VPN

Hello - we are a family with multiple apple devices and now different apple ID's - but with historic access to one Apple ID and hence one password / security key chain - so all our devices have a buffet of each other's passwords and data - its a mess that I don't even know how to begin to untangle; I wish there were a " divorce" app but I doubt there is. Between ourselves thats fine. It's the outside world thats a worry.


So, I have been looking up internet security - what is the current thinking on a VPN please ? Do I / the family need one for ordinary internet use eg shipping, social media, emails ?


If so, can the whole family/ household use one package - ideally the same one ?


Does Apple make them ?


Any discussion to help around this subject wold be welcome - thanks in advance.

Posted on Aug 30, 2019 8:30 AM

Reply
Question marked as Top-ranking reply

Posted on Aug 30, 2019 8:45 AM

Let's start with Apple does not "make one." At least, not if you are talking about VPNs. Based on your comments, it looks like you are looking to provide additional security when browsing the Internet, up and above, just accessing secure web sites (those that use HTTPS in their URLs) for everyday use ... not just for banking or other PIA sites. Is this correct?


If so, you would be looking for a "user-to-server" type VPN. These are also known as SSL VPNs. These work by providing a secure "tunnel" over your Internet connection between your computer and the VPN service provider's server. This server will act as a sort of proxy to "hide" your external IP address ... at least, in theory. Any traffic going across the tunnel will be encrypted.


If this is really what you want, then my first recommendation when considering which VPN provider you will want to go with, is avoid "free" VPNs. Why? Because, they have to make money some how, and typically, they do so by selling your browsing habits to other third-parties ... even if they can't provide the actual content.


Here are a few articles that you may find helpful:


Ok, now that I probably "scared you off" from getting a VPN, I do use them myself. FWIW, I ended up getting my VPN service from Private Internet Access (PIA). They are not free, but not expensive. They do not track your usage and provide VPN clients for Mac, PCs, iOS, & Android devices. They also provide a "family plan" so that family members can install and use their own copy of the client on their devices. Just to let you know, I do not work for PIA. I'm just a customer and have been using their service for about 3 years now without any issues.

13 replies
Question marked as Top-ranking reply

Aug 30, 2019 8:45 AM in response to KateEU

Let's start with Apple does not "make one." At least, not if you are talking about VPNs. Based on your comments, it looks like you are looking to provide additional security when browsing the Internet, up and above, just accessing secure web sites (those that use HTTPS in their URLs) for everyday use ... not just for banking or other PIA sites. Is this correct?


If so, you would be looking for a "user-to-server" type VPN. These are also known as SSL VPNs. These work by providing a secure "tunnel" over your Internet connection between your computer and the VPN service provider's server. This server will act as a sort of proxy to "hide" your external IP address ... at least, in theory. Any traffic going across the tunnel will be encrypted.


If this is really what you want, then my first recommendation when considering which VPN provider you will want to go with, is avoid "free" VPNs. Why? Because, they have to make money some how, and typically, they do so by selling your browsing habits to other third-parties ... even if they can't provide the actual content.


Here are a few articles that you may find helpful:


Ok, now that I probably "scared you off" from getting a VPN, I do use them myself. FWIW, I ended up getting my VPN service from Private Internet Access (PIA). They are not free, but not expensive. They do not track your usage and provide VPN clients for Mac, PCs, iOS, & Android devices. They also provide a "family plan" so that family members can install and use their own copy of the client on their devices. Just to let you know, I do not work for PIA. I'm just a customer and have been using their service for about 3 years now without any issues.

Aug 30, 2019 7:44 PM in response to KateEU

You’re already routinely using a VPN. It’s called SSL/TLS, and it’s part of Safari and HTTPS access among its other uses on macOS. SSL/TLS secures a specific connection from your web browser or your SSL/TLS protected mail server connection or similar, to the associated server.


As for the usual sorts of VPN services folks see advertised, those are quite effective at getting all your traffic scanned by the VPN provider. If that traffic is not protected by SSL/TLS. I’d certainly expect and assume that at least some of these VPN provider services are scanning and logging parts of your traffic, too.


I run VPN servers for connections into the internal networks of organizations. Not for general use.


If you really want a VPN server—and I’d concentrate on configuring and using SSL/TLS everywhere, on secure passwords, password managers, on in-depth backups for all systems, on data encryption, and these among other tasks and all well before even considering setting up a VPN—then have a look at Streisand.


Related reading:

https://gist.github.com/joepie91/5a9909939e6ce7d09e29

https://vpnpro.com/wp-content/uploads/Infographic-VPNpro-97-VPN-products-run-by-just-23-companies.pdf



Aug 30, 2019 8:37 AM in response to KateEU

A VPN is of no value to you unless you are connected to a private network at both ends of the tunnel. There are many VPN offerings out their but their primary purpose is to bypass Government and organizational restrictions by making it look like your Internet traffic is originating from some other location. If you were to use a VPN for normal Internet usage your data will at some point be channeled to the Internet from the VPN thereby making your data no more secure than if you didn't use a VPN at all. In fact the VPN provider now has access to your data thereby making it even less secure.


Instead of using a VPN use https/sftp, etc. in your browser or however accessing the Internet when accessing sites. This encrypts your data so that even if your data is accessed it is of no value to whoever accessed it.

Aug 30, 2019 9:41 AM in response to KateEU

BobTheFisherman is correct in the only "secure" VPN would be a site-to-site VPN ... but I do believe there is a valid reason to use one, regardless.


With that said, the other reason I have used a VPN, is when I'm at a remote location and I want to connect back to my local network to access my data, for example. I then know the connection between my remote device and my file server is secure, whether I'm at a coffee shop or hotel or wherever. In this case, my home router can perform as a VPN server to allow me to connect to it from my notebook.

Aug 30, 2019 8:55 AM in response to Tesserax

Dear all - I only looked at this idea briefly as each site I found discussing VPNs said they were vital now. It seems there are many views -


I just wanted a way for the household to " keep its head down" out there.


I am grateful for your contributions.


Oddly - I was intent on only getting a VPN my own country, as I suppose there is a comfort in that, so one reason for getting one has gone from the list already. Is there any other purpose ?


Any advice on security is gratefully received.

Aug 30, 2019 8:36 AM in response to KateEU

Hello!


A VPN is good idea if you a are concerned with privacy as it comes to your internet security.


You can check out the following link for a video giving a brief explanation of VPNs:


VPNs or Virtual Private Networks as Fast As Possible: https://www.youtube.com/watch?v=DhYeqgufYss


Below Are some links to various VPNs:


https://www.hotspotshield.com/


https://nordvpn.com/


https://www.privateinternetaccess.com/


Let me know if this information helps!

Aug 30, 2019 7:14 PM in response to Tesserax

A VPN is not required to secure your Internet traffic. Corporations use VPNs to allow their remote users to connect directly to the corporation's network which is running the VPN server at their end of the tunnel. This traffic never gets out to the open Internet. If you are using a third party VPN then at their end of the VPN your traffic is then routed to the open Internet. It is a waste of money to pay for VPN services from a third party.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

VPN

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.