Is PureVPN Proxy - Best VPN for Firefox safe?

Medium risk

PureVPN Proxy sends user email, account ID, device UUID, OS, and VPN session details to its analytics endpoint on every user action.

On each VPN connect, disconnect, and popup interaction, the extension transmits a bundle of identifying data — including the user's email address, account code, a persistent device UUID, OS details, and session timing — via GET requests to api.proxy.purevpn.com/v3/proxy/notify. Additionally, the extension generates auto-login tokens for my.purevpn.com using a hardcoded MD5 salt ('*PVPN123#'), which means any party that knows a user's account code can compute a valid login token.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

PureVPNv3.14.1Firefox Add-ons
46Risk
Who publishes it

PureVPN - no other listings under this identity, 10 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
PureVPN
Website
www.purevpn.com/

Shared hosts - 10 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

api.purevpn.com
Also called by 2 other listings, including PureVPN
auth.purevpn.com
Also called by 2 other listings, including PureDome
connecttossowin.com
Also called by 2 other listings, including PureVPN
direct.lc.chat
Also called by 2 other listings: Decodo, Decodo(Smartproxy) Extension
purevpn-extension.servermild.com
Also called by 2 other listings, including PureVPN
ideas.purevpn.com
Also called by 3 other listings, including PureDome
images.purevpn-tools.com
Also called by 3 other listings, including PureDome
my.purevpn.com
Also called by 3 other listings, including PureDome
support.purevpn.com
Also called by 3 other listings, including PureVPN
purevpn.com
Also called by 5 other listings, including IP Per Tab Chrome | Proxy Tab

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 3.14.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    http://*/*

  • Read and change your data on every secure site you visit

    https://*/*

  • Schedule its own background tasks

    alarms

  • See the address and title of every tab you have open

    tabs

  • Watch every request your browser makes

    webRequest

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

  • Route all of your browsing through a server of its choosing

    proxy

  • Change your browser's privacy and security settings

    privacy

  • Store data in your browser

    storage

  • See, disable and uninstall your other extensions, including your security ones

    management

  • Sign you in with your Google account

    identity

Where it sends data

Destinations our analysis observed PureVPN Proxy - Best VPN for Firefox contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • api.proxy.purevpn.com

    PureVPN Proxy - Best VPN for Firefox sends data to api.proxy.purevpn.com. One other extension we have analyzed sends data here.

  • my.purevpn.com

    PureVPN Proxy - Best VPN for Firefox sends data to my.purevpn.com. No other extension we have analyzed sends data here.

Updated 2 November 2026amo-851306