Is ZenMate Free VPN safe?

Medium risk

ZenMate Free VPN sends the user's real IP address and location to a third-party geolocation service on install.

When the extension is first installed, it contacts extreme-ip-lookup.com to retrieve the user's real public IP address, country code, and city, storing this information locally. Additionally, user credentials received from zenmate.com pages are encrypted with a hardcoded AES key bundled in the extension source, making the key extractable by anyone who reads the extension files.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

ZenMatev9.0.1Firefox Add-ons
46Risk
Who publishes it

ZenMate - no other listings under this identity, 8 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
ZenMate

Shared hosts - 8 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

account.zenmate.com
Also called by 2 other listings, including CyberGhost VPN Free Proxy
api.zenguard.biz
Also called by 2 other listings, including CyberGhost VPN Free Proxy
apiv2.zenguard.biz
Also called by 2 other listings, including CyberGhost VPN Free Proxy
feedback.zenmate.com
Also called by 2 other listings
zenguard.zendesk.com
Also called by 2 other listings, including CyberGhost VPN Free Proxy
airport.us
Also called by 3 other listings, including Private Internet Access
thinkdifferent.us
Also called by 3 other listings, including Private Internet Access
zenmate.com
Also called by 4 other listings, including Zenmate Gratis VPN Chrome, Freezen MateVPN for Chrome

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 9.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on every site you visit

    *://*/*

  • See the address and title of every tab you have open

    tabs

  • Watch every request your browser makes

    webRequest

  • Change your browser's privacy and security settings

    privacy

  • Watch, block and rewrite every request your browser makes

    webRequestBlocking

  • Route all of your browsing through a server of its choosing

    proxy

  • Store an unlimited amount of data in your browser

    unlimitedStorage

  • Store data in your browser

    storage

  • Show you desktop notifications

    notifications

  • Read and change cookies, including the ones that keep you signed in

    cookies

  • Schedule its own background tasks

    alarms

  • Clear your browsing history, cache and cookies

    browsingData

  • See every page you navigate to, as you navigate to it

    webNavigation

Where it sends data

Destinations our analysis observed ZenMate Free VPN contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • extreme-ip-lookup.com

    ZenMate Free VPN sends data to extreme-ip-lookup.com. 2 other extensions we have analyzed send data here.

Updated 2 November 2026amo-864549