Is it possible to intercept the password through vpn?

Question

VPN

There was such a question, can my passwords be "hijacked" when logging into the site via VPN / Tor? If so, how can you prevent yourself from doing so?

Answer 1

It is enough to go through HTTPS to the entire site, even through a VPN, even through Tor, even "directly", then no one on the route will be able to make out the traffic.
If the site works via HTTP, then you need to make sure that the connection is encrypted from your host to the target host with the site. Tor is great, but traffic can be viewed on the exit node. As for the VPN, if it is provided by some service provider, then sooner or later the traffic will leave the VPN and go unencrypted.