Guide
Are free VPNs safe?
Free VPNs have to pay for servers somehow. Learn the business models behind them, the documented risks, and the free options that are safe.
On this page
Running a VPN costs real money: servers in dozens of cities, substantial bandwidth, and staff. If you are not paying, something else is. That does not automatically make a free VPN malicious — but it does mean you should know which business model you are in.
How free VPNs make money
- Freemium. The honest model: a capped free tier (a few servers, a data limit) that sells a subscription. Reputable providers do this, and the free tier is exactly what it claims to be.
- Advertising and data. The users are the product. Browsing data, app usage and address histories are valuable to ad networks and data brokers, even when individual records are supposedly pseudonymous.
- Bandwidth resale. Some "free" products built peer-to-peer networks that routed paying customers' traffic through ordinary users' connections, using their IP addresses — the mechanism behind several notable incidents in the 2010s.
- Investment hype. Free at launch, enshittified later, or shut down with user data in the estate.
- Malware distribution. A minority of free VPN apps are spyware, adware or proxies for botnets, which is why mobile app stores have periodically purged them.
Documented risks
- Logging despite "no logs". Regulators have taken action against providers whose marketing claimed anonymity while the apps collected and shared device and address data with advertising partners.
- Weak or absent encryption. Some free apps have shipped misconfigured or proprietary protocols, or leaked the real address over IPv6 and WebRTC — see WebRTC leaks and DNS leaks.
- Session hijacking. Free tools that handle your traffic in plaintext can inspect and modify it, including injecting ads.
- Throttling and abuse. Overloaded servers are slow, and the shared exit address may already be on block lists: IP reputation.
- Accountability. Shell companies, vague jurisdictions and no audit make redress impossible when something goes wrong.
How to judge a free VPN
- Who runs it? A named company with a real product is different from an anonymous developer with one app.
- What is the business model? If the page never explains how it pays for bandwidth, the answer is you.
- Has it been audited? Independent no-logs audits, published in full, are the strongest available signal.
- Which protocol? WireGuard or OpenVPN available and used by default. Avoid proprietary-only tunnels.
- Does it leak? Test it: connect, then check the IP checker — address, ISP, country and IPv6 must all change.
Legitimately free options
- Free tiers from reputable providers — a data cap and a handful of locations, but transparent practices.
- Tor for occasional anonymity: free, run by a global volunteer network, slow but genuinely designed for privacy, with different trade-offs.
- Your own tunnel — a small VPS with WireGuard or a self-hosted Tailscale/WireGuard endpoint. A few dollars a month buys a server you actually control.
- Opera's built-in VPN and similar browser-level proxies: convenient for a quick region change, browser-scoped only, and not a substitute for a device-wide tunnel — see what a proxy server is.
Also remember what a free tool cannot do: it cannot give you the bandwidth of a paid network, and it cannot protect an entire device if it only proxies a browser.
Verify before you trust
Whatever you install, run the checks yourself: the five-point VPN test covers address, ISP, DNS, WebRTC and IPv6. A provider that fails those tests is not protecting you, however polished the app looks — and one that passes them with a documented audit is worth keeping.
Bottom line: free VPNs are not all evil, but "free" is a pricing signal about who owns your data. If a service will not explain its costs, treat its servers as untrusted infrastructure and never route logins or sensitive work through them.
Frequently asked questions
Do free VPNs sell your data?
Some have been shown to share device and usage data with advertising partners despite privacy marketing, and regulators have acted on it. The pattern is common enough to treat unexplained business models as a warning sign.
Is a free VPN better than nothing?
On an untrusted Wi-Fi network, a well-implemented free VPN is better than none. A reputable paid provider or your own WireGuard server is better still, and a bad free app can be worse than nothing.
Are free VPNs illegal?
No, in most countries VPN use is legal. A few states restrict or license them, and using one to commit fraud is a crime regardless. Check local rules when you travel.
Keep reading
- How websites detect VPNs and proxies
- How does a VPN work?
- Does a VPN slow down your internet?
- What is a proxy server?
- Tor vs VPN
- How to find your IP address on a computer
- What is a DNS server?
- How to find your router's IP address
- What is port forwarding?
- How to trace an IP address
- MAC address vs IP address
- Does incognito mode hide your IP address?
- Browse all IP guides
- Check my public IP address
Check any other IP address
Investigating a suspicious login, a spam email header or a server log entry? Run any IPv4 or IPv6 address through the same geolocation and proxy checks.