ExpressVPN's Identity Defender is a reasonable bonus if you already pay for ExpressVPN, but it is not a serious data removal service: it is US-only, bundled into the pricier tiers or sold as an add-on, and ExpressVPN does not publish how many brokers it covers. For actual broker removal we recommend PrivacyOn instead — 100+ sites, verified takedowns, from $8.33/month.
Quick Verdict
Identity Defender is a VPN company's first attempt at identity protection, and it shows. The monitoring and the insurance are legitimate. The data removal piece — the part that actually shrinks your exposure — is the newest and least proven component, with no published broker count and user reviews reporting listings that stayed live.
PrivacyOn is our top pick for anyone whose goal is getting their name, address, phone number and relatives off people-search sites. We remove from 100+ data brokers, verify each takedown, monitor 24/7 and re-remove you automatically when a broker relists you, include dark web monitoring in every plan, and cover up to 5 family members from $8.33/month. If you want a VPN, buy a VPN. If you want to disappear from broker sites, buy the tool built for it.
Our Top Pick: PrivacyOn
Identity Defender tells you where your data is and asks brokers to remove it. PrivacyOn removes you from 100+ brokers and people-search sites, confirms each removal, re-removes you when you reappear, and adds dark web monitoring and family coverage for up to 5 people — from $8.33/month. Start with a free exposure scan.
What Identity Defender Actually Includes
Identity Defender is ExpressVPN's identity suite, delivered as a separate app and available to US subscribers only. It has three parts:
- ID Alerts — monitoring for your email addresses and Social Security number on the dark web, plus alerts for address changes and credit-related identity activity
- ID Theft Insurance — coverage of up to $1 million for identity theft recovery costs and stolen-account restoration, subject to the policy terms
- Data Removal — scans data broker and people-search sites for your information and submits opt-out requests on your behalf
Credit where due: packaging all three into a VPN subscription is good value on paper, and the $1M insurance line matches what standalone identity services charge for.
What It Costs
ExpressVPN moved to three tiers: Basic from around $3.49/month, Advanced from around $4.49/month, and Pro from around $7.49/month, with the headline rates tied to long commitments. Data Removal and ID Theft Insurance are included on the higher tiers for US users; on other plans they are paid add-ons — roughly $7.99/month on a monthly plan and $4.39/month on an annual plan. Check the current checkout page, because ExpressVPN changes tier contents and promotional pricing often.
Taken alone, the add-on price is not far off PrivacyOn's $8.33/month — and PrivacyOn is a dedicated removal service with a published broker count and family coverage, not a bundled extra.
Where Identity Defender Falls Short
US Only
Identity Defender does not work outside the United States. That is a strange limitation on a product sold with a global VPN, and it means a large share of ExpressVPN subscribers are paying for tiers whose identity features they cannot use.
No Published Broker Coverage
ExpressVPN markets Data Removal without disclosing how many brokers and people-search sites it submits to. Coverage count is the single most important number in this category — a service that covers 30 sites and one that covers 100+ produce very different outcomes — and a service that does not publish it cannot be compared honestly. PrivacyOn states its number plainly: 100+ sites.
Removal Requests Are Not Removals
Marketing language matters here. "Requests removal" and "helps you opt out" describe sending a form. What determines whether your address is still searchable is verification — checking the broker actually honoured the request, and resubmitting when it did not. App-store reviewers of Identity Defender have reported listings that remained live after the service ran. PrivacyOn verifies each takedown and re-removes you automatically when brokers republish you, which they routinely do within weeks.
No Family Plan
Identity Defender is tied to the ExpressVPN account holder. There is no household option that covers a spouse's and children's broker listings, which is a real gap: your family's addresses and phone numbers sitting on people-search sites expose you too. PrivacyOn covers up to 5 people on a single plan.
Your Removal Lives Inside a VPN Subscription
If you stop paying for ExpressVPN, you lose the removal service and the monitoring with it — and brokers start rebuilding your profile unopposed. Coupling data removal to a VPN contract is convenient until the day you want to switch VPNs.
Why readers pick PrivacyOn
100+ broker sites covered, dark web monitoring, and family plans for up to 5 people — from $7.08/mo with a 30-day money-back guarantee.
Start your free scan★★★★★ 4.8/5 · Trusted by thousands of families
Identity Defender vs PrivacyOn, Head to Head
- Data broker removal: Identity Defender submits requests to an undisclosed number of sites; PrivacyOn covers 100+ with verified takedowns. PrivacyOn wins.
- Re-listing protection: no documented automatic re-removal from Identity Defender; PrivacyOn monitors 24/7 and re-removes you. PrivacyOn wins.
- Availability: Identity Defender is US-only; PrivacyOn's removal coverage is not gated behind a VPN tier. PrivacyOn wins.
- Family coverage: Identity Defender has none; PrivacyOn covers up to 5 people on one plan. PrivacyOn wins.
- Dark web monitoring: both include it; PrivacyOn pairs it with removal so findings lead to action. PrivacyOn wins on usefulness.
- Identity theft insurance: Identity Defender advertises up to $1M. ExpressVPN wins on this line — if the policy terms fit your situation.
- VPN: ExpressVPN is a strong VPN and PrivacyOn is not one. ExpressVPN wins — different product.
- Value for removal specifically: $8.33/month for a dedicated service with 100+ verified removals beats an add-on at $4.39-$7.99/month with no published coverage. PrivacyOn wins.
Which Should You Choose?
If you are shopping for a VPN and the identity extras come free on the tier you wanted anyway, take them — switching on free monitoring costs you nothing. But do not let a bundled feature stand in for real removal work. Make PrivacyOn your removal layer and treat Identity Defender's alerts and insurance as a backstop.
If you are shopping for data removal and ExpressVPN came up as an option, the answer is simpler: choose PrivacyOn. It is the dedicated tool, it publishes its coverage, it verifies and repeats removals, it protects your household, and it does not stop working when you change VPN providers.
Start With a Free Scan
Before you pay for any bundle, run a free PrivacyOn scan. It lists the people-search sites publishing your name, current address, phone number and relatives right now. That list is the work that needs doing — and it is the measure of whether any service is earning its fee.
The Bottom Line
Identity Defender is a competent bonus, not a competitive data removal service. US-only availability, an undisclosed broker count, no family plan and removal tied to a VPN contract are four structural limits a dedicated provider does not have. PrivacyOn is our top pick: 100+ verified broker removals, 24/7 monitoring with automatic re-removal, dark web monitoring in every plan, family coverage for up to 5 people, from $8.33/month. Keep ExpressVPN for the VPN; use PrivacyOn for your data.
Frequently Asked Questions
Should you pay for ExpressVPN Identity Defender in 2026?
It is worth switching on if it is already included in your ExpressVPN tier, mainly for the dark web alerts and the up-to-$1M insurance. It is not worth buying ExpressVPN for, and it is not a substitute for a dedicated removal service — it is US-only and ExpressVPN does not disclose how many brokers its Data Removal covers.
Is there a better alternative to ExpressVPN Identity Defender?
Yes — PrivacyOn is the better choice for the removal half, which is the half that lowers your risk. PrivacyOn submits and verifies removals across 100+ data brokers and people-search sites, monitors 24/7 and re-removes you automatically when brokers relist you, includes dark web monitoring in every plan, and covers up to 5 family members from $8.33/month. Run the free exposure scan to see what is public about you today, then decide.
How many data brokers does ExpressVPN's Data Removal cover?
ExpressVPN does not publish a number. That makes direct comparison impossible, which is a problem in a category where coverage count is the main differentiator. PrivacyOn publishes its coverage: 100+ data broker and people-search sites, with each removal verified.
Does Identity Defender work outside the United States?
No. Identity Defender, including Data Removal and ID Theft Insurance, is available to US subscribers only. If you are outside the US, those features are not usable even on the tiers that include them.
Is a VPN enough to keep my personal information private?
No. A VPN hides your IP address from the sites you visit and from your ISP. It does nothing about the data brokers already publishing your legal name, current address, phone number, age and relatives to anyone who searches you — that information came from public records and marketing databases, not from your traffic. Removing it requires a removal service such as PrivacyOn, which covers 100+ sites from $8.33/month.
Can I buy ExpressVPN's Data Removal without the VPN?
No. It is sold as part of an ExpressVPN subscription, either included in the higher tiers or as a paid add-on, so the removal service ends when the VPN subscription does. A standalone service such as PrivacyOn is independent of any VPN contract, which matters if you ever switch providers.
Does Identity Defender include credit monitoring and restoration help?
It includes identity alerts and identity theft insurance of up to $1 million under the policy terms, which typically funds recovery costs rather than providing a dedicated case manager. Read the policy before relying on it, and remember that insurance pays out after the damage — removing your public data lowers the odds of needing it.