5 Signs of an Unreliable VPN Service
Not every service that calls itself a VPN is equally useful for your privacy. Here are five practical signs you can use to quickly judge reliability — without deep technical expertise.
1. An outdated or non-transparent encryption protocol
Reliable services use openly documented protocols. WireGuard, for example, builds its secure channel on Curve25519 for key exchange, ChaCha20-Poly1305 for data encryption, and BLAKE2s for hashing — algorithms that are open and studied by independent cryptographers. If a service won't name its protocol or talks about a "proprietary secret technology" instead, that's a reason to be cautious.
A one-minute check: open the app's settings and look for the name of the connection protocol — it should be specific (WireGuard, OpenVPN, IKEv2), not a marketing euphemism.
In practice, a "bad" answer looks like this: the connection settings only offer a toggle like "Fast mode" or "Maximum protection" with no mention of a protocol anywhere, and the "About" section and the website's documentation don't mention one either. A good answer, by contrast, is specific — for example, HamikVPN's profile settings show a line naming AmneziaWG, and the same name appears again in the plan description.
2. No kill switch — no emergency internet cutoff
A kill switch blocks a device's internet access if the encrypted connection unexpectedly drops. Without this feature, traffic can briefly flow unprotected when the tunnel breaks, exposing your real IP address and DNS queries — especially risky on public networks in cafés, airports, or hotels. More on these risks in our article on protecting data on public Wi-Fi.
- Check whether the app's settings have a "kill switch" or "network lock" option.
- Turn on the VPN, briefly disable Wi-Fi or mobile data, and confirm the internet doesn't stay reachable outside the encrypted channel.
Here's how this problem shows up in practice: turn on the VPN at home over Wi-Fi, open an IP-checking site on another device and note the address shown. Then on your phone, enable airplane mode for 2–3 seconds and turn it back off — this mimics switching between cell towers on the move. Refresh the check page right after the connection comes back. If the real IP shows up even once instead of the VPN server's address, the kill switch is either missing or triggers with a delay. It's exactly at the moment of switching networks (Wi-Fi to mobile data, moving between towers) that weak implementations tend to "leak," because they wait for a reconnection instead of blocking traffic instantly.
3. A vague privacy policy
Phrasing like "we collect some data to improve the service" without specifics is a bad sign. A reliable service directly lists what it logs (for example, only traffic volume for billing purposes) and what it doesn't (your browsing history, destination addresses). That's how our privacy policy is written, for example.
4. The app asks for excessive permissions
On Android, the basic function of connecting technically only needs permission to create a VPN tunnel and, if needed, to send notifications. Requests for access to contacts, SMS, or photos have no legitimate reason for a VPN client — it's worth figuring out why the service wants that data. Basic rules for checking permissions are in our Android security checklist.
5. An opaque payment model
Hidden auto-renewal terms, no trial period, or plans without a clear link to the number of devices are also warning signs. Free VPNs without a clear business model often monetize through user data: server infrastructure isn't free for anyone.
HamikVPN uses the AmneziaWG protocol (based on WireGuard) and openly states its plan terms on the pricing page, and the app can be installed from the download page. The general rule is simple: the more transparent a service's app and policies are, the more reason you have to trust it.