VPN protocols and encryption, explained
Private Internet Access supports both WireGuard and OpenVPN. This page explains the general trade-offs in plain terms.
WireGuard
A newer, leaner protocol generally known for faster connection speeds and simpler configuration.
OpenVPN
An older, highly configurable protocol, often favored for compatibility with restrictive networks and firewalls.
Encryption Levels
Some configurations allow choosing between different cipher strengths, trading off a small amount of speed for additional configurability.
Transport & Ports
OpenVPN configurations often allow choosing UDP or TCP transport and custom remote ports for specific network conditions.
Obfuscation
Some setups support obfuscating VPN traffic to make it less identifiable on restrictive networks.
Multi-Hop
Routing traffic through more than one VPN server for an additional layer of separation between you and the destination.
General guidance for choosing a protocol
Start with WireGuard
For most everyday use, WireGuard tends to offer the best balance of speed and simplicity.
Switch to OpenVPN if needed
If a network blocks WireGuard traffic or you need deeper configuration, OpenVPN offers more flexibility.
Adjust encryption settings carefully
Higher encryption settings can slightly reduce speed; most users don't need to change the defaults.
Test after changing settings
After switching protocols or ports, reconnect and confirm the connection is stable before relying on it.
Protocols & Encryption FAQ
Is WireGuard less secure than OpenVPN?
Not inherently. WireGuard uses modern, well-regarded cryptography; the two protocols differ more in configurability and network compatibility than in fundamental security.
Why would I choose OpenVPN over WireGuard?
OpenVPN's extensive configurability, including custom ports and transport options, can help on networks that restrict or throttle other VPN protocols.
Does changing protocols require reinstalling the app?
No. Protocol selection is typically a setting within the VPN app itself, changeable without reinstalling anything.
Ready to configure your connection?
Read step-by-step guides on choosing and setting up protocols.