Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is the VPN client in Windows 7 (or Windows 8) strong enough to be safe to use? Or is it easily cracked and best avoided?

I read XP's VPN client was insecure even back in 2004. So I wonder if the more recent versions of Windows have similar problems with the security of their VPN offerings.

Does anyone here use it or have any thoughts on it? If not, why not? (And what do you use instead?)

Sorry for the vagueness! I'm referring to PPTP

share|improve this question

closed as not constructive by TFM, Renan, Mokubai, Paul, wizlog Feb 24 '13 at 15:15

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

The OS is irrelevant, it's more a matter of the protocol (PPTP, L2TP, IPsec, OpenVPN, SSL, etc.) – nerdwaller Feb 23 '13 at 23:33
If you want to know how secure it is, this is a better question for the Security Stack Exchange site. – BigHomie Feb 23 '13 at 23:43
Ok I'll go check out Security Stack Exchange. Wow this place is a mine of great info. – Austin ''Danger'' Powers Feb 24 '13 at 14:18
up vote 2 down vote accepted

At one point in time it had problems. But Microsoft fixed it back in 1999. Cryptanalysis available of it here.

Windows 7 VPN is a very good choice. It is easy to set up, it behaves well, it connects very fast, and integrates excellently with the UI. But it secure ? Well it depends on how you configure it. In Windows 7 it supports PPTP, L2TP/IPSec, SSTP and IKEv2, and authenticates with EAP or CHAP/CHAPv2. So the protocols are there. Hear are also two articles from MS how to setup everything with PPTP (Including EAP/TLS and MS-CHAPv2) and L2TP (L2TP does require Certs/PKI). So yes it can be set up to be very secure.

share|improve this answer
Great info. I'll check it out. Thanks – Austin ''Danger'' Powers Feb 24 '13 at 0:23

Not the answer you're looking for? Browse other questions tagged or ask your own question.