Hotspot Shield VPN 2017 Review - Try Before You Buy - BestVPN.com
NordVPN

Hotspot Shield Review

Hotspot Shield review

Hotspot Shield is an entry-level VPN service that markets itself to casual and beginner VPN users. A free version of the VPN is available for everyone, making it an excellent way to experiment and play around with a VPN service. Unfortunately, I did find a lot of worrying details hiding behind Hotspot Shield's heavily marketed exterior. Read my Hotspot Shield review to find out more!

OUR RATING

2.2 / 5

What is HotSpot Shield?

Hotspot Shield is a free VPN that is implemented as an app and as a browser extension. The service is a limited version of the paid VPN, called Hotspot Shield Elite. You can visit the Hotspot Shield website by clicking on the button below. Scroll down first to read our in-depth review of the service before you download any software.

AnchorFree first released Hotspot Shield as a free VPN in 2008. Back then, the full service, which is now called Hotspot Shield Elite, was offered free of charge. This could account for the large number of people who’ve downloaded the software. AnchorFree states that the VPN has been installed by more than 500 million users all over the world. However, there are a number of worrying privacy flaws built into Hotspot Shield, which may make you think twice about using the service.

HotSpot Shield Pricing and Plans

The software for the free version and the paid service is the same. Thus, if you fancy trying this VPN, install the free version first.

You can get the app to access the service, but this is limited to just one server location (in the US). The browser extension extends the number of available servers.

Hotspot Shield Elite has an interesting “lifetime subscription” option:

This represents a considerable saving on the monthly subscription price, which is actually one of the most expensive in the industry. However, there’s always the risk that the company might not continue in business, or might not to honor its lifetime service for some reason.

One inconvenience of the free VPN is that it is supported by advertising. When you turn it on, the sign-in process opens the company website. This is a minor irritation that most users can probably live with. However, Hotspot Shield has a second, covert advertising income stream. The company states that advertising is removed for paid subscribers, but that probably just means the display of the company website. The second, hidden advertising structures are written into the software, so most likely continue for paid users.

You can get the free service without giving any personal details. However, subscribing to Hotspot Shield Elite requires identifying data and payment processing, which means that you can be traced through your bank account.

AnchorFree sells subscriptions to its Elite service through third parties. This complicates the VPN’s refund policy. If you buy the service directly from the Hotspot Shield website, you’re entitled to a 30-day money-back guarantee.

When you subscribe, you don’t need to install new software, so the advertising placement functions of the VPN will continue. For more information on this advertising privacy flaw, see the Privacy section of this review.

Hotspot Shield VPN Review: Summary

PROS:
  • Free version
  • Super fast connections
  • Up to five simultaneous connections
  • App for Windows, Mac OS X, iOS, and Android
  • Browser extension for Chrome and Firefox
CONS:
  • Contains tracking software
  • Sells advertising space on users' browsers
  • Hijacks URLs of commercial websites
  • Based in the US

HotSpot Shield VPN Features

If you use the free version of HotSpot Shield, you’re subject to a data throughput limit. That traffic count doesn’t necessarily reflect your activity, because AnchorFree uses your connection to pass back and forth tracking software and activity reports. Officially, free users are allowed  256MB per day on mobile devices and 750MB per day on computers. However, after getting halfway through the speed tests on a Windows laptop for this review, I was informed that I had already run through half of my daily allocation, so you won’t get much chance to explore the internet with the free service.

The features of the main package include:

  • Servers in 22 countries
  • Browser extension
  • Automatic WiFi protection
  • App for Windows, Mac OS X, iOS, and Android
  • App available in a long list of languages
  • No personal data needed for free app
  • Malware detection
  • 30-day money-back guarantee
  • Kill switch (called “IP leak protection”)

The app and the browser extension have different lists of server locations and the restrictions on server access are different in the two implementations. Using the app provides the option of 20 server locations, but users of the free VPN service only get access to the US server.

The browser extension gives access to 12 server locations. However, free service users are not allowed to access servers in the UK or the US. Chile and Singapore are available in the browser extension but not in the app.

Visit Hotspot Shield »

Is HotSpot Shield Secure?

The VPN methodology used by Hotspot Shield comes from the OpenVPN software library. The security functions of OpenVPN rely on another open source library of procedures, which is called OpenSSL. This implements Transport Layer Security (TLS). The OpenSSL makes OpenVPN a very effective method for VPN security because it employs the same encryption methods that HTTPS uses. That protocol is the standard secure webpage transfer protocol, which keeps your credit card details safe when you buy things online.

The data channel of the Hotspot Shield VPN connection uses Advanced Encryption Standard (AES) encryption with a 256-bit key. This is decent strength encryption and is the most common method offered by VPNs. The control channel of the VPN sets up a session and distributes the AES encryption keys. These functions of the connection are protected by 2048-bit public key encryption. Until recently, a 2048-bit key for the control channel was standard protection for VPNs. However, since many suspect that the Chinese authorities are making advances in cracking these session keys, many of the key players in the industry have moved up to a 4096-bit key for the control channel.

Privacy

Privacy is a great concern with Hotspot Shield. AnchorFree, the company that makes Hotspot Shield, has a second business that places advertising on the webpages viewed by the VPN’s users.

One of the features of the VPN is its malware detection software. However, a study by the Commonwealth Scientific and Industrial Research Organization (CSIRO) found that Hotspot Shield contains tracking software that not only records the activities of its users, but sells that information to advertisers. The scientific study identified five different tracking libraries in Hotspot Shield’s code.

The CSIRO discovered that Hotspot Shield also redirects user traffic through affiliate partner networks when you enter a URL for one of a list of commercial sites into the browser. These sites include eBay, Alibaba, Best Buy, Target, Overstock.com, NewEgg, and Macy’s. This means that if any Hotspot Shield user buys anything from those sites, AnchorFree gets a commission.

One redeeming factor in the service’s privacy policy is the fact that you can download and use the service without giving any personal information. As long as you only use the free service and you never contact the support desk, the company cannot name you as a customer.

Logging

Ordinarily, VPN companies are very strident about their no logs policy. Different countries have different data retention laws. Some have strict rules on logging and disclosure, while others have none. This factor makes some countries very good locations for VPN services, while others are not so good. Hotspot Shield is located in the US. This is not one of the best countries for a privacy service. US lawyers for copyright holders have enjoyed notable success in prosecuting download sites and forcing them to reveal their users’ identities. They could just as easily force any American corporation to hand over the activity records of its customers.

The risk of VPN companies being pressured by legal action or government harassment into handing over activity records makes the implementation of log deletion very important for those VPNs based in the US.

Hotspot Shield’s terms of service give the company the right to collect user activity information and to “share” that information with third parties. The company states that it is OK with its customers downloading files with torrents. However, it also warns against copyright infringement. If you love getting free stuff through peer-to-peer (P2P) networks, it’s probably better to avoid Hotspot Shield.

The Website

The Hotspot Shield website is attractive and well laid out.

hotspot shield VPN review

You can access the site’s main features through two navigation menus at the top. Access to the free VPN or to the paid service is impossible to miss.

An exciting feature of the website is the ability to see it in different languages. The top menu is terminated by a language option field. Click on the arrow next to the word “English” to see all of the language options.

HotSpot Shield Support

Hotspot Shield’s customer support department is one of the weak points of the service. It can often take more than 24 hours to get a reply out of the team and there is no live chat facility.

You get to the support center by clicking on Support in the top menu bar of the site. Your first opportunity for advice comes from a knowledge base.

Click on the “Contact Support” button to open a support ticket if you don’t find a solution to your problems in the knowledge base.

Contact is opened via a web form.

As you can see in the screenshot above, it took over 24 hours for Hotspot Shield to reply to a simple question. While this waiting time might be acceptable for the free version of the service, potential Elite customers should consider this a major red flag.

The Process

Signing Up

Signing up is easy: you simply choose if you want a free or paid plan. Paid users select the plan length and desired method of payment, then provide a few basic contact details.

hotspot shield signup

You don’t have to enter any personal details in order to get the app or the browser extension. The main screen of the Hotspot Shield site features a “Free Download” button. Once you press this button, the download of the installer will begin. Click on the downloaded file to run the installer. The process is very fast.

Windows App

The installer will set up a shortcut on your desktop. Click on this to open the app. You don’t need any log-in information in order to use the service.

The main feature of the app is a drop-down list of server locations and a connection slider. If you are on the free version of the VPN, there is no point in looking for another server location, because you only have access to the US server.

The main feature of the app is a live report of the download and upload speeds of the connection.

If English is not your first language, you can change the app’s language. This feature is available on the Settings page, which is accessed via the hamburger menu.

The language option presents a drop-down list.

Changes to the app’s text are immediate after you make a selection.

Browser Extension

You can install the Hotspot Shield browser extension on Google Chrome and Firefox browsers. Depending on your operating system, you can get the Chrome version from the Google Chrome Store or the Apple iTunes Store. The Firefox version is available at the Mozilla site.

You don’t get the option of which location you want to connect to when you first turn on the VPN in the browser extension. You just have to press the big button.

This will connect you to the “optimal location.”

If you want to access the server of a specific country, you need to click on that “optimal location text.” This gives you access to the server list. The US and the UK are locked out for the users of free Hotspot Shield.

There aren’t any settings options for the browser extension.

HotSpot Shield Performance (Speed, DNS, WebRTC, and IPv6 Tests)

I conducted speed tests on Hotspot Shield for both the app and the browser extension. I used the free version, so I wasn’t able to try the same servers on both versions of the service. To test the app, I used the default US server. You will see in the results the speeds achieved for downloads and uploads on connections to the US without the VPN turned on and also with the VPN engaged. You will also see the speeds for a connection to Germany without a VPN and then with a VPN located in Germany accessed through the browser extension. The last test was carried out through the browser extension via the Hotspot Shield server in France.

In each case, the figures you see in the graph were derived from carrying out a speed test five times. The tests were performed from a location in the Caribbean, using testmy.net.

The graphs show the highest, lowest, and average speeds for each server and location. See our full speed test explanation for more detail.

Engaging the US server in the app for a US connection created incredible speed gains for uploads. Download speeds on a nearby connection were also improved. Whenever a server in the same country as the test target server was engaged, the speeds improved. The connections to the German test server were impaired by selecting a VPN server in a different country – in this case, France.

In our experience, Hotspot Shield can improve the speeds of connections in countries with poor internet infrastructures.

I tested for IP leaks while connected to Hotspot Shield’s US server. Tests found no IP leaks, Domain Name System (DNS) leaks, or Web Real-Time Communication (WebRTC) disclosures. Tests consistently showed my location as California. The WebRTC report disclosed a private IP address, which did not trace back to my true location.

The tests were performed with ipleak.net to check DNS leaks and the WebRTC bug. The site test-ipv6.com looked for IPv6 leaks. The test site doileak.net is particularly keen on WebRTC leaks, but that site couldn’t detect my actual location.

Other Platforms

The Hotspot Shield app is available for Windows, Mac OS X, iOS devices, and gadgets that run the Android operating system.

The browser extension is available for Google Chrome on Windows, Android, Mac OS X, and the iOS operating system. There is also an add-on for the Firefox web browser.

HotSpot Shield Review: Conclusion

Experts who examined the security features of all the VPN apps available for Android singled out Hotspot Shield as one of the least secure VPNs around. The company’s drive to sell advertising space on the webpages that its customers visit creates a fundamental privacy flaw that no amount of security features can compensate for.

Essentially, AnchorFree strives to protect its customers from tracking software, adware, malware, and snooping performed by OTHERS. However, it has no reservations about invading the privacy of its users for its own financial gain.

By installing both the app and the browser extension, users can get around some of the server location restrictions, because the app’s limit to just the US fills in for the ban on that location in the extension. However, British users won’t get any access to UK services unless they pay for Hotspot Shield Elite. Given that Hotspot Shield goes to extra lengths to monitor its users’ activities, it probably isn’t worth signing up for the paid service and disclosing your identifying personal details.

I liked:

  • Multilingual site and app
  • Easy-to-use browser extension
  • Free version
  • Up to five simultaneous connections allowed
  • Good speeds
  • Anonymous access to free app

I wasn’t so sure about:

  • Slow customer support response

I hated:

  • Tracking libraries
  • Advertising JavaScript injection
  • Routine disclosure of user information to third parties

Visit Hotspot Shield »

Stephen Cooper

Stephen Cooper is a techy geek with a social edge. Downshifting from a successful IT career in Europe, Cooper moved to the Caribbean and now keeps up to speed with Internet technology poolside.

18 responses to “Hotspot Shield VPN Review 2017 – What’s Changed?

    This article is misleading as it does not review Hotspot Shield Elite, but smears it with perceived weaknesses of the free version.

    Also contrary to what is suggested here they unequivocally state that they do not keep logs:

    https://support.hotspotshield.com/hc/en-us/articles/207150696-Hotspot-Shield-doesn-t-keep-logs

    I have used Elite for several years (there are many deals out there and I pay just £19 a year recurring) and I have been very happy with their service.

    1. Hi, Simon,
      Your enthusiasm for HotSpot Shield Elite does you credit. The combined user base of both HotSpot Shield and HotSpot Shield Elite is very large, so there are many people on your side.

      As a writer at BestVPN, I am not given any instructions on who to push up and who to denigrate. I was hired, and I continue to be employed by this site, because I tell it like it is. I will not recommend a VPN if I feel that it does not work well to protect its customers’ privacy. HotSpot Shield makes a big point of excluding IP addresses from its definition of “personal data” and then continues in its terms of service to stress that it will not report on “personal data.”

      HotSpotShield Elite is tainted by AnchorFree’s advertising income stream. I had never encountered a VPN service that also sold advertising space on user screens until I wrote this review. I was shocked. However, I then investigated Hola and discovered that it was even worse than HotSpot Shield. My fellow writer, Ray Walsh, recently reported on complaints against AnchorFree for misleading users around the issue of IP addresses.
      I also investigated Betternet and found that it was even worse. Betternet is now the reigning worst VPN in the world and it is a sister-service of HotSpot Shield. You are already a customer of HotSpot Shield Elite and you seem very loyal. However, I have no hesitation in recommending that all new VPN customers stay away from HotSpot Shield, HotSpot Shield Elite, and Betternet.

  1. I was interested in using it to bypass being throttled. It sounds like I’m better off being throttled. PC Mag had a greater like for this product with 3.5 out of five points. This site only gives 2 points which leaves me in doubt. When in doubt walk out. I think I’ll leave this one alone for now and live with being throttled.

  2. Used to be good, now I have to keep turning it off and on again and again cause it gets tooooo slow. Sometimes it goes from 54mbps to 14mbps!
    I’m not going to renew my plan when it expires

  3. We are a bunch of volunteers and starting a new scheme in our community. Your website provided us with useful info to work on. You’ve performed a formidable task and our entire group shall be thankful to you.

  4. I’m going to Tibet (China) next month for a couple of weeks; I have read that they block some websites – I would really like to be able to use Facebook whilst there to post pictures and keep in touch with friends and family worldwide. Would it be overkill to install HS for this purpose?
    I am not very savvy tech-wise, please be gentle with me in use of technical terms and concepts!!

    1. Hi Brian,

      Please see my article on 5 Best VPNs for China. Installing a VPN is certainly not overkill, but I think you find the services listed in that article will be much more successful at defeating the Great Firewall than Hotspot Shield. You will also find in that article a discussion on the realities of internet censorship in China.

  5. No longer free to use, it now has limited usage size, eventhough high speed internet became cheaper these days, but they needed more servers to separate each user IP dependent lines?

    https://support.hotspotshield.com/hc/en-us/articles/202439074-Does-Hotspot-Shield-have-data-bandwidth-usage-limit-

    “Only Free users are imposed a bandwidth-usage limit. If you are a paid Elite subscriber, you have unlimited bandwidth.”
    “Please purchase an Elite subscription for unlimited bandwidth.”

    After analyzing our costs, we discovered that 10% of Hotspot Shield’s Free users were using 50% of our total bandwidth.

    To keep our Free services running, we implemented the following bandwidth limitation on Android and desktop platforms:

    Bandwidth/Data Cap on Android is 256MB per day and resets every 24hrs.
    Bandwidth/Data Cap on Desktop is set to 750MB per day and reset every 24hrs.

    When the bandwidth limit is reached, Free users are prompted to pay or wait for a specified amount of hours until the cap is reset.

    1. Hi Wowordorld,

      You are correct that Hotpot free is now longer unlimited. I have added an update to this effect, and thanks for bringing it to our attention.

    1. Hi Ben,

      Use of HMAC SHA1 for OpenVPN authentication is not a weakness, as HMAC SHA1 is much less vulnerable to collision attacks than standard SHA1 hashes (for example, you would need to break HMAC in order to reach the underlying hash in order to start collisions attempts on it). Mathematical proof of this is available in this paper.

    I’ve been using HSS Elite for more than 3 years and it always worked very well. My only purpose using it is p2p and I get extremely high speeds. Yes, it lacks some futures, but as said in a comment above, the price is awesome.

  6. My primary use/need for a VPN service is for torrenting on my Mac.

    Support aside, what is it about HotSpot Shield Elite (no ads) that is so inherently bad and is there something that makes it particularly poor for torrents? The Elite edition costs 1/3 the price of ExpressVPN (which I am testing right now) for a 1 yr subscription. On speed tests Hotshot Shield Elite is 2x and up to 3x faster on my network. I can connect to different countries. I’m testing my security with all the various “WhatsMyIP” type tools and my IP is hidden the same as other VPN services, including ExpressVPN. I have HSE on my Android phone & it works fine. I don’t download torrents on my phone though.

    I’m one of those people who don’t need to contact support. I download the tool(s), configure them, and they work. If I have a problem I research it extensively.

    Yes, Hotspot is based in the US (as are some other highly rated VPN services). Yes, they have to “comply with US Law” since they are based in the US, as do other US-based VPN services. They maintain some ‘connection’ logs, same as some of the higher rated VPN services.

    I’d like to understand from a purely VPN standpoint (security), what makes Hotspot Shield so bad? I’m not talking about the free version, which is ad-driven. I’m talking about the Elite version.

    [As an aside, I tried setting up OpenVPN on my Asus router since OpenVPN is directly supported, but I could not get my IP address to change upon a connection. After 4 hours of troubleshooting I gave up.]

    1. Hi SomewhatNerdy,

      When it comes to privacy and security, everyone must asses their own threat model. If torrenting is your primary concern, then HotSpot Shield Elite is cheap, fast, and will protect you while torrenting. As a torrenter the lack of a kill should be a concern, however. The fact that Hotspot is owned by a corporate conglomerate, is based in the US, and keeps extensive connection (metadata) logs makes the service less suitable for the NSA-phobic privacy-heads out there…

    I had the Elite product on my Android phone last year. It was *extremely* unreliable, unable to keep connected. Every time I contacted support, they just threw the latest .n.n.n release at me and said, “try this”. So, yeah, completely concur on the poor support.

    When I travel, this is the only VPN that doesn’t get blocked. Only one. Netflix, BBC Player, Hulu, Amazon. I’ve tried them all. This just works.

Leave a Reply

Your email address will not be published. Required fields are marked *

Want to add a star rating to your comment? Click here
Price
Features
Reliability
Speed
Customer Service