DuckDuckGo’s VPN just passed a key test. Independent firm Securitum audited the service from October 2025 to January 2026. Their report confirms no user activity logs on egress servers—no timestamps, no metadata, no DNS traffic tied to individuals. Servers stay dedicated, unshared with outsiders. Caches wipe clean after 24 hours, inaccessible afterward. Lifehacker broke the news on April 16, 2026, noting the audit eases fears for travelers or casual users.
Securitum’s team dug into live servers, source code, and infrastructure. They found log configs locked down—no single engineer can tweak them alone. VPN and subscription APIs use distinct tokens, blocking easy links to user identities. Scam Blocker? It processes locally on devices, never hitting DuckDuckGo servers. The verdict: full compliance with the no-logs pledge.
But. Audits like this target specific claims. They don’t probe speed, encryption strength, or leaks. DuckDuckGo fixed Securitum’s one big suggestion—better file integrity—before release. Still, Tom’s Guide called it a win for data safety just hours after Lifehacker, emphasizing no tracking on servers. Tom’s Guide, April 17, 2026.
This isn’t DuckDuckGo’s first rodeo. A 2024 Securitum review found no critical flaws in the VPN apps and backend. That one followed launch of Privacy Pro, the $10 monthly bundle packing VPN, AI chat, data removal, and theft restoration. CNET praised the no-logs backing in a September 2025 hands-on, though servers numbered only 30-plus countries then. CNET.
And yet privacy hawks stay wary. Past scandals linger. In 2022, researchers exposed DuckDuckGo’s browser letting Microsoft trackers slip through—due to syndication deals. CEO Gabriel Weinberg admitted the contract forced it. They patched post-backlash. No VPN ties there, but trust took a hit. PCMag griped in 2024 about missing public audits pre-launch. PCMag UK.
Now, with the 2025-2026 report public on DuckDuckGo’s site, transparency shines brighter. DuckDuckGo Help Pages host the full PDF. Securitum states DuckDuckGo “fully complies with the privacy commitments outlined in its No-Logs policy.” Lifehacker’s Jake Peterson, tech editor, adds a caveat: audits don’t make it flawless against rivals.
So how does this stack up? ProtonVPN and Mullvad flaunt repeated no-logs audits too—yearly, public. ExpressVPN’s Cure53 checks go deeper into apps. DuckDuckGo’s? Narrower, policy-focused. X chatter echoes relief. Lifehacker tweeted the results Friday; CNET News followed. Lifehacker on X. No major backlash yet.
Industry insiders know the score. VPNs promise anonymity. But subpoenas hit logs that don’t exist. DuckDuckGo’s in-house build on WireGuard helps—lightweight, auditable. No third-party resellers muddying waters. Wired noted in 2024 they skipped partners to control fate. Wired.
Weak spots persist. Server count lags giants like NordVPN’s thousands. Split-tunneling? Spotty across platforms, per CNET. Netflix blocks some regions. Speed? Users gripe on Reddit about caps for non-subscribers—now bundled, but still. Reddit r/duckduckgo.
Competition heats up. Privacy Pro faces Mullvad’s cash-only purity or Proton’s open-source ethos. DuckDuckGo bets on simplicity—one app rules search, email protection, VPN. Audit bolsters that pitch. But for pros? Layer it with Tor or self-hosted proxies. No single tool covers all.
Bottom line. The audit delivers proof DuckDuckGo keeps its word on logs. Data stays off servers. Use it for coffee-shop Wi-Fi or dodging ISP eyes. Just don’t bet the farm on it alone. More audits ahead? DuckDuckGo says periodic. Watch the site. Privacy demands vigilance. Always.
WebProNews is an iEntry Publication