (SSH)/Secure Sockets Layer (SSL) tunnelling, obfsproxy support, and VPN over Tor. Easy port selection is also a handy (rather than having to manually edit rather intimidating OpenVPN config files).

Custom clients can also be much prettier and more user-friendly than OpenVPN GUI, whose interface can most charitably be described as functional.

Custom Client Update Issues

A big advantage of OpenVPN GUI over custom clients is that it always uses the most up-to-date (and therefore secure) version of OpenVPN. This cannot be said for all custom clients.

In addition to this, many custom clients are based on older versions of OpenVPN GUI. Unless added as part of the customization, this means that they may not support more recent OpenVPN GUI features such as DNS and WebRTC leak protection.

As providers update their custom clients to incorporate the new open source OpenVPN GUI code, we should see better support for these features (and full IPv6 routing) going forward.

Open Source

OpenVPN GUI is open source. With the notable of exceptions of AirVPN and Mullvad, most providers’ custom OpenVPN clients are closed source (despite being based on the open source OpenVPN code).

In general, I always recommend using open source software. Imperfect as it is, open source is the only guarantee possible that software does not contain any malicious code.

To be honest, though, I don’t consider this to be a major issue when it comes to VPN software. A VPN provider can always monitor what you get up to online when using its service anyway, so worrying about compromised software seems rather like shutting the barn door after the horse has bolted. Your own view may vary.

That said, I do believe in supporting open source software on principle.

How to Use OpenVPN GUI for Windows

  1. Download the Windows installer software and install.

As always with open source software, you should verify the download’s digital signature.

  1. Visit your VPN provider’s website and download its OpenVPN configuration files. Each .ovpn file usually relates to a single VPN server. It is often possible to either download individual .ovpn files or download them in bulk as a zip file (this depends on your provider).
  2. Move or unzip the downloaded .ovpn files to C:\Users\User\OpenVPN\config or C:\Program Files\OpenVPN\config.

Alternatively, for individual .ovpn files, you can right-click the icon in the Notification Bar -> Import file…

  1. To start the VPN, run OpenVPN GUI and right-click the icon in the Notification Bar -> Connect -> select server -> Connect. Or just select Connect if you have only imported a single .ovpn file.

  1. Some services provide personalised OpenVPN configuration files that include your username and password. If not, then you will need to enter your username and password.

Ta da! You are now connected to the OpenVPN server. If you want to check, visit ipleak.net, where you can also reassure yourself that you have no IP leaks.

The screen area of the OpenVPN GUI Notification Bar icon turns green to show that you are connected.

To disconnect from the VPN, right-click the icon in the Notification Bar -> Connect -> select server -> Connect.

The Settings window allows you to play around with some basic settings.

To change more advanced settings, however, you need to edit the .ovpn configuration file (Edit Config). It is best to consult your VPN provider about this.

Conclusion

I loved:

  • Lightweight
  • Free
  • Full DNS leak protection (both IPv4 and IPv6)
  • Full IPv6 routing
  • WebRTC leak protection
  • Open source
  • Always uses most up-to-date version of OpenVPN
  • Can be used with any VPN service that supports OpenVPN (almost all of them)

I wasn’t so sure about:

  • Setup involves a couple of extra steps
  • Looks quite basic (some custom clients are much prettier!)
  • No kill switch

I hated:

  • Nothing

OpenVPN GUI is a great little OpenVPN client. Some smaller and newer VPN services have yet to develop their own custom software and so use OpenVPN GUI instead. This absolutely fine – as I say, OpenVPN GUI is a decent OpenVPN client.

If your VPN service does offer a custom OpenVPN client, should you use it or opt for OpenVPN GUI? I would say that it depends whether the custom software offers features not found in OpenVPN GUI that you can’t live without, such as a kill switch.

All else being equal, though, OpenVPN GUI is a lean and mean VPN client that always uses the most up-to-date version of OpenVPN.

Check out 5 Best VPNs for OpenVPN! »

Your Information will never be shared with any third party.
Enter your email address to receive your Beginner's Guide to Online Security for Free
You'll also receive great privacy news and exclusive software deals!
Enter your email to get the ebook:
Your Information will never be shared with any third party.
Enter your email address to receive your Ultimate Online Privacy Guide eBook!
You'll also receive great privacy news and exclusive software deals!
Enter your email to get the eBook:
Special VPN Deal
SAVE 49% TODAY
WITH OUR
Exclusive Offer
Get a Special Deal - 72% OFF!
With a biannual subscription
Exclusive Offer for BestVPN.com Visitors!
50% Off Annual Plan
Limited Time Only
Exclusive price of
$3.25/mo
Exclusive Offer
SAVE 72% TODAY
LIMITED TIME OFFER
Get NordVPN for only
$3.29/month