Search "VPN for Chrome", click install, and thirty seconds later a green icon says you are protected. Sometimes that is even true. More often the extension does much less than the word VPN suggests — and the difference is worth two minutes of your time.
What a Chrome VPN extension actually is
Chrome does not let extensions open system-wide tunnels. The only thing an extension can do is set a proxy for the browser itself via the chrome.proxy API. So every "VPN" extension, whatever the marketing says, is a proxy client: it reroutes what Chrome sends and nothing else.
Whether that traffic is encrypted depends entirely on the vendor. Good extensions wrap it in TLS on the way to their servers. Bad ones forward it nearly as-is — you have no way to tell from the outside.
What it covers — and what keeps leaking
An honest extension hides your IP address from the sites you open in Chrome. That is the full list.
What stays outside the "tunnel":
- Every other app. Mail, messengers, torrent clients, games — all connect directly.
- Other browsers and profiles. The proxy applies to one Chrome profile.
- WebRTC. A video-call API in the browser can reveal your real IP unless the extension explicitly blocks it — many don't.
- DNS. System DNS queries often keep going to your ISP, announcing every domain you visit.
The permission you grant in exchange
To work, a VPN extension asks for the right to read and change all your data on all websites. That is exactly the access needed to collect your browsing history — and for a free extension with server bills to pay, selling that history is the obvious business model. This is not a hypothetical: browser stores periodically remove popular "free VPN" extensions for precisely this.
A fair rule: if you would not hand your full browsing history to a random company, do not install its free extension.
When an extension is enough
If the task is "open one site with a different IP, in the browser, right now" — an extension from a vendor you already pay is a reasonable tool. It is lighter than a full tunnel and switches with one click.
For everything else — public Wi-Fi, mobile networks, hiding traffic from the ISP, apps outside the browser — you need a real VPN at the system level.
Covering the whole device instead
A full VPN app protects every app on the device, Chrome included, with no extension to install or trust. With Noname VPN the setup takes about a minute:
- Open @unlocknoname_bot in Telegram and press Start — the bot issues a key with a free 24-hour trial, no email and no card.
- Paste the key into the app (Google Play) and connect.
- The WireGuard-family tunnel now carries all device traffic — browser, apps, DNS — on any network.
After the free day, top up the balance in the same chat and pay per day, stopping whenever you want. The extension question then answers itself: when the whole device is already behind a tunnel, the browser needs nothing extra.