March 7, 2021


Connecting People

CyberGhost VPN review: Competitive features, but its parent company gives me the creeps


In CNET’s past coverage of digital personal networks, we have praised CyberGhost for its roster of aggressive options. Our in-depth review of CyberGhost previous 12 months involved velocity tests, security verification and an investigation of its full suite of privacy applications. Given that then, CyberGhost has enhanced its range of servers and is geared up to roll out a new suite of privacy applications, all even though remaining a single of the least expensive VPNs we have reviewed — at $2.75 for every thirty day period for an eighteen-thirty day period approach.


  • Provides break up tunnelling
  • Rapid-developing server network
  • No leaks detected in most current tests

Never Like

  • Parent corporation with a shady past
  • Ineffective advertisement blocker
  • No obfuscation

As we have bolstered our solution to VPN ($13 at CyberGhost) opinions in current months, having said that, CyberGhost has lifted some pink flags. Its dad or mum firm’s record warrants skepticism, our past tests have revealed it to expose your VPN use to your world-wide-web company supplier, its website and application trackers are a additional numerous than warranted and its advertisement-blocker takes advantage of an untrustworthy technique of site visitors-manipulation no VPN really should even assume about. Its reduced price tag beforehand built it truly worth contemplating if you desired to transform the visual appeal of your site on the internet, but not if you needed ideal-in-class security. 

Even though CyberGhost’s speeds and security appear to be bettering, I do not now endorse applying CyberGhost if you are in a region in which VPNs are illegal. I also endorse any individual in the US opinions CyberGhost’s dad or mum corporation before selecting whether or not to pay for a membership.

Examine additional: How we review VPNs


  • Common velocity reduction: 49% 
  • Quantity of servers: six,200 
  • Quantity of server spots: ninety international locations
  • Quantity of IP addresses: Unfamiliar, static IPs out there

I ran velocity tests applying CyberGhost more than three days with dynamic IP addresses, in two spots, applying equally wireless and ethernet connections — a single site offered slower broadband speeds, and the other offered greater speeds through fiber-optic world-wide-web. World-wide-web speeds in the US vary by point out and supplier. And with any velocity check, benefits are heading to rely on your nearby infrastructure. Hyperfast world-wide-web company will produce greater check velocity benefits. 

That’s a single reason I’m additional intrigued in tests the total of velocity shed (which for most VPNs is normally 50 % or additional) across equally high-velocity and slower link types, and in applying applications this kind of as speedtest.internet to even out the enjoying area. In the scenario of CyberGhost, nearly 49% of average world-wide-web velocity was shed. 

Even though CyberGhost outperformed competitor Norton Secure VPN’s velocity reduction of fifty seven%, it struggled to capture up to NordVPN’s 32% velocity reduction. Catching up to other velocity-intensive VPNs this kind of as Surfshark and ExpressVPN (which expert losses of just 27% and less than 2%, respectively) could be an even even larger problem for CyberGhost. But efficiency advancements adhering to the addition of additional than 2,000 servers to its fleet more than the past 12 months suggest CyberGhost may well be in the midst of a continued upswing in velocity. 

CyberGhost ran quickest on Australian servers, with an average of one hundred forty four megabits for every 2nd. But it arrived at peak velocity on Paris servers, at 327 Mbps for the duration of a tests round with a 182 Mbps average. Non-VPN speeds in the very same round averaged about 217 Mbps. French servers rated quickest among the people tested in Europe, but German servers underperformed in contrast to competitor VPNs. British isles speeds arrived in 2nd put for all round highest average at 142 Mbps. 

US servers in New York struggled to capture up at 55 Mbps, topping out at a hundred sixty five Mbps and slipping powering CyberGhost’s Singapore servers, which averaged sixty five Mbps. Inconsistency marked Singapore’s scores which also involved the cheapest recorded velocity, a crawling three Mbps. 

Apparently, CyberGhost’s Windows customer routinely failed to realize the very same speeds as its MacOS customer. To rule out equipment-based mostly issues, the speeds were tested on many Windows machines with processing electricity equivalent to the MacOS tests equipment, and tests were done within just ten minutes of each individual other to get rid of time-sensitive site visitors spike variables. 

Even though our Windows tests machines routinely realize link speeds at a marginally slower rate than our MacOS machines, the velocity gap was far larger even though tests CyberGhost than that viewed for the duration of other VPN tests. CyberGhost’s server labelled New York-S403-i48, for instance, generated a best velocity of 86 Mbps on the Windows machines. Using the MacOS equipment for the duration of the very same round, speeds maxed out at a blazing 344 Mbps. 

Examine additional: NordVPN review: Continue to the ideal value for security and velocity

Stability and Privacy

  • Jurisdiction: Romania, with British isles dad or mum corporation
  • Encryption: AES-256
  • Leaks: None detected in most current tests
  • Contains eliminate swap

Even though no IP deal with, DNS or other potentially consumer-determining data leaks were detected for the duration of our tests, CyberGhost did not conceal the reality that I was applying a VPN, so I endorse some caution right here. In March 2019, a CNET reviewer likewise discovered that CyberGhost failed a single of our data leak tests, which authorized world-wide-web site visitors to be viewed by an world-wide-web company supplier. 

Its lack of obfuscation engineering usually means the company is not risk-free to use for privacy and anonymity in international locations in which VPNs are outlawed, which include China, Turkey and the United Arab Emirates. 

CyberGhost’s encryption is standard AES-256, and it supports Great Ahead Secrecy, which usually means it routinely modifications encryption keys to avoid security compromises. The corporation offers a beneficial eliminate swap attribute, which stops network data from leaking exterior of their secure VPN tunnel in the event the VPN link fails. Even though CyberGhost doesn’t provide a multi-hop alternative, it does provide break up-tunneling in its Windows customer so you can decide on which of your computer’s connections you want to encrypt. 

Earlier security concerns 

A 2016 joint review involving Australia’s nationwide science research basis and UC Berkeley categorized the beforehand out there no cost version of the CyberGhost VPN application as destructive after it appeared to check beneficial for malware and asked for a greater-than-average range of consumer permissions. CyberGhost no more time offers a no cost version of its application. 

Asked about the review, CyberGhost CTO Timo Beyel referred to as the study’s acquiring a “bogus beneficial” which he stated was triggered by the app’s use of a well-liked framework. The framework authorized buyers to accessibility a assist ask for monitor by physically shaking their phones.

“But this framework also will allow you to insert an attachment to document voice messages, like a messenger application, and that additional supplemental permissions which really are not essential,” Beyel stated.

Beyel instructed CNET that the application was subsequently up to date, and now restricts the permissions it asks for and the chance for a consumer to insert a voice concept is disabled by default.

Even with the restriction of authorization requests, I’m not completely relaxed with the app’s checklist of Google trackers.

Ideally, the VPN you choose really should also have been through — and released the benefits of — an unbiased third-get together audit of its operations, which includes its use of activity logs. Even though CyberGhost was specified a surface area-amount comparison to its friends by AV-Take a look at in 2019 (which acquired average marks), it doesn’t appear to have been through any unbiased audits considering the fact that 2012. CyberGhost beforehand instructed CNET that it programs to have its data privacy tactics audited by an exterior business “in the foreseeable future,” but it delivered no timeline.

CyberGhost does publish its have yearly transparency report which contains info on any subpoena requests it gets, and also supplies quarterly updates on its website.

For greatest privacy, we glance for VPN suppliers with a jurisdiction exterior of 5 Eyes and other global intelligence-sharing agreements — that is, a single headquartered out of the US, British isles, Australia, New Zealand and Canada. So it in the beginning looks like a beneficial sign that, even though CyberGhost has places of work in Germany, it is headquartered in Romania. German entrepreneur Robert Knapp suggests he founded the $114,000 startup on the back again of reduced-wage Bucharest labor then flipped it for $ten.five million in 2017. 

CyberGhost’s dad or mum corporation has confronted many privacy issues, which we investigated in another investigation. What you want to know when contemplating whether or not or not to purchase this VPN is that, while CyberGhost’s business jurisdiction is in Romania, even a cautious interpretation of its privacy coverage suggests that CyberGhost could potentially share your individual data with not only its British isles-based mostly dad or mum corporation, but also its US-based mostly sibling corporation. 

Data assortment

Like virtually each and every VPN, CyberGhost does collect some servicing-related data, but it claims to not log your server site decisions, your full total of data transferred nor your link timestamps. As with any VPN, it really is nearly impossible to independently verify the firm’s no-logs assert. Even so, CyberGhost does log sure consumer components data in what is likely a bid to enforce the firm’s restrict of seven simultaneous connections for every account. 

In accordance to the spokesperson CNET spoke to in August of 2019, CyberGhost does have the potential to assist law enforcement by activating a restricted consumer-tracking attribute.  

“The only way to do it is if that consumer is however in the program and if the law enforcement is familiar with the IP and could give also a warrant to track that IP,” the spokesperson stated. “We can activate a distinctive attribute like a logging attribute for that IP, but we have that potential to avoid destructive actions when applying our company. But only if that consumer is however energetic and we have proof of what just is improper, what IP he is applying, and so on. So we have got to bring that in order to activate that, to be sure we do not activate it on a frequent consumer. Otherwise, we can not assist any law enforcement corporation.” 

In 2016, having said that, CyberGhost was referred to as to the carpet by ProPrivacy when the corporation was found to be quietly requesting potentially hazardous, root-amount accessibility to customers’ desktops — a functionality the software package has not involved for about three several years now. The company was also caught logging the distinctive identifiers of each individual of its user’s desktops. Similarly, other reviewers have also expressed wariness after CyberGhost appeared to eliminate some threads from its discussion board which may well have comprehensive a vital 2016 malfunction and potentially exposed log-retaining tactics within just its no cost proxy company.

Talking of revelations, in March 2019, CyberGhost took a compact strike when the purchaser-survey corporation it contracted, Typeform, was breached. The corporation stated a hundred and twenty e mail addresses and 14 CyberGhost usernames — but no passwords — were involved in the two forms involved in the compromised data. 

The even larger issue for me is that CyberGhost however takes advantage of a technique of advertisement-blocking which is thought of at ideal ineffective and at worst insecure. Most VPNs block ads by filtering out requests from web-sites determined as suspicious. Not CyberGhost. The corporation alternatively takes advantage of a technique which inspects and modifies — rather than filters out — people requests. The technique is twice as risky and only 50 % powerful considering the fact that it only will work on web sites with an HTTP URL and not people with HTTPS. 

CNET asked Beyel in June this 12 months about this technique of advertisement-blocking and the criticism it really is acquired. 

“We know this is not pretty powerful. That’s why we’re already working on a superior option which is working on the approach,” he stated. “We want to entirely go this type of engineering on the customer facet because in the browser you can, of system, do that.” 

In its suite of options, having said that, CyberGhost does provide an alternative (enabled by default in its MacOS customer) which forces your browser to redirect absent from web sites not secured by HTTPS. 

Beyel also stated that CyberGhost will be releasing a new suite of privacy modules in the coming months which go outside of its VPN to include applications for optimizing your laptop or computer and protecting against vulnerable apps from affecting your privacy.


  • Usability: Greater interface on Android, superior usability on MacOS
  • Platforms: Windows, Android, Android Television, MacOS, iOS, Linux, Amazon Hearth ($40 at eBay) Adhere, FireTV
  • Price: $2.75 for every thirty day period, or $49.50, for an eighteen-thirty day period approach
  • Quantity of simultaneous connections: seven

Even though running CyberGhost, I had no issues accessing Netflix or other online video streaming web sites, and no issues applying torrenting clients. CyberGhosts servers are neatly arranged into 4 groups which aim to strengthen your encounter based mostly on what you might be making an attempt to do: NoSpy servers, servers geared for torrenting, servers ideal for streaming and servers ideal for use with a static IP deal with. CyberGhost imposes no data caps and will allow unlimited server switching.

CyberGhost’s mobile application had a couple of quirks when I established it up on a freshly unboxed Apple iphone SE. Even though I ultimately got CyberGhost working, a couple of random network issues seemed to crop up and it did not appear to be to like my Wi-Fi. On a Samsung S10 Additionally, however, it was smooth sailing. 

The imbalance in options was equivalent: There were various selections out there in the Android application which merely were not there in iOS. On equally mobile and desktop, town collection is restricted to just 8 international locations, but I like that you can effortlessly see how chaotic each individual server is and find a single which is less burdened by site visitors. 

CyberGhost’s ideal price tag approach is $2.75 for every thirty day period for an eighteen-thirty day period membership, billed in a lump sum of $49.50. It also offers a six-thirty day period membership for $seven.99 a thirty day period, or you can go for the additional pricey regular monthly approach at $12.99 a thirty day period. That provide stands up effortlessly to NordVPN’s two-12 months approach at $three.seventy one a thirty day period ($89 in full), and IPVanish’s a single-12 months approach at $six.49 a thirty day period ($78 a 12 months), but it however falls a little bit shorter of Surfshark’s aggressively discounted two-12 months $2.49 regular monthly membership. 

Alongside with credit or debit, you can pay through PayPal, Bitcoin or even funds in sure international locations. If you purchase a membership for additional than a 12 months, it comes with a forty five-day income-back again assure. All other subscriptions are restricted to a 14-day assure but the website offers 24/seven chat assistance, and a healthy total of assistance articles and tutorials in its know-how base.