X-VPN Review: Features, Security and 2026 Value Assessed

X-VPN is a virtual private network (VPN) — a service that routes your internet traffic through an encrypted tunnel to a remote server, hiding your real IP address and scrambling your data from anyone on the network between you and that server. It markets itself as a beginner-friendly app with a generous free tier and apps on every major platform. This review looks at what X-VPN actually offers in 2026: its encryption and protocols, the ownership questions that have followed it for years, its first independent no-logs audit, real-world speed and streaming behaviour, and how the free and paid versions differ. The aim is a factual assessment, not a sales pitch, so you can judge whether it fits your needs.

What X-VPN Is

X-VPN is a consumer VPN first launched in 2017. Like any VPN, it has two core jobs: encrypt your connection so that your internet provider, a public Wi-Fi operator or a snooper on the same network cannot read what you are doing, and swap your visible IP address for one belonging to a VPN server, which changes your apparent location. If you are new to the concept, our plain-English explainer on what a VPN is and how it works covers the fundamentals before you dig into any single product.

X-VPN sits at the mass-market, easy-to-use end of the category. The apps are deliberately simple — one large connect button, a server list and a handful of toggles — and there is a no-signup free tier, which is unusual. That simplicity is also its trade-off: historically it hid technical detail (including its protocol names) behind marketing labels, and some advanced controls that privacy enthusiasts expect arrive only on paid plans or only on certain operating systems. For a New Zealand-specific setup walkthrough and local pricing in NZD, see our companion X-VPN in New Zealand guide; this article focuses on evaluating the service itself.

Security and Encryption

X-VPN advertises AES-256 encryption, the same 256-bit Advanced Encryption Standard cipher used by banks and governments and widely regarded as unbreakable with today’s computing. On its WireGuard connections the data cipher is ChaCha20 rather than AES, which is normal for that protocol and equally strong. The company has also begun adding post-quantum cryptography — encryption designed to resist future quantum computers — but only on its TLS-based protocol variants, not on WireGuard.

Protocols

X-VPN’s headline connection method is a self-developed, closed-source protocol it calls “Everest.” Because the code is not public, independent researchers cannot inspect how it works or verify the encryption claims the way they can with open standards. Encouragingly, X-VPN now also supports two trusted open-source protocols: OpenVPN and WireGuard. WireGuard is the newer and faster of the two, while OpenVPN is the long-established, heavily audited workhorse. If you want to understand why that distinction matters, our breakdown of WireGuard versus OpenVPN explains the speed and security differences. For most users, choosing WireGuard or OpenVPN in the settings is the more transparent option.

Kill switch and leak protection

A kill switch cuts your internet if the VPN connection drops, so your real IP address is never exposed during a reconnect. X-VPN includes one on both the free and paid tiers, and independent testers found no DNS or WebRTC leaks on Windows and mobile. However, at least one reviewer recorded the macOS kill switch leaking data during a forced-disconnect stress test, so Mac users in particular should verify it themselves. The simplest check is to connect, then confirm your visible address has changed using a tool such as our IP and leak checker, and repeat the test after deliberately dropping the connection.

Privacy, Logging and the 2026 Audit

A VPN only improves your privacy if you can trust the company behind it, because that company can see your traffic as it enters and leaves the tunnel. Two questions matter here: who runs X-VPN, and whether its no-logging promise has been checked by an outsider.

Ownership and jurisdiction

This has long been X-VPN’s most debated point. The service was historically associated with Free Connected Ltd and a Hong Kong base, and reporting has repeatedly linked its directors and shareholders to mainland China (Sichuan province). In 2026 the company presents itself as being based in Singapore under new ownership, and says it sits outside the 14 Eyes intelligence-sharing alliance. Independent reviewers have been unable to confirm whether this is a genuine change of control or a corporate rebrand, and some note that Singapore is itself a signals-intelligence participant. The practical takeaway: the jurisdiction and ownership picture is opaque, and anyone with a serious threat model (journalists, activists) should weigh that carefully rather than rely on the marketing badges alone.

The no-logs audit

In a notable change from a few years ago, X-VPN completed an independent no-logs assessment on 28 February 2026, conducted under the ISAE 3000 (Revised) assurance standard. The published findings state that X-VPN does not track, collect or store data that could identify a user or reveal their activity — including user and destination IP addresses, browsing history, DNS queries, connection timestamps and the content downloaded. The company also says its 10,000-plus servers are diskless (RAM-only), meaning data is wiped on every restart, and it publishes transparency reports and a warrant canary.

These are real improvements, but they come with caveats worth understanding. An ISAE 3000 logging audit is a point-in-time snapshot of stated practices, not a continuous guarantee, and its scope was limited to the logging policy. X-VPN’s press material names only a “Big Four” firm (some reviews attribute the work to Deloitte Singapore), and privacy communities have criticised the lack of a clearly named, fully published report. The service has also never been tested by a real-world server seizure or court order. In short: audited is better than not audited, but it is not the same as proven under pressure.

Speed and Performance

Every VPN slows your connection to some degree, because your data travels further and must be encrypted and decrypted. The question is how much. Independent testing in 2026 found X-VPN acceptable but not class-leading. On nearby paid servers, download speed loss was roughly a third; on long-distance international servers, loss climbed to around two-thirds, which is steep. Latency (ping) also rose sharply on distant servers — from single-digit milliseconds unprotected to well over 100 ms — which makes faraway servers a poor choice for real-time online gaming or video calls.

For New Zealand users the physics are simple: the closest fast servers are in Australia, so an Australian server will usually give the best balance of speed and stability, while a US or European server will add noticeable lag. If you want to measure the impact on your own line, run a before-and-after test with a tool like an internet speed test — connect to a nearby server, test, then disconnect and test again to see the real overhead on your plan.

Servers and Streaming

X-VPN advertises more than 10,000 servers. The paid network spans a large number of countries (the vendor quotes figures from the 80s to 90s depending on the page), while the free tier is limited to roughly 14 countries. Paid apps offer city-level choice in a few places, such as multiple US cities, Australia, Canada and France.

On streaming, results are mixed and depend heavily on the server. Testers on paid plans successfully unblocked US Netflix (using a dedicated streaming server rather than a standard one), plus HBO Max, Hulu, Prime Video, BBC iPlayer and ITVX. Other services failed in testing, including Disney+ UK, UK Netflix, Sky Go and DAZN Canada. The free tier unblocked none of the major services. Streaming access is a cat-and-mouse game that changes constantly, so treat any unblocking claim as a snapshot, not a guarantee. If broad, reliable streaming access is your main goal, read our overview of the streaming services available in New Zealand and check each platform’s terms.

Free Version vs Premium

X-VPN’s free tier is a genuine draw, but it behaves differently across platforms, and the distinction catches people out:

• Desktop (Windows and macOS): free users get a small, one-off allowance of premium data — around 500 MB that does not refresh — after which you are pushed toward the free servers. You cannot manually pick a server location.
• Mobile (Android and iOS): the free version offers unlimited data on free servers, but it is ad-supported. Those ads are served through third-party ad networks that can share device telemetry, which somewhat undercuts the privacy pitch.
• No signup: the free tier does not require an account or payment details, which is convenient but also means there is little to tie your usage to the audited paid policy.

The paid plan removes data limits and ads, unlocks all servers, adds split tunnelling and obfuscation, and raises you to five simultaneous device connections. The free tier is best thought of as a casual, occasional tool or a way to try the app — not as a privacy solution you rely on daily.

Pricing and Plans

X-VPN’s paid pricing is competitive and follows the usual pattern where longer commitments cost far less per month. Prices below are in US dollars and billed up front for the whole term; New Zealand customers are charged the NZD equivalent at the card rate on the day. A 30-day money-back guarantee applies to card and PayPal payments, but gift-card and cryptocurrency payments are non-refundable.

As always with VPNs, note that the headline discounts apply to the first term; renewals can be charged at a higher rate, so check the renewal price before you commit. Paying for two years up front also means trusting the company with your money and data for a long stretch — a bigger commitment given the ownership questions above.

Features and Limitations

Beyond the basics, X-VPN’s paid apps now include split tunnelling (routing some apps through the VPN while others use your normal connection), a multi-tunnel option, an ad blocker and traffic obfuscation that disguises VPN use — useful on restrictive networks. There is a static IP option on mobile, but no true dedicated IP address, and no port forwarding for advanced torrenting setups. Router support exists but requires manual configuration rather than an official app, and there is no Smart DNS feature.

The main limitations to keep in mind are the closed-source core protocol, the uneven feature availability across operating systems (the macOS kill-switch issue being the clearest example), and the fact that the service is designed not to work inside mainland China. None of these are dealbreakers for a casual user, but power users who want full transparency and consistent advanced controls across every platform may find X-VPN frustrating.

How X-VPN Compares

It helps to see X-VPN against better-known names on the factors that matter most: independent auditing, protocol transparency, jurisdiction and the quality of the free tier. The table below sets out concrete differences rather than opinions.

If privacy transparency is your priority, audited providers with open protocols and clearer ownership — such as Proton VPN or the minimalist Mullvad — are worth comparing closely before you decide.

Who X-VPN Suits

X-VPN is a reasonable fit for the casual user who wants a simple app to encrypt public Wi-Fi, change their apparent location occasionally or try a VPN at no cost, and who values ease of use over deep technical control. The 2026 audit, the move to open protocols and the diskless server network make it a more credible choice than it once was.

It is a weaker fit for anyone with a high-stakes privacy need, for users who insist on fully open-source, independently verifiable software, for serious gamers or video callers who need low latency on distant servers, or for anyone uneasy about the unresolved ownership and jurisdiction questions. For those readers, a provider with a longer audit history, clearer corporate structure and consistent cross-platform features will be the safer call. Whichever way you lean, test the app during the 30-day money-back window and run your own leak and speed checks rather than taking any single claim — including this one — on trust.

Frequently Asked Questions

Is X-VPN safe to use?

For everyday use such as securing public Wi-Fi, X-VPN is reasonably safe: it uses strong AES-256 (or ChaCha20 on WireGuard) encryption, includes a kill switch, and completed an independent no-logs audit in February 2026. The caveats are its closed-source core protocol, unresolved questions about ownership and jurisdiction, and a reported macOS kill-switch leak. It is adequate for general privacy but not the strongest choice for high-risk users.

Is X-VPN really free, and what are the catches?

There is a genuine free tier with no signup. On desktop it gives only a small, non-refreshing data allowance before limiting you; on mobile it offers unlimited data but shows ads served through third-party networks that can collect device telemetry. The free version also cannot reliably unblock streaming services and does not let you choose a server on desktop.

Does X-VPN keep logs of my activity?

X-VPN states it keeps no logs that could identify you or reveal your browsing, and an ISAE 3000 (Revised) audit in 2026 supported that claim for its logging policy. However, that audit is a point-in-time snapshot limited to logging, the auditor is not fully named in public materials, and the company does collect your email address and some aggregated, anonymised usage data.

Where is X-VPN based?

X-VPN now presents itself as based in Singapore under new ownership, and says it is outside the 14 Eyes alliance. Historically it was linked to a Hong Kong company and to directors in mainland China, and independent reviewers have not been able to confirm whether the Singapore move is a true change of control. If jurisdiction is important to you, treat this as an open question.

How much does X-VPN cost?

The paid “Premium” plan is US$11.99 per month, US$47.99 for the first year (about US$3.99 a month) or US$69.99 for two years (about US$2.99 a month), billed up front. A 30-day money-back guarantee covers card and PayPal payments but not crypto or gift cards. New Zealand customers pay the NZD equivalent at the exchange rate on the billing date.