Which VPN Protocols Do You Support?

VPN protocols are the technologies that allow you to browse the web, use apps, and connect to online services through an encrypted VPN connection. They can differ in speed, security, and reliability. 

Note: Older protocols, such as Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Tunneling Protocol (L2TP), are widely considered outdated and less secure. For that reason, we don’t offer them in any of our applications.

CyberGhost supports the following protocols:

• WireGuard®
• OpenVPN
• IKEv2

WireGuard®

WireGuard® is a newer VPN protocol designed for fast speeds, strong security, and efficient performance. 

One of WireGuard's main advantages is its streamlined codebase, which helps improve efficiency and makes independent security auditing easier. It uses less memory and fewer central processing unit (CPU) resources than some older protocols, which can help improve performance across different devices and operating systems.

WireGuard® supports both Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6). It uses crypto-key routing, which means each allowed VPN IP address is linked to a specific public key.

Availability: Windows, macOS, Android, iOS, Linux, and Android TV / Fire TV.

OpenVPN

OpenVPN is a reliable, stable, and secure VPN protocol with more than 20 years of open-source development behind it. It’s popular because it works well across many types of networks, including wireless access points, firewalls, Network Address Translation (NAT) routers, and HTTP proxy servers. It can also use different ports, which helps maintain a stable connection in different network environments.

OpenVPN supports strong encryption standards, including AES-256 encryption, and uses the OpenSSL library to help secure both the control channel and the data sent through the VPN connection.

Availability: Windows, Android, Linux, and Android TV / Fire TV.

IKEv2

Internet Key Exchange version 2 (IKEv2) is a fast and secure VPN protocol. It can deliver strong performance and low latency, particularly when connecting to nearby VPN servers.

IKEv2 is also well-suited to network changes. When a device switches between networks, such as from Wi‑Fi to mobile data, it can preserve the VPN session or re-establish it quickly with minimal interruption, making it a good fit for laptops and mobile devices.

IKEv2 was developed by security engineers from Cisco and Microsoft and is widely used for secure VPN connections.

Availability: Windows, macOS, and iOS.