Insight

Tuxler’s Proxy Pool: Windows Client, Not the Extension

Tuxler’s free Windows client shares residential IPs. Its current browser extensions are Premium-only, so the extension install count is not a count of proxy exits.

Tuxler's Proxy Pool: Windows Client, Not the Extension

Correction, 5 September 2026: an earlier version of this post treated 200,000 Chrome installs as 200,000 residential proxy exits. The evidence presented did not establish that, and we have removed the conclusions that depended on it.

Separate the Windows client from the extension

Tuxler’s current FAQ says its free Standard Windows client adds the user’s IP to a shared pool. While installed, it can route other users’ traffic even when the user is not connected to a VPN location. Access may be resold to business customers. The FAQ says Premium removes the device from that pool.

The same page describes Chrome and Firefox extensions as Premium-only clients for data-centre locations. It reserves free access and residential locations for the Windows app. That distinction prevents us from treating the browser install count as a count of proxy exits. The current documentation also cannot establish how every earlier release behaved.

The Chrome extension is Residential VPN | Tuxler, ID jpgljfpmoofbmlieejglhonfofmahini. Its RiskyPlugins record covers version 3.1.26. No runtime trace has shown the extension recruiting an exit node, executing downloaded code or hiding traffic from monitoring.

Decide whether connection sharing is acceptable

If you use the free Windows client, connection sharing is part of the product described by the vendor. Consider whether you are willing to let other parties route traffic through that connection. On a managed network, that decision belongs with the organisation responsible for the network.

If you installed a browser extension, check the client and subscription you actually use. Do not infer a Windows installation from the extension name. Anyone who wants to stop using the product should review both the browser and installed desktop software.

For administrators, a connection to a vendor endpoint is a lead for investigation. It does not establish proxy participation on its own. Confirm the executable, its configuration and observed traffic before labelling a device as an exit node.

The finding is narrower than the earlier version claimed: Tuxler documents connection sharing for its free Windows product, and the browser extension’s install count says nothing about how many of those Windows clients exist.

This post also appears on the RiskyPlugins blog.