Three jobs that get mixed up
People who search for VPN software Chrome can use are usually trying to do one of three things. They want to open a single site that an office or school filter blocks. They want everything they do in the browser hidden from cafe Wi-Fi. Or they want the entire laptop protected and assume the browser is where a VPN lives. Each job has a different best answer, and the word VPN on an extension's store page covers them all without saying which one it actually does.
Scenario one: a single blocked site
- A reputable proxy extension is enough, and so is a desktop client in proxy mode.
- You will get VPN browsing Chrome style: the site sees another address and the filter sees an encrypted session.
- Do not log in to anything important through an extension you have not vetted.
- On a work computer, check the policy. Going around a filter there is an HR question and not a technical one.
Scenario two: all browsing, on Wi-Fi you do not trust
- An extension covers Chrome only. Your mail app, your chat apps and your updates stay outside.
- Extensions often leave DNS lookups and WebRTC unprotected.
- A desktop client in proxy mode covers Chrome, other browsers and most programs.
- No add-on is involved, so nobody gains the right to read your pages.
Scenario three: the whole machine
- Only a system level tunnel does this. In the clients we recommend it is called TUN mode.
- Games, terminals and background services all use it.
- It takes one approval from an administrator.
- This is what a Valideo key is for, and no Chrome extension can run it.
What an extension is allowed to see
To reroute your traffic, a proxy extension asks Chrome for permission to read and change all your data on all websites. That is not a bug. It is how the mechanism works. It also means the publisher could read every page and every form, and extensions do change hands. If you keep one, choose a publisher with a business to lose, and review your extension list every few months. Anything offering unlimited service at no charge deserves a second look.
Chrome through a key, no extension
Put Hiddify or v2rayN on Windows, or Hiddify or V2Box on macOS.
Ask @valideo_bot in Telegram for the five day key and import it.
Switch on the system proxy. Chrome follows the operating system's proxy setting, so it needs no restart and no add-on.
Confirm by searching what is my IP.
Move to TUN mode whenever you want the rest of the computer covered too.
Small facts that save time
- Incognito changes what is saved on your computer, not what the network sees.
- Signing in to Chrome ties your activity to your Google account regardless of any tunnel.
- Chrome's secure DNS can stay on. Point it at a public resolver and not at your provider.
- For a Chromebook, install an Android client from the Play Store.
- Two tools that both change the proxy setting will fight. Run one at a time.
Q.Do I need special VPN software Chrome supports, or any client?
A.Any desktop client that sets the system proxy works, because Chrome follows that setting.
Q.Is an extension ever the better choice?
A.For a single blocked page on a computer where you cannot install programs, yes.
Q.Can extensions leak my real address?
A.Yes, through WebRTC or DNS, unless they deal with both. A system tunnel avoids the issue.
Q.Will a Valideo key load into an extension?
A.No. Browser extensions cannot run the VLESS protocol.
Q.Does Chrome get slower?
A.With a nearby city the difference is hard to notice.
Q.Does this also cover Edge and Firefox?
A.Edge follows the system proxy. Firefox does too, unless you changed its network settings. TUN mode covers everything in any case.