Getting Started

Privacy and Security

  • Why should I trust TunnelBear?

    You can trust TunnelBear for a few reasons. The first is that we make 100% of our revenue from paid subscriptions. We do give a little bit of data away for free, but our hope is that you'll fall in love and give your Bear a forever home! Often, free VPN services will collect your personal/usage data and sell it to third parties in order to make money. TunnelBear will NEVER do this. TunnelBear has a fierce no-logging policy. At no point, and under no circumstances will TunnelBear log or sell your personal/usage data.

    In addition to our no-logging commitment, we also have a great privacy policy. Unlike many other VPN's, our privacy policy outlines how we run a trustworthy, free and paid VPN service by collecting the minimum amount of information possible necessary to provide you with a reliable service on our secure private network. We don’t require your name, we offer anonymous payment services, we don't collect your IP address and we avoid collecting other personal information via our analytics tools, all of which allow you to have more control over your personal information.

    Finally, all of our applications are independently code audited to ensure they are consistently in line with the highest standards of security. We’re actually so confident we’re doing everything we can to protect you that we’ve recently published these results here.

    Visit/Rate Article
  • Does TunnelBear keep logs?

    No! TunnelBear does not keep logs. This means we do not collect any information regarding what you 'bear'owse while connected to our secure and private VPN. See our Privacy Policy and Terms of Service for a detailed breakdown of how we go above and beyond to protect your privacy. Also, take a look at our recent (second!) security audit for even more information on how we secure and encrypt your internet connection with our strong VPN.

    Visit/Rate Article
  • What kind of encryption does TunnelBear use?

    TunnelBear is a strong and private VPN built using a variety of secure and reliable encryption protocols. See here for up-to-date information on our encryption and security. You can also check out our security audit for a detailed review of our security practices.

    Visit/Rate Article
  • Does TunnelBear protect against DNS leaks?

    Yes. A DNS leak is a privacy and anonymity threat that can allow your ISP to see and monitor your online activity even when you have a VPN tunnel established. 

    The TunnelBear's secure VPN service automatically ensures that all traffic from your computer, including DNS, is sent through the VPN tunnel as soon as it is established. Our servers handle all DNS requests. There are no additional steps required to “enable” DNS leak protection - you're already secure when you connect to our encrypted tunnels.

    When you connect to TunnelBear and go on (or a similar service/website), you'll only see one IP address reported back to you in the results. This IP address should match the IP address of the VPN server you're currently connected to. To make sure, head over to and compare the results shown there with that of the DNS leak test. If the IPs match, then your DNS is not leaking.

    Also, take a look at our blog post which goes into more detail about DNS and how TunnelBear handles it! 

    Visit/Rate Article


  • What devices will TunnelBear work on?

    You can use TunnelBear to secure your internet connection on Windows (desktop/laptop), macOSAndroid and iOS devices. We also have a browser extension for Chrome and Opera browsers. We do provide instructions for using TunnelBear on Linux, however, we only provide limited support for that platform. For more information on operating system versions required to start tunneling securely with your VPN, check out our downloads page.

    You cannot use TunnelBear on your Kindle/eReader, Windows mobile devices, Apple/Android TV, gaming systems, or by manually configuring your modem/router. 

    Visit/Rate Article
  • Where can I tunnel to and from? (server list)

    You can tunnel with your private TunnelBear VPN from just about anywhere in the world, as long as you are connected to the internet. You can tunnel to any of our 20+ server locations (the countries chosen in the app), listed here. If you're not sure where to connect to, try our Canadian tunnel!

    Visit/Rate Article
  • How many connections can I make?

    Each TunnelBear account allows one person five connections to the TunnelBear network at any time. If you go over the 5 connection limit for your account, you’ll receive a notification in the TunnelBear app and by email.

    Need to purchase multiple accounts so that each person in your office or on your team can easily connect to TunnelBear? Take a look at TunnelBear for Teams, our VPN for businesses and teams. Centralized billing and simple administration make it simple to get an easy to use VPN for everyone. Each person will be able to make five connections to the TunnelBear network at any one time.

    If you've received a notice that there are more active connections on your account, you will not be able to make a new connection again for a couple of hours. To make room for new connections, first, make sure to disconnect anywhere you do not wish to use TunnelBear. Logging out and back in or trying to make additional connections will only prolong the waiting period.

    Once this period expires, you do not need to register the new connection in any way. All you need to do is connect and you'll be browsing privately again. 

    If you've received a notification that you've made more than five simultaneous connections and you believe that someone else may be using your account, unfortunately, the only solution is to change your password to ensure that you have exclusive access. To change your password, go here

    Visit/Rate Article
  • What is TunnelBear and how does it work?

    TunnelBear is the world’s easiest to use VPN (virtual private network) for both consumers and teams. It secures your internet connection through an encrypted tunnel to locations around the world. TunnelBear can be used to protect you and your privacy, hide your real IP address, bypass internet censorship, and to experience the internet as people in other countries experience it. For more information, see here

    Visit/Rate Article
  • How much data do free users get?

    TunnelBear has a great free VPN option that allows unpaid users to use 500MB per month. Your data will renew monthly on the same day you last signed in or signed up. Data that is not used in the previous month does not roll over to the next month. You can see how much data you’ve used within the TunnelBear application, or when you log into your account. If you would like unlimited tunneling for you Bear, check out our pricing here.

    Visit/Rate Article
  • What's the difference between the browser extension and the desktop applications?

    TunnelBear for Chrome and Opera are light-weight browser extensions/add-ons that secure your browser traffic and help you browse privately as if you're in another location. The browser extensions only encrypt your traffic for that particular browser, unlike the TunnelBear desktop and mobile apps, which encrypt all traffic from the device (including apps and services outside of the web browser).

    For maximum privacy, we recommend using the TunnelBear application for Windows, Mac, Android, and iOS. However, if you spend all of your time in the browser, and ease-of-use is your priority, then the TunnelBear browser extension or add-on should more than meet your needs. 

    Visit/Rate Article
Show all articles


  • Auto Tunnel: Have the quickest connection possible

    What is Auto Tunnel?

    Auto Tunnel determines which tunnel is best for you by connecting you to the location with the lowest “ping” (making sure that your data travels the shortest distance possible). This feature is available on Windows, macOS, Android, and iOS devices.

    Troubleshooting issues with Auto Tunnel

    If the Auto Tunnel option is not visible in the country selection list, then your device is likely not able to perform a 'ping'. If pinging is not successful, then the Auto Tunnel feature will not function. Ping is required to determine which of our tunnels is the closest.

    This is usually caused by a router setting called 'block ICMP' (or something similar). Please refer to your router/modem's manual in order to find out how to change this setting.

    Visit/Rate Article
  • TCP Override: Triumph over choppy or unstable connections

    What is TCP Override?

    Does your connection appear ‘broken’ a few minutes after enabling TunnelBear, or is streaming slow and choppy? It may be that your ISP (internet service provider) is throttling or even blocking UDP traffic. Alternatively, your ISP might be experiencing some technical difficulties; in which case enabling this feature can help.

    TCP Override is an advanced setting available on our macOS and Windows desktop apps only. TCP Override forces TunnelBear to use a slightly slower, but more reliable protocol (TCP instead of UDP). This might result in better performance on an unreliable connection.

    Troubleshooting issues with TCP Override

    If you find that TCP Override decreases the performance of your Bear, then it’s likely that you don’t need it; in this circumstance we recommend that you disable the feature. We also advise that you check out the following help articles if you are having a connection issue, or if your are having any speed issues.

    Visit/Rate Article
  • VigilantBear: Strengthen privacy while connecting and reconnecting

    What is VigilantBear?

    Our VigilantBear feature is designed to keep your location and data private in the brief seconds while TunnelBear is connecting and reconnecting. If TunnelBear loses connection for some reason (ie: you move between WiFi networks, or you’re out of network range briefly), it’s designed to automatically reconnect as soon as it detects the internet again. VigilantBear protects you in these brief seconds while TunnelBear is reconnecting.

    Currently the VigilantBear feature is available on Windows, macOS, and Android. This feature is only available on Android devices running on Lollipop (5.0) or later. For more details on how to use the VigilantBear feature, see our blog post.

    Troubleshooting issues with VigilantBear

    You won't be able to enable VigilantBear if your computer is running a custom proxy. Sometimes software similar to TunnelBear can be responsible for making these types of changes. Please ensure that all other third party security apps or VPN services are disabled before trying again.

    IMPORTANT: On some networks, a custom proxy may be required to access the internet (without TunnelBear), so please check with your network administrator or ISP before disabling or changing any custom proxy settings if you’re not sure where they came from!

    Visit/Rate Article
  • GhostBear: Fight censorship on restrictive networks

    What is GhostBear?

    GhostBear makes your encrypted data less detectable to governments, businesses, and ISPs (internet service providers). It does this by making VPN traffic less detectable on your network, which results in it being harder to block. GhostBear is currently available on our Windows, macOS, and Android apps. Unfortunately GhostBear is not available for iOS due to restrictions in the way iOS is designed. Since Apple controls iOS design, we have no control over this at this time.

    Should I use GhostBear?

    If you’re already able to connect to TunnelBear without enabling GhostBear, you should NOT enable GhostBear as it can make your connection slower or not work at all. You’ll still be protected by the latest and greatest encryption technologies. Leaving GhostBear off doesn’t make you less secure.

    If you’re not able to connect or find that your bear can’t maintain a connection normally, it’s possible that the ISP you are using is detecting the use of encryption and then blocking or throttling the connection. In these cases we recommend that you try enabling GhostBear. If you don't notice any improvement, please make sure to turn GhostBear back off before reaching out to our friendly Support Bears.

    How do I use GhostBear?

    If you're using GhostBear on Windows or macOS, enter your TunnelBear preferences by selecting the Gear icon within the app (located on the left side of the app for Windows, and the top right corner for Mac). Select "Settings" and then check off "GhostBear."

    If you want to use GhostBear on Android, click on the "Menu" icon in the top left corner (the three horizontal stripes). Then select "Options" and check off the "GhostBear" box.

    Troubleshooting issues with GhostBear

    If your connection is noticeably slower when GhostBear is enabled

    Some speed loss is expected when GhostBear is enabled. This is caused by the extra ‘scrambling’ needed to further obscure your encrypted connection. If you don't need GhostBear to connect, turn it off for higher speeds.

    If the GhostBear option is ‘greyed out’ and you can’t select it

    There are a couple of reasons the GhostBear feature might be unavailable. If TunnelBear is already connected, you won't be able to enable GhostBear. Turn TunnelBear off and try again.

    Additionally, TunnelBear will not allow you to enable GhostBear if your computer is running a custom proxy. Sometimes software similar to TunnelBear can be responsible for making these kinds of changes. Please ensure all other TunnelBear type services are uninstalled or disabled before trying again.

    IMPORTANT: On some networks, a custom proxy is required to access the internet (without TunnelBear), so please double check with your network administrator or ISP before disabling or changing any custom proxy settings if you’re not sure where they came from! For more information on how to check your current proxy settings on macOS, head here.

    If something else is using port 3389 or 6418

    GhostBear uses port 3389 on Windows, and port 6418 (TCP and UDP) on all other platforms. Only one application at a time can use these ports. If you’re not able to activate the GhostBear feature, it’s possible that another application on your computer is already using one of these two ports. Remote desktop apps, remote webcam streaming apps, and Microsoft terminal services are all examples of applications that may use these ports.

    Visit/Rate Article
  • Trusted Networks: Let your Bear relax on chosen WiFi networks

    What is Trusted Networks?

    While it is a good idea to keep your Bear connected at all times, to maintain continuous privacy and security, you may decide that there are some networks, such as your home network, that are secure enough to give your furry friend a well-deserved coffee break.

    The Trusted Networks feature essentially creates a list of networks that you consider "safe." Then, if you leave one of these networks, your Bear will automatically connect in order to ensure that your 'bear'owsing is completely private and secure. This feature is currently available on Windows, macOS, iOS, and Android devices. Trusted Networks can only be used with WiFi connections.

    How Trusted Networks works:

    1. Your Bear will not disconnect automatically when you re-enter a network that you marked as trusted. You will still have to disconnect manually if you were previously connected.
    2. You can still turn TunnelBear ON while on a network that is trusted, without turning off the Trusted Networks feature. This allows you maximum control over your connection.
    3. Your Bear will not disconnect automatically as soon as you add a network to the Trusted Networks list. After you enable the setting, you can choose to turn the VPN off manually.
    Visit/Rate Article
  • SplitBear: Choose which apps to Tunnel on Android

    What is SplitBear?

    SplitBear is a new feature that gives you complete control over which apps are tunneled through TunnelBear's secure and encrypted connection. This feature is only available on Android devices running on Lollipop (5.0) or later.

    How do I use SplitBear?

    To enable SplitBear, open the sidebar menu by tapping the three horizontal lines in the top left corner of the app. Select Options > SplitBear to open the feature settings. Turn on the toggle at the top of the screen in order to enable SplitBear. Below, you should see a list of all applications that you can exclude from the tunnel. From the list, select the app(s) you wish to have TunnelBear bypass and exit out of the settings. If you're already connected, TunnelBear will prompt you to apply the changes by disconnecting and reconnecting the app. This is necessary for the settings to take effect.

    Please be aware: Any applications that SplitBear excludes from the tunnel will NOT be encrypted/tunnelled by TunnelBear. 

    Visit/Rate Article
Show all articles