VPN in the browser: what the extension protects and when you need an app

Browsers with a built-in VPN and "online VPN browsers": which is safer

Updated:

The built-in VPN in Opera, Edge and Firefox routes browser connections through an intermediary server and changes the internet protocol address (IP address) that websites see. These features do not protect other applications. An "online VPN browser", where you open websites inside another website, works like a web proxy: its operator gains access to the requests and the content of the pages passing through it. Such an intermediary is unsuitable for passwords and banking operations.

How a built-in VPN, a web proxy and a private browser differ

A virtual private network (VPN) creates an encrypted connection to a remote server. A browser feature redirects the browser's web traffic through it. A proxy is an intermediary: it receives a request and passes it on.

Type of browser or serviceWhat happens to the connectionWhere the boundary lies
Browser with a built-in VPNWeb requests go through the server of the feature's operatorOther applications require a separate connection; exceptions for certain websites are possible
Online browser on a proxy websiteThe service itself fetches the required page and displays it to youThe intermediary gains access to the content passing through it
Private browser or modeMay restrict local history, cookies and trackingThe word "private" itself does not mean an IP change or the presence of a tunnel

To connect several programs, start by comparing a browser VPN and an app. Here we are choosing a feature for browsing websites.

What Opera, Edge and Firefox offer

The terms were verified against the official pages on 22 October 2026. Limits and availability change: before switching the feature on, check the sources in the table.

ParameterOpera VPNEdge Secure NetworkFirefox built-in VPN
How to switch it onSettings → Advanced → Features → VPN → enable VPNSign in with a personal Microsoft account and enable the secure networkSign in to your account and enable the feature, if it is available
Is an account neededNo requirement stated on the official pageYes, a personal Microsoft accountYes
Free trafficUnlimited5 GB per month50 GB per month
LocationChoice of virtual region; the optimal one is selected automaticallyRoughly the same region; country selection is not describedCountry selection is not stated on the official page
Which sites it coversBrowser connections while the feature is enabled; no list of exceptions givenOptimised mode, selected sites or all sites; exceptions for part of the traffic are possibleCan be switched on and off for individual sites
Availability restrictionsFull list of platforms and regions not statedDepends on region and version; unavailable on managed devicesGradual rollout; not distributed under corporate policies
Source as at the verification dateOpera helpMicrosoft pageFirefox 149 release notes

Opera: unlimited traffic and a clear switch

Once enabled, a VPN icon appears in the address bar. Through it you can see the virtual IP, the location and the amount of data transferred, choose a region or disconnect. The names of the items depend on the localisation.

Opera encrypts the "browser → VPN server" segment, protecting it even on an unencrypted local network. Cookies (the records by which a website recognises the browser) continue to work: the help documentation warns that changing your location does not prevent a visitor from being identified.

Edge: the mode determines which connections are protected

Optimised mode is designed for situations where extra protection is needed: open Wi-Fi and unencrypted connections. It saves the monthly 5 GB, so it does not route all browsing through the service. In selected-sites mode you specify the addresses that should use the secure network; all-sites mode extends the coverage.

Microsoft allows exceptions for certain types of traffic in order to save the allowance, even while the feature is enabled. An alternative way to connect is described in the article on extensions for Chrome and Edge.

Firefox: a secure proxy with per-site control

Mozilla calls the feature a secure proxy for use within Firefox. In the UK, the gradual rollout began with version 149 on 24 March 2026; availability of the feature for each user today is not guaranteed. The settings are examined in the guide to VPN in Firefox.

Whom you entrust your traffic to

The route of a built-in feature: browser → operator's server → website. A mail client and other applications do not connect to it automatically.

Whom you entrust your traffic to

Whom you entrust your traffic toA mail client and other applications do not connect to it automatically. the VPN operator can see which sites you connect to and other network metadatabrowseroperator's serverwebsite

A mail client and other applications do not connect to it automatically.

the VPN operator can see which sites you connect to and other network metadata

The Electronic Frontier Foundation (EFF) suggests evaluating a VPN through trust in the operator: who runs the connection, how the service makes money, what data it collects. Being free of charge does not prove a service's good faith, and promises are no guarantee.

At the same time, an ordinary VPN does not automatically obtain passwords from a connection that is properly secured with the hypertext transfer protocol secure (HTTPS). HTTPS encrypts the content between the browser and the website; the VPN operator can see which sites you connect to and other network metadata. A proxy website has a different model of access to the page.

If you need a system-wide connection via a compatible client, consider CitadelVPN and start with the policy dated 29 July 2026: it promises not to store browsing history, traffic content, domain name system (DNS) queries, original and exit IPs and connection timestamps, but it does provide for the processing of email, account and payment data. This is the operator's own statement, not an independent audit. Before connecting, check in the client which connections will go through the service.

Why a proxy website requires a different level of trust

In an "online VPN browser" you enter the site's address into a special field. The route: your browser → proxy website → target website. The proxy fetches the page and returns it to you, so it can read or alter the content passing through it, including submitted forms.

Why a proxy website requires a different level of trust

Why a proxy website requires a different level of trustThe proxy fetches the page and returns it to you, so it can read or alter the content passing through it, including submitted forms.your browserproxy websitetarget website

The proxy fetches the page and returns it to you, so it can read or alter the content passing through it, including submitted forms.

The intermediary sees the traffic within its own service. A single visit to a proxy website does not give it access to neighbouring tabs or to other applications.

The padlock next to the proxy's address confirms an encrypted connection to the proxy itself. It does not make the intermediary blind to the content. For example, if someone has sent you a link to a document via such a service and it asks you to log in to your email, open the email directly at its usual address. There is no need to hand your password to the intermediary.

Frequently asked questions

Is Opera's built-in VPN a real VPN?

Yes, the help documentation describes a connection via a VPN server with encryption up to that server. In terms of scope it is a browser feature: it cannot be treated as proof that the whole computer is protected.

Can you access your bank through an "online VPN browser"?

You should not use a proxy website to log into your bank. Open the official app or type the bank's address directly into the browser. A separate, vetted VPN does not remove the need to check the bank's address.

Why is the built-in VPN missing on a work laptop?

The reason may be corporate restrictions. Edge Secure Network is unavailable on managed devices, and Mozilla does not distribute the built-in feature to users with corporate policies. Use the connection method approved by your organisation; set up a personal VPN on your own device.

What to choose for your task

For browsing websites in a single browser, focus on coverage and limits: Opera offers free unlimited traffic, Edge gives 5 GB with several modes, and Firefox claims 50 GB with per-site control and gradual availability. These terms were verified on 22 October 2026. Other programs require a separate connection.

After switching it on, it is useful to check whether the IP changes: an icon in the toolbar does not on its own confirm the route of every request. When logging into accounts, open websites directly in the browser, without an intermediate proxy website. Choosing an operator and checking its data policy are necessary whichever method of redirecting traffic you use.