Appworthy

F-Secure: Total Security & VPN

F-Secure all-in-one security makes online protection easy Get antivirus, sc…

F-Secure Corporation
Get it onGoogle Play
Google Play rating4.6★35.2K ratings
PriceFreeIn-app purchases
Age4+Store age rating
CategoryUtilities
DeveloperF-Secure Corporation

What we found

Full report

Some warnings 4 things we found but could not confirm. Nothing confirmed. Checked: 400 reviews, the Android app’s code, the store listing and the privacy label.

Money

Positives

From our automated analysis, 24 Oct 2026. Every label links to its evidence in the full report below.

This analysis describes version 25.6.9835514 of the app (the version number recorded inside the package we inspected), analyzed 2026-10-24 .

The store currently lists version 26.9.1240618, updated 2026-10-09.

Preview

Screenshot 1Screenshot 2Screenshot 3Screenshot 4Screenshot 5Screenshot 6Screenshot 7Screenshot 8

Store screenshots supplied by the developer.

About this app

F-Secure all-in-one security makes online protection easy

Get antivirus, scam protection, VPN, password management, and identity protection in one app. Choose the protection that matches your needs.

Sign up in the app and get Mobile security subscription 14 days free.

Mobile security subscription: security on the go

✓ Download apps and files safely to your device with top-rated antivirus.

✓ No more guessing – detect phishing websites and fake online stores automatically on Chrome browser.

✓ Keep your money safe when banking, browsing, and shopping online.

✓ Spot scams with Scam Scanner — upload a screenshot of anything suspicious and find out if it’s a scam.

✓ SMS Protection – Filter scam SMS messages instantly with AI-powered SMS protection.

✓ Connect to any WiFi hotspot securely with a VPN and make your browsing private.…

From the developer’s store description.

For developers and the curious

The full report

The evidence, sources, measurements and versions behind every label above.

Findings and evidence

3 published · 6 shown, not confirmed

Context 1

Facts that add context without being a charge.

Asks for more sensitive permissions than similar apps

Measured

Requests 8 sensitive permissions (ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION, CAMERA, READ_CONTACTS, READ_EXTERNAL_STORAGE, READ_PHONE_STATE, RECEIVE_SMS, SYSTEM_ALERT_WINDOW); the median for 353 scanned apps in Tools is 3

Sources
The app manifest
Agreement
A measured fact from one deterministic, checkable source.
Where measured
Found in the Android app’s package
Definition

The package requests substantially more of the device's sensitive permissions than the typical app in its category. This is a measurement, not an accusation: a permission is granted because a feature needs it, and a wide request list is a reason to look rather than a finding on its own.

How we know

Package artefact

sha256:320417e4715112900d5d1f585ec6df51e2534fd0332f3d2c294f18fd3713ef59

Positives 2

Specific evidence of a useful property, within the stated scope.

Developer says data deletion can be requested

Measured

The developer's store data-safety disclosure states that data deletion can be requested; we have not seen a deletion control in the app's own text

Sources
The app's own on-screen text and the store listing
Agreement
A measured fact from one deterministic, checkable source.
Where measured
Found in the Android app’s package. From the Google Play listing
Definition

The developer's data-safety disclosure on the store states that users can request deletion of their data, or the app's own text offers a way to delete the account. This restates what the developer declares; it is not a test of whether deletion works. Apple publishes no equivalent disclosure, so on an Apple-only listing only the app's own text can support it.

Open evidence

No advertising SDKs

Measured

No advertising or mediation SDK among the 4 SDKs detected in the package

Sources
SDKs in the app package
Agreement
A measured fact from one deterministic, checkable source.
Where measured
Found in the Android app’s package
Definition

No advertising or mediation SDK of any kind was found in the package.

How we know

Package artefact

sha256:320417e4715112900d5d1f585ec6df51e2534fd0332f3d2c294f18fd3713ef59

One source only — shown, not confirmed 6

Open observations that have not cleared the evidence bar.

Tracking and data collection concerns

One source only

The app requests QUERY_ALL_PACKAGES, which lets the app enumerate every other app installed on the device.

Sources
The app manifest
Agreement
Only one kind of source so far. Shown, not counted.
Where measured
Found in the Android app’s package

This observation has not cleared the required evidence standard.

Definition

The app ships session-recording or a wide tracking stack, holds permissions that read personal data, or is reported by users to sell, leak or over-collect it. The evidence line says which of those was observed.

How we know

Package artefact

sha256:320417e4715112900d5d1f585ec6df51e2534fd0332f3d2c294f18fd3713ef59

Hard to cancel

One source only

The app's own text says: "Learn more about your subscription on %1$s."

Sources
The app's own on-screen text
Agreement
Only one kind of source so far. Shown, not counted.
Where measured
Found in the Android app’s package

This observation has not cleared the required evidence standard.

Definition

Cancelling the subscription is blocked, hidden, multi-step, or simply does not take effect.

How we know

Package artefact

sha256:320417e4715112900d5d1f585ec6df51e2534fd0332f3d2c294f18fd3713ef59

Paywall blocks the basics

One source only

The app's own text says: "A free trial period was already used on this device. Subscribe to get VPN protection for your online activity."

Sources
The app's own on-screen text
Agreement
Only one kind of source so far. Shown, not counted.
Where measured
Found in the Android app’s package

This observation has not cleared the required evidence standard.

Definition

The core of the app — not extras — sits behind payment, or previously-free function moved behind a paywall.

How we know

Package artefact

sha256:320417e4715112900d5d1f585ec6df51e2534fd0332f3d2c294f18fd3713ef59

Trial terms not stated in the app's own text

One source only

Offers a free trial ("To activate your free trial you will need to manually send an SMS") with no renewal price, renewal date or auto-renew notice anywhere in the app's own text

Sources
The app's own on-screen text
Agreement
Only one kind of source so far. Shown, not counted.
Where measured
Found in the Android app’s package

This observation has not cleared the required evidence standard.

Definition

The app's own screens offer a free trial without stating, beside it, what happens when the trial ends. Read this as context rather than as a charge: renewal terms are normally shown on the store's purchase sheet instead, which we cannot see, and we can only observe one kind of evidence for this — so it is shown, but never counted as a charge.

How we know

Package artefact

sha256:320417e4715112900d5d1f585ec6df51e2534fd0332f3d2c294f18fd3713ef59

Usable without an account

One source only

The app's own text says: "%1$s – End date"

Sources
The app's own on-screen text
Agreement
Only one kind of source so far. Shown, not counted.
Where measured
Found in the Android app’s package

This observation has not cleared the required evidence standard.

Definition

The app's own screens offer a way past sign-up — guest access, skipping, or browsing before registering — rather than gating the product behind an account. The store's privacy disclosure is checked alongside it: that disclosure is self-reported, so it corroborates this credit rather than establishing it.

How we know

Package artefact

sha256:320417e4715112900d5d1f585ec6df51e2534fd0332f3d2c294f18fd3713ef59

Works offline

One source only

The app's own text says: "A metered network connection is one which has a limit on how much data you can use. Exceeding this limit may incur extra costs."

Sources
The app's own on-screen text
Agreement
Only one kind of source so far. Shown, not counted.
Where measured
Found in the Android app’s package

This observation has not cleared the required evidence standard.

Definition

The app's own copy describes working without a connection — offline mode, downloading for offline use, or content saved for later. Shown because readers filter on it; it is a feature, not a fairness property, and never counts for or against an app.

How we know

Package artefact

sha256:320417e4715112900d5d1f585ec6df51e2534fd0332f3d2c294f18fd3713ef59

Nothing was published as a thing to watch for in this assessment. That is not a finding that nothing is wrong with the app.

What reviewers report

400 reviews read · 0 review-based observations

No review-based observation is published in this assessment. That does not establish that reviewers had no problems.

Measurements

8 measured · 0 not assessed

“Not assessed” means we could not measure it. It is never a zero and never a pass.

From store data and reviews

Developer replies to reviews
Replies to at least 1 review in 20
Price in the store description
The store description doesn’t list prices (most don’t)
Cancelling, in the store description
The store description doesn’t say how to cancel (most don’t)
Themes reported by reviewers
No theme reported
Counted from the reviews we have read for this app. "No theme reported" means no theme reached our reporting threshold — it is not a finding that nothing is wrong with this app, and we do not say it is.
Five-star share of ratings
80–89% five-star
Arithmetic on the stores' own published rating counts. It says nothing about why the ratings fall where they do.

In the app package we scanned

Android package 25.6.9835514, scanned 24 Oct 2026. These describe that package, not the current store version.

Sensitive permissions
6 or more requested
Counted against a fixed list of eighteen sensitive Android permissions: sixteen runtime permissions, among them location, camera, microphone, contacts and SMS, and two the user must switch on in system settings, drawing over other apps and usage access. Requesting one is not itself a finding.
Analytics or tracking SDKs in the scanned package
1–2 found
Advertising SDKs in the scanned package
None found
Counted as distinct SDKs in the package we scanned. One mediation bundle can contribute several, so this is not a count of advertisers.
How we know

Supporting measurements: not a complete list of possible harms or positives. Measurement vocabulary 1.4 · how these are measured

Versions and dates analysed

Assessed 24 Oct 2026

This analysis describes version 25.6.9835514 of the app (the version number recorded inside the package we inspected), analyzed 2026-10-24 .

The store currently lists version 26.9.1240618, updated 2026-10-09.

Store update history

Each store’s release notes, as the developer wrote them. They are the developer’s words, not ours.

Google Play

Version 26.9.1240618 · 2026-10-09

No release notes were provided for this version.

Assessment record

Status
Automated analysis
App identifier
f-secure
Assessment date
24 Oct 2026
Sources used
6 independent signals: user reviews, SDKs in the app package, the app's own on-screen text, the app manifest, the store listing and the store privacy disclosure
Reviews read
400
Package examined
Android · 25.6.9835514 · scanned 24 Oct 2026
Human inspection
Not completed

Assessed 2026-10-24 from 400 user reviews, the app's package, the store listing and its privacy label.

How we know
Measurement vocabulary
1.4

How this page was produced

Analyzed 2026-10-24 Version analyzed: 25.6.98355146 independent signals400 reviews scannedConfidence: HighNot human-reviewedVocabulary v1.13Methodology v1.3
Signals run: user reviews, SDKs in the app package, the app's own on-screen text, the app manifest, the store listing and the store privacy disclosure.

Store facts

Google Play

What the stores publish. Store ratings are the stores’ numbers, not Appworthy’s, and are never averaged across stores.

Google Play

Store rating
4.62 ★ · 35,186 ratings
Version
26.9.1240618
Updated
9 Oct 2026
Price
Free · In-app purchases
Age rating
4+
Size
Not supplied
Open in Google Play
Developer
F-Secure Corporation
Category
Utilities
Listing price
Free · In-app purchases

Purchases the store lists

 What this app sells
Google Play doesn’t publish per-purchase prices.

Method and limits

What this report can and cannot show

How the automated analysis works

This assessment is produced automatically. Six independent signals are read — user reviews, SDKs in the app package, the app's own on-screen text, the app manifest, the store listing and the store privacy disclosure — and each candidate finding is filed under the sources that support it.

No charge stands on one kind of evidence — with one published exception. A finding is either a measured fact that anyone can reproduce (an ad SDK is in the package; every subscription bills weekly; the privacy label omits a tracker we can see), or it is an interpretation — and an interpretation needs independent sources to agree before it reaches the catch list. The exception is a harm only users can see: a charge may publish from reviews alone, as “Reported by N users”, once enough reviewers raise it to clear that charge’s own published bar. That agreement rule is what replaced the human reviewer, not a model’s confidence.

There is no overall score, on purpose. A 0–99 number was published here until 2026-09-15. It was withdrawn because it discriminated too weakly to be the instrument — 44.7% of every pair of apps tied — and because a single number is a verdict where a count is an observation. What publishes instead is a row of measurements, each of which says what was counted and, where we could not look, says that instead.

Findings under One source only are real reports we do not stand behind as findings. They are shown because withholding them entirely would hide a genuine complaint, and labelled because publishing them as charges would be an accusation off a single source.

Limits of this report

  • A package scan is static. It identifies code and text in one Android build. It does not measure a live ad session, test a deletion request, or count the steps needed to cancel.
  • Reviews keep their sample. A review-only charge shows distinct reviewers, the share and the sample size, and is published only once it clears that label’s published threshold. Calibration labels are machine-drafted and not yet confirmed by a person.
  • Not assessed is a state. It is never a zero and never a pass.
  • A missing label is not a clean bill of health. It means the evidence did not support one, not that the app is problem-free.
Not yet human-reviewed. A hands-on test can confirm or contradict a finding and adds its own measurements; it does not change a measurement row. Hands-on inspections are not yet open.
Review thresholds Read the methodology For developers

Request a correction

[email protected]

Write to [email protected], or use the form. Name the finding, the app version and the evidence that needs correcting. Factual corrections are free and never depend on buying anything.

Report a factual error — free Email a correction