Google gives VPN applications a clearly visible seal of security if they adhere to some very modest standards. Above all, the labeling makes it clear that the apps are not doing anything visibly malicious or stupid.

VPN apps that adhere to certain security standards are rewarded with a visible label in the Google Play Store. Anyone looking for a VPN will first see apps that meet the standards. These are summarized under the banner Independent security assessment. You can click on it to view all VPN applications that comply with the standard. Google wants to make it clear that the apps are more reliable than other versions, although the stamp includes a list of caveats.

ADA and MASA

The independent security assessment is the result of a collaboration between Google and the App Defense Alliance (ADA) who are at MASA Mobile app security assessment introduced. The MASA allows access to the badge. However, the bar is not that high. First, both Google and ADA state that security labeling does not guarantee that an application in question is actually secure.

Rather, the standard indicates that a third party has confirmed that an app is not doing any obvious stupidity. For example, sensitive data is not written to visible log files and cryptographic keys are used sensibly. In fact, the MASA label guarantees that an application meets the absolute minimum standards. The label of independent evaluation had existed for a long time, but was largely hidden. Now Google is bringing it to the forefront for VPN apps.

Google is starting to make labeling of VPN apps more visible because they are popular and, by definition, process sensitive data. Other NordVPN, ExpressVPN and TunnelBear VPNs already carry the label. For VPNs, you can imagine the security rating as follows: Apps with the stamp meet minimum requirements, apps without can’t even prove that, so it’s better to stay away from them.