I wrote about this on my own forum because there is a big industry out there on VPNs. Many people have no clue about how they work and what you should look for. I use VPN.ac myself. They are based in Romania which doesn't have a data retention law, offer great encryption capabilities, and use their own DNS servers. I would read through all of their FAQs.
www.vpn.ac
Another good one, though I've never used it is ProtonVPN. They are based in Switzerland and they too don't have Internet data retention laws.
Read this if you want:
Which VPN Services Keep You Anonymous in 2017? - TorrentFreak
Here's a guide to router setup:
VPN Router Setup - Simple Guide | Restore Privacy
Be advised that PayPal and other financial services may not like your VPN and ban your account. It's best to run a VPN client on the computer rather than a whole swath router approach unless you have two routers for that purpose like using Kodi.
Here's a direct copy and paste form my site:
With VPN's being all the rage now a days, especially with something like Kodi, it's easy to understand why people want to protect their privacy. When looking for a VPN you should consider the following four criteria. E-mail the VPN you have an interest in and ask them the following questions:
1) Do you allow port forwarding?
If they allow port forwarding then scrap that VPN. With port forwarding on in a VPN your true IP can be exposed.
2) What country are you based in?
If the VPN you are interested in is not in a country that is Internet privacy friendly then scrap that VPN. Three countries that I know are Internet privacy friendly are Romania, Iceland and Switzerland. There are others, but I'm not sure what they are.
3) Do you use DNS leak protection?
If the VPN you are interested in doesn't offer DNS leak protection then scrap that VPN. You can test DNS leaks at this website:
DNS leak test
You should see a result that doesn't match the DNS you use all the time like your ISP's DNS or third party DNS you may use like Google or OpenDNS.
4) Do you keep any logs?
All VPNs keep a log in some form or another. Some VPNs state they don't keep logs at all, but rather just keep a time stamp of access only. Some VPNs just log your bandwidth usage. If the VPN that you're interested in keeps logs beyond those two points then I would not consider that VPN.
Those are the four main criteria in choosing a good VPN. Now you need to concern yourself with WebRTC. It's hard to turn off in a smart device, but fairly easy to do in a computer. Read here:
WebRTC Leak Test - IP Address Discovery - Media Device ID Fingerprint - BrowserLeaks.comhis
This website was created by VPN.ac to check browser privacy.
IP X - IP info and leak test suite