Is PureVPN Proxy - Best VPN for Chrome safe?

PureVPN supplies decrypted VPN credentials in response to HTTP authentication challenges from any host, not only its own proxy servers.

The extension stores VPN credentials encrypted in chrome.storage.local and decrypts them to answer HTTP 407 and 401 authentication challenges. A request handler registered for all URLs returns the username and password to any host that issues such a challenge, because the code does not check whether the requesting host is a PureVPN proxy. A developer comment in the source notes the scope guard was never added.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.