How to Setup a VPN at Home – Do I Need a VPN at Home?

Do I need a VPN at home? The short answer is yes!

It’s common knowledge that a VPN is needed to protect yourself and your privacy on public hotspots, but you may not realize that it’s equally important to secure your home network as well. Today, we share the best tips on doing so, plus review the most secure VPNs for protecting every device, from computers to iPads, in your home.

When it comes to maximizing security, protecting personal information, and staying safe online, you really can’t be too careful. Everywhere you turn on the internet there are hackers and bots, data-hungry ISPs and mass surveillance programs launched by government agencies. It can seem like everyone’s trying to get at your data so they can profit from it. Fortunately, if you want to fight back there are several options at your disposal.

By far the easiest to use and most powerful way to protect yourself online is to use a virtual private network. VPNs encrypt traffic that leaves your computers or smartphones, wrapping everything in complex cryptography that keeps prying eyes at bay. By running a VPN your information suddenly becomes unreadable to third parties, allowing you to surf, stream, and shop in peace.

VPNs themselves come in a wide variety of flavors. You can sign up for a service, you can build your own from scratch, you can even deploy middle-measures that give VPN-like functionality without having to spend hours editing configuration files. No matter which method you use, the important thing is your VPN is secure. Today’s guide explains how to set up a private home VPN yourself. Follow the tips below to learn several different ways to make your own VPN for home so you can take back your online privacy and security.

Fast and easy method – Use a VPN service at home

Building your own VPN for your home can be a pain. You’ll need to have access to an external VPS, be comfortable with the command line, and have an hour or two free to sit down and troubleshoot the entire process. If you aren’t interested in something that complex, there are a number of strong, reliable VPN services to use at home that are as affordable as they are easy to use.

Over the years we’ve developed a good sense of what makes one VPN better than another. It’s a unique blend of speed, encryption and security strength, privacy awareness, and even public reputation. The criteria we used to choose our recommended VPNs is listed below. Keep these at the front of your mind when choosing your own home VPN and you’re guaranteed to end up with a great service.

• Zero-logging policy – Online Data that travels through a VPN’s servers can leave a trail behind. Even if it’s encrypted, it’s possible a government agency or third party could force the VPN to turn over the information. To ensure this never happens, a good VPN service will have a strict zero-traffic logging policy at the minimum.
• Speed – Encryption can make a VPN slow. Worldwide server locations can also introduce a fair amount of lag. To make sure your internet doesn’t crawl to a stop, our recommended VPN services deliver the fastest speeds in the business, plain and simple.
• Software support – In order to take advantage of using a VPN, you need to run custom software on all of your connected devices and computers. If the VPN doesn’t have an app for your phone, for example, you won’t be able to use it. Our choices below have software for all modern devices, including, at the very least, Windows, Mac, Linux, Android, and iOS.
• Bandwidth and traffic – Some VPNs, especially the sketchy free VPNs, will limit your online bandwidth, throttle your connection, or even block things like P2P networks and torrent downloads. You want unlimited and unrestricted access to the internet, and your VPN should support that.
• Server network size – One of the biggest benefits of using a VPN service is gaining access to servers located around the world. The bigger the network, the more options for virtual IP addresses at your disposal. Choice is never a bad thing!

Review of Best Recommended VPNs ready to protect your home out of the box

If you’d rather save time and skip the hassle of going full DIY on securing your home network but still want the benefits, we recommend these VPNs as turnkey solutions to your home cybersecurity needs:

1. NordVPN

NordVPN has set the standard by which all VPNs are judged, which has spurred on massive innovation across the industry by other providers just trying to keep up. It’s not an exaggeration to say NordVPN’s network is the most robust privacy tool on the market, with 5,500+ nodes in 59 countries around the world. It unblocks Netflix and VoIP calling, secures online banking, and dodges ISP surveillance without slowing down your connection speeds.

Part of this is to do with the excellent 256-bit AES encryption, which is nigh-unbreakable yet doesn’t bog down your connection with unnecessary overhead. Moreover, there’s an array of specialty servers which further boost performance for specific tasks like P2P filesharing, exploring the Tor network, multi-hop routing, obfuscation, and more.

Having been around for years, NordVPN has undergone extensive scrutiny; but it and its outstanding logging policy have emerged as a trustworthy privacy solution every time. It installs easily onto routers for protecting your whole home network, but is also available on all your devices.

Read our full NordVPN review.

2. Surfshark

On the opposite end of the spectrum, we have a young provider launched in 2019, with a snappy, lightweight interface: Surfshark. However, it already stands tall among the giants of the VPN industry, with the most advanced encryption (256-AES-GCM) and tunneling protocols (OpenVPN, IKEv2/IPSec, WireGuard) allowing for high security and minimal latency.

Moreover, it breaks industry norms by offering unlimited simultaneous connections. While Surfshark installs easily onto a router, you can also protect your whole family’s mobile devices with a single subscription.

And with a modest-but-growing network of 800+ servers in 50 countries, it’s dead simply to spoof a virtual IP and access a world of geoblocked content. No matter what you use Surfshark for, rest easier knowing they never keep tabs as per their independently audited no-logging policy.

Read our full Surfshark review.

3. ExpressVPN

ExpressVPN is one of the fastest and easiest to use VPNs around. The service offers incredible custom software for a wide variety of devices, including Windows, Mac, Linux, iOS, and Android operating systems.

These are powered by a network of over 3,000 servers in 94 different countries, each delivering incredible speed test results to users around the world. This is backed by ExpressVPN’s zero-traffic logging policy, ensuring your online activities remain anonymous and private no matter what.

ExpressVPN also features strong 256-bit AES encryption, an automatic kill switch, and DNS leak protection, plus a built-in speed test to ensure you’re always getting the fastest connection possible. If that weren’t enough, ExpressVPN is one of the few VPNs still capable of dodging Netflix’s VPN ban for reliable worldwide access to the internet. Finally, enjoy your encrypted connection without limits on bandwidth or traffic types.

Read our full ExpressVPN review.

4. IPVanish

Speed and security are two of IPVanish‘s strongest features. The service offers incredible 256-bit AES encryption on all transfers, with zero traffic logs to keep that activity perfectly safe. DNS leak protection and an automatic kill switch ensure your identity is never revealed to the internet at large. You’ll get to take advantage of these features while accessing over 1,300 servers in 60 different countries, all of which are lightning fast and incredibly reliable.

IPVanish also includes the following features:

• Easy-to-use custom software and apps for all major operating systems and devices.
• Fast and secure servers allow for incredible video streams through Kodi.
• Download torrents with full privacy and anonymity, every time.

Read our full IPVanish review.

Low-Power but Customizable: Raspberry Pi VPN

PiVPN makes it extremely easy to set up and run your own VPN from a Raspberry Pi. In fact, all you really have to do — from the comfort of your own home — is type one command into the terminal and run it, then you’re technically good to go! Of course, you’ll want to configure things once you get the install in place, then there’s customization and all of that. Still, the Raspberry Pi device is extraordinarily inexpensive (around 35 USD) and can make a capable self-hosted VPN.

To start, either SSH into your Pi or run this command directly from the Pi’s terminal:

$ curl -L https://install.pivpn.io | bash

This will run the PiVPN automated installer, which takes care of most of the technical stuff for you, including cipher key generation. A series of screens will appear, each with a bit of text for you to read or a quick option you need to toggle. Most of it is relative to your network setup, including choosing Wi-Fi over Ethernet and confirming your IP address. The defaults for most of the prompts are perfect for most users, but if you want more detail about each one, see this step-by-step guide.

After the PiVPN installation completes you can pat yourself on the back, as you now have your very own Raspberry Pi VPN powered by OpenVPN! All you need to do now is configure your devices and computers to access the VPN. Start by accessing your Pi and running the following terminal command:

$ pivpn add

You’ll be asked for a name after running this command. Enter something straightforward like client1. This will generate an .ovpn file that you’ll use to tell other devices how to connect to your VPN. First, you’ll need to get a copy of it to your PC, tablet, smartphone, etc. The fastest way to do this is to use an FTP program and copy the file from the following directory:

/home/pi/ovpns

Now all you have to do is install OpenVPN on your selected devices, copy the client1.ovpn file to the same device, add the profile, and you’re online! If you’re not sure how to do this, follow the sections below to get things set up at home.

Windows:

• Download OpenVPN and install it.
• Copy client1.ovpn to OpenVPN’s installation directory and put it in the “config” directory.
• Right click on the OpenVPN desktop shortcut and go to “Properties”.
• Click “Compatibility” then “Change settings for all users”.
• In the next window, check “Run this program as administrator”.
• Launch OpenVPN as an administrator. If it pops up warning messages, accept them.

Mac:

• Download and install Tunnelblick, the free and open-source OpenVPN client for Mac.
• When the installation asks if you have any configuration files, simply say “No”.
• Afterwards, open a finder window and double click “client1.ovpn”.
• Launch Tunnelblick.
• Click on the icon in the top corner of the screen and choose “Connect”.
• Select the “client1” connection.

Linux:

Install OpenVPN by using the following command prompt lines:

$ sudo apt-get update

$ sudo apt-get install openvpn

Now edit the configuration file you downloaded in the step above:

$ nano client1.ovpn

Uncomment the following three lines by removing the first character:

script-security 2

up /etc/openvpn/update-resolv-conf

down /etc/openvpn/update-resolv-conf

Save and close the file. You can now connect to your VPN by using the following command:

$ sudo openvpn --config client1.ovpn

Android:

• Install the OpenVPN client for Android.
• Transfer client1.ovpn to your device, either through a USB connection or via cloud storage.
• Run the OpenVPN app and tap the menu button in the top right.
• Choose “Import”, then navigate to the ovpn file’s location and import the file.
• Tap the “Connect” button from OpenVPN’s main menu.

iOS:

• Install OpenVPN for iOS.
• Connect your iOS device to a computer and copy the client1.ovpn file to OpenVPN through iTunes.
• Disconnect and launch OpenVPN. A notification will appear saying a new profile is available.
• Tap the green plus sign to import your settings.
• Slide the connect button to “on” to use your VPN.

Highly customizable method – Make your own external VPN

Commercial VPN services offer a ton of features, but the one thing they can’t deliver is complete customizability. Setting up your own VPN on an external server in your home gives you an incredible amount of control over every aspect of a virtual private network. Want stronger encryption and better security on the internet? Edit a config file and you’re set. Need to lock out all devices except your own? Not a problem!

The downside to running your own VPN at home is it takes some time to set up. You’ll need a virtual private server account, which is inexpensive but not free, and you’ll need to be comfortable editing config files and navigating from the command line. Troubleshooting can also be an issue, as even the simplest problems can stump experts and amateurs alike. Overcome this tech hurdle and you’ll find hosting your own VPN at home is extraordinarily useful and just as rewarding.

A quick outline on how to set up an external VPN is below. We also have a guide on how to host your own VPN if you want more detail or prefer using Ubuntu instead of CentOS on your server.

How to set up your own VPN:

1. Sign up for an account with Digital Ocean.
2. In the Digital Ocean dashboard, click “Create” to make a droplet.
3. Choose a hostname for your droplet. Anything will do, such as server or yournameVPN.
4. Choose a droplet size. The smallest package will do just fine.
5. Choose a server location, then select CentOS 7 as your distribution.
6. Create the droplet.
7. Follow Digital Ocean’s instructions to configure the OpenVPN server. Take your time, this is the longest and most complicated part of the procedure.

RELATED READING: How to test your VPN for security leaks

Fast and powerful – Shadowsocks (SOCKS5 Proxy)

Shadowsocks was designed to restore a free and open internet to users in heavily restricted countries such as China, Russia, and throughout the Middle East. Shadowsocks works by using the Socket Secure 5 protocol (SOCKS5), which simply transfers data packets between a host and a server through its own proxy server. There’s even a layer of authentication built into the SOCKS5 protocol that ensures third parties (ISPs, governments, hackers, etc.) can’t intercept your data.

Using a SOCKS5 proxy can be a great deal faster than other VPN methods, as there’s no encryption involved in the process. You’ll need access to a Shadowsocks server to make it work, which either requires running your own or renting an external service, which can cost five times as much as a VPN. It works extremely well for bypassing site blocks and retaining anonymity, however, and there’s easy-to-use software for desktop operating systems, Android, and iOS devices.

If you’re really concerned about privacy, security, and anonymity, you can also run Shadowsocks along with a VPN. A few VPN services offer SOCKS5 proxy support out of the box, but if you make your own VPN from scratch, you’ll be able to use Shadowsocks without any issues.

Slow but strong – SSH Tunnel

An older protocol that’s used for VPN-like functionality are Secure Shell tunnels, usually called SSH tunnels for short. This method wraps data in an additional layer of SSH encryption, which is practically unbreakable on its own. SSH is normally used to transfer files securely between a host and a remote server, but if you combine it with a VPN or simply use it for all of your online traffic, you’ll find it has an amazing ability to keep your data private, anonymous, and secure.

The biggest downside to SSH tunnels is speed. SSH wasn’t designed for large amounts of traffic, especially not HD videos or torrent files. If you’re downloading anything more complex than a website, you’re bound to get frustrated. The upside is it’s easy to make an SSH tunnel on Linux and Mac systems (Windows users will have to do some extra work), and you can pair it with a VPN for some of the most powerful data protection possible.

Difficult to use – SSL/TLS Tunnel

Although it’s not an ideal method to access the internet or to replace a VPN, it’s possible to use an SSL (Secure Socket Layer) tunnel to protect yourself online. This method essentially takes the standard HTTP protocol and wraps a bit of encryption around each packet of data. Websites that use HTTPS (the ones that show a little lock icon in your browser) deploy the same set of technologies, and it works just fine from your end, as well.

The advantage of using SSL encryption is the ability to break through even the most stringent of firewalls. If you’re heading to a country that’s known for its online censorship, such as China, Turkey, or Russia, SSL tunnels can help protect your identity without setting off any red flags. After all, SSL encrypted traffic is extremely common on the web, why would your requests stand out from the others?

The downside to SSL is that it’s a little slower than a good VPN, and it can be a hassle to install and manage. The best way to do it is to download the stunnel software and start the long configuration process. It’s not easy or quick, and you’ll need a fair amount of technical knowledge to pull it off. An alternative is to use a VPN service that offers SSL tunneling through their software. NordVPN is one of the best mainstream VPNs that delivers this feature.

READER EXCLUSIVE: Get a special discount of 75% for the 3-year plan, just $2.99 per month. 30-day money back guarantee included on all plans.

Close to a VPN but not quite – Web proxies and Tor

When researching VPNs, you’ll come across a lot of talk about web proxies and the Tor network. Both are great tools  and services to help you stay safe online, but neither is a good replacement for any of the VPNs or encryption methods listed above.

For one, web proxies don’t offer any added security or privacy. They simply take your raw traffic data and bounce it through a new set of servers, giving it a different IP address that lets you fool websites into thinking you’re in a different location. Web proxies are mainly used for accessing media and streaming videos from other countries. They’re often associated with sketchy providers who collect and sell user information, as well, which means you can avoid them and not miss out on anything useful.

The Tor network is a collection of nodes that function as a relay system for online traffic. By using something like the Tor Browser you can encrypt all of your browser traffic, then send it through the network to make it anonymous and untraceable. It’s a profound piece of technology that’s incredibly useful for anyone who needs to keep their location hidden. Unfortunately, the Tor network is extremely slow, and it doesn’t support services like online videos, Netflix, YouTube, or torrents. For a full rundown of Tor, check out our tips article How to Use Tor: A Guide to Getting Started.

External privacy and security threats a VPN should protect you from

What are VPNs good for? A wide variety of things! The encryption of VPNs and VPN-like protocols can change the way your data interacts with the web. Instead of sending open, easy-to-intercept, and easy-to-steal information across the internet, VPNs seal everything in an unbreakable encrypted envelope, preventing anyone except authorized parties from accessing and using the contents. That’s an incredibly useful feature, and it protects you from a host of online threats both large and small, including the ones listed below:

Internet service providers (ISPs)

You pay them money; they give you access to the internet. The relationship should be as simple as that, but far too many ISPs have turned to underhanded methods to exploit their users. Speeds are routinely throttled, for example, and a great number of ISPs log and even sell user information to third parties, all without anyone’s permission. Any VPN solution in your home you deploy should protect against these threats.

Mass surveillance

Governments engage in mass surveillance under the guise of protecting citizens from threats. Data leaks in recent years have shown many governments take the privilege too far, however, and are actively following innocent people, recording their activities, and sharing the information with other governments.

Hackers and bots

The classic image of a hacker stealing information from unsuspecting users isn’t too far from the truth. Both human hackers and automated bots can monitor connections and sniff out valuable data, things like bank account passwords and credit card numbers. Without the encryption power of a VPN, all they have to do is find the code and the info is as good as stolen.

Do You Need a VPN at Home? Our Conclusion

As you can see, there are many reasons NOT to sleep on your home cybersecurity, even if you live in a good neighborhood. Have you decided yet that you need a VPN for your home? We’ve recommended a few of the best ways to enhance the digital privacy of your home, either by using a VPN out of the box, creating your own, or employing numerous other methods and tech solutions which can be deployed independent of or alongside using your VPN services

Need help with home setup? Got any other suggestions for our readers? Leave a comment below!

Read Full Bio

Geoffrey Walters

Geoff is a content marketing consultant based in Berlin, Germany. He specialises in producing high-quality informational content in technical niches such as hardware and Internet privacy. Prior to moving into the content marketing space, Geoff studied languages at Cambridge University and was on the founding team of se

Latest from Author

How to Hide Your IP Address for Extra Privacy Best Kodi Add-ons for UK Football: Kodi Soccer Add-ons