Search "VPN for Chrome", click install, and thirty seconds later a green icon says you are protected. Sometimes that is even true. More often the extension does much less than the word VPN suggests — and the difference is worth two minutes of your time.
The problem
A “VPN for Chrome” installs in one click and shows a green icon. But Chrome gives extensions no tunnel — only a proxy for one browser profile. The rest of the device goes around it.
What we took apart
What chrome.proxy can actually do, what stays outside (apps, other browsers, WebRTC, system DNS), and why the permission to “read all your data on all sites” is the business model of free extensions.
What came out
A rule: an extension is fine for opening one site from another IP with a vendor you already pay. For public Wi-Fi and mobile networks you need a system-wide tunnel.
What a Chrome VPN extension actually is
Chrome does not let extensions open system-wide tunnels. The only thing an extension can do is set a proxy for the browser itself via the chrome.proxy API. So every "VPN" extension, whatever the marketing says, is a proxy client: it reroutes what Chrome sends and nothing else.
Whether that traffic is encrypted depends entirely on the vendor. Good extensions wrap it in TLS on the way to their servers. Bad ones forward it nearly as-is — you have no way to tell from the outside.
What it covers — and what keeps leaking
An honest extension hides your IP address from the sites you open in Chrome. That is the full list.
What stays outside the "tunnel":
- Every other app. Mail, messengers, torrent clients, games — all connect directly.
- Other browsers and profiles. The proxy applies to one Chrome profile.
- WebRTC. A video-call API in the browser can reveal your real IP unless the extension explicitly blocks it — many don't.
- DNS. System DNS queries often keep going to your ISP, announcing every domain you visit.
The permission you grant in exchange
To work, a VPN extension asks for the right to read and change all your data on all websites. That is exactly the access needed to collect your browsing history — and for a free extension with server bills to pay, selling that history is the obvious business model. This is not a hypothetical: browser stores periodically remove popular "free VPN" extensions for precisely this.
A fair rule: if you would not hand your full browsing history to a random company, do not install its free extension.
When an extension is enough
If the task is "open one site with a different IP, in the browser, right now" — an extension from a vendor you already pay is a reasonable tool. It is lighter than a full tunnel and switches with one click.
For everything else — public Wi-Fi, mobile networks, hiding traffic from the ISP, apps outside the browser — you need a real VPN at the system level.
Covering the whole device instead
A full VPN app protects every app on the device, Chrome included, with no extension to install or trust. With Noname VPN the setup takes about a minute:
- Open @unlocknoname_bot in Telegram and press Start — the bot issues a key with a free 24-hour trial, no email and no card.
- Paste the key into the app (Google Play) and connect.
- The WireGuard-family tunnel now carries all device traffic — browser, apps, DNS — on any network.
After the free day, top up the balance in the same chat and pay per day, stopping whenever you want. The extension question then answers itself: when the whole device is already behind a tunnel, the browser needs nothing extra.
Code you have allowed to read all your pages is no longer your browser. Noname VPN closes the whole device with a WireGuard-family tunnel — browser, apps, DNS — and asks for no Chrome permission at all, because it has no business there.Products in this article
Close the whole device, not one tab
A key from the Telegram bot, first day free; one key for Android and iOS.
How to choose a VPN in 2026: a no-nonsense checklistJurisdiction, logging, protocols, speed and honest pricing — what actually matters when you pick a VPN, and what is pure marketing.
Timezone Spoofer: fix the clock that betrays your VPNA VPN changes your IP but not your browser clock. Timezone Spoofer — our free extension for Chrome and Safari — fixes the mismatch in one click.
5 VPN privacy myths that refuse to dieA VPN does not make you anonymous, incognito mode does not hide you, and "free" VPNs are rarely free. Sorting facts from folklore.