Technologies

Google One VPN: What you need to know about this privacy tool

Analysis: Google now includes a VPN with its cloud subscription storage service. Here are some of the privacy implications you should know.

Google’s mobile virtual private network service — Google One VPN — is branching out. Once restricted to Android users in the US, the VPN is now a perk bundled with the search giant’s cloud-based subscription storage service, Google One. Earlier this month, however, Google made a change to its developer documents, as reported by 9to5Google. Android users in Canada and Mexico gained access to the service, along with those in the UK, France, Germany, Spain and Italy.

In October 2020, when Google launched its own standalone VPN as part of its $100 annual bundle package for Google One, subscribers with a 2TB or greater account got access to the service perk for the first time. While the idea of an Android-tailored VPN conveniently rolled into a Google One mobile app might seem appealing as a quick-fix privacy option, there are more than a few privacy concerns to give you pause.

If you’re checking into Google’s service for the first time, here are a few key things to know about the mobile encryption offering.

Is Google One VPN a true VPN?

Yes. According to the tech detailed in Google’s white paper, Google One VPN acts as a traditional VPN does: It diverts all the internet traffic from your device through an encrypted tunnel, sends it through a Google VPN server and passes it along to the website you’re browsing toward — effectively hiding your browsing. It even goes a step further by separating its user authentication process from your browsing, too.

I haven’t yet tested Google One VPN, so I can’t tell you whether it can help you bypass Google’s own geoblocking on country-specific apps in the Google Play Store, or if it can help you access your home country’s Netflix catalog while you’re traveling abroad.

Is Google One VPN truly private?

As we wrote in June, Google One users simply looking for an extra layer of protection while using free public Wi-Fi could find this VPN to be a convenient fit. But there’s an elephant in the room here.

By using Google One VPN, you’re actively feeding every piece of internet-bound data on your device to Google. Then you’re trusting Google to not peek at that data, and to shield you from the same third-party tracking tech that it only stopped profiting from in March.

This is the same Google that required a lot — Facebook’s Cambridge Analytica scandal, a lengthy legislative haranguing over privacy concerns, three major antitrust lawsuits (including a landmark case by the US Department of Justice) and another complaint by a bipartisan coalition of states — before it decided to phase out those third-party tracker cookies in its Chrome browser. Google is only just starting that process, which also doesn’t apply to mobile Google devices.

We reached out to Google, and will update this story if we hear back.

VPNs function by routing all of your data through a single company’s servers. So when we recommend VPN providers, we evaluate not only the relative strength of their encryption tech and application security, but we also examine the VPN providers’ data privacy and retention policies, and any instances where the provider has been proven to have collected or shared user browsing data.

Read more: How we evaluate and review VPNs

We frequently advise users against adopting free VPN services except when indulging in a 30-day trial of a recommended provider, primarily as a precaution against undesirable data collection by shady VPN providers and their data brokers. If any of our recommended VPN providers had even half the access to your private digital life that Google so often does, I’d advise against using that provider’s VPN to protect your privacy, regardless of how strong its encryption is.

So if you’re interested in keeping your browsing, internet traffic and usage data private from corporations and government entities, you should carefully consider Google’s long, storied history of sharing and collecting user data before you use any of its products, VPN included. Ask yourself whether it might be better to trust your data to a company whose singular aim appears to be privacy, rather than algorithm farming.

Is Google One VPN worth it?

Thanks to far-reaching gag orders and secret subpoenas, the US government has overseen the collection of more data from internet users than we can feasibly or objectively measure at this time. As such, I recommend against choosing a VPN service with a US jurisdiction, which would include Google One VPN — though it’s worth noting that non-US VPN companies are still far too opaque to operate entirely independent of user trust.

But when even Uncle Sam has to sue a VPN company over data abuse? It may be worth selecting a different fox to guard your digital henhouse.

If you’re a subscriber to the Google One 2TB plan and just looking for light protection as you browse public Wi-Fi, the Google One VPN may do the job. But if you’re looking for more robust privacy, we’d recommend subscribing to one of our tested and recommended VPNs instead.

For more, check out our picks for the best Android VPNs, the best iPhone VPNs and the best cheap VPNs.

Technologies

Today’s NYT Mini Crossword Answers for Saturday, July 19

Here are the answers for The New York Times Mini Crossword for July 19.

Looking for the most recent Mini Crossword answer? Click here for today’s Mini Crossword hints, as well as our daily answers and hints for The New York Times Wordle, Strands, Connections and Connections: Sports Edition puzzles.

Today’s Mini Crossword is a delight. I was thrilled to spot a cute salamander with a funny name in the clue for 9-Across. Good thing I remembered how to spell it! Keep reading for help with today’s Mini Crossword. And if you could use some hints and guidance for daily solving, check out our Mini Crossword tips.

The Mini Crossword is just one of many games in the Times’ games collection. If you’re looking for today’s Wordle, Connections, Connections: Sports Edition and Strands answers, you can visit CNET’s NYT puzzle hints page.

Read more: Tips and Tricks for Solving The New York Times Mini Crossword

Let’s get to those Mini Crossword clues and answers.

Mini across clues and answers

1A clue: See-through
Answer: CLEAR

6A clue: «Anybody home?»
Answer: HELLO

7A clue: Winged horse of Greek myth
Answer: PEGASUS

9A clue: Salamander known for its regenerative abilities (and adorable appearance)
Answer: AXOLOTL

10A clue: Texting format, for short
Answer: SMS

11A clue: Birthplace of bossa nova
Answer: RIO

12A clue: Even score
Answer: TIE

13A clue: Insect seen in Dalí’s «The Persistence of Memory»
Answer: ANT

14A clue: Directory abbr.
Answer: EXT

15A clue: Metroid console, for short
Answer: NES

Mini down clues and answers

1D clue: Party snack made with cereal and pretzels
Answer: CHEXMIX

2D clue: Gift with many interlocking pieces
Answer: LEGOSET

3D clue: Airline whose name comes from the Book of Hosea
Answer: ELAL

4D clue: Election loser
Answer: ALSORAN

5D clue: Stand-up comic’s act
Answer: ROUTINE

7D clue: Command that uses the «V» key
Answer: PASTE

8D clue: Pulling their arms might win you money
Answer: SLOTS

Technologies

It’s the End of the Road for Microsoft Store Movies and TV Shows. What It Means for You

Microsoft has abruptly stopped offering rentals and sales of TV shows and movies on its media platforms.

Microsoft is exiting the market for selling and renting TV and movies across its platforms. There was no reason given for the abrupt change, with Microsoft simply posting the news on a support page on its Xbox website.

«Microsoft has stopped selling new movie and TV content. Existing customers can continue to access their previously purchased content on Windows and Xbox devices,» Microsoft said in the post.

The company said playback and download options will continue to be available for shows and movies people bought previously, but it’s the end of the road for new sales.

On the same page, Microsoft directed users to sign up for Movies Anywhere if they aren’t already members, which makes purchased content available across platforms, and to shop at other media stores including Amazon’s Prime Video, Apple TV and Fandango at Home.

A representative for Microsoft didn’t offer additional comment, but pointed CNET to a similar support blog post on Microsoft’s website.

Microsoft has partnered with many companies over the years to distribute video content since the early 2000s. The move comes as the company has been experiencing mass layoffs and cost cutting across many divisions, including its gaming studios, resulting in the cancellation of multiple upcoming Xbox games.

What happens to content I’ve bought from Microsoft?

Although Microsoft says previously purchased content isn’t going to be unavailable, there are some things to be aware of. According to the support page, you can’t transfer your purchases to another service (although they can be accessed on other services if Movies Anywhere makes them available, but that doesn’t apply to TV shows).

Microsoft isn’t offering refunds for any purchased content, either.

Microsoft says that downloads of movies and TV shows will still work and will be available, «on Windows and in HD max resolution.» Movies and TV shows will still be playable on the Microsoft Movies & TV app.

The company says anyone who is having trouble accessing their purchases can reach out to Microsoft Support.

Technologies

Microsoft Will Erase Your Passwords in 2 Weeks: What to Do Now

If the Authenticator app is your go-to password manager, you’ll need to pick a new one soon.

Microsoft is axing passwords starting in August — and if you use its Authenticator app, you’ll want to be prepared.

For years, Microsoft Authenticator has been a go-to for managing multifactor authentication and saved passwords. However, starting next month, it will no longer support passwords and will move to passkeys instead. That means your logins will soon rely more on things like PINs, fingerprint scans or facial recognition.

Using a passkey can make your account safer, and it’s a move I’m excited about. I recently uncovered that 49% of US adults have risky password habits that can open the door to scammers getting access to your sensitive data.

If you’re a fan of Authenticator and not sure where to start before the switch, here are other password managers CNET recommends and steps you should take before August.

When will Microsoft Authenticator stop supporting passwords?

Microsoft Authenticator houses your passwords and lets you sign into all your Microsoft accounts using a PIN, facial recognition like Windows Hello, or other biometric data like a fingerprint. Authenticator can be used in other ways, such as verifying you’re logging in if you forgot your password, or using two-factor authentication as an extra layer of security for your accounts. In June, the company stopped letting users add passwords to Authenticator.

Starting this month, you won’t be able to use the autofill password function. And next month, you’ll no longer be able to use saved passwords.

If you still want to use passwords instead of passkeys, you can store them in Microsoft Edge. However, CNET experts recommend adopting passkeys during this transition. «Passkeys use public key cryptography to authenticate users, rather than relying on users themselves creating their own (often weak or reused) passwords to access their online accounts,» Tomaschek said.

Why are passkeys a better alternative to passwords?

So what exactly is a passkey? It’s a credential created by the Fast Identity Online Alliance that uses biometric data or a PIN to verify your identity and access your account. Think about using your fingerprint or Face ID to log into your account. That’s generally safer than using a password that is easy to guess or susceptible to a phishing attack.

«Passwords can be cracked, whereas passkeys need both the public and the locally stored private key to authenticate users, which can help mitigate risks like falling victim to phishing and brute-force or credential-stuffing attacks,» said Attila Tomaschek, CNET’s software senior writer and digital security expert.

Passkeys aren’t stored on servers like passwords. Instead, they’re stored only on your personal device. More conveniently, this takes the guesswork out of remembering your passwords and the need for a password manager.

How to set up a passkey in Microsoft Authenticator

Microsoft said in a May 1 blog post that it will automatically detect the best passkey to set up and make that your default sign-in option. «If you have a password and ‘one-time code’ set up on your account, we’ll prompt you to sign in with your one-time code instead of your password. After you’re signed in, you’ll be prompted to enroll a passkey. Then the next time you sign in, you’ll be prompted to sign in with your passkey,» according to the blog post.

To set up a new passkey, open your Authenticator app on your phone. Tap on your account and select «Set up a passkey.» You’ll be prompted to log in with your existing credentials. After you’re logged in, you can set up the passkey.

Other password manager alternatives

Since Microsoft will get rid of all of your passwords in two weeks, you’ll need a new place to store your passwords safely. Tomaschek has a few of the best password manager recommendations after testing and reviewing several.

The top recommendation is Bitwarden for its transparency. It’s open-source and audited annually. From a price perspective, the free plan lets you store infinite passwords across unlimited devices. The free plan also includes features most password managers would charge for, including password sharing and a username and password generator.

Bitwarden’s upgraded plans have other upgraded features that could be worth the cost, too.

Personally, Tomaschek has been using 1Password for a while, and he likes the interface and family plan. Even though it’s second on the list, Tomaschek says it’s just as good as Bitwarden.