Is Free VPN safe?

Question

Is Free VPN safe?

Accepted Answer

Free VPN is critical risk. When you click Connect in free mode, the extension routes every website request through one of 50 hardcoded hostnames — domains like efr-marktplatz.club, voteshirleysew.club, and mohegansuncasi.online — that have no verifiable relationship to the extension's operator. The extension generates a PAC script selecting three of these hosts at random, marks it mandatory so the browser cannot bypass it, and rotates to the next group when the current one fails. Your browsing history, submitted credentials, and session cookies all transit these hosts. When a proxy profile with a username and password is activated, the extension stores those credentials as plain JSON in chrome.storage.local and injects them into every proxy authentication challenge the browser receives — without filtering by URL or hostname. Any website that triggers a proxy authentication challenge (including adversarially-crafted ones) will cause the extension to supply the stored username and password. The credentials persist in chrome.storage.local in unencrypted form for the duration of the session.

Is Free VPN for Chrome: Secure VPN Proxy in One Click safe?

Findings