Do most VPNs use zero-knowledge encryption?

No, most VPNs do not use zero-knowledge encryption , but that doesn’t mean they’re unsafe. If a VPN company has a good no-logs policy, that means that they don’t log or store your data. While this means that some data is stored during use, the moment you close your VPN that data is erased. VPNs like ExpressVPN have their no-log policies independently audited to prove that the company has no way to access your data. It’s not the exact same as ZKE, but it’s a functional alternative that companies use when they still need to process your data to operate.

How does zero-knowledge encryption differ from regular encryption?

The main way it differs is that a company cannot see your encryption key. Normally, the company keeps a copy of your decryption key. It’s not sinister — it helps with account recovery and support. However, it can also be requested by law enforcement during investigations, plus, if a hacker gets access to the company, they could also get your key. ZKE is safer because it removes the risk of the company mishandling or leaking your data, being hacked, or sharing data with local authorities (since they don’t have a way to see it).

Is a product unsafe without zero-knowledge encryption?

It depends, but for the most part no. This type of encryption can only be used when the company doesn’t need to process your data. To illustrate the difference, let’s use two products at the top of their field. 1Password is a secure password manager that uses zero-knowledge encryption. This way, it doesn’t have any logs of your passwords or data that you store within the app. If the company gets hacked, there’s no way your passwords can be seen. ExpressVPN is a great VPN, but it doesn’t use ZKE. That doesn’t make it less safe though, because it employs something called a no-logs policy. This type of policy restricts companies from logging your data. Whenever you close the VPN, any data that it’s storing on its RAM-only servers is deleted, functionally doing the same thing without interrupting the VPN services.

Can I have my data stolen if I’m using zero-knowledge encryption?

Yes, data theft can still occur, even using ZKE. While this form of encryption prevents the company from keeping a decryption key, it doesn’t keep you safe from all online threats. You’re still vulnerable to phishing scams, data-stealing malware, and having a weak password. I highly encourage you to use a comprehensive antivirus suite to account for these other threats. Even if ZKE keeps you safe from man-in-the-middle attacks and from businesses misusing data, you still need an antivirus to keep you safe from everything else.

Articles by Tyler Cross

Tyler Cross

Tyler is a writer at SafetyDetectives with a passion for researching all things tech and cybersecurity. Prior to joining the SafetyDetectives team, he worked with cybersecurity products hands-on for more than five years, including password managers, antiviruses, and VPNs and learned everything about their use cases and function. When he isn't working as a "SafetyDetective", he enjoys studying history, researching investment opportunities, writing novels, and playing Dungeons and Dragons with friends.