ExpressVPN’s browser extension now blocks malicious sites – even when the VPN is off

ExpressVPN's browser extension now blocks malicious, phishing, and scam sites even when the VPN is disabled. The feature, called Web Protection, screens each web page as it loads, cross-referencing it against live databases of known malicious sites. This occurs before the user has a chance to view the content, thus preventing potential threats.

Available on Chrome, Firefox, Edge, Brave, and other Chromium-based browsers, the new security measure is a free addition to the Basic, Advanced, and Pro plans, as well as ExpressVPN for Teams. The precision of Web Protection lies in its ability to check the entire web address, unlike the domain-level filters commonly found in DNS-based tools.

This means even a single fraudulent page within an otherwise legitimate site can be halted, while the rest of the site remains accessible. Upon blocking a page, the extension alerts the user with specific information about why the site was stopped, and users can manage their own allowed and blocked lists directly within the extension.

The feature operates separately from ExpressVPN's Advanced Protection system, which functions within the VPN tunnel and covers all traffic on apps when the VPN is connected. Instead, Web Protection works within the browser, regardless of the VPN status. Together, they complement each other and fall under ExpressVPN's broader strategy of bundling security tools into all paid plans, including an email protection service, personal data checker, and tracker blocking on the entry-level Basic plan.

These recent developments come amid an increasing number of fake VPN extensions on platforms like the Chrome Web Store, with some estimates reaching over 369, including imposters of ExpressVPN itself.