Does VyprVPN Keep Logs in 2026? The Audit, the Ownership Change and What's Changed

VyprVPN says it keeps no logs, and in 2018 it backed that up with something rare at the time: a full public audit. That’s still the strongest point in its favour. But the company behind VyprVPN isn’t the same one that commissioned that audit, it no longer sits in Switzerland, and the detailed VPN privacy policy has been replaced with a generic one.

So, does VyprVPN keep logs in 2026? Probably not activity logs. But the evidence is older and thinner than it used to be, and that should change how much you trust it.

The short answer

VyprVPN claims a strict no-logs policy and passed an independent audit by Leviathan Security in 2018. Since 2023 it has been owned by Certida, a Texas company, which puts it under US jurisdiction. There has been no new no-logs audit since the sale. If you need a VPN whose no-logs claim is recent, audited and backed by RAM-only servers, there are better options.

What VyprVPN logged before 2018

It’s worth starting here, because VyprVPN wasn’t always a no-logs service. Back when it was run by Golden Frog in Switzerland, it was known to keep connection logs for 30 days, according to ProPrivacy’s coverage of the audit. Those logs didn’t include browsing history, but connection timestamps and IP addresses are exactly what’s needed to tie a VPN session back to a person.

In 2018 Golden Frog changed course. It moved to a no-logs policy and asked Leviathan Security Group to check that claim.

The 2018 Leviathan Security audit

Late in 2018, VyprVPN published what ProPrivacy described as the first complete, in-depth public audit of a commercial VPN service. Leviathan examined VyprVPN’s servers and systems to check whether user activity was being recorded.

The audit wasn’t a rubber stamp. Cloudwards notes that it found issues, including kill switch API logs that contained user IP addresses. VyprVPN fixed them and a retest came back clean. That’s how audits are supposed to work: problems found, problems fixed, results published.

In our comparison database this audit still earns VyprVPN 5/5 on the “audited no-logs” criterion, because it was public, independent and comes with proof.

The 2023 sale to Certida

Here’s where it gets more complicated. In 2023 Golden Frog sold VyprVPN to Certida LLC, a company based in Texas. VPN Compare reported in April 2026 that the change brought three things with it.

A move to US jurisdiction. The US is a founding member of the Five Eyes intelligence alliance, and US companies can be compelled to hand over data they hold.

A thinner privacy policy. The dedicated VPN privacy policy, which explained in detail what was and wasn’t logged, was removed and replaced with a generic website privacy policy. A Certida representative told VPN Compare: “There’s no specific policy for no-log as it clearly means nothing is logged.”

No new audit. The 2018 Leviathan audit was done under Golden Frog, in Switzerland, on infrastructure that may have changed since. Nothing has replaced it.

A quick note on our own scores. Our database still lists VyprVPN under GoldenFrog GmbH in Switzerland, which is why its jurisdiction score is 5/5. That score dates from before the sale. Given the move to the US, treat it as outdated until we re-rate it. Our VyprVPN review was written on the same basis.

So does VyprVPN keep logs today?

Here’s how we read the evidence.

On activity logs (what you browse, stream or download): there’s no sign VyprVPN records them. It never logged browsing history, even in its 30-day logging days, and both the old and current statements say it doesn’t now.

On connection logs (timestamps, IP addresses, bandwidth): VyprVPN says it doesn’t keep them. The 2018 audit supported that claim at the time. But “nothing is logged” in a generic policy is weaker than a detailed policy listing each data type, and a seven-year-old audit can’t speak for today’s systems.

On account data: like every paid VPN, it keeps account and payment information. VyprVPN doesn’t accept crypto or cash in our data (2/5 on payments), so your subscription is always linked to a card or online payment account.

So the honest answer is: probably no, but you’re now taking more on trust than you were in 2019.

What else affects VyprVPN’s privacy

No RAM-only servers. VyprVPN scores 0/5 here in our database. Servers that write to disk can retain data by accident, even when a provider means well. RAM-only servers wipe everything on reboot.

No bug bounty program. 0/5. A bug bounty gives outside researchers a reason to report flaws instead of sitting on them.

WebRTC leak protection. VyprVPN has IP, DNS and data leak protection, but no WebRTC leak protection in our data, so it scores 4/5 rather than 5/5 on leaks.

Owned network. One genuine plus: under Golden Frog, VyprVPN owned its server infrastructure rather than renting from third-party hosts, as ProPrivacy noted in 2018. That reduces the number of companies with physical access to the machines. Whether that’s still fully true under Certida hasn’t been independently checked.

Security incidents. Cloudwards mentions a 2023 incident affecting VyprVPN’s website, with no user data reported compromised. A Reddit user also alleged in 2023 that the apps sent data to a third-party analytics firm, which VyprVPN denied. Neither claim has been independently verified.

How VyprVPN compares with audited alternatives

If a strong no-logs record is why you’re shopping, Proton VPN is the closest match to what VyprVPN used to be: Swiss, audited by KPMG, RAM-only, and $47.88 for a year (about $3.99 a month) in our database. VyprVPN costs $60 for a year (about $5.00 a month). Proton VPN is cheaper and stronger on every privacy criterion in that table.

NordVPN is the pick if you want privacy plus top streaming results: PwC-audited, RAM-only, Panama-based and 4.63/5 overall. See NordVPN’s current plans.

Want to compare all VPNs side by side? Check our full VPN comparison table with scores across 18 criteria.

Where VyprVPN still makes sense

None of this makes VyprVPN a bad VPN. It scores 5/5 on speed and 5/5 on customer support in our testing, with live chat in several languages. Its Chameleon protocol is built to get past networks that block VPNs. And the 2-year plan is cheap at $72 (about $3.00 a month).

If you want a fast VPN for everyday browsing and don’t need the strongest privacy guarantees, it’s a reasonable choice. If you specifically chose it for Swiss jurisdiction and its audit, the reasons you picked it have weakened.

How to check any VPN’s no-logs claim yourself

The VyprVPN story is a good example of why a single audit isn’t forever. When you check a provider, look for:

• an audit from the last two or three years, not just one at some point
• a privacy policy that lists each data type, not just “we log nothing”
• RAM-only servers, so mistakes don’t stick around
• clear ownership, and news of any recent sale

Our guide to verifying a VPN’s no-logs policy walks through each step, and who owns your VPN? maps the big ownership groups.