Alternative VPN Choices for You
5 year Plan
$1.33 per month
24 month Plan
$2.25 per month
12 month Plan
$3.33 per month
All Ivacy customers have access to all basic features this provider has to offer. As is common, however, heavy discounts are available to those willing to buy lengthy subscriptions up-front.
The dedicated IP addresses and a NAT firewall with port forwarding features require purchasing additional add-ons. This could be viewed as slightly annoying, but year+ packages are very cheap in the first place, and these are not features most users will likely use.
A 7-day money back guarantee is available for one-month subscriptions, and a 30-day money back guarantee for all longer ones. An exception is if you pay in cryptocurrencies, which are understandably not refundable.
Supported Payment Platforms
Ivacy accepts payment via a wide range of services. PayPal and all major credit/debit cards are, of course, accepted, as is payment via Alipay and Perfect money. A big selection of international and non-standard payment methods also accepted via the Paymentwall payment processor.
You can also potentially pay anonymously for an Ivacy subscription using Bitcoin via the BitPay payment processor, or using cryptocurrencies such as Dash via CoinPayments. As always, remember that even if you pay for a VPN anonymously, the VPN provider will know your real IP address.
Netflix and iPlayer Unblocking
We are impressed to note that Ivacy is effective at unblocking our benchmark US Netflix and BBC iPlayer streaming services. And although not tested, it should also be effective at unblocking many others.
It should also be noted that if any services proves particularity difficult to access, paying a little extra for a dedicated IP address should fix the problem.
Please also check out our Best VPNs for Netflix and Best VPNs for BBC iPlayer articles if accessing these services is important to you.
Speed and Performance
|BestVPN.com SpeedTest (max/burst)
|BestVPN.com SpeedTest (average)
|IPv4 leak detected?
|WebRTC leak detected?
Ivacy has been top of our speed testing tables for the best part of 3-months showing they can consistently out perform some of the biggest names in the industry. This is a very encouraging sign of this provider's quality and intent in the VPN market looking ahead.
With a Weighted Speedtest Result of 81.08 Mbits/s and Max Speed/Burst Result of 258.28 Mbits/s, Ivacy is currently the fastest VPN service on our books making it ideal for streaming in HD.
Drilling into our data more deeply, Ivacy’s DNS lookup times Average 0.61 seconds and Max 1.95, while connection times Average 5.2 seconds and Max 6.0 seconds. All of which is about average for VPN services.
IP leak tests
We ran DNS and WebRTC leak tests using Ivacy’s Windows and macOS clients (we would love to also test for leaks in mobile apps, but for various technical reasons this is not possible at the present time).
Ivacy told us that to ensure IP addresses are not leaked via the WebRTC browser “feature,” users should use its Chrome or Firefox browser add-on in addition to its client software.
We would normally criticize Ivacy for not warning users more clearly about this, but in our tests we detected no leaks anyway. This includes any regular IPv4 and IPv6 DNS leaks, but also WebRTC (tested with IPv6) leaks even when not using a browser add-on.
For more information about the danger posed by IP leaks, please check out A Complete Guide to IP Leaks.
|Bare metal or virtual servers
Ivacy allows users to connect up to five devices at once using the same account. Although fast becoming the industry standard, we still consider this a generous allowance that will allow most people to connect all their VPN-capable devices at all times.
This provider also offers +1000 servers in +100 locations in +50 countries around the world. This includes locations in areas often neglected by VPN companies, such as South and Central America and Africa.
These servers are a mix of bare metal and much less secure software-based VPS instances on shared servers, but unlike many VPN services, Ivacy was happy to provide a list of which ones are which. This makes it easy to choose to use only bare metal servers if privacy is a high priority for you.
P2P torrenting is not only permitted, but Ivacy offers optimized P2P servers which it says provide the best seeds for filesharing.
This feature allows you to choose which programs and apps use the VPN tunnel, and to exclude the rest. Split tunneling is very useful if you only need the VPN for certain reasons.
You can, for example, route all Chrome traffic through the VPN in order to access Netflix and torrent sites, while using Firefox without the VPN for your daily internet needs. This is a great feature, so it’s a bit of a shame that it’s only currently available to Windows and Android users.
Dedicated IP addresses
Ivacy can provide subscribers with dedicated static IP addresses. These are particularly useful for accessing streaming services which block IPs known to belong to VPN services, as it is unlikely the dedicated IPs will be blacklisted. They are also less likely to trigger irritating captchas on websites.
Users must, however, pay an additional $1.99 per month for this add-on feature. It is also worth noting that using a dedicated IP is not as private as using a shared IP, as it very easy to trace that IP back to its sole user. But can you use the dedicated IP only when you want to, and connect to shared servers when you want more privacy.
This unusual feature automatically scans all downloads with “advanced server level virus and malware protection.” We have no idea how effective this is at catching viruses, and would certainly not advocate using it to replace your regular anti-malware protection. That said, an additional layer of malware protection can only be a good thing in our book.
NAT firewall and port forwarding
Many VPN services offer a NAT firewall as standard, although this can be a mixed blessing. A VPN NAT firewall runs on the VPN servers and aims to protect users from hackers by preventing unsolicited new connections (once a connection is established incoming connections are permitted, though).
The problem is that this slows down P2P torrenting because it removes the sharing aspect from filesharing. It also makes games and media servers, plus LAN resources such as printers and hard drives, inaccessible from behind a VPN connection.
The solution to this is port forwarding, which allows you to open a door (“port”) through the firewall in order to allow incoming connections to be initiated. Please see What is a NAT Firewall? and our VPN Port Forwarding Guide for more information on this subject.
Ivacy offers a NAT firewall with port forwarding as an add-on feature for an additional $1 per month. Note that port forwarding is redundant without a NAT firewall, as it simply is not needed.
Is the lack of a NAT firewall with regular packages something to be concerned about? In our experience probably not, although the threat is hard to quantify. On the other hand, providing a NAT firewall but no port forwarding solution (as many other providers do) can be very frustrating for torrenters and those who need to access resources located behind the VPN connection…
Ease of use
To sign-up, just provide payment details, a valid email address, and a password of your choosing. A confirmation email will soon appear in your Inbox which provides links to everything you’ll need to get started.
The Windows Client
The first thing to strike us was that the Ivacy client is visually attractive, with a cleanly laid-out user interface. It is also very easy to use – just hit the big “on” button, fill in your account details (first time only) and you are good to go.
By default, the client automatically finds the best server for you. You can, of course, choose a country or city if you wish to connect to somewhere specific.
The client uses the IKEv2 VPN protocol by default to secure connections. This is a fast protocol and is considered highly secure, although it has not been battle-tested in the way that OpenVPN has. You can opt to use OpenVPN (UDP or TCP) instead ( and “IPSec”, but why would you want to?). Please see VPN Encryption: The Complete Guide for information on VPN protocols.
The client includes a kill switch, which must be enabled in Settings. This worked well when we simulated an internet drop-out – using Wireshark we could see that at no point was our real IP address exposed when the internet connection was enabled and the VPN client reconnected.
We also force-closed the client and all associated processes to simulate a software crash. Our real IP address remained hidden, which tells us that the Ivacy client modifies the system (Windows Defender) firewall rules to implement the kill switch. This is our favored approach as it means even if the client crashes, your IP address will not become exposed.
The Mac client looks and functions almost identically to the Windows client, except that split tunneling and dedicated IPs are not available. Dedicated IPs can be set up manually using the macOS system network settings, though.
It also uses the “IPsec” VPN protocol, although as I discuss in Protocols and Encryption section below, it is not entirely clear what this means.
There is no kill switch option, but a quick test showed that a system firewall kill switch is automatically baked into the client.
The OpenVPN (UDP and TCP) Android app is surprisingly fully-featured, with a kill switch and split tunneling present and correct.
The app also offers a Multi-Port feature that Ivacy says automatically scan for open ports to quickly connect to, in order to provide best port connectivity. We don’t know any easy way to test this feature, but are happy to take Ivacy’s word on it.
Ivacy also offers an iOS app, which we did not look at. It uses IKEv2 and has Ivacy’s secure download feature. It has no kill switch, but no iOS VPN app we know of does thanks to Apple’s strict developer guidelines.
We are slightly surprised (and concerned) that Linux support comes primarily in the form of a guide on how to setup a PPTP in Ubuntu connection using Network Manager. A PPTP and SSTP guide is also available for Mint, but the focus on PPTP is perplexing since PPTP is a highly insecure protocol.
Fortunately, Ivacy makes regular OpenVPN setup files available so you can configure OpenVPN manually using our own How to install a VPN in Linux guide.
The Ivacy website also provides setup guides for Kodi (OpenVPN), BlackBerry (IKEv2) and consoles (via sharing a VPN connection). There is also a PPTP setup guide for DD-WRT routers.
In addition to actual platform support, Ivacy offers browser add-ons for Chrome and Firefox.
These provide an HTTPS-encrypted SOCKS5 proxy connection for the browser only. HTTPS should keep these connections secure, but Ivacy markets the add-ons as for steaming only. And in this regard they work very well, successfully unblocking both US Netflix and BBC iPlayer.
The browser add-ons also provide WebRTC leak protection. Although we didn’t actually detect any WebRTC leaks without the browser add-on installed, it is probably a good idea to use one anyway.
|Live chat support
Support is available 24/7 via Live Chat and email. Live chat response time is instant and friendly, and we found the quality of responses to be generally great. Email response time varied from very quick to a few hours and, again, was good.
There is also a help database with an FAQ and many useful articles, although it is a long way from being comprehensive. Many articles also seem to relate to outdated versions of Ivacy’s software.
Protocols and Encryption
The Windows client uses IKEv2 by default, but also supports OpenVPN and “IPsec.” The Mac client uses “IPsec,” the Android client uses OpenVPN, and the iOS client uses IKEv2.
What “IPsec” actually means here is something of a mystery. IPsec is an authentication suite that must be used in conjunction with a tunneling protocol to provide a secure VPN connection. For commercial services this tunneling protocol is almost always either L2TP or IKEv2, and where the term is used on its own, almost always refers to L2TP/IPsec.
Ivacy’s support, however, insisted quite strongly that IPsec is used on its own. We assume this is a mistake on the support staffs’ part, and that IPsec means L2TP/IPsec. If it is indeed the case, then Mac users should be aware that although considered generally secure, L2TP/IPsec is widely understood to have been cracked by the NSA.
As always, we look in detail at the OpenVPN settings this provider uses. Not only is do they provide a good indicator of the care a service takes over encryption, it is the best way to compare like for like across VPN services. Ivacy uses the following OpenVPN settings:
Data channel: an AES-256-CBC cipher with HMAC SHA256 hash authentication
Control channel: AES-256-GCM cipher with DH-4096 handshake encryption and HMAC SHA256 hash authentication.
Ivacy stated to us on more than one occasion that it does not use perfect forward secrecy for OpenVPN, but this should be automatically provided by the Diffie-Hellman exchange used for handshake encryption (and, again, we will assume it is).
Using a Diffie-Hellman exchange on its own to secure the TLS handshake can be problematic thanks to its susceptibility to the logjam attack (a result of its re-use of a limited set of prime numbers). Using a large 4096-bit key size, however, effectively mitigates this issue.
Assuming that PFS is, in fact, used (which we believe it must be, despite what Ivacy told us), the OpenVPN settings are very strong.
Other security features
As already noted, all Ivacy’s apps (except the iOS one) have a kill switch, which on desktop platforms uses the system firewall settings to ensure it will stay in place even if the client cashes.
We also detected no IP leaks of any kind on any tested platform, although it is safest to use one of Ivacy’s browser extensions to ensure against WebRTC leaks. Most apps also feature “secure downloading” malware protection.
The only VPN obfuscation tech provided by Ivacy is the ability to switch OpenVPN connections to TCP (port 443) in apps which support OpenVPN (Windows and Android). This makes VPN traffic look like regular HTTPS traffic, and can be effective at evading VPN blocks. It will not work if more sophisticated deep packet inspection techniques are used, though.
The Ivacy website uses a number of third-party trackers. Ivacy told us that these include Google Analytics, but we did not detect this tracker in our tests.
We must say that Ivacy has impressed us. It is a secure and privacy-friendly VPN service that offers the kind of bells and whistles we expect from a top VPN provider. It unblocks a huge number of streaming services with apparent ease. And wow, it's fast! And we mean...FAST!
The 24/7 customer support was mainly excellent. It did wobble a little when we pushed it on highly technical questions, but Ivacy was also one of the very few providers who use a combination of bare metal and virtual servers where support was happy to provide a list of which servers are which. Which is great!
The per-month price is a little steep, but the one and two-year prices are an absolute steal! And with both a free trial and a 30-day money back guarantee, you can buy a longer subscription with confidence. We're excited to see what this provider continues to offer through 2019 and beyond!