Is Flow VPN - Fast Global Internet from FlowVPN.com safe?
Flow VPN sends login credentials through an encrypted API wrapper whose hardcoded key ships in the extension.
When you sign in, the extension encrypts your username, password, captcha answer, timezone offset, device channel, and timestamp with a pre-shared key embedded in its JavaScript, then posts them to configuredevice.com/vpn/windows/proxyEnc.php. Because the same key is bundled in the extension, the extra application-layer encryption can be decoded or forged by someone who obtains the code and captured API payloads, though HTTPS still protects ordinary transport.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itFlowVPN - no other listings under this identity
FlowVPN - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Flow VPN - Fast Global Internet from FlowVPN.com contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- configuredevice.com
Flow VPN - Fast Global Internet from FlowVPN.com sends data to configuredevice.com. No other extension we have analysed sends data here.