ExpressVPN: TrustedServer hardware, Lightway protocol, tier-dependent device count

Device allowance by subscription tier

ExpressVPN's simultaneous connection allowance varies by subscription tier. Basic supports ten devices; Advanced supports twelve; Express Pro supports fourteen. A subscriber who needs more than ten simultaneous connections must choose a higher-tier plan, and higher-tier plans carry a higher subscription cost. The additional connections come at a price premium rather than being bundled into a single plan. For most subscribers, ten connections is sufficient; the Advanced and Express Pro tiers exist for those who need more capacity. ExpressVPN's pricing page documents the current cost for each tier and describes the feature differences between them. Supported platforms include Windows, macOS, Linux, iOS, Android, and routers. Smart TVs are listed on the ExpressVPN platform page as a supported platform with a dedicated app. Gaming consoles are also listed on the platform page, but they are covered through a router or ExpressVPN's MediaStreamer DNS service rather than through software running on the console device itself. MediaStreamer is a DNS-based service that ExpressVPN describes on its feature pages; it differs from a full encrypted VPN tunnel in how it operates and what it covers. Country coverage as published on the official ExpressVPN website is 113 countries. Browser extensions for Chrome and Firefox are also available.

TrustedServer

TrustedServer is ExpressVPN's name for its RAM-only server infrastructure. The servers write nothing to disk during operation. When a server is rebooted, it loads a fresh copy of the configured software from a verified image and starts with no data carried over from prior sessions. ExpressVPN describes TrustedServer as a design-level approach: RAM-only operation removes the possibility of session data being retained on physical media, because there is no disk for data to persist on. The same property applies whether the restart is planned maintenance or an unplanned power event. Third-party auditors have reviewed the TrustedServer architecture as part of ExpressVPN's broader audit program; those findings are referenced in the company's published documentation and form part of the audit record.

Lightway protocol

Lightway is ExpressVPN's own protocol, developed independently. It is not derived from or based on WireGuard; the two protocols share no development lineage. The Lightway source code is publicly available for outside inspection instead of requiring reliance on ExpressVPN's product description alone. Lightway is the default protocol on platforms where it is supported. ExpressVPN's documentation describes which platforms and versions support Lightway and which other protocols are available on each. The source code availability and the TrustedServer audit together provide two separate points of external verification for ExpressVPN's technical claims.

Audit history since 2018

ExpressVPN has published third-party audit results going back to 2018. Those assessments cover the application code, the no-logs policy, and the TrustedServer infrastructure. Multiple firms have conducted assessments across that period, and the results are documented in ExpressVPN's published materials. An audit record spanning several years across multiple cycles reflects the service as it currently operates rather than as it was built earlier. The full list of audit reports and which firms conducted each is available in ExpressVPN's transparency documentation. The audit program covers multiple aspects of the service rather than a single narrow scope, and the reports have been updated as the service has evolved.

Pricing, trial, and refund

A three-day mobile trial is available on iOS and Android for new subscribers. A thirty-day money-back guarantee applies to first-time direct subscribers. The guarantee applies to subscriptions purchased directly through ExpressVPN; purchases through an app store follow that store's own return process rather than ExpressVPN's direct guarantee. Promotional introductory rates on longer plans differ from the renewal rate, and the pricing page displays both figures. The pricing page shows the current per-tier rates and the renewal figures that apply after the first term ends. The renewal figure applies after the initial term ends.

ExpressVPN additional notes

ExpressVPN is a product of Kape Technologies, which also operates other consumer VPN brands. The organizational ownership is publicly documented alongside ExpressVPN's company information. It does not change the service's published technical specifications. ExpressVPN accepts payment by credit card, PayPal, Bitcoin, and other methods listed on its payment page. A router subscription option is also available, covering router-connected devices through a dedicated router plan that is managed separately from the standard personal plan. ExpressVPN's privacy policy is available at expressvpn.com and describes what data ExpressVPN collects and retains. ExpressVPN also offers a password manager called Keys on some plan tiers; it is separate from the VPN service. ExpressVPN publishes separate pages for subscription terms, protocol details, platform support, and its audit archive. Each audit cycle covers a defined scope, and ExpressVPN references the associated reports on its transparency pages. The accumulated record across cycles since 2018 covers apps, no-logs policy, and TrustedServer infrastructure across multiple engagements. Higher-tier plans are differentiated by connection allowance, with each tier documented at its current price on the pricing page.