Most free VPNs are not safe. Running a VPN costs real money — servers, bandwidth, engineers — and a service that charges you nothing still has to cover those bills somewhere. In practice that usually means logging your activity and selling it, injecting ads, or cutting corners on the security you installed the app for in the first place.
There are a small number of genuine exceptions, and there are situations where a free VPN is fine. This guide covers both: what the research actually found, how free VPNs make their money, and the specific cases where using one is a reasonable call.
Key Takeaway:
A VPN’s entire purpose is to move your trust from your ISP to the VPN provider. A free provider with no visible revenue has every incentive to abuse that trust — and no contract with you that says it won’t.
Why “Free” Can’t Really Be Free
It helps to understand what a VPN company is actually paying for. Every gigabyte you push through their network is bandwidth they bought. Every server in every country is rented hardware in a data centre. Then there are apps to maintain across five platforms, support staff, and audits.
A paid provider covers this with subscriptions — a simple, honest exchange. A free provider has the same costs and no subscriptions. The money has to come from somewhere, and you are the only thing of value in the room.
This isn’t cynicism, it’s arithmetic. The question to ask about any free VPN isn’t “is it safe?” but “how does this company pay its bandwidth bill?” If you can’t answer that from their website, that is your answer.
How Free VPNs Actually Make Money
| Revenue Model | What It Costs You |
|---|---|
| Selling browsing data | Your activity is logged and sold to data brokers — the exact thing you installed a VPN to prevent |
| Injecting ads | The app modifies pages you visit to insert its own ads, which requires it to sit inside your traffic |
| Reselling your bandwidth | Your connection becomes an exit node for strangers — their traffic leaves from your IP |
| Affiliate / tracking libraries | Third-party trackers bundled into the app profile you across apps |
| Freemium upsell | ✅ Legitimate — the free tier is deliberately limited to sell you the paid one |
| Malware / adware bundling | Worst case: the app itself is the attack |
Only one row on that list is a business model you’d knowingly agree to. That’s the one to look for.
What the Research Found
This isn’t hypothetical. Free VPNs have been studied and repeatedly caught:
- An academic analysis of 283 Android VPN apps found that a substantial share contained tracking libraries, a significant minority were flagged for malware or malvertising, and — remarkably — a number of apps requesting VPN permissions didn’t encrypt traffic at all. The study is several years old now, but it established a pattern that hasn’t gone away.
- A 2020 data exposure involving several free VPN services that shared back-end infrastructure leaked a large volume of user records — including plaintext passwords, IP addresses and browsing activity. Every one of the services involved had advertised a no-logs policy. They were plainly logging.
- Hola VPN was found to be reselling users’ idle bandwidth through a sister company, effectively turning its own userbase into a rentable proxy network. Users’ connections were used to route other people’s traffic.
- Facebook’s Onavo Protect was marketed as a privacy app while being used to collect data on what people did in competing apps. It was eventually pulled from Apple’s App Store over its data collection.
The recurring theme is the “no-logs” claim. It is marketing copy, not a technical guarantee. Anyone can write it on a homepage. What separates a real policy from a slogan is an independent audit published by a named firm — something essentially no free-only VPN has.
The Specific Risks
1. Logging and Data Sales
A VPN sees every domain you visit — it has to, in order to route you. When the provider’s revenue comes from data, that visibility becomes the product. You haven’t gained privacy; you’ve swapped an ISP that’s at least regulated for a company you know nothing about. See what your ISP can see for what you’re actually trading away.
2. Weak or Missing Encryption
Free apps often ship outdated protocols — or, in documented cases, no encryption at all while still displaying a reassuring “connected” padlock. A VPN that doesn’t encrypt is just a proxy that knows your name. Check yours with our VPN Leak Test.
3. IP and DNS Leaks
Free services rarely run their own DNS or implement leak protection properly, so lookups escape to your ISP even while the tunnel is up. Read more on DNS leaks and WebRTC leaks, both of which can expose your real IP without any warning.
4. No Kill Switch
When a free VPN’s connection drops — and it will, since free servers are overloaded — your traffic silently reverts to your normal connection. Without a kill switch, you may browse for an hour thinking you’re protected when you aren’t.
5. Ad Injection
Some free VPNs modify the pages you load to insert their own advertising. To do that, the app must actively read and rewrite your traffic — the precise capability you were trying to deny everyone else.
6. Your Connection Being Resold
The most serious risk. Some free VPNs enrol you as an exit node, meaning strangers’ traffic leaves the internet from your home IP address. Anything they do appears to come from you — and it’s your address that ends up on an IP blacklist or in a police request.
7. Caps, Throttling and Ads by Design
Even honest free tiers are deliberately restricted: small monthly data caps, a handful of server locations, and slower speeds. That’s the upsell working as intended — annoying rather than dangerous.
Free vs Paid: The Honest Comparison
| Feature | Typical Free VPN | Reputable Paid VPN |
|---|---|---|
| Revenue source | ❌ Often your data | ✅ Your subscription |
| Audited no-logs policy | ❌ Almost never | ✅ Published audits |
| Data cap | ❌ Usually 500MB–10GB/month | ✅ Unlimited |
| Kill switch | ❌ Rare | ✅ Standard |
| Modern protocols | ❌ Often outdated | ✅ WireGuard / OpenVPN |
| Speed | ❌ Congested servers | ✅ Consistent |
| Streaming access | ❌ Nearly always blocked | ⚠️ Varies by provider |
| Support | ❌ None | ✅ 24/7 |
When a Free VPN Is Actually Fine
Blanket advice is lazy. There are real situations where a free VPN is a sensible choice:
- Changing your apparent country for something trivial — checking regional pricing or whether a page renders differently abroad.
- A one-off on a hotel network where you just need a working connection and aren’t logging into anything sensitive.
- Testing whether a VPN solves a problem at all before committing to a subscription.
- Getting around a basic block where the stakes are low and the traffic is boring.
The common thread: low stakes, nothing confidential, short duration. What you should never do on a free VPN is online banking, work systems, anything involving personal documents, or anything where being identified would genuinely matter.
The Credible Exceptions
A few free tiers come from established companies that make their money from paid subscriptions. The free plan exists as a funnel, not as the business model — which means the incentive to sell your data isn’t there. These typically apply hard data caps and limit server choice, but they don’t monetise your traffic.
The test is simple: does this company have a real paid product that clearly funds the free one? If yes, the free tier is probably honest. If the free app is the whole business, be sceptical.
🔒 If You Want the Paid Route
If you’ve decided the free tier limits aren’t worth it, these are subscription-funded providers with no incentive to monetise your browsing:
- PureVPN — broad server network, apps across all major platforms
- IPVanish — strong speeds, unlimited simultaneous connections
Before you pick one, read Best VPN for Privacy in 2026 for the criteria that actually matter — and What Is a VPN? if you want the fundamentals first.
How to Check the VPN You’re Already Using
If you’re on a free VPN right now, don’t guess — test it. Connect, then run these:
- VPN Leak Test — does your real IP appear anywhere it shouldn’t?
- DNS Checker — are lookups going through the tunnel or leaking to your ISP?
- What Is My IP — does it show the server’s location, or yours?
Then disconnect and run them again. If the results barely change, your VPN isn’t doing its job. Full method: How to Check If Your VPN Is Working.
⚠️ Warning Signs to Walk Away From
- No clear explanation anywhere of how the company makes money
- A privacy policy that permits sharing data with “partners” or “affiliates”
- Unlimited free bandwidth with no paid tier — someone is paying, and it isn’t them
- No named company, jurisdiction or leadership on the website
- Permissions the app has no reason to need, like contacts or SMS
- A “no-logs” claim with no independent audit behind it
- Reviews mentioning ads appearing on sites that don’t normally have them
Frequently Asked Questions
Are all free VPNs dangerous?
No. Free tiers offered by established paid providers are generally trustworthy, because the paid product funds them. The dangerous category is standalone free VPNs with no paid offering and no explanation of their revenue.
Can a free VPN steal my passwords?
A VPN that doesn’t encrypt properly, or that actively inspects your traffic, is in a position to see anything not protected by HTTPS. Most sites use HTTPS now, which limits the damage considerably — but you’ve still handed a stranger the best possible vantage point on your connection.
Why do free VPNs have data caps?
Bandwidth is the single biggest cost of running a VPN. A cap keeps the free tier affordable and nudges heavy users toward paying. Honest caps are a good sign — they suggest the company is funding the service rather than monetising you.
Is a free VPN better than no VPN?
Not automatically. Against a nosy network operator, a working free VPN helps. But if the provider logs and sells your activity, you’ve replaced a narrow risk with a broader one. No VPN at all is better than a malicious one.
Do free VPNs work with Netflix?
Almost never. Streaming services block known VPN address ranges, and free providers have small, heavily flagged IP pools. See Best VPN for Netflix.
Is using a free VPN legal?
In most countries, yes — VPNs are legal and widely used for work. A handful of countries restrict or ban them. Legality is a separate question from safety: a legal app can still be a bad one.
What about free browser VPN extensions?
Most are proxies, not VPNs — they only cover browser traffic, often without real encryption, while everything else on your device goes out unprotected. See VPN or Proxy.
Is Tor a free alternative?
Tor is genuinely free, run by a non-profit, and stronger than any VPN for anonymity — but it’s much slower and unsuitable for streaming or large downloads. See What Is Tor.