Is my VPN secure?

Hello


I got a subscription to a VPN mainly so I can do online banking in public places. But as I was setting it up, this message came up from the Mac network settings:

"When using PPTP, your password and any data sent or received over this connection may be read by your internet provider"


Should I be concerned? Is there really a danger of my ISP getting access to my banking information?


Any thoughts would be appreciated!

iPhone 5, iOS 9.3.3

Posted on Jul 20, 2016 2:52 AM

Reply
14 replies

Jul 20, 2016 8:26 AM in response to NotExiled

Yes you should be concerned as it is an issue of confidentiality. You should protect your banking information and you must be careful about it. For your convenience, i would suggest you to go through banking vpn service providers and choose the best vpn for yourself. I would personally recommend you to use TOTAL VPN because it gives L2TP and OPENVPN protocols (Most reliable and stable, even behind wireless routers, on non-reliable networks, and on Wi-Fi hotspots) which will provide military grade encryption to your banking information.

Do reply me back if my information help you a bit 🙂

Jul 21, 2016 2:57 AM in response to NotExiled

Firstly regarding VPN protocols. PPTP is the oldest and least secure, it has several known vulnerabilities that allow hackers to break in to it, you should not use PPTP. L2TP is the next step up it also has some vulnerabilities but is much better than PPTP, Apple's own VPN server only supports PPTP or L2TP so if your using Apple's VPN server you do not really have a choice other than to use L2TP. Cisco IPSec is probably the next step up, if you use this with certificates as well it is still reasonably secure and adequate for most people. Beyond that there are various https based VPN systems and the very latest system is IKEv2 again optionally with security certificates.


If you build and run your own VPN system or use one built-in to your router then you have control of which protocol to use and whether to add security certificates as well. If you use a commercial provider then you need to check what they are offering, as mentioned PPTP is a waste of time so dump any provider only offering that.


Now while a bank website itself will (hopefully) use https to encrypt its traffic, the problem is that traffic over WiFi between your laptop and a WiFi hotspot is still vulnerable, it is very common for hackers to either be connected to the same Internet cafe hot-spot or to even set up fake hot-spots. This is where using a VPN is needed. With a VPN the traffic is then secure all the way from your computer to the VPN server at the other end and this if you use a decent VPN system i.e. not PPTP means hackers are unlikely to be able to observe your communications.


You of course have to also remember to connect the VPN system. This is why for our company I have setup a 'VPN on Demand' setup which automatically connects to the VPN server so I don't have to rely on users doing this.

Jul 21, 2016 4:05 AM in response to NotExiled

There are a lot of VPNs: they just let you surface with another IP address in another place (country). You can use it to play media that are not available in your actual place, for example.

Important is that when the VPN does not encrypt the traffic from your computer to the site where you are going and back - including the password - you are more vulnerable than without it.

Aug 12, 2016 7:01 AM in response to Lexiepex

A VPN is just what you need to help you stay safe while online. A good service must keep all of your online activities and anonymity no matter when or where you are. I spent many time searching a convenient VPN. You must understand that it’s not as simple as it seems. I can’t recommend any service because we all have different purposes and price inquiry. But this website proposes interesting information about best VPNs for iPhone. True for you that some providers are not so anonymous as they promise. Here you can read interviews of popular VPNs providers about their privacy policy https://torrentfreak.com/anonymous-vpn-service-provider-review-2015-150228/ Hope it’ll be useful.

Aug 30, 2016 11:44 PM in response to NotExiled

You haven't mentioned the name of the service you subscribed to. There are providers which can make you completely anonymous and your ISP cant read any information about you what so ever. You need to look for providers and research lil bit on your own end to pick up best VPN for iPhone. Also check which protocol they use and what they offer. Do read reviews about the provider before subscribing.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Is my VPN secure?

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.