cryptostorm Review

Cryptostorm is a VPN aimed at hardcore techies, or people who are willing to become one to protect their privacy. It is, without a doubt, one of the most user unfriendly VPNs we've reviewed, but its security is excellent and the price is right. Read our full cryptostorm review for the details.

By Steve IvaWriter
— Last Updated:
2020-09-03T09:29:34+00:00
(Editor)
Starts from $ 186
Free plan available (All Plans)

Cryptostorm sits in between good and bad VPNs, earning a rating of “just okay.” It comes from Vancouver, Canada, but has roots in Iceland and is committed to being the safest in its class. Dedicated to privacy and security, cryptostorm may seem a bit daunting at first glance, but the virtual private network has its good sides.

It is just right for people who place little value on nice interfaces, user experience and customer support. In the end, you use a VPN to ensure your own data protection and security, which is what you get with this VPN, no more and no less. More novice users may want to check out our selection of the best VPN providers, however, or check out ExpressVPN which tops that list.

In this cryptostorm review, we’ll talk about our experience after extensively testing (and criticizing) this unconventional VPN. We’ll discuss features, pricing, ease of use, supported devices, server locations, speed, security and customer service before giving our verdict.

Alternatives for cryptostorm

  1. 1
    • PayPal, Tokens
    • Simultaneous connections
    • Unlimited bandwidth
    • Can access Netflix US
    • Allows torrenting
    • No-logging policy
  2. 2
    • PayPal, Credit card, Bitcoin
    • 5 Simultaneous connections
    • Unlimited bandwidth
    • Can access Netflix US
    • Allows torrenting
    • No-logging policy
  3. 3
    • PayPal, Credit card
    • 7 Simultaneous connections
    • Unlimited bandwidth
    • Can access Netflix US
    • Allows torrenting
    • No-logging policy
  4. 4
    • Credit card
    • 6 Simultaneous connections
    • Unlimited bandwidth
    • Can access Netflix US
    • Allows torrenting
    • No-logging policy
  5. 5
    • PayPal, Credit card
    • 5 Simultaneous connections
    • Unlimited bandwidth
    • Can access Netflix US
    • Allows torrenting
    • No-logging policy

Strengths & Weaknesses

Strengths:

  • High security standards
  • Free plan
  • Killswitch
  • Supports bitcoin
  • No logs
  • Linux support
  • TOR support

Weaknesses:

  • Very slow
  • Not good for the technically impaired
  • Not good for streaming
  • Few servers outside of Europe & North America
  • Terrible interface
  • Almost no customer support
  • Terrible website


Features

80 % – Good

Cryptostorm offers many security options to configure, apart from VPN protocols, where it only allows you to use OpenVPN. That said, you can choose between the transport protocols, configure ECC instances and IPv6. We’ll talk more about that in the security section below.

In addition to choosing the port you use, you can choose between the locations you want to connect to, which is pretty much standard nowadays. It also comes with a killswitch, DNS leak protection, WebRTC leak prevention and many other features relevant to security.

We were able to access Netflix, even with the free version, but the speed was so bad it was unwatchable. If TV shows are a priority, check out our best VPN for Netflix selection, instead.

According to the vendor, the VPN is also suitable for torrenting, and thanks to its high security standards, we would rank it among the best VPN for torrenting, too. Like Netflix, though, the terrible speeds mean it won’t be making that list anytime soon.

Apart from that, there aren’t many features of note. Cryptostorm is focused on securing your connection and, in our experience, not much else. If you want bells and whistles, it isn’t the provider for you.

Pricing

70 % – Decent

Cryptostorm uses a token-based pricing system, which is unusual for a VPN. The service isn’t as cheap as GooseVPN, as you can read in our GooseVPN review, but it’s still reasonable. If you want more value for your money, you might want to check out our Private Internet Access review.

With cryptostorm, you buy tokens to use its VPN network. In contrast to many other VPN providers, you can choose between one-time orders and recurring subscriptions.

Since it has jumped on the blockchain hype, it also accepts bitcoin for all plans. In fact, you can only pay with PayPal or cryptocurrencies. That combined with the token-based pricing system makes cryptostorm one of the few truly anonymous VPNs on the market.

Tokens don’t expire, either. They only begin depleting when you start using them. If you have purchased a token and used less than 50 percent of it, you can get your money back. For example, if you buy a monthly token and only use it for a week, you can contact support and ask them for a full refund.

The plans differ in duration alone. As with most VPN providers, the longest subscription is also the cheapest. There are no restrictions on bandwidth, but the tokens are limited to one device, except on the annual and lifetime subscriptions, which allow four and six, respectively.

Cryptofree
  • Unlimited GB Bandwidth
  • 1 Included Devices
  • Bitcoin
Weekly
  • Unlimited GB Bandwidth
  • 1 Included Devices
  • Bitcoin
$ 1.86
monthly
Monthly
  • Unlimited GB Bandwidth
  • 1 Included Devices
  • Bitcoin
Yearly
  • Unlimited GB Bandwidth
  • 4 Included Devices
  • Bitcoin
1-year plan $ 4.33/ month
$52.00 billed every year
Lifetime
  • Unlimited GB Bandwidth
  • 6 Included Devices
  • Bitcoin
Lifetime plan $ 13.89/ month
$500.00 one time payment,
Monthly price for 3 years of use

In addition, cryptostorm offers a free plan, called cryptofree, which differs from the others in functionality, but not bandwidth. While using cryptofree, we noticed much slower speed than the paid options, as you’ll see in our speed tests.

Another drawback of the free version is that it doesn’t let you select the server you want to connect to.

Price-wise, everything is solid here. The fact that you can’t pay with credit cards or cold, hard cash like Mullvad (read our Mullvad review) is a bit annoying; however, with the ability to purchase lifetime access or pay at your own pace, cryptostorm looks excellent here.

Ease of Use

40 % – Terrible

The ease of use is, in one word, horrible. The website has color combinations that burn the eyes and descriptions that are difficult to understand, even for a software engineer.

Cryptostorm-Website

We installed the free version for this review. The good thing about cryptostorm is that you don’t have to create a user account. In fact, you can’t create one.

Make sure to install cryptostorm from the official website. If you type “download cryptostorm” into Google, you will get quite a few pages that look dubious, so make sure to avoid those. Here is the right download link.

Cryptostorm-Website-Free-Version

Select the correct version for your operating system. The download will start automatically and installation instructions for your OS will open.

Cryptostorm-Website-Installation

After you have downloaded the installation file, run it and follow the installation wizard. Then, launch the service and you will see the following.

Launch-Cryptostorm

Depending on whether you have purchased a token, you can choose between a few options here. If you’re using the free version, you can select “cryptofree” from the central drop-down menu. You will then see how the “token” input field fills automatically. After that, click “connect” and wait until cryptostorm does so.

Cryptostorm-connected

The biggest flaw is that the free version does not allow you to choose which server you want to connect to. Plus, it doesn’t tell you which server you are actually connected to, so you have to check that manually.

Besides that, the main menu is bare. “Update” refreshes the server list, “options” opens the advanced settings and “exit” closes the application.

If you click on “options,” you will see three submenus: “startup,” “connecting” and “security.”

Under “startup,” you will find settings related to starting and stopping cryptostorm. There are language settings, too, though they are bizarre. You can only choose between English and Japanese.

Cryptostorm-settings-startup

The next submenu, “connecting,” has configuration options for the connection to the VPN servers. You can select the port cryptostorm connects to, the transport protocol it uses (UDP or TCP) and the timeout settings.

Cryptostorm-settings-connecting

As the name suggests, you’ll find security settings in the “security” menu. ECC, IPv6, WebRTC, DNS leak prevention, DNSCrypt and a killswitch are the available options. If that was all Greek to you, check out our VPN security guide.

Cryptostorm-settings-security

The main menu has a few things that caught our eye. As soon as you’re connected to a server, you can’t access the options menu anymore. You have to cut the connection to do so. In addition, the “save” checkbox does not work. We had to enter the token again and again.

What’s more, the application freezes when connecting and disconnecting. From our experience, cryptostorm feels like a concept less beta version that has yet to be finished.

Supported Devices

90 % – Excellent

Cryptostorm covers Windows, macOS and Linux. It’s also configurable with your router and does not disappoint on the mobile side, either. Supporting most Android and iOS devices makes it look pretty good. It can also combine with the Tor network.

The number of simultaneous connections you can establish depends on the plan you purchase.

Cryptostorm-support-device

Here is how many connections you get with each plan:

  • One week: one connection
  • One month: one connection
  • Three months: two connections
  • Six months: three connections
  • One year: four connections
  • Two years: five connections
  • Lifetime: six connections

As this can get a bit confusing, we won’t be adding cryptostorm to our list of the best VPN for multiple devices, or, thanks to its interface, to the best VPN for Linux, either.

Server Locations

60 % – Fair

Cryptostorm has 28 servers, covering roughly the same area as TunnelBear (read our TunnelBear Review). Most are in Europe (14) and North America (14), which is not surprising since it is a Canadian VPN provider with roots in Iceland.

Russia, Ukraine and many EU member states were not considered by the VPN service. By itself, 13 countries — two servers are in Germany — may sound like a lot, but there are 47 countries in Europe, so it’s more like a fraction.

The only countries where you can choose between cities are Germany (two), Canada (two) and the U.S. (14). There’s not a single server in South America, Africa or Oceania. Asia is also covered less than inadequately, with a lone server in Hong Kong. CyberGhost and its 1,300+ servers make cryptostorm look bad (read our CyberGhost review).

Speed

40 % – Terrible

We ran speed tests from Germany using speedtest.net and speedof.me. Here are the results.

LocationPing
ms
Download
Mbps
Upload
Mbps
Unprotected3324.515.88
France on Cryptofree
1341
0.48
0.79
France
54
3.59
4.55
Hong Kong
233
0.22
0.53
Dallas, United States
210
3.15
6.96
Vancouver, Canada
148
4.32
4.67
Finland
82
2.38
4.67
Average
345
2.36
3.7

We tested each location in five runs and averaged the measured values. It is interesting to note that the download and upload rates vary greatly from run to run. That’s why we decided to bring in speedof.me, which returned the same results.

For the server in France, for example, we were able to determine values within a range of 3.44 Mbps to 9.61 Mbps. Hong Kong, Dallas and Vancouver were also affected by such fluctuations.

Latency is still within reasonable limits, as long as you don’t change continents. In Germany, the response times of the European servers were decent, so you can use cryptostorm for gaming. It won’t be making our best VPN for gaming list, though.

The download and upload speeds are, frankly, bad. Even connecting to a neighboring country such as France dropped our rate by 80 percent. We were astonished to find that the connection to Canada has higher download and upload speeds than the servers in France and Finland, so it’s not a consideration for the best VPN for streaming, either.

Cryptostorm’s speeds are just plain bad. The latency times are the only redeemable factor. Otherwise, it won’t be earning a place among the fastest VPN providers without major improvements.

Security & Privacy

95 % – Excellent

Cryptostorm has great security and privacy. It uses OpenVPN and works over a TLS/SSL channel. As for the cipher, the VPN convinces us with ChaCha, an algorithm optimized for mobile devices. ChaCha is comparable to AES, the de facto standard in encryption, but it’s much faster.

On top of that, cryptostorm protects its data with ECC, a public key encryption system. With such a system, you always have two keys: one private and one public. That means you can only decrypt the encrypted information if you have the private key. The private key uses mathematical functions for decryption.

ECC is one of them. It is basically a mathematical procedure to decrypt public and private keys. An alternative here is RSA. By comparison, if you have a 256-bit ECC key, you would need a 3072-bit RSA key in order to obtain the same level of security. That does not mean ECC is more secure than RSA, just that it performs better.

Cryptostorm lets you choose if you want to use ECC and if so, which encryption signature you want to use. You can pick “secp521r1,” Ed25519” or “Ed448.” Those are the different private key types (coordinates and signatures) you can choose.

We subjected cryptostorm to an IP leak test and got good results. Not only was the website unable to detect that we were using a VPN, but our real IP address was hidden as well. The service passed the WebRTC leak and DNS leak tests without problems, too.

cryptostorm Privacy

We are also impressed by the token system, which guarantees that no user information is stored. If you pay with bitcoin or any other cryptocurrency, you shouldn’t have any concerns about privacy. The tokens are deleted regularly, according to the provider. On the other hand, if you lose your token, cryptostorm won’t be able to help you.

Since everyone who buys a token via PayPal receives an email with it, it’s questionable how anonymous you actually are. The email address could be used to connect your identity to the token and cryptostorm would know what you are doing. In that case, your token would be your very own digital ID.

The service claims that no customer information is stored, but we are skeptical. It offers a money-back guarantee if less than 50 percent of the token has been used. If you buy a one-year token, cryptostorm would have to keep your information for at least six months to comply with its guarantee. That seems contradictory.

Compared to other VPN providers, such as HideMyAss (read our HideMyAss review) or VPNArea (read our VPNArea review), though, that is complaining on a high level.  All in all, cryptostorm can’t be fooled in terms of security and could rank among the safest VPNs out there.

Customer Service

20 % – Terrible

Cryptostorm offers email support and that’s about it. There is no live chat or knowledgebase, but there is a forum where users can ask questions. Things don’t get much clearer in the forum, though. There are two categories: “active topics” and “unanswered topics.”

Cryptostorm-forum-topics

The FAQ section has nothing to do with the cryptostorm VPN, but refers to the forum itself. Among other things, you can find questions like “how do I publish a post?” and other forum-related topics there. One could assume that someone using such a deep-tech VPN voluntarily — there are enough alternatives — would know how to deal with a forum.  

Cryptostorm-FAQ

The customer support is hard to find. On the website, you can see the following icons under “contact,” which don’t help much.

Cryptostorm-contact-us

We asked support if we need to verify a token before using it and what the token hasher is.

We didn’t understand what the answer was, but we have to point out that the reaction time of 30 minutes is good. That said, a salutation and being polite would be nice.

To sum it up, we found ourselves often on GitHub, trying to look for the answer to our question because whatever it is that cryptostorm offers you, it can hardly be called “customer support.”

The Verdict

When you visit cryptostorm’s website, you are first confronted with a tidal wave of buzzwords, such as “token-based,” “open source,” “non-compromised,” “bare metal servers” and “screamin’ fast,“ which helps develop a certain skepticism toward the vendor.

Poor design, an unmanageable website and a bunch of technical terms with which a normal person can’t deal lead to even more skepticism.

That has nothing to do with being a geek. Rather, it’s a weak excuse to blame design errors on the branding. For many users, cryptostorm may look like a half-heartedly programmed beta version of a VPN that a student made while working on a project.

Those who dig deeper will not be disappointed, though. Cryptostorm dominates in one area in particular: data protection and security. The service is just right for people who don’t care about the “frills” around their VPNs, but who primarily attach importance to online safety.

Have you used cryptostorm before? How did you like it? Let us know in the comments and thanks for reading.

Was this post helpful?

4 thoughts on “cryptostorm”

  1. I would like to disagree with part of your evaluation – Customer Service. I can’t recall how I first came across cryptostorm.is but I was not dissuaded by it nerdy tag-line “The OpenVPN service provider for the truly paranoid” – in fact it greatly appealed to me. Then once I discovered the Free Service I was quite impressed. I took for a spin and it was fine so I signed up for a 1mth “test” as I am using a competing service that will not run out until Oct 31.

    For some reason the nearby server was acting up preventing me from logging-in so I emailed Customer Support and I got a very pleasant email, apology, explanation and resolution by the next morning.

    I am really impressed with CryptoStorm – especially their onion services, in-depth and comprehensive “white papers”/blog posts on key VPN and Security Issues + alot of other unique services.

    Yes – I will be signing up for a 1yr sub very soon and I highly recommend that others set-aside fears about it seeming “user un-friendly” and consider that this kind of honest disclosure is what we need from more VPN’s.

    Reply
  2. Also I’d like to disagree with you. On a side note your site looks independent not just an affiliate site so thank you for that. I’ve been using Cryptostorm for 3 years now without any issues. They do have an IRC channel where I got some help at the beginning. It is true that the setup is slightly more complex but I’m a techie so that’s not a problem. In terms of speed, I use it primarily for streaming in 2 locations in Europe. Both allows me to watch my favourite channels without any glitches and the BitTorrent speed is also good. On the other hand Netflix does not work but I have not really insisted with it. Lastly, they are using a new protocol called Vanguard (from memory) which I use on my laptop and keep OpenVPN for the iPad. The fact that they use multiple protocols provides greater flexibility depending on the device you use.

    Reply
    1. Thank you for sharing your opinion and your kind words. However, I do want to point out that we do make our money off of affiliate commissions, we just don’t let it influence us. It’s a tough line to tread, but we manage.

      Reply
  3. As much as I like Cryptostorm’s service, I simply cannot escape the feeling that their service has begun a downhill slide.

    Technical support appears to be virtually non-existent at present. Encrypted emails sent to their support address are never answered.

    Their SSL certificate for Cryptostorm.ch expired on: 2020-05-10 — some 2-1/2 weeks later, it still has not been renewed. Given that the cryptostorm.ch site houses the Cryptostorm forum, this means that this and other services relying on this domain are inaccessible.

    I seem to recall that the Administrator of the Forum went MIA in January, 2020. It was first stated that they would return by the end of March, and I seem to recall that this was later extended to the end of May, 2020. This person is apparently responsible for the administration of the cryptostorm.nu domain — all services relying on that domain are inaccessible. This includes the token-checker.

    To be fair, given that the token-checker service is inaccessible, all tokens, regardless of validity, are still being accepted.

    Reply
Leave a Reply
Your email address will not be published. Required fields are marked *

Top