Short answer, some are and most aren’t, and you can tell them apart with one question. Who pays for the servers?
A VPN routes all of your traffic through someone else’s computers. That’s the product. Those computers cost real money to run, every hour, for every user. When you’re not the one paying, someone else is, and they’re not doing it out of kindness.
Follow the money
There are two very different things hiding under the label “free VPN”.
The “100% free” VPN has no paid product behind it. Its only asset is you. The common ways it pays the bills, all documented across the industry for years: ads and trackers in the app, logging and selling your browsing data, or reselling your bandwidth so strangers route their traffic through your connection. Notice the irony. You installed it for privacy, and it monetizes the exact thing it promised to protect.
The free tier of a paid VPN is a different animal. Paying subscribers cover the costs, the free plan is marketing with clear limits, and there’s one privacy policy for everyone. The business wants to upgrade you someday, not to sell you today. Windscribe and Proton VPN both work this way, which is why their free plans have real limits and real privacy policies instead of hidden costs.
The red flags, in order
Before installing any free VPN, check these. Any one of them is a no.
- No paid plan anywhere. If nobody pays, you’re the product. This is the single strongest signal.
- A privacy policy that mentions “sharing with partners”. That’s the data sale, written politely.
- No named company behind it. No address, no team, no jurisdiction. You’re routing all your traffic through people who won’t say who they are.
- Free and “unlimited” at the same time. Unlimited bandwidth costs unlimited money. Someone is recouping it.
- An app store listing full of ad-related permissions. A VPN needs network access, not your contacts.
What a VPN won’t fix anyway
Whatever VPN you pick, paid or free, remember what it actually does. It protects your connection, not your inbox. Your email address keeps receiving what it receives, on any network. We wrote about that trap here: Does a VPN stop spam emails?
Privacy stacks. A trustworthy VPN for the pipe, and for the inbox: unsubscribing from what you don’t read and blocking what won’t listen. Each tool does one job.
Frequently asked questions
Is there any free VPN that’s actually safe?
The free tiers of established paid VPNs are the safe version of free. The economics are honest: paying users subsidize you, and the same no-logging policy covers everyone.
Can a free VPN steal my passwords?
A VPN sees your traffic, but sites you visit over HTTPS stay encrypted, passwords included. The bigger risk with shady free VPNs isn’t password theft, it’s logging and selling your browsing patterns, injecting ads, or reselling your bandwidth.
Why do free VPNs exist at all?
Either as marketing for a paid product, which is fine, or as a data business wearing a privacy costume, which is the problem. The privacy policy and the existence of a paid plan tell you which one you’re looking at.
Is a cheap VPN safer than a free one?
Usually, yes. Even a few dollars a month means the business model is subscriptions instead of your data. But the same red flags apply: named company, clear policy, independent audits if possible.
Bottom line
“Free VPN” isn’t one category, it’s two. A free tier from a real business is a fair deal with honest limits. A VPN that’s free with no paid product behind it runs on selling something, and the only thing in the building is you. Ask who pays for the servers, and the answer tells you everything. And before you compare prices at all, it’s worth knowing what a VPN actually does, because half the disappointment with free VPNs comes from expecting the paid ones to do more than they do.