What X-VPN Is and Whether It Suits New Zealand Users
X-VPN is a consumer VPN service developed by Free Connected Limited, offering encrypted tunnelling across a large network of servers with a focus on ease of use and broad device support. For New Zealand users, it sits in a crowded mid-market — functional enough for everyday privacy and basic geo-unblocking, but with some jurisdiction and transparency concerns worth understanding before you commit. This guide covers how it works, how to set it up on common NZ hardware, what it costs in NZD terms, and how it compares to alternatives.
How X-VPN Works
At its core, X-VPN routes your internet traffic through an encrypted tunnel to one of its servers before it reaches the open internet. Your ISP — whether that’s Chorus-delivered fibre through Spark, One NZ, 2degrees, or a smaller provider like Voyager or Slingshot — sees only an encrypted connection to an X-VPN server. The destination website or service sees the IP address of that server, not your home IP.
X-VPN supports several tunnelling protocols, including its own proprietary protocol alongside OpenVPN, IKEv2, and WireGuard on select platforms. The proprietary protocol is designed for obfuscation — making VPN traffic look like ordinary HTTPS — which can be useful if you’re on a network that actively throttles or blocks VPN connections. On standard NZ residential fibre, obfuscation is rarely necessary, but it’s a useful fallback when travelling through countries with stricter filtering.
The service uses AES-256 encryption for the data channel, which is the current industry standard and considered computationally infeasible to brute-force with present hardware. DNS queries are handled through X-VPN’s own resolvers when connected, which prevents your ISP from logging the domains you visit — a meaningful privacy step given that DNS-level logging is common practice among NZ ISPs.
One technical caveat: X-VPN’s kill switch implementation varies by platform. On Windows and Android it functions as a network-level block that cuts traffic if the tunnel drops. On iOS, the kill switch is less reliable due to Apple’s API restrictions — a limitation shared by most VPN providers on that platform, not unique to X-VPN.
Recommended Setup for New Zealand Users
Getting X-VPN running on a typical NZ household setup is straightforward. The following steps apply to the Windows desktop client, which is the most fully featured version.
- Download the X-VPN client from the official x-vpn.com website. Avoid third-party APK or installer sources — repackaged VPN clients are a known malware vector.
- Create an account. The free tier requires an email address; the paid tier requires payment details. Use a dedicated email address rather than your primary one if privacy is a concern.
- On first launch, the app will default to automatic server selection. For NZ users, manually select the Australia (Sydney) server for the best latency. The physics here are fixed: the undersea cable distance between Auckland and Sydney produces a latency floor of roughly 28–35ms. NZ→US West Coast adds approximately 138–145ms minimum round-trip, so only use US servers when you specifically need a US IP address.
- Enable the kill switch under Settings before browsing. This ensures that if the VPN tunnel drops unexpectedly — which can happen during ISP route changes or server-side maintenance — your real IP is not exposed.
- If you’re on a Hyperfibre connection (Chorus’s 2Gbps or 4Gbps tiers), set the protocol to WireGuard where available. WireGuard’s leaner codebase handles high-throughput connections more efficiently than OpenVPN, and on a 900/500 Mbps or faster line you’re more likely to hit the VPN server’s CPU ceiling than your own connection’s bandwidth limit.
- Test for DNS and WebRTC leaks using a browser-based leak test (ipleak.net or browserleaks.com) immediately after connecting. Confirm that both your IP and DNS resolvers show the VPN server’s location, not your NZ ISP’s details.
For mobile users on Android, the setup mirrors the above. On iOS, note the kill switch limitation mentioned earlier — if you require guaranteed IP protection on iPhone, consider a provider with a dedicated iOS network extension implementation.
X-VPN does not currently offer a native router client or OpenWRT configuration guide, which means you cannot push all household devices through it at the network level without manual per-device setup. If whole-home VPN coverage is a priority — useful for smart TVs running TVNZ+ or Sky Sport Now — a provider with DD-WRT or Asus-WRT router support will serve you better.
NZ-Specific Considerations
Jurisdiction and Five Eyes
This is the most significant concern for privacy-conscious NZ users. X-VPN is operated by Free Connected Limited, a company incorporated in Hong Kong. Hong Kong’s legal status has shifted materially since 2020 — the National Security Law means Hong Kong-based companies can be compelled to hand over data under PRC authority, and the territory is no longer treated as a separate jurisdiction for intelligence purposes by most security researchers.
New Zealand is a Five Eyes member, alongside Australia, the US, the UK, and Canada. Five Eyes intelligence sharing means that data held by a company subject to a Five Eyes government’s jurisdiction can, in principle, be accessed and shared. Hong Kong’s current legal environment arguably creates a different but comparably serious risk. If your threat model involves protecting data from government-level surveillance, X-VPN’s jurisdiction is a genuine concern. For everyday use cases — hiding browsing from your ISP, securing public Wi-Fi, accessing geo-restricted content — the practical risk is lower.
X-VPN publishes a no-logs policy, but unlike providers such as ExpressVPN, NordVPN, or Mullvad, it has not undergone an independent third-party audit of that policy as of 2026. Unaudited no-logs claims should be treated with appropriate scepticism.
NZ ISP Compatibility
On Chorus UFB fibre delivered through Spark, One NZ, or 2degrees, X-VPN performs without ISP-level interference. None of the major NZ ISPs actively block VPN protocols on residential plans. Some business-grade plans with deep packet inspection may flag OpenVPN traffic, in which case switching to the obfuscated protocol resolves the issue.
Data caps are largely historical on NZ fibre plans — most residential UFB plans are now unlimited. If you’re on a capped rural wireless broadband plan (Starlink excluded, which is uncapped), VPN overhead adds approximately 5–15% to your data consumption depending on protocol and compression. WireGuard has the lowest overhead of the available options.
NZ Streaming Services
X-VPN’s ability to unblock NZ streaming services from overseas is inconsistent. TVNZ+ and ThreeNow use geo-blocking based on IP address; connecting to an X-VPN NZ server (where available) should restore access when you’re travelling. Neon and Sky Sport Now apply similar IP-based restrictions. In practice, streaming platform IP blocks are an ongoing arms race — any VPN’s ability to unblock a given service can change without notice as platforms update their IP blocklists.
For accessing international content from within NZ — US Netflix, BBC iPlayer, or similar — X-VPN has variable success. Dedicated streaming-optimised providers (ExpressVPN, NordVPN, Surfshark) maintain larger pools of residential and datacenter IPs specifically for this purpose and tend to have more consistent unblocking records. For a deeper assessment of X-VPN’s streaming performance, see our full X-VPN review.
Privacy Act 2020
New Zealand’s Privacy Act 2020 strengthened obligations around personal data collection and breach notification for organisations operating in NZ. A VPN provider serving NZ customers arguably falls within scope if it collects personal data about NZ residents. X-VPN’s privacy policy does collect some usage metadata (connection timestamps, bandwidth consumed) even on paid plans — this falls short of full no-logs and is worth reading carefully before subscribing.
X-VPN Pricing in NZD
X-VPN offers a free tier with a data cap and limited server selection, and a Premium tier with full access. Pricing is listed in USD on the X-VPN website; at current exchange rates (approximately NZD 1.65 per USD), the following NZD approximations apply. These will shift with the exchange rate.
| Plan | Billed as | USD/month | Approx NZD/month |
|---|---|---|---|
| Free | Free | $0 | $0 |
| Premium Monthly | Monthly | ~$11.99 | ~$19.80 |
| Premium Annual | Yearly | ~$3.99 | ~$6.60 |
| Premium 2-Year | Every 2 years | ~$2.99 | ~$4.95 |
The annual and two-year plans represent reasonable value relative to the NZ VPN market. For comparison, NordVPN’s two-year plan sits around NZD 5–6/month, ExpressVPN’s annual plan around NZD 10–11/month, and Mullvad charges a flat EUR 5/month (approximately NZD 9) with no long-term commitment required. X-VPN’s two-year pricing is competitive, but the jurisdiction and audit concerns above should factor into any long-term commitment decision.
How X-VPN Compares to Alternatives
| Provider | Jurisdiction | Audited no-logs | WireGuard | Router support | Approx NZD/mo (best plan) |
|---|---|---|---|---|---|
| X-VPN | Hong Kong | No | Partial | No | ~$4.95 |
| NordVPN | Panama | Yes (multiple) | Yes (NordLynx) | Yes | ~$5.50 |
| ExpressVPN | British Virgin Islands | Yes | Yes (Lightway) | Yes | ~$10.50 |
| Mullvad | Sweden | Yes | Yes | Yes | ~$9.00 |
| Surfshark | Netherlands | Yes | Yes | Yes | ~$3.50 |
| ProtonVPN | Switzerland | Yes | Yes | Yes | ~$6.50 |
The table above reflects the competitive landscape as of 2026. Sweden and Switzerland are outside Five Eyes, Nine Eyes, and Fourteen Eyes alliances, making Mullvad and ProtonVPN the strongest choices for users with serious privacy requirements. Panama and the Netherlands are outside Five Eyes, though both are subject to EU or bilateral data-sharing arrangements. The British Virgin Islands, while a UK territory, has its own legal framework that has historically protected ExpressVPN from compelled disclosure.
Performance Expectations for NZ Users
Methodology note: Performance figures below are based on known cable latency physics and typical VPN server overhead ranges, not a single point-in-time benchmark. To replicate these tests yourself, use Speedtest CLI or fast.com with and without the VPN active on a consistent connection.
On a 900/500 Mbps Hyperfibre line from Auckland with the server set to Sydney, you would typically expect throughput in the 400–700 Mbps download range using WireGuard, with latency adding 5–15ms above the baseline 28–35ms cable floor. OpenVPN on the same connection typically delivers 150–300 Mbps due to its single-threaded encryption overhead — adequate for streaming and general browsing, but you’ll notice the ceiling if you’re transferring large files or using multiple devices simultaneously.
Connecting to US West Coast servers (Los Angeles, San Francisco) introduces the unavoidable 138–145ms round-trip latency floor from Auckland. Real-world latency with VPN overhead typically lands in the 155–175ms range. This is imperceptible for streaming and web browsing but will affect latency-sensitive gaming. For NZ gamers, a VPN to US servers is generally counterproductive unless you’re specifically trying to access a US game server that isn’t otherwise reachable.
X-VPN’s server network is reported at over 8,000 servers across 60+ countries. The company does not publish a detailed breakdown of owned versus rented infrastructure, which makes it harder to assess whether those servers are physical or virtual (VPS-based). Virtual servers can be physically located in a different country than their assigned IP suggests — a meaningful concern if you’re relying on the VPN for jurisdiction-based privacy rather than just geo-unblocking.
Key takeaway: For NZ users on fast fibre, X-VPN’s WireGuard implementation on the Sydney server is the practical sweet spot — low latency, reasonable throughput, and sufficient for HD streaming and general privacy. The HK jurisdiction and lack of independent audit are the primary reasons to consider alternatives if your privacy requirements are serious.
FAQ
Is X-VPN legal to use in New Zealand?
Yes. Using a VPN is entirely legal in New Zealand. There are no provisions in the Telecommunications Act, the Privacy Act 2020, or any other NZ legislation that prohibit VPN use by individuals. The legality of what you do while connected to a VPN is a separate matter — a VPN does not grant immunity from NZ law.
Will X-VPN work with TVNZ+ and other NZ streaming services?
It can, but consistency varies. TVNZ+, ThreeNow, Neon, and Sky Sport Now all use IP-based geo-blocking. Connecting to an X-VPN NZ server when overseas should restore access in most cases. Whakaata Māori’s streaming platform applies similar restrictions. Streaming platforms regularly update their IP blocklists, so any VPN’s unblocking capability for a specific service can change without notice.
Does X-VPN keep logs of my activity?
X-VPN publishes a no-logs policy for browsing activity, but its privacy policy acknowledges collecting connection metadata including timestamps and aggregate bandwidth data. This is a partial-logs model rather than a true zero-logs model. Critically, this policy has not been independently audited by a third party as of 2026, so it cannot be verified in the same way as providers like Mullvad, NordVPN, or ProtonVPN.
How does X-VPN handle New Zealand’s Five Eyes membership?
X-VPN is incorporated in Hong Kong, not in a Five Eyes country. However, Hong Kong’s National Security Law has significantly changed the territory’s legal independence from mainland China since 2020. For NZ users concerned about Five Eyes intelligence sharing, a provider incorporated in Switzerland, Iceland, or Panama offers a cleaner jurisdictional separation. The practical risk for ordinary users is low, but the structural concern is real.
What’s the best X-VPN server for New Zealand users?
Sydney, Australia, is the recommended default for NZ users. The cable distance produces a latency floor of approximately 28–35ms, which is low enough that the VPN connection feels essentially local for streaming, browsing, and general use. Singapore is the next closest option at roughly 90–100ms. US servers should only be selected when you specifically need a US IP address, given the 138ms+ latency floor.
Can I use X-VPN on my router to cover all devices at home?
Not natively. X-VPN does not provide a router client or configuration files compatible with DD-WRT, OpenWRT, or Asus-WRT firmware as of 2026. You would need to set up each device individually. If whole-home VPN coverage is important — for smart TVs, gaming consoles, or IoT devices — providers like NordVPN, ExpressVPN, or Surfshark offer documented router setup guides and in some cases dedicated router firmware.
Is the free version of X-VPN worth using?
For occasional use — securing a public Wi-Fi connection at a café or airport, or a brief test of the service — the free tier is functional. It applies a data cap and restricts server selection, which limits its usefulness for regular streaming or privacy protection. For ongoing use, the annual paid plan at approximately NZD 6.60/month is more practical, though at that price point Mullvad and ProtonVPN offer stronger privacy credentials for a modest additional cost.
Bottom Line
X-VPN is a capable, easy-to-use VPN that will handle the everyday needs of most NZ users — ISP privacy, public Wi-Fi security, and basic geo-unblocking — without requiring technical knowledge to set up. Its competitive pricing, particularly on the two-year plan at around NZD 4.95/month, makes it accessible. The problems are structural rather than functional: Hong Kong jurisdiction in the post-NSL era, no independent audit of its no-logs claims, no router support, and an inconsistent kill switch on iOS. For users whose primary concern is convenience and cost, X-VPN is a reasonable choice. For anyone with a serious privacy requirement — journalists, activists, or users who simply want the strongest available protections — the same budget spent on Mullvad, ProtonVPN, or NordVPN buys meaningfully better jurisdictional and transparency credentials. Wherever you land on that spectrum, run a DNS and WebRTC leak test after connecting, enable the kill switch, and default to the Sydney server for everyday NZ use.


