Brave browser is installing a VPN without your permission
Brave browser, lauded as secure and private, is installing its VPN without user’s consent.
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
What you need to know
Brave browser is loved throughout the tech, cybersecurity, and privacy-minded communities alike. Here at Windows Central,we reviewed it back in 2020and gave it a glowing recommendation. However, reports fromAndroid CentralandGhacks.netare pointing to an issue discovered with Brave browser installing undeclared files for its VPN service for all users on Windows.
Is Brave going to fix the issue?
While the decision by the Brave company to install service packages for their VPN unknowingly to the customer is concerning, the implementation of the installation shows they weren’t trying to do anything malicious on the end-user device.
We can take a look at what the installation is actually doing with the VPN services. As we can see in the image below, the VPN services are set to manual meaning they won’t start until the user purchases Brave’s Firewall and VPN service which costs $9.99 per month or starts the service manually.
In aposton Github, Brian Clifton, the VP of Engineering@brave, explains more of the situation. The change to install the VPN services went live inthis updatewhich is dated April 4th of this year. There are two services installed, the Brave VPN Wireguard Service and the Brave VPN Service, neither of which are explained to a user downloading the Brave browser, nor do they get consent.
Brave has already addressed the issue and promised to resolve it.
What does the fix look like? As we solve this issue, here’s what we plan to do. Remove the service registrations during install (for Brave Vpn Service and Brave Vpn Wireguard Service). This will prevent new users from having the service installed.
How to disable Brave VPN on your computer?
If you don’t want these services on your computer, you can follow these steps to disable them.
Is Brave browser safe to install?
Luckily, this appears to be an oversight by the Brave team, or possibly a decision made by the VPN team rather than a security and privacy-focused team member. While these installations are rather benign, they show the threat that any installation poses to our computers.
Get the Windows Central Newsletter
All the latest news, reviews, and guides for Windows and Xbox diehards.
There aren’t any security measures that require companies to disclose what they are installing on your PC, and it is all too easy for malicious actors to grab a good copy of a trusted program, add some malware or ransomware to the file, and have it installed on your PC. Always remember to find a known good file hash and compare it to the file you are downloading.
Do you use Brave browser? Do you think this news will make people stop trusting Brave? Let us know in the comments.
Colton is a seasoned cybersecurity professional that wants to share his love of technology with the Windows Central audience. When he isn’t assisting in defending companies from the newest zero-days or sharing his thoughts through his articles, he loves to spend time with his family and play video games on PC and Xbox. Colton focuses on buying guides, PCs, and devices and is always happy to have a conversation about emerging tech and gaming news.
