five privacy applications, one vendor

ExpressVPN logo, VPN service

ExpressVPN

last verified ·tracked since ·reviewed byOleh KemOleh Kem

ExpressVPN is a consumer VPN launched in 2009 and owned by Kape Technologies, built on its own Lightway protocol and extended into an email relay, a password manager, a travel eSIM and a private AI chat. As of , ExpressVPN costs $14.99 a month on Basic and $22.99 on Express Pro.

Price chart of the vpn category from 2 dollars 19 to 22 dollars 99 a month, plotted on a logarithmic price axis. Markers: CyberGhost at 2.19, ProtonVPN at 9.99, NordVPN at 14.99, Surfshark at 15.45. A dashed line crosses at the 12 dollars 49 category median. ExpressVPN holds the range from 14 dollars 99 to 22 dollars 99 with three tier posts at 14.99, 16.99, 22.99 dollars.

the $12.49 median
ExpressVPN range
$14.99 to $22.99
CyberGhost$2.19/moCyberGhostCyberGhost$2.19/mo-$12.80 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial CyberGhost siteProtonVPN$9.99/moProtonVPNProtonVPN VPN Plus$9.99/mo-$5 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial ProtonVPN siteNordVPN$14.99/moNordVPNNordVPN Basic$14.99/mo+$0 vs the $14.99 entrychecked Aug 8, 2026See live pricingOfficial NordVPN siteSurfshark$15.45/moSurfsharkSurfshark Starter$15.45/mo+$0.46 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial Surfshark site
$10
$20
$2.19$22.99Scale: entry prices on a log axis, 10× from end to end, monthly rates in USD · hover a rival mark for its reading, or tap it to jump to its comparison
$2.19$22.99
the $12.49 median
CyberGhost$2.19/moCyberGhostCyberGhost$2.19/mo-$12.80 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial CyberGhost siteProtonVPN$9.99/moProtonVPNProtonVPN VPN Plus$9.99/mo-$5 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial ProtonVPN siteNordVPN$14.99/moNordVPNNordVPN Basic$14.99/mo+$0 vs the $14.99 entrychecked Aug 8, 2026See live pricingOfficial NordVPN siteSurfshark$15.45/moSurfsharkSurfshark Starter$15.45/mo+$0.46 vs the $14.99 entrychecked Jul 8, 2026See live pricingOfficial Surfshark site
Scale: log axis, USD/mo
§ 01 · the essentialsfive applications, one vendor

What is ExpressVPN: a private tunnel, mail aliases and a password vault

Lightway, post-quantum keys and four applications around them

ExpressVPN is a consumer VPN launched in 2009 and owned by Kape Technologies. Its apps run on Lightway, a protocol the vendor wrote itself rather than licensed, now shipping with post-quantum protection and servers in 113 countries. Around that tunnel sit four separate applications. ExpressMailGuard is an email relay that hands out aliases and accepts domains you already own. ExpressKeys is a password manager with passkeys, card storage and a built-in 2FA authenticator. A holiday.com eSIM covers 150 or more travel destinations. ExpressAI is a chat assistant the vendor calls the first truly private AI built on confidential computing. Five applications, one company, and the tunnel is only the oldest of them.

That is a privacy suite the vendor assembled itself: four of the five applications carry its own name. The useful comparison is therefore with the four separate subscriptions this account is trying to replace, rather than with another tunnel.

what the account holdsvendor plan cards and comparison table
launched
2009owned by Kape Technologies
protocol
Lightwaywith post-quantum protection
servers
113 countriessame count on every plan
devices
10 · 12 · 14simultaneous connections
applications
fiveVPN, relay, vault, eSIM, AI chat
eSIM reach
150+ placescarried under holiday.com
entry
$14.99/moBasic, month to month
top
$22.99/moExpress Pro

Term rates, what the first term costs up front and what happens at renewal are all set out on the ExpressVPN pricing page.

§ 02 · features17 capabilities × 3 plans

ExpressVPN features: Lightway, Advanced Protection and ExpressKeys

Lite Protection, Advanced Protection, ExpressKeys and the eSIM rows

The comparison table under the plan cards looks like five products and is one table. Its row groups are the VPN, ExpressMailGuard, ExpressKeys, the holiday.com eSIM and ExpressAI. Reading them as five separate purchases is the first mistake to avoid: there is no standalone ExpressKeys to buy, and no standalone ExpressAI either.

The VPN group is the flattest part of the whole thing. Lightway, post-quantum protection, the built-in speed test and the multiplatform apps appear identically wherever you look, and so do the 113 countries. Three rows move: how many devices connect at once, what the blocker actually blocks, and whether a dedicated IP comes with the account or is bought beside it. Everything else that differs belongs to the four applications around the tunnel, which is why a feature comparison of this product turns into a comparison of five.

declared capacityvendor comparison table, all rows
countries
113identical wherever it is printed
devices
10-14simultaneous connections
aliases
10 / 50 / allshared ExpressMailGuard aliases
AI credits
500 a dayacross 6 models, with web search
capability by plan17 capabilities · 3 plans · 51 cells · 19 numbered quotas
Capability ↓ · plan →Basic
$14.99/mo
Advanced
$16.99/mo
Express Pro
$22.99/mo
Row 01Lightway protocolwritten by the vendor, not licensedIncludedIncludedIncluded
Row 02Post-quantum protectionkey exchange hardened for the long termProtocol work reads identically throughout, which is unusual in this category.IncludedIncludedIncluded
Row 03Server countriesfrom the live comparison table113113113
Row 04Simultaneous devicesconnections on one account101214
Row 05Block Adspart of Lite ProtectionYesYesYes
Row 06Block Malicious Sitespart of Lite ProtectionYesYesYes
Row 07Block adult sitespart of Lite ProtectionYesYesYes
Row 08Block Trackersthe row that makes Protection AdvancedOne list of four separates Advanced Protection from Lite Protection, and the names hide it.NoYesYes
Row 09Dedicated IPa static exit addressOptional in two columns and included in one, with no rate published for the optional version.Add-onAdd-onIncluded
Row 10Relay bandwidthExpressMailGuard, monthly10 MB100 MBUnlimited
Row 11Shared aliasesaddresses the relay hands out1050Unlimited
Row 12Anonymous sendsoutbound mail, per day2550100
Row 13Domains you ownpointed at the relayNo120
Row 14ExpressKeyspasswords, passkeys and 2FANoUnlimitedUnlimited
Row 15holiday.com eSIMyearly terms onlyPrinted on the 12-month and 2-year cards and missing from every 1-month card.No3 GB, 3 days3 GB, 5 days
Row 16ExpressAI creditsprivate chat across 6 modelsNoNo500 a day
Row 17Money-back windowfirst-time users only30 days30 days30 days
readingHover or tap any cell for its quota, its tier rate and what it means for the bill
every column includes exactly 1 user · full disclosure: 3 of 3 tiers priced

Scroll sideways for the Advanced and Express Pro columns.

Protection

Lite Protection and Advanced Protection: what the blocker covers

There are two blockers with almost the same name. Lite Protection stops ads, malicious sites and adult sites. Advanced Protection stops those three and trackers. That fourth row is the entire difference between them, and it is easy to miss because both are described in the same breath. Anyone reading either one as a full content filter should check which of the four lists they are actually getting.

The relay

ExpressMailGuard: aliases, own domains and daily send limits

The relay is graded on eight separate counters, which is more than the tunnel is. Shared aliases run 10, 50 and unlimited. Alias domains run 2, 6 and 10, dedicated subdomains 1, 5 and 20, and domains you already own none, 1 and 20. Recipients are capped at 1, 5 and 30, forwarding rules at none, 5 and 20, anonymous sends at 25, 50 and 100 a day, and monthly bandwidth at 10 MB, 100 MB and unlimited. Alias autocreation, failed delivery logs and catchall control are unmetered throughout.

The vault and the assistant

ExpressKeys and ExpressAI: passkeys, 6 models and a 2 GB store

ExpressKeys keeps no count at all. Unlimited passwords, payment cards, secure notes, passkeys, item sharing, Password Health and a built-in 2FA authenticator are listed as plain features rather than quotas. ExpressAI is the opposite, published entirely in numbers: 500 credits a day, 6 models, web search, uploads of 50 MB per file and 2 GB of storage across 200 files. Both applications are absent from the entry plan, and blank cells in this table mean absent rather than reduced.

Working out how many connections a household really needs

Count what stays connected, not what you own. A supported router holds one connection and covers everything behind it, so a house with one often needs far fewer slots than the device drawer suggests. Ten covers a couple with laptops, phones, tablets and a television. Twelve and fourteen exist for homes that also connect work machines, a second television and a console.

The device count is the one number in the set that no add-on lifts: the vendor sells extra aliases, extra subdomains and extra recipients, but nothing that raises ten to eleven. What happens at the eleventh device is not stated anywhere the vendor publishes, so a shared account is worth counting before it is bought rather than after.

Checking whether the holiday.com eSIM will actually trigger

The eSIM row states that the feature is available in yearly plans, and the plans agree by omission: the allowance is printed on the 12-month and 2-year terms and missing from every 1-month one. A monthly subscriber does not get it whatever else they are paying for.

Two more conditions live in the vendor's own footnote. The handset has to be eSIM compatible and carrier unlocked, and the redemption is once per account. The data is 3 GB valid for three days on Advanced and 3 GB valid for five days on Express Pro, which makes it a long weekend abroad rather than a travel plan.

Read the table by group rather than by column and the product makes sense. The tunnel is nearly flat wherever it appears, and almost everything a buyer is choosing between is mail, passwords, mobile data or AI.

§ 03 · plan limitsfive ceilings

ExpressVPN limits: 14 devices, tracker blocking and the AI credits

Devices, Block Trackers, the dedicated IP and the ExpressAI credits

Five ceilings decide how far this account goes, and only one of them belongs to the tunnel.

Simultaneous devices

10 · 12 · 14

The connection count moves by two at each step, which is the narrowest range on the page and often the deciding one anyway. A supported router counts once and covers the network behind it, so the ceiling bites hardest in homes without one. Nothing in the vendor's material offers a paid way to raise the number on its own.

Tracker blocking

not in Lite Protection

The blocker ships in two versions with confusingly similar names. Lite Protection covers ads, malicious sites and adult sites. Advanced Protection covers those and trackers. Three lists against four is the whole distinction, and the vendor prints both under headings that read almost identically on the plan page.

Dedicated IP

no published rate

A static exit address is included with Express Pro and offered as an optional add-on elsewhere. The plan page confirms that the add-on exists and states no figure for it anywhere, so the only comparable number is the step to the top plan. Work systems that whitelist a single address are the usual reason to want one.

ExpressAI credits

500 a day

The assistant is metered on five counters at once: 500 credits a day, 6 models, 50 MB per uploaded file, 200 stored files and 2 GB of storage across them, with web search alongside. Every one of those figures is published in a single column of the comparison table. The other two columns are blank, which here means the assistant is not there at all.

eSIM validity

3 GB, 3 to 5 days

The holiday.com eSIM reaches 150 or more destinations, and the allowance expires quickly: three days on Advanced, five on Express Pro. It applies to yearly terms, needs a carrier-unlocked and eSIM-compatible handset, and can be redeemed once per account. Useful for a trip, not for a habit of travelling.

Four of those five ceilings sit outside the VPN. On a product sold as a privacy suite, that is the honest summary of where it stops.

Prepaid terms are charged as one sum at the start, and the renewal that follows is annual whichever term was bought.

§ 04 · add-onstwo lines, neither priced

Dedicated IP and ExpressVPN for Teams: what the vendor sells apart

Dedicated IP has no published rate; Teams starts at five licences

The vendor sells exactly two items beside the subscription, and neither carries a published rate. That is the finding rather than a complaint: the only extras on offer are the two it will not price in public.

Dedicated IPno published rateoptional on Basic and Advanced

A static address the account keeps

The comparison table marks a dedicated IP as an optional add-on on two plans and as included on the third. No figure appears anywhere on the plan page for the optional version. Someone who needs a static address is therefore choosing between one known number, the step to the top plan, and one the vendor has not printed.

without itEvery session leaves through a shared exit address, so systems that whitelist a single IP stay unreachable.

ExpressVPN for Teamsquoted5-licence minimum

Admin controls and bulk licensing

The business line is described as an enterprise VPN with admin controls, fast deployment and discounts that grow with the licence count. The one hard condition published is the floor: a 5-licence minimum applies. There is no rate, no tier list, and no statement about whether the relay, the vault, the eSIM and the assistant travel with a team licence.

without itA small team buys consumer subscriptions one at a time and administers none of them centrally.

Both behave the same way. The vendor names the condition and withholds the number, so any budget touching either one starts with a sales conversation rather than a checkout.

§ 05 · data accessfive channels in and out

ExpressMailGuard and ExpressAI: what the account can receive and send

Aliases, own domains, daily anonymous sends and the ExpressAI store

The relay and the assistant are the parts of this account that carry other people's data, and both are metered in detail. Mail arrives at aliases and leaves under anonymous addresses. Files go into the ExpressAI store and stay there against a quota. Each channel below states the ceiling and where in the lineup it appears, because the published figures are the only description the vendor gives of how far these applications go.

Your real inboxShared ExpressMailGuard aliases10 · 50 · unlimitedEvery plan

Aliases are the relay's front door and the count is the thing being rationed. Alias autocreation rules, failed delivery logs and catchall control are unmetered everywhere, so nothing else about the receiving side is capped.

ExpressMailGuardDomains you already ownnone · 1 · 20Advanced and above

Pointing a domain you own at the relay is what separates a throwaway alias service from something a small business could route real mail through. Dedicated subdomains run 1, 5 and 20 beside it, and the entry plan carries neither.

ExpressMailGuardAnyone, from an anonymous address25 · 50 · 100 a dayEvery plan

Sending is capped by the day, not only receiving. Recipients are limited separately at 1, 5 and 30 and forwarding rules at none, 5 and 20. A single permitted recipient makes the entry plan a receive-only tool in practice.

The ExpressAI storeFiles you upload50 MB each, 2 GB totalExpress Pro

Uploads stop at 50 MB per file, 200 files and 2 GB across the store, with web search available alongside the 6 models. A 50 MB ceiling rules out most video and almost no documents.

ExpressKeysAnother person, by item sharingunlimited itemsAdvanced and above

The vault stores passwords, passkeys, cards and secure notes without a count, and item sharing is listed as a plain feature rather than a quota. Password Health and the built-in 2FA authenticator sit in the same group.

Relay bandwidth is the ceiling worth watching: 10 MB a month at the bottom, 100 MB in the middle, unlimited at the top. Mail stays small until somebody sends an attachment, and 10 MB is one attachment.

§ 06 · the applicationsfive applications, four named for the vendor

ExpressVPN products: ExpressMailGuard, ExpressKeys, eSIM, ExpressAI

ExpressMailGuard, ExpressKeys, the holiday.com eSIM and ExpressAI

Four of the five applications here carry the vendor's own name, and none of them began life as a VPN feature. ExpressMailGuard is a mail relay. ExpressKeys is a password manager. ExpressAI is a chat assistant running on confidential computing. Only the travel eSIM belongs to somebody else, carried under the holiday.com brand.

They share one account and one comparison table, and none of them is sold on its own. So the useful question is how many of the five a buyer would otherwise be paying for somewhere else.

ExpressVPN

The tunnel itself, running on Lightway with post-quantum protection, servers in 113 countries, a built-in speed test and apps across platforms. Almost every row here reads the same wherever it is printed.

Everyone with an account

Available on every plan, with the device count and the blocker as the only real steps

WritesEncrypted sessions

ExpressMailGuard

A private email relay, described by the vendor as protection for the inbox and the identity behind it. Aliases, alias domains, dedicated subdomains, domains you own, recipients, forwarding rules, daily sends and monthly bandwidth are all published as figures.

Anyone tired of handing out a real address

Available on every plan, graded on eight separate counters

WritesAliases and delivery logs

ExpressKeys

A password manager storing unlimited passwords, payment cards and secure notes, with passkeys, item sharing, Password Health and a built-in 2FA authenticator. No counter is published against any of it.

Households replacing a standalone vault

Absent from the entry plan; unmetered wherever it appears

WritesPasswords and passkeys

holiday.com eSIM

A free eSIM with data across 150 or more destinations, carrying 3 GB valid for three days in the middle of the lineup and five days at the top. Needs a carrier-unlocked, eSIM-compatible handset.

Travellers on a yearly term

Yearly terms only, redeemable once per account

WritesMobile data profiles

ExpressAI

A chat assistant the vendor calls the first truly private AI built on confidential computing, with 6 models, web search, 500 credits a day and a file store holding 200 items up to 2 GB.

Buyers who want an assistant that is not logged elsewhere

Top plan only; the cells elsewhere are blank rather than smaller

WritesChats and uploaded files

Five applications, one companyFour carry the vendor's own name. The travel eSIM is carried under the holiday.com brand.

Taken together the lineup is coherent rather than scattered. One company writes the protocol, the relay, the vault and the assistant, and buys in the mobile data. Whether that is generous or wasteful depends entirely on how many of the four beside the tunnel were going to be bought anyway.

§ 07 · changesthree dated passes

ExpressVPN in 2026: 113 countries and one table behind five tabs

Server countries restated, and five tabs turned out to be one table

Three passes over this product in as many months, and each one moved something structural rather than cosmetic.

first trackedlatest check
From tunnel to suite Our June pass recorded the change that defines the product now. The relay, the password manager, the eSIM and the assistant all appeared as named applications under the ExpressVPN account, and what separated one subscriber from another stopped being VPN capability and started being how much of those four they reached. The pricing page itself had moved, and the seed URL had to be found by search.
The relay changed units The early August pass found ExpressMailGuard described by volume for the first time: 10 MB and 100 MB a month, where the previous record listed only alias counts. The eSIM allowances gained their validity windows in the same read, three days and five days, and they were printed on the yearly cards alone. Feature descriptions on this product move faster than its rates do.
113 countries, and five tabs that were one table The latest pass closed the open question from the previous one. The five product lines are not tabs leading to separately sold products; they are groups of rows inside a single comparison table. The same read moved the country count to 113, where our record and the older version of that table both said 105. The plan cards themselves still state no country count at all.

The direction is consistent. Each pass found more of the account made of named applications, and less of it explained where a buyer actually clicks to buy.

§ 08 · who it fitsfive profiles, four warnings

Who should use ExpressVPN: frequent flyers, families and remote teams

Frequent flyers, shared households, vault switchers and small teams

Five situations where these five applications earn their keep, and four where they do not.

Frequent flyers who want the eSIM

The travel eSIM is the most conditional thing in the account. It reaches 150 or more destinations, expires in three days or five, needs a carrier-unlocked handset, and can be redeemed once. For somebody abroad four or five times a year it is a genuine saving on roaming charges. For anybody else it is a feature that never triggers.

inputsone phone, one laptop, a yearly terminvoice floor$16.99 × 1 = $16.99/mofirst limit3 GB of data, valid three days

Households sharing one account

Ten simultaneous connections cover most homes once a supported router is doing the work, since the router itself counts once. What a household should check is the blocker: ads, malicious sites and adult sites are covered at the bottom of the lineup, trackers are not. The relay's single permitted recipient at that level also makes aliases a tool for one person rather than for the house.

inputsphones, laptops, a television, one routerinvoice floor$14.99 × 1 = $14.99/mofirst limit10 connections, no tracker blocking

Anyone dropping a standalone vault

ExpressKeys is a full password manager rather than a token feature: unlimited passwords, passkeys, card storage, secure notes, item sharing, Password Health and a 2FA authenticator, none of it counted. If a separate vault subscription is already being paid for, this one can replace it and bring tracker blocking with it. That is the only application here that removes a bill somewhere else.

inputsan existing vault to migrate, 2FA in useinvoice floor$16.99 × 1 = $16.99/mofirst limitnot present on the entry plan

Work that needs a static address

Systems that whitelist a single IP cannot be reached through a shared exit. A dedicated IP is included at the top of the lineup and sold as an optional add-on below it, with no rate published for the add-on anywhere. That leaves exactly one route with a number attached to it, which is worth knowing before assuming the upgrade is the expensive option.

inputsa whitelisted service, one machineinvoice floor$22.99 × 1 = $22.99/mofirst limitthe add-on rate is not published

Buyers who want the private AI

ExpressAI is described as built on confidential computing, and every one of its allowances is published in a single column: 500 credits a day, 6 models, 200 stored files, web search. It cannot be sampled from below, because below it there is nothing to sample. Anyone drawn to this account for the assistant is buying the top of the lineup from the start.

inputsdaily chat use, files under 50 MBinvoice floor$22.99 × 1 = $22.99/mofirst limit500 credits a day, 2 GB of storage
Reasons to walk awayfour reasons

You only want a tunnelFour of the five applications have nothing to do with VPN capability, and the tunnel reads almost identically wherever it is printed.

You need WireGuardThe apps run Lightway. Our catalog data records no WireGuard support, so a setup standardised on it will not be served here.

You travel on a monthly subscriptionThe comparison table states that the eSIM is available in yearly plans, and the 1-month cards omit it entirely even where everything around it is present.

You want a published add-on rateThe dedicated IP and the business licences are the only two things sold beside the subscription, and neither carries a figure anywhere on the plan page.

One pattern runs through all five profiles. This account is worth its premium when at least two of the four applications beside the tunnel were going to be paid for anyway, and hard to defend when none of them were.

§ 09 · alternativesfour rivals · gap to the $14.99 entry

ExpressVPN alternatives: NordVPN, Surfshark, ProtonVPN and CyberGhost

NordVPN opens at the same rate, Surfshark above, CyberGhost far below

Most of the VPNs we price open under ExpressVPN, though not all of them do. The spread runs $2.19 to $15.45, which puts the median at $12.49. One of the four opens at $2.19, then the strip goes quiet until $9.99. CyberGhost stands alone at the cheap end and the other three cluster within a few dollars of each other, with NordVPN opening at exactly the same rate as this one.

$2.19ExpressVPN entry: $14.99

None of the four sells quite the same shape of thing. Three are tunnels with security extras attached; this one answers with a mail relay, a password vault, a travel eSIM and an AI assistant, all written or bought in by the same company. The full ranking sits on the vpn category page.

§ 10 · our verdictCE 4.8/5 · signed

Is ExpressVPN worth it in 2026: our verdict on the consumer VPN suite

Where the five applications earn the premium and where they do not
Verdict · ExpressVPN · ★★★★★★★★★★CE 4.8/5

ExpressVPN's standing rate is $14.99 a month on Basic against a $12.49 median across the four other VPNs we price, and $22.99 at the top of its own lineup. The figure everyone repeats is $2.99, which is the 28-month intro with an expiry date attached. The honest number is $99.95 a year. For ten devices, servers in 105 countries and a refund window, that is a defensible annual price, and it is nothing like the headline.

Higher up the lineup the value thins out. Advanced costs $24 more across a year of monthly billing and hands back tracker blocking, two devices and a bigger email relay, which is fair trade. Express Pro asks $72 a year over that, and most of what it returns is a dedicated IP the vendor refuses to price on its own. Our own reasoning inverts right there: if you genuinely need a fixed address, the tier we would otherwise argue against becomes the only published way to buy one.

what drives this invoice
  • the term at checkout: $2.99 a month across 28 months, $4.99 across 15, or $14.99 with no commitment. All three end in the same place.
  • the renewal, which is annual and set per tier: $99.95, $119.95 and $199.95, whichever term was prepaid.
  • the device ceiling: ten, twelve or fourteen simultaneous connections, and the only hard cap the vendor states outright.
when not to buy ExpressVPN
  • You are quoting the first term as the price. It ends on a date fixed at purchase, and $99.95 a year on Basic is the standing bill after it.
  • You want a fixed IP without buying the top tier. The add-on has no published rate, so Express Pro at $199.95 a year is the only costed route.
  • You need five licences or more. Bulk pricing is a conversation with sales, and nothing on the page lets you check what you are quoted.
  • You want to try it first. There is no free tier, and the thirty-day guarantee is a refund for new users rather than a trial.
what it does well
  • Lightway is the vendor's own protocol rather than a licensed one, and it ships with post-quantum protection on every plan.
  • Servers in 113 countries are listed identically throughout, with no country count held back for the top of the lineup.
  • Connection allowances are generous for this category, running 10, 12 and 14 simultaneous devices on one account.
  • ExpressKeys stores unlimited passwords, passkeys, cards and secure notes, with a built-in 2FA authenticator and Password Health.
  • ExpressMailGuard is a real relay rather than a forwarding trick, taking domains you already own plus dedicated subdomains and autocreation rules.
  • The holiday.com eSIM reaches 150 or more destinations, which is wider coverage than most travel data add-ons sold on their own.
  • The 30-day money-back guarantee covers the long prepaid terms, so a 28-month commitment can still be undone in the first month.
where it gets in the way
  • Lite Protection blocks ads, malicious sites and adult sites. Trackers are the one list it leaves out.
  • ExpressKeys is missing from the entry plan altogether, so the cheapest account is a tunnel and a 10 MB relay.
  • Every ExpressAI allowance is published in one column of the comparison table, and the other cells are blank rather than smaller.
  • The travel eSIM is excluded from every monthly card, and its data expires after three days or five once redeemed.
  • A dedicated IP is optional on two plans and the vendor publishes no rate for it anywhere on the plan page.
  • ExpressVPN for Teams needs five licences before it can be bought, and its rate is quoted rather than listed.
  • Our catalog data records no WireGuard support, so the only modern protocol on offer is the vendor's own.
  • The money-back window is 30 days and applies to first-time users only.
what this comes to
  • Entry $14.99/mo · verified
  • Number 4 of 5 by entry rate, $0 over NordVPN and $0.46 under Surfshark
  • Term rates, the up-front first-term charge and what the renewal does to them are all worked through on the ExpressVPN pricing page
signed Oleh Kem Oleh Kemmethod: the live plans, read in all three term statesverified tracked since
§ 11 · questions13 questions

ExpressVPN answers: devices, countries, the eSIM and ExpressAI credits

Device counts, server countries, eSIM eligibility and AI credits

Q1What is ExpressVPN?

A consumer VPN launched in 2009 and owned by Kape Technologies, now sold as one account carrying an email relay, a password manager, a travel eSIM and a private AI chat alongside the tunnel. The tunnel itself runs on Lightway with post-quantum protection.

Q2What is Lightway?

Lightway is the protocol ExpressVPN wrote in house rather than licensing, and every one of its apps uses it. It ships with post-quantum protection, and both appear on every plan, so protocol quality is not what separates one subscriber from another.

Q3How many countries have servers?

The live comparison table reads 113 countries, and the figure is the same wherever it appears. Our own record and the older version of that table both said 105, so this moved recently. The plan cards state no country count at all.

Q4How many devices can connect at once?

Ten, twelve or fourteen simultaneous connections depending on the plan. A supported router counts as a single connection and covers everything behind it, so households with one usually need fewer slots than the device drawer suggests.

Q5What does the blocker actually block?

It comes in two versions. Lite Protection covers ads, malicious sites and adult sites. Advanced Protection covers those three plus trackers, and that fourth list is the only difference between them despite the near-identical names.

Q6What is ExpressMailGuard?

The private email relay in the account. It hands out aliases so a real address never reaches a form, and it is published on eight counters: shared aliases, alias domains, dedicated subdomains, domains you own, recipients, forwarding rules, daily anonymous sends and monthly bandwidth.

Q7What does ExpressKeys store?

Unlimited passwords, payment cards and secure notes, plus passkeys, item sharing, Password Health and a built-in 2FA authenticator. None of it is counted against a quota. It is absent from the entry plan and unmetered everywhere else.

Q8How does the holiday.com eSIM work?

It covers 150 or more destinations and appears on yearly terms only. The allowance is 3 GB, valid three days in the middle of the lineup and five days at the top, redeemable once per account on a handset that is eSIM compatible and carrier unlocked.

Q9What is ExpressAI?

A chat assistant the vendor calls the first truly private AI built on confidential computing. It publishes 500 credits a day across 6 models, web search, uploads of 50 MB per file and 2 GB of storage spread over 200 files. It exists at the top of the lineup only.

Q10Does ExpressVPN include a dedicated IP?

Express Pro includes one. Elsewhere it is an optional add-on, and no rate for it is published anywhere on the plan page, so the only comparable figure available is the step up to the plan that includes it.

Q11Does ExpressVPN support WireGuard?

Our catalog data records no WireGuard support. The apps use Lightway, the vendor's own protocol, which is well established on its own terms but not interchangeable with a WireGuard configuration someone has already standardised on.

Q12Is there a free plan or a trial?

There is no free tier. What exists is a 30-day money-back guarantee, limited by the vendor to first-time users. It does cover the long prepaid terms, so even a 28-month commitment is reversible during the first month.

Q13Can a team buy ExpressVPN?

There is a business line with admin controls, fast deployment and discounts that grow with the licence count. A 5-licence minimum applies and no rate is published, so buying for a team starts with a quote rather than a checkout.