Signing in through a web proxy is a trust decision, not just a technical step. This page explains what the proxy can see, what you will see on screen, and which sign-in methods are likely to fail.
What we have and have not tested. We test what logged-out visitors can open through AnyProxy. We never sign in with real accounts, so nothing below is a verified login walkthrough. It is general guidance, based on how web proxies work and on AnyProxy’s privacy page.
First: what the proxy can see
A web proxy is not a tunnel you look through. It fetches the page, rewrites it so its links keep going through the proxy, and passes it to you. That means:
- HTTPS encrypts the connection from your browser to AnyProxy.
- For HTTPS sites, a separate encrypted connection runs from AnyProxy to the site.
- In between, the proxy operator handles the decrypted content, including what you type into forms, such as usernames and passwords.
AnyProxy is not a no-logs service. Operating the service can record destination hosts, session identifiers, region, browser details and a hashed IP address, as the privacy page sets out. Browser features such as WebRTC, used for video calls, can also reveal your real IP address to a page you open through any web proxy.
So the honest rule is: only sign in through a web proxy to accounts you would be comfortable sharing with the proxy operator. For banking, work accounts, government services, your main email or anything that holds money, use the official app or a direct connection you trust.
What you will see on screen
Through AnyProxy, the address bar does not show the real site’s address. It shows an AnyProxy regional server, such as sg.anyproxy.site/_o/…, followed by an encoded form of the site’s address. The page inside is the real site’s page, relayed by the proxy.
Two practical consequences:
- Phishing checks are harder. You cannot rely on the address bar to confirm you are on the real site. Only open sites by typing their address on anyproxy.site yourself, and never follow a ready-made proxy link someone sends you. AnyProxy only accepts a site’s main address and opens its home page for exactly this reason: nobody can hand you a pre-built proxy link to a fake login form.
- Password managers may not fill in. They match saved passwords to the site’s address, and the address is now the proxy’s. Copy and paste from the manager if you decide to sign in.
What the site you sign in to will probably do
The site sees the login coming from the proxy region, often in another country. Common reactions (general behaviour of large sites, not tested by us):
- A “new device / new location” email or notification. Check it is genuinely from the site, then confirm it was you.
- A two-factor prompt. Codes by SMS, email or authenticator app are typed into the page and should pass through.
- A CAPTCHA or extra identity question.
- An outright refusal. Some sites refuse proxy addresses before you even reach a login page. On 15 October 2026, Reddit showed “You’ve been blocked by network security” through all three free regions, and Instagram sent logged-out visitors to its login page in all three.
Passkeys and hardware security keys are tied to the real site’s address. Because the browser sees the proxy’s address instead, expect them not to work through any web proxy. Use another method, or sign in directly.
If something goes wrong
The site keeps asking you to verify. It is treating the proxy address as unfamiliar. Sticking to one region may help; signing in directly helps more.
Your account is temporarily locked. Recover it from your usual network or app, through the site’s own recovery process. Do not keep retrying through the proxy.
You think you typed a password into the wrong page. Change that password directly on the real site, from a network you trust, and sign out other sessions.
Before and after you sign in
- Turn on two-factor authentication for the account first.
- Do not tick “remember me” on a device that is not yours.
- Sign out when you finish, and close the tab.
- If you changed your mind about trusting the proxy, change the password directly on the site afterwards.
The full privacy breakdown is on is AnyProxy safe?.