• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar

All Things Secured

Online Security Made Simple

READY TO SECURE YOUR ONLINE PRESENCE? Start Here

  • Security Basics
    • Start Here (Security Guide)
    • What is a VPN?
    • What is 2-Factor Authentication?
    • What is SmartDNS?
  • VPN Security
    • Best VPNs 2021
    • VPN Reviews
      • ExpressVPN Review
      • Surfshark Review
      • NordVPN Review
      • VyprVPN Review
      • Mozilla VPN
      • IPVanish
      • Avast VPN
      • Ivacy VPN
      • PureVPN
    • Frequent Asked Questions
      • Are VPNs Illegal?
      • What is a VPN Kill Switch?
      • What is Split Tunneling?
      • Zero Log VPN?
      • Free VPN vs Paid VPN?
      • Lightway vs WireGuard vs OpenVPN
      • Increase Internet Speed on VPN?
      • How to Watch Netflix in China?
    • 10 Important VPN Features
    • Common VPN Myths
    • Common VPN Scams
    • VPN Connection Protocols Guide
  • Password Security
    • Best Password Managers 2021
      • 1Password Review
      • Dashlane Review
      • NordPass Review
      • Best iOS Password Manager
    • Frequently Asked Questions
      • How Do Password Managers Work?
      • Are Password Managers Safe?
      • Are Chrome Passwords Secure?
    • Double Blind Password Strategy
  • Security Tips
    • Bad Security Habits
    • Email Phishing Scams
    • Secure Email Providers
    • Using Google Authenticator
    • Have You Been Hacked?
    • Http vs Https?
  • Resources
    • Password Strength Checker
  • About
    • Contact
    • Advertise

There’s No Such Thing as a “Zero-Log VPN” (here’s how you know)

November 23, 2020 By Josh Summers

Is there such a thing as a zero log VPN? The short answer is no, there isn’t. In fact, these companies are flat out lying to you when they claim they are a no log VPN. That’s the bad news. The good news is that the more you understand VPN logging, the better prepared you can be to secure yourself.

Your zero log VPN is lying to you about their logging policy

With good reason, VPN users want to use a Virtual Private Network that guarantee anonymity and privacy – at least as much of a guarantee as possible.

Naturally, the VPN services have picked up on this market trend and have begun to put bold claims on their marketing materials: “We don’t log anything!”

As we’ll learn, you should always be skeptical of a zero log VPN that claims to have a “no log policy.” Let’s explore why.

In this article, we’re going to cover the following:

  • The myth of the no log VPN
  • Why are VPNs lying about their logging?
  • Two key questions to ask about a VPN
  • How to find a VPNs real logging policy
  • Should you really care about VPN logging?

Use the navigation links above to jump to a specific question, or continue scrolling to read the entire guide.

Note: Some of the links in this article are affiliate links, which means that at no extra cost to you, I may be compensated if you choose to use one of the services listed.

VPN Logging & the “Zero Log VPN” Myth

There’s one problem when it comes to these no log VPNs. Actually, it’s a pretty big problem.

You see, even if a VPN claims to abide by a “zero log” policy, it is virtually impossible to independently verify.

If they didn’t follow their own policy, it’s not often that companies get caught in this deception.

The VPN companies know this, of course, which is why you should always be skeptical when you first read about a zero log VPN policy.

Take PureVPN for example. On their website, they claim that after you connect to any server, PureVPN will not “keep any records of anything that could associate any specific activity to a specific user.”

The story of Ryan Lin indicates otherwise. When Ryan was investigated by the FBI under suspicion of harassing, cyber bullying, and hacking, the FBI approached PureVPN after discovering he used the VPN service.

Ryan Lin during his trial in Massachusettes
A sketch of Ryan Lin during his trial in Massachusetts

If PureVPN was truly a zero log VPN, they would have been unable to aid the FBI in their investigation against Lin. Instead, PureVPN was able to provide logs that revealed the IP address Lin used to carry out cyber threats.

  • Lesson #1: VPNs always log some data. In this case, PureVPN logged data despite their claim that they “do NOT keep any logs that can identify or help in monitoring a user’s activity.”
  • Lesson #2: A VPN is not a secret invisibility cloak that will allow you to conduct whatever illegal activity you want to without reprisal. Now, I certainly don’t condone Ryan Lin’s illegal activity. However, this highlights the blatant lie being told by PureVPN’s marketing team.

For the record, as I’ve mentioned in my review of PureVPN, the company has since hired an independent auditor to try to regain the trust lost by this incident.

Your Passwords - Safe, Secure, and Everywhere You Go. Get Dashlane Premium now.

Why are VPNs Lying about VPN Logging?

The “no log VPN” claim is one of the primary features demanded by VPN users. One reason for this is that most so-called “VPN reviews websites” tell people over and over to only sign-up for a VPN provider with a no log policy.

Who has access to your data?

For this reason, the majority of VPN providers, including some VPNs that I recommend on this website, advertise that they abide by a “no log” policy.

But the fact of the matter is that ALL VPNs require logging at least some user data.

Think about it.

How can a VPN provider limit the number of simultaneous devices connecting to the service? You have to store connection activity in order to enforce those limits.

Even if a VPN provider did not store user data, it’s quite possible that the owners of the third party servers leased by the VPN providers do.

A look at any VPN privacy policy statements also reveal conflicting messages regarding logging. Let’s pick on another popular VPN service for a moment: Astrill. Here’s what you’ll read in their FAQ page:

The Astrill VPN log policy says they don't store any information or keep logs.

Yet when you look further down the FAQs on the same page, there is a contradiction in the Astrill VPN logging policy that states:

Astrill also states they try to keep as less personal information as possible.

So which is it? Do they keep logs or not?

I’m picking on Astrill here (I still like them, for the record), but the same story could be shared for pretty much every single VPN service out there.

You shouldn’t be asking yourself “Does my VPN log data?”.

No.

There are two much better questions you should be asking.

Passwords paradise with Dashlane

Two Key Questions to Ask About a VPN

Instead of asking whether or not your VPN provider logs data, instead you should be concerned about two more important questions:

  1. What exactly does my VPN service log about me and my usage?
  2. How long do they keep those logs on file?

VPNs generally log user source IP addresses, VPN IP addresses, connection start and stop times along with the number of bytes used to track bandwidth.

The reason for this often has to do with customer support. In order to help people, they need to be able to generally see what they’re doing.

Protect yourself from identity theft
Try Hushmail to secure your business email

What’s scary, though, is that some VPN logs store a lot more data about you than you might imagine. This is particularly true of those pesky free VPNs, who often log things like:

  • Websites visited
  • Files downloaded
  • Software, device or VPN connection protocols used (e.g. Netflix, Xbox, Bittorent, etc.)

VPNs that log this type of data are the ones you want to avoid.

Therefore, rather than looking for a VPN service that keeps no data logs – because there isn’t a zero log VPN that does this – look for VPNs that keep minimal logs and are transparent about it.

How to Find a VPN’s REAL Data Logging Policy

To find the real VPN logging policies, start by reviewing a VPN company’s privacy policy page and/or scanning their FAQ page.

I picked on Astrill earlier, so I feel like I owe it to them in stating that they clearly mention on their FAQ page that they keep track of:

  • active sessions
  • connection time
  • IP address
  • device type, and
  • duration of VPN session.

They also promise to keep only a maximum of 20 records prior to deletion.

Quality VPNs should also have dedicated pages towards logging. On ExpressVPN’s website for example, (click here for my full review of ExpressVPN), you can see what information the provider does and does not collect. (Note: I do feel ExpressVPN could be a little more transparent on the information they log).

RELATED: These are the 10 most essential VPN features you’ll want!

An additional step would be to speak to customer support and ask them about their logging policy – although I doubt many people will go this far. If you do go this route, be sure to review the FAQ and privacy policy pages first.

If you still have doubts after this point, it’s best to sign-up for a different VPN.

VPN Logging | Bad for Privacy?

Most reviews that we read online claim that any type of user data stored by a VPN is bad for privacy.

But is logging really evil?

While you certainly want to avoid a VPN service that logs too much of your Internet activity (particularly those free VPNs), minimal logging can actually benefit your user experience.

Let’s start with the type of data you do NOT want your VPN provider to keep. This includes the following:

  • Keeping the content of your communications;
  • Keeping the websites that you visit;
  • Keeping the services you use;
  • Keeping your physical location;

Minimal data storage, on the other hand, documents your source IP address, VPN IP address, connection start and stop time and the total number of bytes used while using the service.

Secure your internet traffic with ExpressVPN
Passwords paradise

So how can minimal logging benefit you?

Generally, minimal logging helps VPN providers improve their service in terms of speed, network connections, and reliability. It also allows your VPN provider to troubleshoot any issues you encounter.

Other benefits to minimal logging include enhanced security in that VPN providers can use logs to spot spammers and DDOS.

After collecting minimal connection data, the best providers state how soon they remove or delete the data – usually within 30 days.

Final Thoughts | Killing the No Log VPN Myth

Always remember that a VPN marketing a no log policy is blowing a lot of hot air. It’s simply not true.

I’m tempted to recommend you to avoid any VPNs that claim they don’t log user data, but…

…that would pretty much eliminate all of them!

All VPNs log user data and the true question you should try to answer is what gets logged, what are the logs used for, and how long will they be on file.

I recommend you try out ExpressVPN and NordVPN, both of which offer advanced features in their software that give you control over how much data is logged.

Worth Reading:

  • Free VPN vs Paid VPN
    Free VPN vs Paid VPN - Which is Better & More Secure
  • How to spot a fake VPN
    Fake VPN | Why it's Dangerous & How to Spot Them

Reader Interactions

Comments

  1. Avatar for JoshJ says

    December 7, 2019 at 3:14 pm

    Another really solid tip is, even if it saves you money, don’t go with a VPN that just has the lowest cost-to-performance ratio. Go with the VPN that’s been in the news. if they’ve been documented giving information that’s help captured a criminal to the government, fuck ’em, if they’ve been documented being bothered by the government but ultimately gave them nothing, even in the most atrocious of crimes, that’s the one you wanna go with.

    That’s why I use Express, a Turkish government official was assassinated and then someone deleted evidence of it using their VPN and when the Turkish government came knocking on their door they just told them: “We don’t keep logs, we have nothing to give you”. They’re one of the few that have been tried, tested, and passed the test.

Primary Sidebar

Check your password with this password checker by All Things Secured

Recommended VPNs

Surfshark Logo Mark Surfshark VPN (Best Value)
ExpressVPN Logo Mark ExpressVPN (Best Overall)
NordVPN logo mark NordVPN (Best Design)
IPVanish Logo mark IPVanish (Best for USA)

Recommended Password Managers

1Password Logo Mark 1Password (Best for Individuals)
Dashlane Logo Mark Dashlane (Best for Businesses)
Bitwarden Logo Mark Bitwarden (Best Free Option)

Best Secure Email Providers

ProtonMail Logo Mark ProtonMail (Best Gmail Alternative)
Hushamil Logo Mark HushMail (HIPAA Compliant Email)
Tutanota Logo Mark Tutanota (Best Limited Free Option)

Best Identity Theft Protection

IdentityForce recommended credit monitoring service IdentityForce (Recommended Service)
LifeLock Logo Mark LifeLock (Extra Norton Protection)

© 2021 All Things Secured
 · Affiliate Disclaimer 
· Privacy Policy
 · Advertise
 · Contact