Could ExpressVPN be about to adopt Shadowsocks? Here's what we know

ExpressVPN mobile vpn apps
(Image credit: Future)

ExpressVPN could be about to announce support for the Shadowsocks protocol, after an investigation uncovered its presence in the VPN's code.

A routine inspection of ExpressVPN's Windows app (v12.201.0) by TechRadar discovered an executable file seemingly referring to Shadowsocks: ss-local.exe.

ExpressVPN | $2.27 per month | 2 Years + 4 months FREE

ExpressVPN | $2.27 per month | 2 Years + 4 months FREE

ExpressVPN is already a class-leader when it comes to privacy & security. The addition of Shadowsocks could boost these credentials even more.

What you'll get...

🔒 At least three VPN protocols
🌍 188 locations worldwide
🔑 Post-quantum encryption
📄 20+ independent audits

A 28-month ExpressVPN plan starts at $2.27 per month ($63.52 upfront pre-tax) and comes with a 30-day money-back guarantee.

Read moreRead less

What did TechRadar uncover?

TechRadar's analysis of ExpressVPN code discovered the newly added ss-local.exe Shadowsocks file. TechRadar also reported that further traffic analysis found ExpressVPN's Windows VPN app "now queries backend servers for a hasShadowsocks status flag."

The query's status was set to false, but TechRadar hypothesized that Shadowsocks support is imminent. It cited "the integration of both the local executable and the server-side parameter" as its reasons for this prediction.

TechRadar provided code from its traffic analysis. It said the ExpressVPN app "is receiving data about the Los Angeles server, including whether it has Shadowsocks capabilities."

Screenshot of TechRadar's ExpressVPN traffic analysis code

Image: Code uncovered during TechRadar's ExpressVPN traffic analysis (Image credit: Future)

What is Shadowsocks?

Shadowsocks is described as "a fast tunnel proxy that helps you bypass firewalls." Its primary goal is to bypass internet censorship, and it is commonly used in countries with higher-level restrictions – such as China or Russia.

Shadowsocks encrypts your traffic, but it's not an out-and-out VPN protocol – it's a proxy. This means your IP address is changed, but the proxy can still see your internet activity.

It's fast and prioritizes bypassing censorship above all else. Shadowsocks mimics regular internet traffic, making it harder for censors to detect it.

Screenshot of Shadowsocks website homepage

(Image credit: Shadowsocks)

It can be more effective than VPN obfuscating protocols, such as NordWhisper and Proton Stealth, due to not displaying VPN metadata. This can make traffic harder to identify, and gives you more set-up flexibility.

Shadowscocks can be used with a VPN, and this will boost its privacy credentials. Mullvad and Private Internet Access (PIA) are two leading VPNs that offer Shadowsocks compatibility.

Mullvad says only its bridge servers support Shadowsocks. You choose a bridge server for your traffic to enter, and then it exits at your chosen VPN server location. Mullvad advises using Shadowsocks with a VPN to keep "your browsing private and anonymous."

Shadowsocks is compatible with "most platforms," including Windows, Mac, Android, iOS, and Linux.

When could we see Shadowsocks support?

ExpressVPN's COO Shay Peretz told TechRadar it didn't "have any specific feature announcements to share regarding Shadowsocks support or a timeline for potential availability."

Peretz added that ExpressVPN regularly evaluates and tests "different technologies that could help improve connectivity and reliability for users, particularly in challenging network environments, including experimental or inactive components."

ExpressVPN are clearly being very tight-lipped about potential Shadowsocks support. We may not see an official release for a while, but Shadowsocks' presence in the ExpressVPN code suggests something is likely on the horizon.

Disclaimer

We test and review VPN services in the context of legal recreational uses. For example: 1. Accessing a service from another country (subject to the terms and conditions of that service). 2. Protecting your online security and strengthening your online privacy when abroad. We do not support or condone the illegal or malicious use of VPN services. Consuming pirated content that is paid-for is neither endorsed nor approved by Future Publishing.

George Phillips
Staff Writer

George is a Staff Writer at Tom's Guide, covering VPN, privacy, and cybersecurity news. He is especially interested in digital rights and censorship, and its interplay with politics. Outside of work, George is passionate about music, Star Wars, and Karate.

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.