TunnelBear VPN Review – Is It Safe in 2024
Relying on our investigations users can make conscious decisions while choosing a free VPN. Providers are interested to publish on their website’s forefront pages the information that highlights advantages. Often, it is not obvious to reveal downsides, because they are hidden somewhere in the privacy policy or inside the app’s settings.
Furthermore, a lion’s share of consumers do not know technical details of VPN like what is a protocol, a transport layer protocol, encryption type, and other nuances. Each person wants to live his life and not stuff the brain with a software’s grammar. But the online privacy and web freeness should be simple and accessible for everyone.
Our resource helps users to find the best free VPN for their needs. We prepare clear-written reviews about free VPNs that are up to everyone. Here is gathered the core essential information about each free provider we know. After reading our materials, you will confidently comprehend what offers that or another VPN. We hope you will find our job useful.
TunnelBear VPN Features
Current provider has distribution for desktop operating systems, mobile operating systems, and browsers. Microsoft Windows, macOS, Android, iOS, Chrome, Firefox, and Edge browsers are compatible with this VPN.
TunnelBear affirms that it utilizes strong AES 256-bit encryption, modern and secure protocols such as WireGuard, OpenVPN, and IKEv2. In addition, it has extra features to control your privacy more flexibly, and you can connect multiple devices to one account while using it.
It is stated on the official website that their network encompasses 47 countries, but there is no mention of the server quantity. Besides the network, you can see on the main page that their system is organized to work quickly, and they do not use logging of your activity.
From the first glance, all looks very nice, but we have to clarify which of the features are available for the free version. The following blocks of the current review will show you the real state of affairs of TunnelBear VPN.
Privacy and Logging
Protection of personal data and its unreachability for anyone are the core features that consumers need from a VPN. In this section, we are going to discover the Privacy Policy page of TunnelBear and see all the advantages and pitfalls..
However, it is only the promotional text that we are used to seeing on every single provider’s website. Such information from the front page is rather a part of the promotional campaign than a reflection of reality.
The next screenshot is directly from the privacy policy page, and now it contains more straightforward and actual information.
So, once they collected users’ full names, but further got rid of this practice. If you want to have a subscription and will pay with a credit card, then your last name and payment information will be collected.
There is no information in this block about the exact payment data that they collect. It is important to know if they store only your payment provider’s name or credit card number with a CVV code, expiration date, and full name as a part of payment details. Let’s go on and see our next discoveries regarding privacy.
We estimate it to be a double-edged sword. From one side, there is no very accurate identifying data. There are plenty of people with the same last name, as well there are a significant quantity of cards with the same ending. The date of card use is very minor data at all.
But from another side, the combination of the user’s last name, the last four credit card’s digits, and the date of card use may lead to person identification in some circumstances. Anyway, notwithstanding that the current stored data is not directly sensible, its leakage may provoke consequences.
Tunnel VPN collaborates with Stripe and PayPal payment systems, and they can login to their systems and observe some users’ data. More details about this will represent the next screenshot.
In addition to the previously mentioned stored credit card’s details and user’s surname, they have access to your credit card’s expiration date and card billing address. Furthermore, due to their payment provider partners, your device type, operating system, and IP address at the time of payment are also opened for them.
So now it reveals that TunnelBear stores:
– Credit card’s last four digits;
– Surname of the card holder;
– Date when credit card was used.
Additionally, they have free access to:
– Expiration date of the credit card;
– Card billing address;
– IP address where a payment was made;
– Device type that you use;
– Device’s operating systems.
So, as you see, the complete scope of the gathered sensitive information is extensive enough. And we keep moving on.
We do not understand the formulation: “explicitly does NOT collect” – it sounds very ambiguous. We may assume that there are some internal mechanisms that possibly implicitly collect or monitor the user’s data, as described on the image above. In this case, it would be relevant to say that we do not EXPLICITLY say that TunnelBear collects users’ information.
Of course, there can be a situation when a company may be taken over by another company or the business reconstructs. Nevertheless, would you like your private data to migrate to some third party? At least, such actions should be supplemented with users’ surveys in order to achieve their consent or to receive a refusal.
The following screenshot contains even more disturbing information.
Imagine that some Dohn Joe who works in their office can look at all your data that they store or have access to. And there is enough valuable information:credit card details, including the expiration date, card billing address, and IP address at the time of payment. Also your device type and the operating system of the device. Where is the guarantee that anyone among the employees will not share this information with somebody else?
It is not the first time we meet vague explanations from providers. Here we are conscious of the phrase, “We store your Personal Data only as long as is necessary”. Why is there no precise period range, and who will decide how long it is necessary? Will they retain it after you abandon their services?
We see this as a sneaky approach to protecting user privacy. In other words, they will keep the data for as long as they want. There is no regulatory document in their sources with written standards on the duration of user data storage.
Final Thoughts
Our impression of the TunnelBear privacy policy is very weak. We found significant vulnerabilities that compromise providers’ ability to ensure safe and sustainable data protection.
The second negative point is that the descriptions of some critical points are written in a vague, tricky mode without accurate essential data.
Speed Tests – How Fast is TunnelBear VPN
Internet connection speed is a very important index that impacts traffic transfer efficiency, consumer satisfaction, and convenience. You may have the strongest protection measures, but barely you would be glad if the internet speed could not load the desired content or processes it for a long time.
VPN service impacts the connection speed and does it with different productivity. Each provider has its own network architecture, and every detail influences its work.
We made speed tests for all the products issued by TunnelBear and organized it into specifically dedicated sections. You will see the results of the desktop software, browser extensions, and mobile applications.
Desktop block:
– Windows;
– macOS.
Browser extensions block:
– Chrome.
Mobile Apps block:
– Android;
– iOS.
PC Test
The first on-the-go test will be for Windows OS, and the second test will be for macOS. Both checks run under the same internet service provider (ISP) and the same speed tester. We utilized two locations for each operating system: the US server and one randomly selected server from the European region.
Windows
The screenshot below illustrates the speed capabilities of the TunnelBear VPN designed for the current operating system.
PC Test
The first on-the-go test will be for Windows OS, the second test will be for macOS. Both checks run under the same internet service provider (ISP) and the same speed tester. We utilized two locations for each operating system: the US server and one randomly selected server from the European region.
Windows
The screenshot below illustrates the speed capabilities of the TunnelBear VPN designed for the current operating system.
Vertical image shows the results of the ISP. The indexes are:
- download speed is 93.37 mbps;
- upload speed is 85.69 mbps;
- ping time is 2 ms.
The top-right image shows the performance of the US server. The indexes are:
- download speed is 70.61 mbps;
- upload speed is 81.55 mbps;
- ping time is 134 ms.
The download speed is about 24% below the ISP speed, and the upload speed is nearly 5% below it too. Ping time has increased from 2 ms to 134 ms.
The bottom-right image shows the performance of the UK server. The indexes are:
- download speed is 73 mbps;
- upload speed is 83.14 mbps;
- ping time is 130 ms.
The download speed has been cut by nearly 22%, the upload speed decreased by 3%, and the ping time increased from 3 ms to 130 ms.
Either location showed moderate indexes for the download speed and decent results for the upload speed. If your ISP velocity is low, losses over 20% may cause uncomfortable conditions for utilization.
MacOS
The screenshot below illustrates the VPN provider’s speed for the current operating system:
Vertical image shows the results of the ISP. The indexes are:
- download speed is 64.1 mbps;
- upload speed is 59.1 mbps;
- ping time is 12 ms.
The top-right image shows the performance of the US server. The indexes are:
- download speed is 37 mbps;
- upload speed is 40.1 mbps;
- ping time is 141 ms.
The download speed is approximately 42% below the ISP speed, and the upload speed was worsened by about 32%. Ping time grew from 12 ms to 141 ms.
The bottom-right image shows the performance of the German server. The indexes are:
- download speed is 32.1 mbps;
- upload speed is 32.4 mbps;
- ping time is 128 ms.
The download was downgraded by 50%, the upload speed fell by nearly 51%, and the ping time increased from 12 ms to 128 ms.
VPN that is designed for macOS runs with significant speed drawbacks, both for the US and German servers. If your ISP is not very fast, then you definitely meet hindrances.
Browsers’ Extensions Test
TunnelBear has developed extensions for three widely used browsers: Chrome, Firefox, and Edge. To understand the situation, we took readings only for the Google Chrome browser, seeing that it is the most popular.
Google Chrome
Upper image shows the ISP connection speed. The indexes are:
- download speed is 60.97 mbps;
- upload speed is 49.95 mbps;
- ping time is 5 ms.
Central image presents the US server. The indexes are:
- download speed is 11.02 mbps;
- upload speed is 52.19 mbps;
- ping time is 138 ms.
Download speed deteriorates palpably, by 82%. The upload showed an opposite result, increasing by 4%. The ping time has increased from 5 ms to 138 ms.
Bottom image presents the Finland server. The indexes are:
- download speed is 56.4 mbps;
- upload speed is 56.62 mbps;
- ping time is 50 ms.
Download speed loss is about 5% lower than the ISP speed, and the upload speed is 12% higher. The ping time has increased from 5 ms to 50 ms.
The US server performed poorly in the download speed results but showed an improvement in the upload speed. The European server produced tangible performance with a tiny loss of download speed and an augment in upload index.
Mobile Test
This section is dedicated to mobile VPN applications. For a long time, we have been used to utilizing mobile devices as an integral part of our day-to-day lives.
Nowadays, mobile internet traffic takes up a big part of the overall volume, so we conducted speed tests for two widely used mobile operating systems: Android and iOS.
Android
First image in a row shows the results of the ISP. The indexes are:
- download speed is 76.3mbps;
- upload speed is 82.5 mbps;
- ping time is 2 ms.
Central image shows the performance of the US server. The indexes are:
- download speed is 70.7 mbps;
- upload speed is 70.3 mbps;
- ping time is 135 ms.
Download speed is about 7% lower than the ISP speed, and the upload speed is nearly 15% lower. Ping time has increased from 2 ms to 135 ms.
Right image shows the performance of the Dutch server. The indexes are:
- download speed is 61.9 mbps;
- upload speed is 84.5 mbps;
- ping time is 42 ms.
Download speed is nearly 19% lower, the upload speed is approximately 2% better, and the ping time has increased from 2 ms to 42 ms.
Android’s application showed moderate results for both regions, even with an improvement in the upload speed of the Dutch server.
IOS
Vertical image shows the results of the ISP. The indexes are:
- download speed is 64.1 mbps;
- upload speed is 59.1 mbps;
- ping time is 12 ms.
The top-right image shows the performance of the US server. The indexes are:
- download speed is 37 mbps;
- upload speed is 40.1 mbps;
- ping time is 141 ms.
The download speed is about 42% below the ISP speed, and the upload speed is nearly 32% lower. Ping time has increased from 3 ms to 141 ms.
The bottom-right image shows the performance of the German server. The indexes are:
- download speed is 32.1 mbps;
- upload speed is 32.4 mbps;
- ping time is 128 ms.
The download speed has been cut by nearly 50%, the upload speed has decreased by approximately 43%, and the ping time has increased from 3 ms to 128 ms.
IOS app performed results under the everage line; speed losses are significant for both regions and do not inspire confidence.
About Safety – How Secure is TunnelBear VPN?
In this block, we will consider the technologies immanent to TunnelBear VPN that сreate a security kernel of the current provider. Let us see at first what can demonstrate the Windows’s app.
Windows
On the screenshot above, we can observe three options:
- VigilantBear
- It is an analogue of the Kill Switch feature with a creative name. This feature turns off direct data sharing through the ISP in the case of a sudden VPN connection disruption. This technology ensures that traffic will not be transmitted across an unsafe environment until the VPN connection is revived.
- GhostBear
- It is a feature that obfuscates your encrypted data and makes it less detectable by an outside milieu. When this feature is turned on, it is harder to block your VPN data transmission.
- TCP Override
- If the VPN connection is unsteady or you are surfing on the network that bounds VPN traffic, forcing VPN to use the TCP protocol may bypass the limitations. This protocol is slower because it checks for a lot of packets, but it is more reliable than the UDP protocol.
Current screenshot depicts the feature that is an analogue of the commonly-known Split Tunneling technology, but with an artistic name in this case. By activating it, you can manually select the apps or websites that should not be transmitted through the VPN. Due to this property, you have flexible control over the data that requires VPN protection and the data that may be directly thrown to the ISP network.
- OpenVPN is an open-source protocol widely used for establishing encrypted tunnels between devices. OpenVPN is based on OpenSSL libraries and compatible with distinctive encryption algorithms, including AES. Its configuration is quite flexible, with multiple authentication methods. High versatility allows it to be applicable for various operating systems and to action over UDP or TCP protocols.
- IKEv2 protocol involves reliable encryption methods, is compatible with mobile devices, performs network address translation (NAT), and supports different authentication (EAP) approaches. It has prospective reconnection values, which efficiently work with frequently changing networks or connection disruptions.
- Wireguard protocol ensures efficient performance and insignificant overhead costs. It includes modern and the strongest cryptographic algorithms and protocols, such as the Noise Protocol Framework, Curve25519 for key exchange, and ChaCha20Poly1305 for encryption and authentication. It provides a stable connection while switching between networks, such as WiFi and cellular networks, for example.
We have described the security core of the Windows application, and now we are shifting to macOS.
MacOS’s Security
The security set for the current operating system is the same as for Windows, except that the GhostBear function is not available here. So we do not see it necessary to duplicate the same information.
Mobile Devices’ Security
Security options for mobile devices are almost the same as for desktop platforms. If you want to read options’ descriptions, please scroll up to Windows’s security measures, where you will find it.
IOS security set, including the protocols:
- VigilantBear;
- SplitBear;
- OpenVPN protocol;
- IKEv2 protocol;
- IPSec protocol;
- WireGuard protocol.
Android security set, including the protocols:
- VigilantBear;
- GhostBear;
- SplitBear;
- OpenVPN protocol;
- IPSec protocol;
Browser Extensions Security
We want to keep in mind that three browsers are compatible with TunnelBear VPN:
- Google Chrome;
- Mozilla Firefox;
- Microsoft Edge.
Browser extensions do not have fields with any security options inside the settings menu. We cannot detect what configurations exactly apply to it.
In general, the stack they provide for the free version is normal; all the technologies are modern and have strong capabilities.
Desktop Apps
Applications for Windows and macOS have similar visual interfaces and functionality, with minor distinctions.
MacOS Application
After installing the app on your machine, at first you will see the sign-up window.
Process of creating an account is simple enough; you need to provide an email address, generate a password, and verify the confirmation letter that will be delivered to your email. After the procedure has been completed, you are free to use the app.
The visual solution is unordinary. The main screen has only two main interactive elements: the turn-on/off button and the drop-down with locations. As well, you can select the location simply by clicking on the map because it is also interactive.
Windows Application
The visual representation of the current application differs from the predecessor.
On the main screen of the app, a menu bar was added on the left. After the application has been installed, you need to sign up or use the existing account.
As well, developers created a convenient opportunity to use a minimized window by clicking on the bottom left corner of the main screen.
It’s not a core option that impacts a lot on performance, but it entails more flexibility while using the app.
The block about desktop applications is finished, and we are moving.
Mobile Apps
Distributions for both mobile operating systems have a united design with the same quantity of interactive elements on the screen:
- Gear icon in the right upper corner contains the setting menu.
- Map with locations is draggable and clickable, where you can select a location;
- Turn on/off toggler;
- Locations dropdown.
You have the ability to select the location in two possible ways; choose what you like most.
Browser Extensions
As well as in the speed test’s section, we will show you an instance of Google Chrome’s extension, seeing that the VPN software is identical for all compatible browsers.
There is nothing extraordinary we can say about the extension. You may see three interactive elements:
- Turn on/off toggler;
- Settings gear icon;
- Dropdown with location selection.
The distinction is that the map is not clickable or draggable, just the visual component.
Performance
The application for Windows showed average speed rates for the download speed and decent results for the upload speed.
VPN designed for macOS runs with significant speed issues both for the US and European geos.
Chrome’s extension connected to the US server produced poor download speed results; however, it showed an enhancement of the upload speed. The European server showed good performance with a tiny loss of the download speed and an increase in upload index.
Android’s application showed moderate results for both regions, even with an improvement in the upload speed of the Dutch server.
The IOS app performed results under the everage line; speed losses are significant for both regions and do not inspire confidence.
Work in Highly Restricted Countries
We did not find information about this query on their website or in their issued software.
Server’s Locations
We checked what locations are available for desktop, mobile, and browser’s applications, and really, the locations list contains 47 countries, and they are available for the free plan.
Only browser extensions provide only the single US geo to utilize.
What Bonuses Does the Paid Version Offer, and How Much Does It Cost?
The free version provides too little traffic volume, only 2 gb. The paid version will solve this problem and will give you more bonuses.
TunnelBear VPN offers two plans: one is for individuals, and the second is for teams. Except for unlimited bandwidth, you can use multiple devices on account, use premium servers, and have some benefits while communicating with customer support. It will cost you $3,33 per month. About Support
There is a support page only on the website; software products do not contain it. This page contains a list of categories with predefined topics where you can find an answer to a disturbing question.
However, in case you need to contact live support, there is also an option, but it does not really work.
We filled all the data, added the description, but did not receive an answer at all. So, do not waste your time trying to contact them.
TunnelBear VPN Review: Final verdict
We do not think that the current vendor may furnish qualified service. Their privacy policy is full of gaps where they collect your private identifying data, have access to it through their third parties, and even their employees can look at it at any time.
Speed rates are different for various operating systems, but none of them showed excellent results. Sometimes the indexes were moderate and sometimes very low.
The bandwidth that they provide for the free version is stingy; only 2 gb that is barely enough to do anything except chatting.
Browser extensions provide only one available location and do not have any security configurations; live customer support does not work at all.
We can not recommend the current VPN provider as a reliable partner. Even if you buy a subscription, their privacy policy will not ensure reliable protection of the user’s data.