What Is OpenVPN?

OpenVPN is one of the most trusted, widely supported VPN protocols around - open-source, highly secure, and available on almost every platform. It's a great fallback wherever it's needed, though for most people our newer Wireguard and Stealth Wireguard protocols are faster and simpler still. Here's what OpenVPN is, how it works, and how to set it up with Le VPN.

OpenVPN - the lowdown

OpenVPN is an open-source protocol that creates a secure, encrypted tunnel between your device and a VPN server, using SSL/TLS for key exchange - the same technology that secures HTTPS websites. It can traverse network address translators (NATs) and most firewalls, which is part of why it's so widely used.

You may never have chosen OpenVPN by name, but if you've used a VPN app that auto-selects a protocol, there's a good chance it picked OpenVPN for you at some point.

How OpenVPN works

OpenVPN authenticates the two ends of the connection using a pre-shared key, a certificate, or a username and password - Le VPN uses username/password (your VPN credentials) combined with server-issued certificates. It relies heavily on the OpenSSL encryption library and the TLS protocol, which bundles in a wide range of security and control features.

It can run over either TCP or UDP. Running over TCP port 443 in particular makes OpenVPN traffic look like ordinary HTTPS web traffic, which is one reason it's difficult for firewalls and network filters to block outright.

The pros and cons of OpenVPN

Like any protocol, OpenVPN is a trade-off compared to alternatives like Wireguard or L2TP/IPSec.

Pros

Works on almost every platform - Windows, macOS, Linux, Android, iOS, and routers.
One of the most secure protocols available, with strong encryption and support for perfect forward secrecy.
Hard to block - running over TCP 443, it can look like normal HTTPS traffic.
Free and open-source, with no per-user licensing cost to end users.

Cons

Needs a dedicated client - it isn't built into Windows or Linux, so you either use an app like Le VPN's or a separate OpenVPN client.
Not the friendliest for total beginners doing a fully manual setup - lots of configuration options to get right.
Can be marginally slower than newer protocols like Wireguard on some connections.

Set up OpenVPN with Le VPN

For the best speed and security, our new Windows, Android, and iOS apps offer Wireguard and Stealth Wireguard - the recommended choice for most people. Specifically want OpenVPN? Our legacy Windows app, macOS app, and Android app all support it natively. Prefer manual setup, or need it on a platform without a dedicated app? Pick your device below.

Want to compare OpenVPN to Le VPN's other protocols first? See the full protocol overview.

Quick recap

OpenVPN is a widely trusted, open-source VPN protocol that builds a secure, encrypted tunnel between your device and a VPN server using SSL/TLS - the same technology behind HTTPS websites. It's highly secure and runs on almost every platform, which makes it a dependable fallback, though Le VPN recommends the faster, simpler Wireguard and Stealth Wireguard protocols for most people.

OpenVPN (Open Virtual Private Network) - an open-source protocol prized for strong encryption and cross-platform support.
Runs over TCP or UDP; over TCP port 443 its traffic looks like ordinary HTTPS, making it hard to block.
Very secure and compatible everywhere, but needs a dedicated client and can be marginally slower than Wireguard.
Le VPN supports OpenVPN in its legacy Windows, macOS, and Android apps, plus manual setup on other devices.
For the best speed and security, Le VPN recommends Wireguard or Stealth Wireguard, with OpenVPN as a solid fallback.