Security & Privacy
Of course, ExpressVPN does do some logging. In particular, they record the date when you connect and the server you choose. That said, they store neither the connection time nor the IP address you were allocated. Which means there’s no way your account can be linked to a specific online action.
When it comes to its actual VPN plumbing, ExpressVPN also puts its money where its mouth is.
All traffic is encrypted using AES 256-bit standard — the same encryption the US government uses to protect classified information. This is also the encryption standard most VPNs use. But unlike other providers, ExpressVPN elaborates that it uses a 4096-bit SHA-512 RSA certificate as well as HMAC authentication, control-channel encryption and data-channel encryption.
More to the point, unlike many other VPN providers, which redirect your DNS traffic to a third party provider, ExpressVPN runs its own zero-knowledge DNS servers. This guarantees your data stays private.
When we used the software, testing on www.dnsleaktest.com confirmed there were no DNS leaks:
ExpressVPN has also created its own open source DNS testing tool, which you can access for free on GitHub.