Every ApexVPN Feature, Explained
"VPN" is a simple word for a genuinely complex piece of security software. Encryption standards, kill switches, split tunneling, DNS leak protection, multi-hop routing — each one solves a different privacy problem, and knowing what they actually do helps you get real value out ofApexVPN, not just a green "connected" light.
This page walks through every feature in ApexVPN, on Windows, Mac, Chrome, Firefox and Safari, in plain language — what it is, why it exists, and when you'd actually want to use it.
What Actually Makes a VPN Secure?
When you connect toApexVPN, your device builds an encrypted tunnel to one of our servers. Everything inside that tunnel — the websites you visit, the apps you use, your DNS requests — is scrambled using AES-256 encryption, the same standard used by banks, governments, and security agencies worldwide. Anyone intercepting your traffic between your device and the ApexVPN server, whether that's your ISP, the operator of a public Wi-Fi hotspot, or someone on the same network, sees only unreadable, encrypted data.
VPN Protocols: WireGuard vs. OpenVPN vs. IKEv2
The "protocol" is the underlying technology that builds and maintains that encrypted tunnel. There are three protocols you'll commonly see across the VPN industry:
- WireGuard — a modern, lightweight protocol with a small codebase, strong cryptography (ChaCha20), and significantly faster connection and re-connection times than older protocols. ApexVPN uses a WireGuard-based protocol by default because it offers the best balance of speed and security for most people.
- OpenVPN— an older, extensively audited open-source protocol. It's slower than WireGuard but has a long track record and works well in restrictive network environments.
- IKEv2/IPSec— known for quickly re-establishing a connection after a network switch (like moving from Wi-Fi to mobile data), which makes it popular on mobile devices.
In short: the protocol determines how fast and how resilient your connection is, while AES-256 (or ChaCha20 with WireGuard) determines how strong the encryption itself is. ApexVPN handles this automatically, so you don't have to understand the cryptography to benefit from it — but if you want to dig deeper, see ourLearnsection for guides on how encryption actually works.
Automatic Kill Switch: Your Safety Net
Here's the problem a kill switch solves: VPN connections occasionally drop — your Wi-Fi hiccups, you switch networks, or the app briefly loses its connection to the server. Without protection, your device would quietly fall back to your normal, unencrypted internet connection during that gap, exposing your real IP address and any unencrypted traffic, often without you noticing.
ApexVPN's kill switch closes that gap. The moment it detects the VPN connection has dropped, it immediately blocks all internet traffic on your device until the secure connection is restored. Nothing leaks out in between.
There are generally two implementations of a kill switch across the VPN industry:
- System-level— blocks all internet traffic on the device, full stop, until the VPN reconnects.
- Application-level— blocks internet access only for apps you've specifically chosen to protect.
A kill switch matters most when you're on public Wi-Fi, when you're relying on the VPN to mask your location, or any time an unexpected, unprotected connection would be a real problem rather than a minor inconvenience.
Split Tunneling: Choose What Goes Through the VPN
By default, a VPN routes every byte of traffic leaving your device through the encrypted tunnel. Split tunneling gives you a more surgical option: you decide which specific apps or websites use the VPN, and which connect directly, using your normal network.
Common reasons people use split tunneling
- Some banking apps or local government sites block or flag VPN traffic — you can exclude just that app while keeping your browser protected.
- Accessing devices on your local network (a printer, a smart TV, a NAS drive) that a VPN would otherwise interfere with.
- Reducing latency in games or video calls that don't need to be encrypted, while still protecting your browser and other sensitive apps.
- Saving bandwidth by routing only the traffic that actually needs privacy through the encrypted tunnel.
One important trade-off: anything you exclude from the VPN isn't protected by it. Split tunneling is a convenience feature, not a way to get "VPN protection" and "no VPN" at the same time for the same app. If you're unsure, the safer default is to route everything through ApexVPN and only exclude specific apps when you have a clear reason to.
What "No-Logs" Actually Means
"No-logs" is one of the most overused phrases in the VPN industry, so it's worth being precise about it. A genuine no-logs policy means a provider does not record:
- The websites or services you visit while connected
- Your original IP address, or the VPN IP address assigned to you
- Connection timestamps — when you connected and disconnected
- Session duration or bandwidth used per session, tied to your identity
ApexVPN is built so this data is never written to disk in the first place, rather than collected and then quietly retained or sold. The only information we keep is what's strictly necessary to run your account: your email address and subscription/billing status, so you can log in and we can process payments. Read the full breakdown in ourPrivacy policy.
A related question people often ask: does a no-logs policy matter if the VPN provider could theoretically still be compelled to hand over data? The honest answer is that a properly implemented no-logs architecture means there's simply nothing meaningful to hand over — you can't disclose data you never collected.
Advanced Privacy Features
DNS Leak Protection
Every time you visit a website, your device makes a DNS request to translate that domain name into an IP address. Without protection, those requests can bypass the VPN tunnel and go straight to your ISP's DNS servers — quietly revealing which sites you visit, even while the rest of your traffic is encrypted. ApexVPN routes all DNS requests through its own encrypted servers by default, closing that gap.
Double VPN (Multi-Hop)
Instead of routing your traffic through a single server, double VPN sends it through two separate ApexVPN servers in sequence, encrypting it twice along the way. This means no single server ever has both your real IP address and your final destination at the same time. It's a meaningful privacy boost for higher-risk situations, at the cost of some connection speed compared to a standard single-hop connection.
Obfuscated Servers
Some networks and firewalls try to detect and block VPN traffic outright. Obfuscation disguises your encrypted VPN traffic to look like regular HTTPS traffic, making it far harder for network-level filters to identify and block, without weakening the underlying encryption.
Speed That Doesn't Cost You Privacy
Every VPN adds some overhead — your data has to be encrypted, routed to a server, and decrypted, which takes marginally more time than a direct connection. The goal isn't to eliminate that overhead entirely (that's physically impossible) but to make it small enough that you don't notice it in everyday use.
ApexVPN keeps performance high through a combination of:
- A WireGuard-based protocol, which has meaningfully lower overhead than older protocols like OpenVPN
- A global network of servers, so you can connect to a location physically closer to you for lower latency
- Unlimited bandwidth on every plan — no artificial speed caps or data limits
- No bandwidth throttling, even during heavy use like streaming or large downloads
- Smart server selection that automatically picks a fast, low-load server for you
In practice, the biggest factors affecting your actual speed are the distance to the server you choose and your own base internet connection — picking a nearby server location is the single easiest way to maximize your speed.
Streaming, Travel & Unblocking Content
Streaming platforms license content on a country-by-country basis, which means the same service can show a different catalog depending on where you're connecting from. By connecting to an ApexVPN server in a different country, you appear to browse from that location instead of your actual one — useful for travelers who want access to their home region's content while abroad, or anyone curious what's available in another country's library.
Streaming services actively work to detect and block VPN traffic, so results can vary by platform, server, and over time as both sides adjust their techniques — no VPN provider, including ApexVPN, can honestly promise permanent, guaranteed access to every platform. What we can promise is a large, actively maintained server network and a support team who can point you toward servers known to work well for streaming.
Built-In Ad & Tracker Blocking
Beyond encrypting your connection, ApexVPN filters out known ad and tracker domains before they ever load, which does three things at once: it speeds up page loading by cutting out unnecessary requests, it reduces the amount of behavioral data advertisers can collect on you, and it removes a category of intrusive, sometimes malicious ad content entirely. It works automatically in the background — no separate browser extension required, though it pairs well with the dedicatedChrome,Firefox, orSafariextensions for browser-specific protection.
One Subscription, Every Device You Use
A VPN is only as useful as the devices it actually protects. ApexVPN ships as a native app forWindowsandMac, plus lightweight browser extensions forChrome,Firefox, andSafari— all included in a single plan, so you're not paying separately to cover your laptop, your desktop, and your browser.
Every platform runs the same underlying no-logs, AES-256-encrypted infrastructure, so your protection doesn't depend on which app you happen to be using that day. And because the interface is built around a single, obvious connect button, getting protected doesn't require reading a manual first — see ourSupport Centerif you ever want to go deeper into configuration.
Quick Reference: Every Feature at a Glance
Security
- AES-256 / ChaCha20 encryption
- WireGuard-based protocol
- Automatic kill switch
- DNS Leak Protection
- Double VPN (Multi-Hop)
- Obfuscated Servers
Privacy
- Strict no-logs policy
- Split tunneling
- IP address masking
- Built-In Ad & Tracker Blocking
- No bandwidth or activity tracking
Performance & Access
- Unlimited bandwidth, no throttling
- Global server network
- Smart server selection
- Native Windows & Mac apps
- Chrome, Firefox & Safari extensions
Frequently Asked Questions About VPN Features
What is a VPN kill switch and do I need one?
A kill switch blocks all internet traffic on your device if your VPN connection drops unexpectedly, so your real IP address and unencrypted data never leak out. It's especially valuable on public Wi-Fi or whenever hiding your location matters. ApexVPN includes it by default on Windows and Mac.
What is split tunneling used for?
Split tunneling lets you route specific apps or sites outside the VPN while everything else stays protected — useful for banking apps that block VPN traffic, accessing local network devices, or reducing latency in games.
Does a no-logs VPN really keep no logs?
A genuine no-logs policy means the provider never records your browsing activity, connection timestamps, or IP address in the first place. ApexVPN's infrastructure is built this way — see ourPrivacy policyfor the full detail.
Will a VPN slow down my internet connection?
Some overhead is unavoidable with any VPN, but a WireGuard-based protocol and a nearby server keep the impact small enough that most people don't notice it during everyday browsing or streaming.
What is double VPN (multi-hop)?
Double VPN routes your traffic through two servers instead of one, encrypting it twice, so no single server sees both your real IP and your destination. It trades a bit of speed for extra privacy.
Can I use one VPN subscription on multiple devices?
Yes — one ApexVPN plan covers Windows and Mac apps plus Chrome, Firefox, and Safari extensions, so you don't need separate subscriptions per device. SeePricingfor plan details.
Is a VPN safe to use for online banking?
Yes, in general a VPN adds a layer of encryption on top of your bank's own security, which is especially useful on public Wi-Fi. If your bank's app blocks VPN traffic, use split tunneling to exclude just that app.
What VPN protocol is fastest?
WireGuard-based protocols are currently the fastest widely used option, offering strong encryption with less overhead than older protocols like OpenVPN — which is why ApexVPN uses a WireGuard-based protocol by default.
Do I need a VPN if I already use antivirus software?
They solve different problems. Antivirus software protects your device from malicious files and programs; a VPN encrypts your network traffic and hides your IP address. Most people benefit from having both.
Can websites tell I'm using a VPN?
Some can, based on known VPN server IP ranges — this is why obfuscated servers exist, to make VPN traffic harder to identify at the network level.