Is Avast SecureLine VPN safe? Logs, audits and jurisdiction

In 10 seconds

Kill switch
Stores session times
Jurisdiction in 5 Eyes

Privacy

Jurisdiction: USA, 5 Eyes
Legal entity: Gen Digital Inc. (Avast)
No-logs policy: Partial don't log activity that could be traced back to you
Independent no-logs audit: Not stated
Data retention: connection events 12 mo; server/app data 18 mo; crash 90 days; account lifetime+2y
Shared with third parties: Google Firebase/Crashlytics; Singular; AppsFlyer
Trackers on the website: Yes cookie preferences; Do not sell

What the privacy policy says is collected

Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.

Email✕ Yes
IP at sign-upNot stated
Connection IP✓ No
Session times✕ Yes
Bandwidth✕ Yes
Device info✕ Yes
App analytics✕ Yes
Crash reports✕ Yes

Security

Kill switch: Yes
Encryption: AES-256
Open-source apps: No
Two-factor sign-in: Not stated

Connection security

Technically, Avast's connection is well protected: AES-256 encryption, a kill switch, DNS leak protection, a Double VPN mode, and a proprietary protocol for networks where VPNs are blocked. For this, the service gets 5 points out of 10, with a median of 2.5 for VPNs bundled with antivirus packages. There is also a vulnerability disclosure program. What's missing: open-source apps. Whether the service has passed an independent security audit, whether its servers run in RAM only, and whether two-factor authentication is available, Avast does not say.

What the service knows about you

The weak spot is privacy, with just 1 point out of 10. The policy's wording is cautious: Avast promises not to store activity that could be used to identify you, and that is more of a partial promise. The IP address you connect from is not collected, according to the policy. However, connection timestamps are kept for 12 months, traffic volume and app analytics for 18 months, and your email is kept for as long as your account exists, plus two years after you delete it. Session times together with traffic volume make it possible to reconstruct when and how much you used the VPN, even without an IP address. Avast does not say whether its no-logs policy has undergone an independent audit. You can compare it with verified services in the roundup VPNs with an audited no-logs policy.

Jurisdiction and government requests

The service is owned by Gen Digital Inc., a company based in the US, a 5 Eyes alliance country. How Avast responds to law enforcement requests is not stated in the VPN's policy, and the service says nothing about a transparency report either. There is no red flag for this service in our data. The VPN's policy was last updated on May 7, 2026.

Who is Avast for?

It is enough for protection on public Wi-Fi and everyday browsing. If it matters to you that the service keeps no connection history, choose a VPN with a verified no-logs policy.

Is Avast SecureLine VPN safe? Logging policy, audits and jurisdiction