Free VPN Apps on Google Play Failing Basic Privacy Tests
Audit VPN integrations to ensure traffic is routed through the VPN tunnel and replace any apps that leak traffic.
Replace VPN solutions that fail basic privacy tests, enforce strict tunnel verification, and monitor for traffic leaks.
Summary
Researchers ran 281 of the most popular free VPN apps on the Google Play Store through a new testing system and found that many fail at the basics people install a VPN for, i.e., keeping their traffic private and secure. The apps flagged with at least one problem have been installed more than 2.4 billion times. The problems are basic, not sophisticated. Twenty‑nine apps let user traffic leak outside the VPN tunnel, exposing data to potential eavesdropping. The testing system evaluated traffic routing and encryption integrity, revealing widespread privacy deficiencies in free VPN offerings. The findings underscore the importance of rigorous VPN security testing before deployment. Organizations should audit their VPN solutions to ensure traffic is routed through the tunnel and that no leaks occur.
Key changes
- Researchers tested 281 popular free VPN apps on Google Play Store using a new testing system
- Many apps failed basic privacy requirements, such as keeping traffic private and secure
- Apps flagged with at least one problem have been installed more than 2.4 billion times
- Twenty‑nine apps let user traffic leak outside the VPN tunnel
- The leaks expose user data to potential eavesdropping
- The testing system evaluated traffic routing and encryption integrity
- The findings reveal widespread privacy deficiencies in free VPN offerings
- The study underscores the importance of rigorous VPN security testing before deployment