New VPN Research Reveals Holes in Free Applications

What's a VPN and Why Should I Use It?

Before I talk about free VPNs, I first have to talk about what VPNs are, why you should use them, and how they work.

Every time you type something into your browser, it's converted into a query. Your browser sends this query to a DNS server which then sifts through its archives until it finds the appropriate resource. If it fails to find the appropriate resource, it passes the query to the next DNS server and repeats this process until it finds the appropriate resource.

Now:

Each browser query consists of data packets containing easy-to-read text. Since each query passes through your ISP before it reaches a DNS server, it's easy for your ISP to monitor and record the data flowing from your browser searches. The same can also be said were someone with malicious motives to access your internet connection and sniff around your browser queries.

This is potentially dangerous since it's highly likely that your ISP records whatever sensitive information you may have sent through the Internet. While this depends on the data-keeping policy for each ISP, the odds may be against you if your ISP operates in any of the 14-eyes countries.

Even worse are the various attacks a bad actor can wage once they get a hold of your sensitive information. Identity theft, malware, and phishing attacks are just some of the most examples.

So:

In order to secure your online data, you need to use a VPN. A virtual private network (VPN) secures your data by encrypting your online data and then hiding your real IP address.

Once your data gets encrypted, the text contained in your queries' data packets gets jumbled into unreadable jargon. This prevents bad actors and ISPs from recording your data.

Additionally, anyone sniffing around your now encrypted data can't trace any of it back to your browser since your VPN hides your real IP address.

Paid vs Free VPNs

Now that you know what a VPN is and why you should be using one, it's time to talk about the differences between paid VPNs and free VPNs.

Paid VPNs are just that: VPNs that require you to sign up and pay for a monthly subscription to enjoy their services. These paid VPNs usually offer extra features aside from the default features you'd expect (like encryption and IP masking). Paid VPNs rely on your monthly subscriptions to keep their services operating and in tip-top shape.

Free VPNs are called that because you don't have to pay for anything to enjoy their services. However, it's important to note the two types of free VPNs before we continue.

The first type of free VPN is what I like to call "the sample platter" type. Like a sample platter, these VPN companies simply offer you a taste of their services via a free trial period or a free account. You have the option to refund your payment within the free trial period or, in the case of a free account, you may enjoy only limited features compared to premium accounts.

Sample platter type VPNs hope that you like what you see enough to eventually upgrade into a premium account. These VPNs aren't bad because they still rely solely on premium accounts to continue operating.

The problem lies in the free VPNs that I call "free lunch" types. These VPNs don't rely on your monthly subscriptions to keep themselves afloat. They also usually offer services and features inferior to that of paid or sample platter VPNs.

"Wait, they let you use their VPN service for free? But how do they keep their company going? How do they maintain their services?"

Well...

Risks and Problems With Free VPNs

They collect and sell your data or bandwidth

If a company doesn't make money off of you, they're making money from you. After all, they have to find some way to get back their money.

I coined the term "free lunch VPN" after the age-old practice of attracting unsuspecting customers with free lunches. Back in the 80s and 90s, companies would attract people by offering them free lunches. What these people weren't aware of was that (while eating) they would be subjected to marketing strategies that, in the end, would cost them more than what the free lunch was worth.

Free VPNs work similarly. They let you enjoy their services in exchange for something you may not expect -- your data. These days, companies are willing to pay top dollar for consumer data and free VPN companies like Hotspot Shield are willing to sell yours. 

Hola VPN users suffered a similar problem when Hola VPN was caught selling their users' bandwidth.

Selling user data or bandwidth is bad because it defeats the purpose of having a VPN to secure your data in the first place. What's worse is that the companies who buy your data may not have top-level security to defend against a breach and in turn lose your data to an attacker. But the worst part is that some free VPNs actually tell people what they do with their data but that most people either don't read the fine print or don't care altogether.

They annoy you with targeted ads

Another way that free VPNs make money from you is through targeted ads. While you may not mind at first, these targeted ads may eventually annoy you, especially if they cause your internet speed to slow down. You may think that targeted ads may not be so bad -- until you realize what they mean.

We go back to the first problem: they sell your data. The presence of targeted ads means two things: 1. Your data has collected and sold; 2. Companies other than the free VPN now know who you are, your location, and your online habits.

Their services aren't very good

Ever heard the phrase "you get what you pay for"? Nowhere is this truer than regarding free VPNs.

You may find that they considerably slow down your internet connection speed. This may be due to their relatively fewer server count and inability to handle too much traffic.

Some free VPNs also lack features like a built-in killswitch or compatibility with a range of devices -- features that are standard to the best VPNs.

They may contain malware

Perhaps the most insidious problem in this list is the fact that some free VPNs actually contain and infect your computer or device with malware. Betternet, SuperVPN, and CrossVPN usually come to mind on this subject.

You may have already noticed the recurring theme but it's worth mentioning all the same: malware-spreading VPNs defeat the purpose of having a VPN since protecting you from malware is what VPNs primarily do.

How to Choose The Best VPN for You

Let's face it:

The only reason we'll ever use a free VPN  is that it doesn't cost money to use. But, is your security and privacy really worth skimping out on?

This question gains more weight especially when you consider that some of the best VPNs actually cost the same as a cup of coffee. Additionally, the best VPNs don't sell your private information or bandwidth and actually offer features that secure your data even more. So, it really is a no-brainer (unless you REALLY can't afford it and you don't care about giving your private data away).

If you're convinced that free VPNs are no longer for you, the following checklist should help you find the best VPN to suit your needs.

• Encryption Standard: The best VPNs employ 256-bit AES encryption. This is the gold standard in leading VPNs today.
• No Leaks and No Malware: Needless to say, the best VPN shouldn't have any IPv4 or IPv6 leaks nor contain any malware. 
• No-Logging Policy: The best VPN should log only the most necessary information. The less information it logs the better.
• Speed: The best VPN should be lightning-fast. It should leave little to no change in your Internet connection speed.
• Number of Servers: More servers mean faster connection times and more location choices.
• Number of Connections: The more simultaneous connections you can make with one VPN account the better. 
• Location: Watch out for VPNs located in any of the 14-eyes states. They may be made to record and surrender your data. If your VPN does belong in one of the 14-eyes states, make sure it doesn't keep any logs.
• Built-in Killswitch: The best VPN should have a built-in killswitch. A killswitch cuts off your connection to the Internet whenever your VPN's connection is paused thereby avoiding even just a few unsecured seconds. 
• Compatibility with TOR: The Onion Router can be used with the best VPNs. TOR lets you add a layer or three of privacy over your already secure VPN connection.
• User-friendly Interface: The best VPN shouldn't only be secure but must be effortless to use.
• Other Useful Features: Apart from the above-mentioned features, the best VPNs often come with extra security features (like multi-hop technology or AI-assisted connections) or features like P2P security or Netflix access.

TIP: Testing VPNs takes time and effort. You can save yourself from the hassle of having to sign up and test each VPN you find by checking out VPN reviews from trustworthy websites site TheBestVPN (where I got the above-mentioned best VPN categories).

Free VPNs Aren't Really Free

Many people use free VPNs thinking they're getting a good deal but they're really paying those companies with something much more valuable -- their personal data. Know the risks of using free VPNs and follow my checklist to help you find the best VPN for you.