How to choose a VPN in Russia: a technical checklist

Most reviews compare VPNs by the number of countries and the size of the discount. For someone in Russia, other things matter more: will the service keep connecting when the network starts filtering traffic, and what does it know about you? Here is a checklist you can apply to any service, including ours.

#1. Protocols, not just "speed"

The classic OpenVPN and WireGuard protocols encrypt well but are easy to recognise by their handshakes. Since 2023 users in Russia have widely reported problems with them, especially on mobile networks.

Look for a service with protocols that resemble ordinary web traffic:

• VLESS Reality disguises itself as a TLS connection to a real website (how it works);
• Hysteria2 runs over QUIC, like HTTP/3 (more);
• Trojan is standard TLS 1.3 with a valid certificate;
• Shadowsocks 2022 is a lightweight protocol with no recognisable handshake.

What matters is not one "secret" protocol but several options and automatic switching: if one stops working, the app should move to another by itself.

#2. An app, not a configuration file

A service that hands you a link or a file for a third-party client leaves updating the settings to you. When a server changes its address or port, you have to hunt for a new link. A dedicated app fetches current settings automatically.

#3. What is kept, and for how long

"We keep no logs" is the most common and least verifiable claim. Read the privacy policy: it should state exactly what is stored (e-mail, sign-in IP, traffic volume), why, and for how many days. Concrete retention periods are a sign of honesty; vague wording is not.

#4. Open source and signed updates

If the app's code is open, anyone can check what it sends and where. Good signs are GitHub releases with SHA-256 checksums and updates that verify a signature before installing. A bad sign is an APK from a Telegram channel with no way to verify it.

#5. Transparency reports

A serious service publishes how many requests for data it received from authorities and how many it fulfilled. An empty "coming soon" section is worth less than nothing.

#6. Payment without extra data

It helps when you can pay by Russian bank card, SBP or cryptocurrency, and when card details are entered on the payment provider's page rather than at the VPN service. Check whether there is a free plan or trial, so you can test it on your own network before paying.

#7. Where the servers are and how far from you

Latency depends on distance. From Moscow, servers in Finland, Estonia, Latvia or Poland give tens of milliseconds; servers in North America give more than a hundred. Our servers page shows the approximate latency from your time zone.

#About the law

Using a VPN is not prohibited for individuals in Russia; since 2024, advertising ways to bypass blocking has been restricted. The rules change, so keep track of the current regulations yourself. This article is a technical comparison, not legal advice.

#The checklist

Colitu is measured by the same list: open source, security, transparency report and 10 GB free every month.