VPN Love
Because Your Privacy Matters

Opera VPN Review: The Tunnel Stops at the Browser

Opera can hide browser destinations from the café Wi-Fi. Your email, updates, and other apps still take their normal route.
By Charles Joseph · Published
Share
Share
Copy URL

Turn on Opera's free VPN at a café and the browser gets a new route. Your email app doesn't. One screen looks protected while the rest of the laptop keeps talking to the network as usual.

That boundary is the review. Opera's free VPN is a real encrypted relay for traffic inside Opera, not a whole-device tunnel wearing a smaller price tag.

Used for that narrow job, it's unusually convenient: no extra extension, account, subscription, or data cap. Used as protection for the entire device, it creates a blind spot you can test in under a minute.

Follow One Page and One Email

Open Opera on airport Wi-Fi and load a news site without the VPN. The browser connects through the airport network toward that site. HTTPS hides the page contents in transit, but the network can still observe connection metadata and destination addresses; the site sees the airport's public IP address.

At the same time, a desktop email client checks for new mail over its own encrypted connection. The airport sees that connection too. The mail provider sees the airport's public IP.

Now turn on Opera's free VPN and repeat both actions.

Opera sends covered browser traffic through an encrypted connection to its VPN infrastructure. The airport sees that connection to Opera's relay, plus timing and data volume. Opera's VPN service receives the tunnel and forwards the browser request. The news site sees the relay's IP address.

The email app changes nothing. It still follows the laptop's normal route, so the airport still sees its separate connection and the mail provider still sees the airport's public IP.

Same laptop. Two routes.

Proxy or VPN? Pick the Right Privacy Tool
A side-by-side comparison shows why changing a visible IP address is not the same as protecting all device traffic.

A full-device VPN moves the boundary outside the browser. Covered browser traffic, email, updates, and other apps converge into the device's encrypted tunnel unless you've deliberately excluded them. The airport sees that encrypted connection instead of the covered news and mail destinations; the full-device VPN provider forwards both requests; the news site and mail provider see its exit IP. Opera's free VPN stops at Opera.

The Browser Badge Doesn't Cover the Desktop

Opera itself makes the distinction on its current Free VPN page: the free service protects Opera browser traffic, while its separate paid VPN Pro product is device-wide. That doesn't make the free service fake. It makes the word “VPN” incomplete without the coverage boundary.

Another browser doesn't inherit Opera's route. Neither does a game launcher, cloud-sync client, operating-system updater, or standalone messaging app. A file downloaded in Opera travels through the browser tunnel; an app that uploads that file later may not.

This is also why the free browser VPN can't act as a system-wide kill switch. If its tunnel stops, it doesn't have authority over every unrelated process on the device. Test Opera's own failure behavior, but don't assume the badge can freeze traffic it never controlled.

At a café, the screen creates a second privacy problem the tunnel can't touch. Someone beside you can still read the page, photograph a booking code, or watch you type a password.

SightPro 15.6-Inch Privacy Filter: A Simple Shield for Laptop Work
  • Limits clear side-angle viewing on compatible 15.6-inch widescreen laptops
  • Helps protect messages, account details, and work documents in crowded spaces
  • Pairs privacy with an anti-glare finish and removable mounting choices for daily use

A correctly sized privacy filter narrows side viewing on a laptop; it doesn't encrypt traffic, hide the screen from someone directly behind you, or fix an exposed account. Measure the display before buying and treat it as a physical companion to—not a substitute for—the browser tunnel.

Opera Becomes the New Middleman

The airport loses the direct view of covered browser destinations, but that trust doesn't vanish. It moves.

Opera runs the relay that receives the encrypted browser connection and sends requests onward. HTTPS still protects page contents between the browser and secure sites, but the VPN operator occupies a privileged position in the route. Its software, server design, retention policy, and legal obligations matter.

Opera says its free browser VPN doesn't log browsing activity, browsing history, originating network addresses, or identifying information. Its account of Deloitte's no-log assessment says reviewers inspected the free VPN infrastructure, configurations, documentation, policies, and operations from June 18 through August 10, 2024.

That's useful evidence. It isn't a permanent force field.

The assessment was a point-in-time review of the free VPN's no-log controls. It doesn't certify every future version or every other feature in the Opera browser. Read the date, scope, and Opera's current privacy statement, then decide whether that is enough evidence for your risk.

You're Moving Trust, Not Eliminating It
A thoughtful look at the central tradeoff in VPN privacy: your ISP sees less, but your VPN provider occupies a powerful new position.

Free isn't automatically dangerous, and paid isn't automatically trustworthy. The useful questions are who operates the route, what the service claims to collect, what independent work tested, and whether the coverage matches the traffic you care about.

A New IP Doesn't Sign You Out

The site receives Opera's relay address, but the browser keeps carrying other identifiers. Log into a Google, bank, or shopping account and the service knows which account arrived. Cookies remain. Browser storage remains. Fingerprinting may link visits. Information you type still reaches the site.

Private browsing doesn't erase that identity either. It mainly changes what the browser retains locally after the session. It doesn't stop an account, website, employer service, or VPN provider from seeing what its position normally reveals.

That matters most where the password is worth more than the IP address. A hardware security key can strengthen supported accounts against phishing even when a fake page tricks you into entering a password.

YubiKey 5C NFC: Tap or Plug In for Safer Account Access
  • Connects through USB-C or NFC, covering many newer computers and compatible phones
  • Adds a phishing-resistant physical check to passkeys and supported multi-factor logins
  • Works without a battery, code display, or wireless pairing process

A compatible YubiKey protects a different layer: account sign-in. Check connector, NFC, browser, account, and backup-method support before buying. Enroll a second key or verify a recovery method before the primary key leaves your desk. It won't expand Opera's VPN coverage or make a tracked browser anonymous.

One Search Setting Can Change the Route

Opera's current feature guide documents an option to bypass the VPN for default search engines so local results remain useful. With that option enabled, a search query can use the normal route while the page you open afterward returns to the VPN.

That exception is deliberate, but it makes a simple “VPN on” test too crude. Check the setting and decide whether local search results or a consistent browser route matters more. Opera says the bypass isn't supported in Private Mode, so test the mode you actually use.

Broad regional choices create another limit. Opera currently advertises three general locations for the free service, not a long city list. That is enough to replace the visible browser IP and choose a rough region. It isn't precise location control, and a website may reject a shared relay address or show extra challenges.

Distance and server load can slow pages. Start with the optimal location, compare one other region only for a reason, and measure actual page loads or calls. A speed-test peak can't tell you whether the site you need will accept the address.

Test the Boundary, Not the Blue Badge

First, record the public IP shown in Opera and in a second browser with the VPN off. Turn Opera's VPN on, reload both, and confirm that only Opera changes. That single comparison proves more than the badge.

Then run a DNS leak test and an IP leak test inside Opera. Check WebRTC results, the default-search bypass, essential sites, and reconnection after a browser restart. Repeat after an update because browser behavior changes.

Keep HTTPS in view. The Opera tunnel protects the first leg to its VPN service; HTTPS protects the browser-to-site session, including the route beyond that relay, and authenticates the site. Don't enter sensitive information on a page that has lost its secure connection merely because the VPN icon is blue.

Download Opera only from the official download page or a verified platform store. The free VPN is built in. An extension claiming you need it to add the official service creates an unnecessary new party with browser access.

User Reviews Mix the Tunnel With the Browser

The 20 newest detailed English-language Trustpilot reviews visible on September 2, 2026 form a narrow, self-selected snapshot. Opera's Trustpilot page reviews the whole browser, not the free VPN by itself.

Positive reviewers in that set mention integrated browser features and customization. Critical comments mention site failures, freezes, difficult navigation, and update frustration. Those reports can flag browser tests to run, but the sample doesn't isolate free-VPN performance or predict your connection.

Use recent reviews from your platform, then run the two-route test yourself. If Opera changes only Opera's IP, reconnects reliably, and loads the sites you need, it is doing its narrow job.

The free VPN can protect a browser session without protecting the laptop. That's not a contradiction. It's the boundary you need to remember after the blue badge lights up.