The VPN was just the beginning: Meet the new security suite

One subscription now secures your network, thoughts, credentials, communications, and identity.

ExpressVPN has evolved from a single tool into a comprehensive security suite. Think of it as your ultimate, accessible cybersecurity hub: instead of navigating a crowded marketplace of standalone apps, you get five distinct layers of defense under one roof. Depending on your chosen subscription tier (Basic, Advanced, or Pro), these features scale to meet your specific security needs:

• ExpressAI: A private-by-design AI platform built on confidential computing, featuring built-in web search, ensuring your chats are never stored, viewed, or used for training.
• ExpressKeys: A dedicated, standalone zero-knowledge password manager that generates, stores, and protects your logins and 2FA codes.
• ExpressMailGuard: A private email relay service offering unlimited anonymous aliases to keep your real inbox hidden from spammers and data breaches.
• Identity Defender: A standalone identity protection app for U.S. users that monitors your financial and personal risk, backed by up to $5M USD* in identity theft insurance.
• ExpressVPN: The foundational layer that encrypts your connection, masks your IP, and secures your traffic against tracking and surveillance.

For more than a decade, digital privacy was defined by the security of your connection. Encrypt your network, hide your IP, and stay safe from ISPs and other third parties. We spent years building the industry’s most advanced engine to protect it: pioneering protocols like Lightway and deploying post-quantum defenses long before the threat became mainstream.

But the battlefield continues to shift. Today, risk doesn’t just look like a hacker sniffing packets at a coffee shop. It comes from something far more pervasive and far harder to see: the quiet extraction, aggregation, and exploitation of you.

It looks like a data broker selling your home address to advertisers. It looks like an AI platform harvesting your private thoughts and intellectual property to train a model. It looks like a leaked email address and password quietly cascading across dozens of accounts—compromising your digital life in ways encryption alone can’t fix.

We’ve always evolved to meet new threats at the network level. Now, we’re expanding that defense to cover your entire digital footprint.

From one layer to five

The internet has gotten more complicated in recent years. Risk shifted primarily from the network layer to the data layer, the identity layer, and now the cognitive layer. Encryption is still essential, but it’s no longer sufficient to keep you fully protected.

So we rebuilt our approach from the ground up.

We looked at the fragmented cybersecurity marketplace, where you have to buy one app for passwords, another for email, and a third for identity theft, and decided to build a better, more accessible alternative.

Your ExpressVPN subscription now delivers a complete ecosystem of protection. It is a one-stop privacy hub designed to secure how you connect and who you are, what you share, and what you think.

We aren’t simply putting together a bundle of features and apps on various platforms; we’re giving everyone access to a unified cybersecurity suite that redefines what digital protection means in 2026.

1. Protecting thoughts: ExpressAI

We’re entering an era where people don’t use the internet just to browse—they “think” inside it. We draft sensitive emails, debug proprietary code, and explore personal questions using Large Language Models (LLMs) and AI prompts. The industry standard is to trade that privacy for intelligence…your prompts become their training data.

ExpressAI rejects that trade-off. It is a private-by-design platform built on confidential computing. Every interaction runs inside a secure enclave, a cryptographic vault that isolates the conversation from the infrastructure around it. Neither ExpressVPN nor the AI model providers can see your chats, and we never use your data to train models.

ExpressAI also features built-in Web Search, allowing the AI to fetch real-time information to answer your queries accurately, all while keeping your identity hidden.

With ExpressAI, there are no tier restrictions on intelligence. All Pro subscribers unlock our full 5-model suite (including GPT-OSS 120B, DeepSeek R1, and Qwen), allowing you to use specialized models alongside one another to compare reasoning side by side.

• What it protects: Intellectual property, drafts, and private queries.
• Where it lives: Accessible directly in your browser on desktop or mobile.
• Availability: Exclusively included with ExpressVPN Pro plans (Monthly, 1-Year, and 2-Year).

Learn more: Introducing ExpressAI: A private-by-design AI platform

2. Protecting credentials: ExpressKeys

For years, passwords have been the most friction-heavy part of digital security. They live in spreadsheets, sticky notes, or are reused across dozens of accounts, creating a domino effect if one site is breached.

To give your credentials the dedicated space they deserve, ExpressKeys has officially graduated into its own standalone password manager app. This separation allows ExpressKeys to evolve entirely around advanced credential protection.

Using zero-knowledge encryption, ExpressKeys secures your logins without us ever seeing your data. The new app includes a built-in 2FA (TOTP) authenticator to generate one-time codes, eliminating the need to juggle separate authenticator apps. It also features a Password Health tool that actively checks your vault to identify weak, reused, or exposed credentials so you can fix them before they are exploited.

• What it protects: Logins, secure notes, 2FA codes.
• Where it lives: The new ExpressKeys app (iOS and Android) and browser extensions.
• Availability: Requires an Advanced or Pro plan.

Learn more: Meet ExpressKeys, a new home for your passwords

3. Protecting communication: ExpressMailGuard

Think of ExpressMailGuard as a VPN for your email. Your email address is the digital identifier that links your bank, social media, and subscriptions. ExpressMailGuard decouples your identity from your inbox, allowing you to generate anonymous aliases that keep your real address hidden.

Crucially, it turns every address into a digital burner. All tiers now include unlimited aliases, so you can create a unique email for every single service you use. With the new Dedicated Subdomains feature, you can even generate aliases on the fly (e.g., shopping@your-name.emg-mail.com) without opening the app.

Everything is managed from a centralized dashboard where you can easily track forwarded mail, view blocked messages, or instantly cut the cord on an alias that ends up on a spam list. And true to our privacy standards, successfully delivered messages are deleted from our servers immediately.

• What it protects: Your primary email address, digital footprint, and message content.
• Where it lives: Accessible directly in your browser on desktop or mobile; works with any email provider.
• Availability: Included on all tiers (Basic, Advanced, Pro)

Learn more: Introducing ExpressMailGuard: Email privacy, built for how the internet actually works

4. Protecting the person: Identity Defender

Modern privacy failures online can easily spill into the real world. Identity theft is rarely a loud, sudden event. It happens in fragments: a leaked password here, a change of address request there. By the time you notice, the damage is done.

Identity Defender is our answer to the fragmented nature of modern risk. Available today for U.S. users, it brings professional-grade monitoring out of the abstract and into your pocket, integrated directly into the ExpressVPN app you already use.

We’ve built this to proactively secure your personal details. Identity Defender monitors the dark web and public records for signs that your Social Security number, address, or personal details have been compromised. But it doesn’t just watch; it acts. Our automated Data Removal tool continuously scans data broker databases and requests the removal of your personal information, making you harder to find and harder to target.

If the worst happens, you aren’t left to handle it alone. Identity Defender includes ID Theft Insurance (offering up to 5 million USD in coverage*) to help you recover lost funds and restore your good name.

• • What it protects: Financial identity, personal information, and data broker privacy.
  • Where it lives: Integrated into the ExpressVPN app (iOS and Android). 

• Availability: Requires an Advanced or Pro plan; for US users only.

Learn more: Introducing the Identity Defender app: New features, one dedicated home

5. Protecting the connection: ExpressVPN

The foundation still matters, and we’ve made it stronger than ever. 

ExpressVPN continues to secure your internet traffic with fast, always-on encryption that protects your location, activity, and network metadata. But behind the scenes, the system powering it has evolved significantly.

Instead of relying on off-the-shelf technology, we continuously push the industry forward. We built our own VPN protocol, Lightway, from the ground up using modern code (Rust). Engineered for an always-on world, Lightway includes post-quantum protection by default, defending your traffic against the threats of tomorrow.

We also back our strict no-logs policy with architecture that physically enforces it. Our TrustedServer technology runs exclusively on RAM-only servers. Data cannot persist on a hard drive, and every time a server reboots, it is wiped completely clean.

At the network edge, we stop threats before they load. Built-in advanced protection blocks your device from communicating with known malicious trackers and sites, while an integrated ad blocker strips out intrusive display ads to keep your browsing clean and fast.

We’ve also rolled out a massive wave of updates to how you interact with the VPN across every platform:

Rewritten desktop apps: Our apps have been completely rebuilt in Qt for smoother updates and a unified experience across Windows, macOS, and Linux. We also remain one of the only providers offering split tunneling on macOS, and have added WireGuard support across all platforms as a high-speed alternative to Lightway.

The hybrid browser extension: Our new 2-in-1 extension can run entirely independently to secure just your browser traffic (ideal for environments like Meta Quest headsets), or switch to control your full desktop app. It also introduces Smart Routing, allowing you to assign different VPN locations to specific websites within the same session.

AI-controlled networking: ExpressVPN is the first to launch a local Model Context Protocol (MCP) server. Built for developers, this opt-in tool allows AI coding assistants like Claude Code to securely read your VPN state, switch regions, and run diagnostics via natural language prompts—without ever opening a remote connection.

• What it protects: Network traffic, IP address, location data.
• Where it lives: The ExpressVPN app.
• Availability: All tiers (Basic, Advanced, Pro).

One subscription, five layers of defense

Security used to mean installing a firewall and calling it a day. In the modern era, that approach is obsolete. Security now means managing a complex web of identities, credentials, data trails, and algorithmic interactions.

The team behind ExpressVPN has built these five tools to work as a unified ecosystem. You don’t need to piece together a patchwork of subscriptions from different vendors. You have one subscription, one trusted privacy policy, and five layers of defense.

Ready to upgrade your digital protection? Check out our new subscription tiers to find the plan that fits your needs.

Subscription Tiers

*ID Theft Insurance is subject to terms, conditions, and exclusions. Availability of specific features, such as Identity Defender, ExpressAI, and ExpressMailGuard limits, varies by region and subscription tier. Check your ExpressVPN account for details.