VPNs top App Store charts as UK age verification kick in

Virtual private network (VPN) apps have become the most downloaded on Apple’s App Store in the UK after sites such as PornHub, Reddit and X began requiring age verification of users on Friday.

VPNs can disguise your location online – allowing you to use the internet as though you are in another country.

It means that people are likely using them to bypass requirements of the Online Safety Act, which mandated platforms with certain adult content to start checking the age of users.

As of Monday morning, half of the top ten free apps in Apple’s app download charts in the UK appeared to be for VPN services.

And one app maker told the BBC it had seen an 1,800% spike in downloads.

Virtual private networks (VPN) connect users to websites using a remote server and conceal their actual IP address and location, meaning they can circumvent blocks on particular sites or content.

But experts say free versions of such apps or services can carry security and privacy risks.

“Many of these free VPNs are riddled with issues,” said Daniel Card, a cyber-security expert with the Chartered Institute for IT (BCS).

“Some act as traffic brokers for data harvesting firms, others are so poorly built they expose users to attacks.”

He told the BBC despite posing a range of potential privacy risks, such apps “end up in the hands of kids trying to watch age-restricted content”, or adults “trying to get round blocks”.

“That’s the uncomfortable truth: people will take risks to get what they want online,” he said.

The UK’s new online safety rules, explained:

Katie Freeman-Tayler, of children’s safety group Internet Matters, said on Thursday that availability of free and low cost VPN services to children, and their potential use of them, was “concerning”.

“This makes it easy for them to circumvent important protections introduced under the Online Safety Act, such as age checks designed to shield them from adult content,” she told the BBC.

But Ofcom says platforms required to introduce “highly effective” methods to check user age must not host, share or permit content that encourages use of VPNs to get around age checks.

The government has also told the BBC it would be illegal for platforms to do so.

Proton VPN, an app offered by Swiss privacy tech firm Proton, told the BBC it had seen a 1800% spike in UK daily sign-ups over the weekend after age check rules took effect on Friday.

A Proton spokesperson said the UK was now among countries generating the highest usage of its VPN.

“This clearly shows that adults are concerned about the impact universal age verification laws will have on their privacy,” they added.

Other free VPN apps appearing in the App’s Stores top charts on Monday say they display adverts in order to finance and operate their services for free.

Some say they do not share information with third-parties, and state they are not intended for use by children. All state their VPN connections are private, secure and encrypted.

“While more privacy-conscious users might stick to reputable services… the average person won’t,” said Mr Card.

“They’ll download the first free app with decent reviews, often without realising they’re handing over access to their data.”