VPN safety
Is a free VPN safe?
Why free VPNs are often dangerous
They sell your browsing data
Running VPN servers costs real money. If you are not paying with a subscription, you are likely paying with your data. Many free VPN providers log your browsing activity and sell it to data brokers and advertisers. Several have been caught sharing data with third parties despite claiming "no-logs" in their marketing.
They inject ads and tracking scripts
Some free VPNs intercept your web traffic and insert advertisements or tracking pixels into pages you visit. This is the opposite of privacy — the VPN becomes a man-in-the-middle that profiles your behaviour for profit.
Weak or missing encryption
Free apps often use outdated encryption protocols or implement them incorrectly. Some use no encryption at all, meaning your ISP and anyone on the same network can still see your traffic. A VPN with broken encryption is worse than no VPN, because it gives a false sense of security.
Malware and data harvesting
A 2017 CSIRO study found that 38% of free Android VPN apps contained malware. The Hola VPN was found to sell users' idle bandwidth to a botnet. Permissions requested by free VPN apps often far exceed what is necessary for a VPN to function.
Bandwidth and speed limits
Even the safer free VPNs heavily throttle speed and cap monthly data (often 500 MB–10 GB). This makes them impractical for streaming, calls, or any regular use.
The exceptions — safer free tiers
A small number of reputable providers offer genuinely free tiers as a way to convert users to paid plans. These are safer because the business model is the paid subscription, not your data. Look for:
- A clear, independently audited no-logs policy.
- A transparent company with a known ownership and jurisdiction.
- Limited data (e.g. 10 GB/month) rather than unlimited — unlimited free VPNs almost always monetise data.
What to look for in a safe VPN
- Audited no-logs policy — verified by an independent security firm, not just claimed.
- Strong protocol — WireGuard or OpenVPN. Avoid proprietary protocols from obscure providers.
- Subscription business model — you pay money, not data.
- Kill switch — cuts your internet if the VPN connection drops, preventing accidental IP exposure.
- DNS leak protection — prevents DNS queries from bypassing the VPN tunnel. Test yours at ipchu.com/dns-leak-test.
Verify your VPN is actually working
After connecting to any VPN, check that your real IP is hidden by visiting the home page. Your IP and location should match the VPN server, not your real location. Run a DNS leak test to confirm your DNS traffic is also going through the VPN.