Britons are rushing to download virtual private network (VPN) apps in unprecedented numbers following the enactment of the UK’s Online Safety Act on July 25, 2025. This new legislation requires websites hosting adult content, such as Pornhub, Reddit, and X (formerly Twitter), to implement robust age verification measures. These include uploading official identification, facial age estimation via selfies or videos, and financial document checks like credit card validation to restrict access to users under 18.
Almost immediately after the law came into effect, Proton VPN, a Switzerland-based privacy-focused VPN service, reported a staggering 1,400% surge in UK sign-ups. This surge has been sustained over several days, setting Proton VPN as the most downloaded free app in the UK, overtaking even ChatGPT on Apple’s App Store rankings. According to Proton, this spike indicates that many adults are concerned about the privacy implications of universal age verification laws.
Proton’s surge is mirrored broadly across the VPN market in the UK. By July 28, 2025, half of the top ten free apps on Apple’s UK download charts were VPN services, including Yoti, NordVPN, Free VPN, and others. Notably, one VPN maker reported an 1,800% increase in downloads over the weekend following the law’s implementation. Rajat Vaghani, Vice President of Engineering at Free VPN, confirmed a significant surge in UK users and downloads during this period.
The Online Safety Act aims to protect minors from harmful online content, but it has also triggered a wave of VPN adoption as users seek to bypass the new age verification requirements. VPNs work by routing a user’s internet connection through remote servers, masking their true IP address and location. This allows users to appear as if they are browsing from outside the UK, where the new restrictions do not apply.
However, the rise in VPN use has raised concerns among regulators and child safety advocates. Ofcom, the UK’s communications regulator, has warned against the use of VPNs to circumvent age checks. Katie Freeman-Tayler from the children’s safety group Internet Matters expressed alarm, stating, "This makes it easy for [children] to circumvent important protections introduced under the Online Safety Act, such as age checks designed to shield them from adult content." She highlighted the ease with which children can access VPNs, potentially undermining the law’s intent.
Security experts also caution about the risks associated with many free VPN services. Daniel Card, a cybersecurity expert with the Chartered Institute for IT, told the BBC that "many of these free VPNs are riddled with issues," including acting as data brokers or exposing users to cyberattacks. He warned that while privacy-conscious users might choose reputable providers, "the average person won't. They'll download the first free app with decent reviews, often without realising they're handing over access to their data." This is particularly concerning given that some popular free VPNs have poor privacy policies or have been implicated in data misuse. For example, Hola VPN admits to selling free users' residential IPs as proxy servers, and Hotspot Shield faced an FTC complaints for sharing identifiable information with advertisers.
Moreover, malware remains a significant threat. A 2016 study found that 38% of Android apps with VPN capabilities contained malware, and recent reports from 2025 indicate that free VPNs continue to be exploited as malware vectors. Some of the VPNs climbing the UK charts, such as FreeVPN.org, lack clear company information and have sparse privacy policies, raising red flags for users.
Despite these risks, the demand for VPNs remains high. Searches for VPN providers like Surfshark surged by 300% across the UK during the weekend following the law’s enforcement. Searches for terms related to the UK’s age verification system skyrocketed by over 1,900%, reflecting widespread public interest and concern.
The government has made it clear that platforms must not host or encourage content that promotes VPN use to bypass age checks. However, the rapid adoption of VPNs has sparked fears among some that the government might attempt to ban VPNs altogether. Security advisor Jake Moore of Slovakian software firm ESET dismissed these concerns, stating, "The UK won’t ban VPNs. It would be nearly impossible, and it would dramatically disrupt legitimate use." VPNs remain essential tools for privacy, secure communications, and accessing content globally.
Political opposition to the Online Safety Act has also emerged. Nigel Farage, leader of the Reform UK party, pledged to repeal the age verification rules, calling them "authoritarian" and a threat to free speech. Additionally, a petition to overturn the Online Safety Act has gathered over 350,000 signatures, prompting a parliamentary review. Critics argue that the law’s privacy intrusions and enforcement mechanisms could have unintended consequences, including driving users toward potentially unsafe VPNs or other circumvention tools.
In the midst of this, privacy-conscious VPN providers like Proton VPN and NordVPN continue to gain users. NordVPN offers a seven-day free trial but no permanent free tier, while Proton VPN provides a free plan supported by paid subscriptions, which experts say is a safer model. Other recommended trustworthy free VPNs include hide.me, TunnelBear, and Windscribe, all of which maintain transparent privacy policies, undergo independent audits, and disclose their physical locations.
The UK’s Online Safety Act represents a landmark effort to shield children from harmful online content, but it also exposes the tension between regulation, privacy, and user autonomy. While the law aims to enforce age verification, the surge in VPN use shows that many users are unwilling to trade their privacy or ease of access. As the government and tech companies navigate these challenges, the debate over how best to balance safety, privacy, and freedom online is far from settled.
For now, VPNs remain the go-to tool for many Britons seeking to maintain access to adult content without submitting personal data. Whether this trend will prompt changes in policy or technology remains to be seen, but it underscores the complexities of enforcing digital age restrictions in a global and privacy-conscious internet landscape.
