IVPN Review Australia 2026
Sourced personal VPN — USD numbered accounts, Sydney exits, public Cure53 PDFs
IVPN is for sale to Australians at printed USD prices, with a five-device Standard cap, optional Plus/Pro Suite extras, WireGuard and OpenVPN apps, and a 30-day money-back window on some website payments. There is no cheaper 2-year teaser and no free plan. Australian GST was not printed. Public Cure53 PDFs were read, including a 2019 no-logs audit IVPN will not repeat. Advertised Sydney servers are not data residency. Gibraltar’s Five Eyes status is recorded as unknown. No independent speed, leak or streaming tests were run.
- Best for
- Australian personal-VPN buyers who can pay in USD or crypto/cash, want an account ID without an email, accept a five-device Standard cap and a Sydney-only AU exit map, and will read billed USD totals plus dated public audit PDFs rather than a lab test.
- Not ideal for
- Anyone budgeting an AUD GST-inclusive monthly price, buyers who need confirmed Australian data residency or city exits beyond Sydney, current-iOS users who need a kill switch, households that need more than five devices without paying for Pro Suite, or organisations that need private-resource access.
SoftwareHQ does not currently have an affiliate arrangement with IVPN. The review is independent of commercial relationships. Affiliate disclosure
Overview
IVPN is a personal VPN. Ownership, logging claims and advertised exit locations are recorded separately. An Australian exit IP is not proof of Australian data residency.
Feature highlights
These highlights come from vendor documentation and editorial analysis of public sources. They are not firsthand test results or a claim that every listed capability was exercised in a trial.
- USD prices with no intro jump
On 12 Sep 2026 Standard was $6/month or $60/year. The $5/month equivalent of the yearly card is not the cancellable monthly price. There is no 2-year teaser that later renews higher.
- Account ID, no email required
Signup does not ask for an email, name or other personal data. An optional email can be added later. Generating an account does not add time and is not a free plan.
- Five devices on Standard and Plus; ten on Pro Suite
Starting listed paid plan is 5 devices / 5 simultaneous connections. Pro Suite raises that to 10 and adds Portmaster Pro on Linux/Windows. A router uses one of those slots.
- Sydney exits only, rented bare metal
The public list on 12 Sep 2026 named two Sydney gateways with M247. That is not Melbourne/Brisbane/Perth coverage and not Australian account data residency.
- Kill switch is not on current iOS
Firewall/kill switch is documented on Windows, macOS, Linux and Android. It was removed from the iOS app for iOS 16+ after Apple-service traffic bypassed includeAllNetworks.
- Public Cure53 PDFs you can actually open
The 2019 no-logs PDF, 2021 apps PDF, 2023 gateway PDF, 2024 website PDF, 2025 Mailx PDF and 2025 modDNS PDF were downloaded and read. IVPN says it will not repeat the no-logs format. A blog is not the report.
Ownership and jurisdiction
Legal entity and jurisdiction are not the exit-server map.
- Legal entity
- IVPN Limited
- Jurisdiction
- Gibraltar
- Parent company
- None named; team page states the founder is 100% owner of IVPN Limited
- Five Eyes
- Unknown
Terms: operated by IVPN Limited. Legal-process page address: 5 Secretary’s lane, GX11 1AA, Gibraltar. GRA is named as the GDPR supervisory authority. Blog 10 Aug 2023: renamed from Privatus Limited; ownership, jurisdiction and address unchanged. Team page: founder and CEO is 100% owner. Gibraltar is a British Overseas Territory. IVPN’s 21 Jan 2016 blog argues Gibraltarian providers are not UK Five Eyes members and that RIPA does not apply. That is vendor legal commentary, not a determination by this site — five_eyes stays unknown. Jurisdiction here is the legal entity, not the exit-server map.
- https://www.ivpn.net/en/tos · checked 2026-09-12
- https://www.ivpn.net/en/legal-process-guidelines/ · checked 2026-09-12
- https://www.ivpn.net/en/team/ · checked 2026-09-12
- https://www.ivpn.net/blog/change-company-name-privatus-ivpn-limited/ · checked 2026-09-12
- https://www.ivpn.net/blog/should-gibraltar-be-classified-as-a-member-of-the-five-eyes-alliance/ · checked 2026-09-12
Logging and retained data
A vendor no-logs claim is not proof of zero retained account or payment data.
- Logging policy
- Vendor no-logs claim
- Retained service data
- Documented retained service data
Privacy policy: no traffic logging; no connection timestamp or duration; no DNS request logging; no user bandwidth; no customer IP addresses; no account activity except the live simultaneous-connection and device-session counts held while logged in. Signup stores an account ID, created-at timestamp, product and max devices. A March 2019 Cure53 no-logs PDF was read; IVPN’s June 2026 audit blog says that format will not be repeated.
- account ID, created-at timestamp, product name and max-devices cap
- payment records (payment ID, account ID, amount, currency, timestamp, processor transaction ID; PayPal/Braintree subscription IDs when auto-renew is enabled; voucher codes for 30 days after redemption)
- temporary device-session tokens (16-character token + account ID; optional A–G device name if device management is enabled) deleted on logout or account deletion
- temporary simultaneous-connection records on the authentication server for the duration of a VPN session only
- optional email if the customer adds one after signup
- accounting remnants after account deletion (payment date, amount, method, transaction ID, subscription ID) with no link to the past account ID after 90 days, or immediately if the customer deletes the account
- self-hosted Matomo analytics with last two IP octets discarded; optional first-party cookie
- mobile crash logs on-device by default (opt-out); desktop crash logs only if the user confirms; stored on IVPN-hosted servers
A no-logs claim is not proof of zero retained data. Card and PayPal payments go through Braintree and PayPal, which log. Privacy policy: IVPN is subject to EU data-protection rules and will not locate servers where that would force a break of that compliance. Account data location is not named as Australia. August 2026 BTCPay/Lightning incident: vendor says the payment server held no customer database and no HTTP request logs; that is a vendor incident report, not a no-logs proof.
Account/control-plane systems are described as self-hosted by IVPN, not Australia. Live connection limits are enforced in temporary memory talking to a central authentication server. This is not a numeric privacy score.
- https://www.ivpn.net/en/privacy/ · checked 2026-09-12
- https://www.ivpn.net/blog/ivpn-no-logging-claim-verified-by-independent-audit/ · checked 2026-09-12
- https://www.ivpn.net/blog/annual-security-audit-scheduled-2026/ · checked 2026-09-12
- https://www.ivpn.net/blog/security-incident-bitcoin-payment-server/ · checked 2026-09-12
Locations and hosting
Advertised exit countries, physical-versus-virtual evidence, control-plane hosting and account data residency are separate. An Australian exit IP is not Australian data residency.
- Advertised exits
- AU
- Australian exit
- Advertised — not proof of Australian data residency
- Exit location evidence
- Advertised
- Physical vs virtual
- Physical
- Control-plane hosting
- Overseas
- Account data residency
- Unknown
- Legacy data_hosting field
- Unknown
Status page 12 Sep 2026: bare-metal, no virtual locations, 89 gateways, 17 datacenter partners. Heading copy said 41 countries / 58 locations; the same page’s country filter and api.ivpn.net/v5/servers/stats listed 42 countries / 59 cities / 89 servers (88 active). Australian exits: Sydney only — au-nsw1.gw.ivpn.net and au-nsw2.gw.ivpn.net, ISP M247, WireGuard+OpenVPN, both active. No Melbourne, Brisbane, Perth or Adelaide. A small number of RAM-only (diskless) gateways are described as a pilot, not the whole fleet. An Australian exit IP is not Australian data residency. Privacy policy does not place account data in Australia. data_hosting stays unknown.
- https://www.ivpn.net/en/status/ · checked 2026-09-12
- https://api.ivpn.net/v5/servers/stats · checked 2026-09-12
- https://www.ivpn.net/en/privacy/ · checked 2026-09-12
Per-platform features
Protocol, kill switch and split tunnel are recorded per platform. Missing documentation stays unknown or not tested.
| Platform | Protocols | Kill switch | Split tunnel |
|---|---|---|---|
| Windows | WireGuard, OpenVPN, Other | Yes | Yes |
| macOS | WireGuard, OpenVPN, Other | Yes | No |
| iOS | WireGuard, OpenVPN, IKEv2, Other | No | No |
| Android | WireGuard, OpenVPN, Other | Yes | Yes |
| Linux | WireGuard, OpenVPN, Other | Yes | Yes |
Windows: Apps and protocol KB: WireGuard and OpenVPN in-app. V2Ray (VMess over QUIC or TCP) and obfs4 for OpenVPN stored as other. Quantum-resistant WireGuard by default. Kill switch / IVPN Firewall documented (WFP). Split tunnel exclude-apps plus inverse mode (inverse cannot use the firewall). SOCKS5 proxy is a server-side extra, not a protocol row. Not leak-tested.
macOS: macOS apps page (12 Sep 2026, Chrome redirected /en/apps/ to /en/apps-macos/): macOS 12+; WireGuard or OpenVPN; V2Ray and obfs4; Firewall/killswitch on-demand or always-on. Split tunneling is documented on Windows, Linux and Android only — not macOS. Manual IKEv2 exists as a non-app setup guide, not an in-app protocol. Not leak-tested.
iOS: Protocol KB: iOS app supports OpenVPN, WireGuard and IPSec/IKEv2. V2Ray obfuscation is documented on every platform (other). Kill switch was removed for iOS 16+ (blog 1 Aug 2023) because includeAllNetworks still leaked Apple-service traffic; KB still says the firewall existed up to iOS 15. Split tunnel is not listed for iOS. Pause VPN is documented as except iOS. App Store refunds go through Apple. Not leak-tested.
Android: Homepage and split-tunnel FAQ: kill switch / firewall on Android; split tunnelling toggle per app. V2Ray on all platforms (other). IVPN blog 13 Jun 2024 describes an Android OS getaddrinfo DNS leak that can bypass Always-on VPN / Block connections without VPN — that is an OS issue, not a lab test by this site.
Linux: WireGuard and OpenVPN in-app; V2Ray and obfs4 (other). Kill switch via iptables. Split tunnel plus inverse mode (inverse cannot use the firewall). CLI supported. Portmaster Pro on Pro Suite is a separate Windows/Linux firewall, not the VPN kill switch.
Device limits and free tier
- Devices
- 5
- Concurrent connections
- 5
- Free tier
- No free tier
- Free-tier data cap
- Unknown
No free plan on ivpn.net. Signup generates an account ID without adding time. Weekly paid SKUs are not a free tier. IVPN Light is a separate Lightning-invoiced short tunnel (from 3 hours), not a free plan and not this listing. 30-day money-back is a paid-purchase refund window, once per account and per customer. Port forwarding is not offered.
Audit register
Cure53
No-logs verification of IVPN VPN gateways and authentication servers against two claims: no logging of traffic, IP addresses or DNS requests; no statistical logging of customer traffic. Three auditors, seven days, March 2019. Public 8-page PDF dated 20 Mar 2019. Entity named on the PDF: Privatus Limited.
- Report date
- 2019-03-20
- Availability
- Full report published
- Inspection
- Independently inspected
PDF downloaded and read on 12 Sep 2026. One Low finding (Unbound DNS cache, IVP-01-001). Quote: privacy statements could be verified as truthful within the defined scope. Point-in-time March 2019. IVPN’s 19 Jun 2026 blog: this is the last and only no-logs audit; they will not commission another. A no-logs PDF is not proof of zero retained payment data in 2026, and not a numeric security score.
Cure53
White-box pentest and source-code audit of IVPN iOS/Android/desktop apps and the then-unreleased daemon (IVP-03). Five testers, 18 person-days, Feb–Mar 2021. Public 16-page PDF dated 3 Mar 2021.
- Report date
- 2021-03-03
- Availability
- Full report published
- Inspection
- Independently inspected
PDF downloaded and read on 12 Sep 2026. Four vulnerabilities including two Critical local privilege escalations in the unreleased daemon (IVP-03-007, IVP-03-013), plus miscellaneous issues. Report: relevant issues addressed before publication; daemon issues were not exposed to then-current users. Point-in-time 2021 apps, not a 2026 client census, not a no-logs proof.
Cure53
Source-code-assisted pentest of IVPN VPN gateway server, server OS and OS setup (IVP-05). Two testers, six days, CW08 2023. Public 15-page PDF dated 13 Mar 2023. Requested by Privatus Limited.
- Report date
- 2023-03-13
- Availability
- Full report published
- Inspection
- Independently inspected
PDF downloaded and read on 12 Sep 2026. Three vulnerabilities (0 critical/high; one Medium DNS-filter crash) plus miscellaneous local-hardening notes. Quote: overall good impression; most issues need prior local access. Staging/test-server review, not a production-fleet census. Point-in-time; not a numeric security score.
Cure53
White-box pentest and code audit of the IVPN customer website UI and API, plus gray-box review of related web servers and infrastructure (IVP-06). Four testers, eight days, March 2024 (CW11). Public 13-page PDF dated 8 Apr 2024.
- Report date
- 2024-04-08
- Availability
- Full report published
- Inspection
- Independently inspected
PDF downloaded and read on 12 Sep 2026. Two Low vulnerabilities and two informational notes. Quote: undeniably impressed with the overall security posture. Customer website, not a VPN-gateway no-logs audit. Point-in-time; not a numeric security score.
Cure53
White-box pentest and source-code audit of the IVPN Mailx email-aliasing app UI and API (IVP-07). Four testers, eight days, May 2025 (CW21/CW22). Public 21-page PDF dated 15 Jul 2025, hosted on ivpn.net/resources.
- Report date
- 2025-07-15
- Availability
- Full report published
- Inspection
- Independently inspected
PDF downloaded and read on 12 Sep 2026. Six vulnerabilities (1 Critical SQL injection, 2 High, 1 Medium, 2 Low) plus one info. Vendor blog: remediations before Mailx beta. Mailx is a Plus/Pro Suite add-on, not the VPN tunnel. Point-in-time; not a numeric security score.
Cure53
White-box pentest and source-code audit of the IVPN modDNS app UI and API (IVP-08), run in parallel with IVP-07. Public 16-page PDF dated 6 Jun 2025, hosted on ivpn.net/resources.
- Report date
- 2025-06-06
- Availability
- Full report published
- Inspection
- Independently inspected
PDF downloaded and read on 12 Sep 2026. Two vulnerabilities (1 Medium TOTP backup-code generation, 1 Low 2FA rate-limit) plus one info. 0 High/Critical. modDNS is a Plus/Pro Suite add-on. Point-in-time; not a VPN no-logs proof.
Cure53
Eighth annual audit announced 19 Jun 2026, scheduled for two weeks in July 2026. Named scope: Unlinked Access cryptography and privacy model (generator, token and preauth, verifier and distributor). No results blog and no public PDF were found on 12 Sep 2026.
- Report date
- Unknown
- Availability
- Announcement only
- Inspection
- Not independently inspected
Vendor schedule post only. A scheduled audit is not an inspected report. Homepage ‘eight audits since 2019’ matches the published 2019–2025 PDFs (counting Mailx and modDNS separately), not this 2026 announcement.
When this was checked
Status as of (page snapshot) against a 90-day review target. Checked dates are not updated when the site is rebuilt.
Editorial article date: . That is not proof that pricing, hosting, or compliance was re-checked.
- PricingVerified
Verified — checked 12 September 2026.
AU session. USD Standard $6/mo or $60/year; Plus $8/$80; Pro Suite $10/$100. Weekly $2/$3/$4 not stored as monthly. No AUD SKU. GST unknown. Checkout not started.
- HostingUnknown
Unknown — checked date 12 September 2026 is not field-level evidence on its own.
Advertised Sydney exits only. Account data is not described as stored in Australia. Unknown is not AU.
Subscription pricing
Prices below are in USD, not AUD. GST unknown. An effective monthly equivalent is not a cancellable monthly price. Verified — checked 12 September 2026. Source: ivpn.net/pricing.
Pricing page 12 Sep 2026: Standard 1 Month $6, 5 devices, AntiTracker, multi-hop. Pricing in USD. No AUD SKU and no printed Australian GST line. 1 Week $2 is a separate weekly SKU, not this monthly price. 5 devices. Checkout was not started.
- Introductory billed total
- 6.00 USD
- Term
- 1 month
- Bonus months
- None
- Effective monthly equivalent
- 6.00 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 6.00 USD / 1 month
- Month-to-month option
- 6.00 USD
Checked 2026-09-12
Printed 1 Year $60 for Standard. 12 × $5 equivalent = $60 (hand check 6000/12=500). This $5 equivalent is not the cancellable monthly price ($6). Auto-renew is optional (account Billing: uncheck Recurring payments). After the year, another purchase is the listed rate — there is no higher ‘then’ price on the card. Checkout was not started.
- Introductory billed total
- 60.00 USD
- Term
- 12 months
- Bonus months
- None
- Effective monthly equivalent
- 5.00 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 60.00 USD / 12 months
- Month-to-month option
- 6.00 USD
Checked 2026-09-12
Printed 1 Year $80 for Plus (5 devices plus Mailx and modDNS). 8000/12=666.67, recorded 667. Plus 1 Month is $8 (800 cents) — that is the cancellable Plus monthly option, not stored as price_monthly on this yearly row. Checkout was not started.
- Introductory billed total
- 80.00 USD
- Term
- 12 months
- Bonus months
- None
- Effective monthly equivalent
- 6.67 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 80.00 USD / 12 months
- Month-to-month option
- 8.00 USD
Checked 2026-09-12
Printed 1 Year $100 for Pro Suite (10 devices plus Mailx, modDNS and Portmaster Pro on Linux/Windows). 10000/12=833.33, recorded 833. Pro Suite 1 Month is $10. Portmaster Pro is not an iOS/Android/macOS app. Checkout was not started.
- Introductory billed total
- 100.00 USD
- Term
- 12 months
- Bonus months
- None
- Effective monthly equivalent
- 8.33 USD effective monthly equivalent — not a cancellable monthly price
- Renewal
- 100.00 USD / 12 months
- Month-to-month option
- 10.00 USD
Checked 2026-09-12
Compare IVPN subscription cash outlay
Observed price changes
Recorded when a listed price changed. This is not a complete vendor timeline.
- First AU-session capture from ivpn.net/en/pricing. USD Standard $6/mo or $60/year (5 devices); Plus $8/mo or $80/year; Pro Suite $10/mo or $100/year (10 devices). Weekly $2/$3/$4 not stored as monthly. No AUD SKU. No printed Australian GST. Checkout not started.
Pros & Cons
Pros
- Public pricing grid loaded from Australia on 12 Sep 2026 and printed USD Standard $6/month or $60/year with no intro-then-jump
- No email required on signup; cash, Monero and Bitcoin accepted
- 30-day money-back once per account/customer on card, PayPal, Bitcoin and Monero (not cash, vouchers or IVPN Light)
- Starting listed plan is 5 devices; Pro Suite is 10
- Advertised Australian exit: Sydney (two M247 gateways on 12 Sep 2026)
- Vendor documentation: dedicated bare-metal, no virtual locations
- WireGuard and OpenVPN documented on Windows, macOS, iOS, Android and Linux; IKEv2 in the iOS app
- Kill switch documented on Windows, macOS, Linux and Android
- Cure53 2019 no-logs, 2021 apps, 2023 gateway, 2024 website, 2025 Mailx and 2025 modDNS PDFs were downloaded and read
Cons
- Prices are USD; no billed AUD SKU and no printed Australian GST; gst_basis unknown
- No free plan; generating an account does not add time
- Standard/Plus five-device cap; a router consumes one of those five
- Australian exits are Sydney only — not Melbourne, Brisbane, Perth or Adelaide
- Current iOS has no kill switch (removed for iOS 16+); iOS and macOS have no split tunnel
- Port forwarding is not offered; no streaming compatibility guarantee
- Gibraltar Five Eyes status is unknown; a 2016 vendor blog is not a legal determination
- 2019 no-logs audit will not be repeated, per IVPN; later audits are apps/web/add-ons, not a new no-logs study
- August 2026 self-hosted BTCPay incident stole vendor Lightning funds (vendor: no customer data). Support is email, not an Australian phone. No independent speed, leak-test or streaming-unblocking results
How this review was made
Reviews separate vendor documentation, editorial analysis and firsthand records. They are not interchangeable.
- Vendor documentation — Public pages from IVPN and other sites. Recorded HTTP(S) URLs are listed under Sources. A source URL is a document we recorded, not a claim that every sentence on this page was checked against that URL.
- Editorial analysis — SoftwareHQ's written verdict and scores for Australian buyers. The header score is an editorial assessment, not a user-review average, not a lab result, and not a number derived from how many evidence records exist.
- Firsthand records — This review has no firsthand observation records, trial walkthroughs, or screenshots from a logged-in SoftwareHQ account. Missing tests stay not tested.
This page does not rank products by speed or security from documentation or from evidence count.
Checked by SoftwareHQ Editorial Team. There is no named author profile for this page; attribution stays with the SoftwareHQ editorial team. How we test and the editorial policy for scoring, independence and affiliate rules.
Sources
Public pages recorded when this review was compiled. They are not a checklist that every claim was verified, and they are not evidence of hands-on product testing.
- Ivpn official site
- Ivpn En
- Ivpn pricing
- Ivpn privacy policy
- Ivpn Tos
- Ivpn Refunds
- Ivpn Status
- Api Stats
- Ivpn Team
- Ivpn Ethics
- Ivpn Transparency Report
- Ivpn Legal Process Guidelines
- Ivpn Contactus
- Ivpn Apps
- Ivpn Apps Macos
- Ivpn Do You Offer A Kill Switch Or Vpn Firewall
- Ivpn Split Tunnel FAQ
- Ivpn What Vpn Protocols Do You Offer
- Ivpn Ivpn Subscription Tiers Explained Plan Differences Billing And Service Management
- Ivpn How Can I Cancel My Ivpn Subscription
- Ivpn Ivpn Plan Changes New Plus Tier Increased Device Limits Additional Privacy Services
- Ivpn Audit
- Ivpn Ivpn No Logging Claim Verified By Independent Audit
- Ivpn Ivpn Sixth Security Audit Concluded
- Ivpn Ivpn Infrastructure Audit Concluded
- Ivpn Annual Security Audit Scheduled 2026
- Ivpn Mailx Beta Audited Open Source Email Aliasing
- Ivpn Moddns Beta Audited Dns Filtering Granular Controls
- Ivpn Removal Of Kill Switch From Our Ios App Due To Apple Ip Leak Issue
- Ivpn Should Gibraltar Be Classified As A Member Of The Five Eyes Alliance
- Ivpn Change Company Name Privatus Ivpn Limited
- Ivpn Security Incident Bitcoin Payment Server
- Ivpn Pricing Teams
- Cure53 Audit Report Ivpn.pdf
- Cure53 Pentest Report Ivpn.pdf
- Cure53 Pentest Report Ivpn 2023.pdf
- Cure53 Pentest Report Ivpn 2024.pdf
- Ivpn Ivp 07 Report.pdf
- Ivpn Ivp 08 Report.pdf
IVPN Alternatives
If IVPN doesn’t quite fit your needs, consider these alternatives for Australian businesses:
- NordVPN — Personal VPN with prepaid intros, advertised AU exits, login-walled audit.
- Surfshark — Unlimited-device VPN with prepaid AUD intros and a public Deloitte report.
- ExpressVPN — USD prepaid VPN, advertised AU exits, inspectable KPMG report.
- Proton VPN — Swiss-jurisdiction VPN with a restricted free plan and public Securitum PDFs.
- Mullvad VPN — Swedish numbered-account VPN at a flat €5/month, public audit PDFs. From $5/mo.
Buyer guide
Source-based VPN guides for IVPN: what a VPN encrypts, billed-term cash, free versus paid caps, how intro differs from renewal, how to read audits, how kill switch, split tunnel and protocols vary by OS, and when a consumer exit is the wrong product for company resources. Not a ranking.