Is Hide.me safe? A Malaysian no-logs VPN with thin security disclosures
Privacy and jurisdiction 5.0/10 and security 2.5/10 (segment medians 2.7 and 2.1). No red flag in our data. Independent no-logs audit: ✓ Yes.
In 10 seconds
- Independent no-logs audit: ✓ Yes
- Kill switch
Privacy
- Jurisdiction
- Malaysia, alliance not disclosed
- Legal entity
- eVenture Limited (reg. LL09685)
- No-logs policy
- Yes No Logs in plan comparison
What the privacy policy says is collected
Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.
- EmailNot stated
- IP at sign-upNot stated
- Connection IP✓ No
- Session times✓ No
- BandwidthNot stated
- Device infoNot stated
- App analyticsNot stated
- Crash reportsNot stated
Security
- Kill switch
- Yes (yes (off by default) (review))
- DNS leak protection
- Not stated
- Two-factor sign-in
- Not stated
Yes, Hide.me is safe for everyday privacy on the published record: eVenture Limited runs it under Malaysian law, the policy stores neither your connection IP nor your session times, outside auditors have checked the no-logs claim, and the site data records no red flag and no public security incident. The weak side is disclosure: most server and app protections go unstated, and the kill switch arrives switched off.
eVenture Limited and the Labuan jurisdiction
The owner is eVenture Limited, registration number LL09685, on the register in Labuan, Malaysia, with an office in the Main Office Tower, Financial Park Labuan. Malaysian law would govern any demand for user data. The data lists no parent group, so records have no sister brand to travel to. One gap: Malaysia's surveillance alliance status is not recorded, which costs 2 privacy points without proving anything bad. Hide.me also publishes no warrant canary and no transparency report, so nothing signals publicly how often authorities come knocking.
What the policy keeps away from your sessions
The official legal page carries the privacy section behind these claims: no VPN session logs and no connection logs or timestamps matching incoming and outgoing IP.
| Item | What the site data shows |
|---|---|
| Connection IP | Not stored; no matching of incoming and outgoing IP |
| Session times | Not stored |
| No-logs claim | Stated in the plan comparison |
| Sign-up without an email | Not confirmed in the data |
| Login by account number | Not confirmed in the data |
Without an address and a session clock, nothing in the policy ties a VPN session to a person. The bottom rows cost 2 points because Hide.me publishes neither email-free sign-up nor a login by account number; the data never says an email is required.
What the no-logs audit covers, and what it misses
Hide.me reports several independent audits of its no-logs setup; that claim collects the full 3 privacy points. Our ranking of VPNs with an independent no-logs audit, where Hide.me sits 23rd of 37, tracks published claims; the auditor's name does not appear in our data, so the report itself is the place to verify. Two things remain untested: no court case or real incident has put the promise under legal pressure, and no separate audit of apps or infrastructure is published, the heaviest missing security item at 2 of 14 points.
Protocols, StealthGuard and a kill switch you must enable yourself
| Protection | Status in our record |
|---|---|
| Protocols | WireGuard, OpenVPN, IKEv2, SSTP, SoftEther; no in-house protocol (Bolt on Windows does not count) |
| Kill switch | Present, off by default |
| DNS leak protection | Not stated in the data |
| IPv6 | Supported |
| Obfuscation | StealthGuard, with SoftEther named for censored networks |
| RAM-only servers, open-source apps, 2FA, multi-hop, bug bounty | Not published |
Switch the kill switch on right after installing. If the tunnel drops on hotel Wi-Fi, that toggle is what keeps your real IP out of the clear; our ranking of VPNs with a kill switch compares VPNs that offer the feature, scored on security and privacy. Undeclared DNS leak protection leaves open whether lookups stay inside the tunnel by default. For censorship, StealthGuard and SoftEther give a basic route past light filtering; without VLESS Reality, Trojan, Shadowsocks or Hysteria2, strict national blocking is a long shot.
How privacy gets 5.0 while security sits at 2.5
Privacy and jurisdiction scores 5.0 against a 2.7 median, built on the clean policy and the audited claim. Security lands at 2.5, or 3.5 of 14 points, near the 2.1 median: only the kill switch (2 points) and WireGuard (1.5 points) earn marks there, while RAM-only servers, forward secrecy, open-source apps and two-factor sign-in all go unstated, and the missing infrastructure audit costs the most.
Red flags and the quieter weak spots
No red flag and no public security incident appear in the site data. Softer concerns remain: an auditor whose name the record omits, no warrant canary, unconfirmed DNS leak protection, and a kill switch left to the user's memory.
Hide.me safety questions
Is the free version of hide.me safe?
It runs under the same owner and the same no-logs claim. The limits are capacity ones: unlimited data but 8 locations, one device, restricted speed, no card required.
Where is hide.me based?
Labuan, Malaysia, under eVenture Limited.
Is hide.me safe on an iPhone?
A native iOS app exists; the data does not separate protections by platform.
Can hide.me get past VPN blocking?
Sometimes: StealthGuard and SoftEther help against lighter filtering, but the newer stealth tunnels are absent from the record.
Who can rely on Hide.me
On public Wi-Fi, for hiding traffic from your broadband provider and for casual privacy, Hide.me works with the kill switch on. If what you want is visible server hardening, an open-source client or a service that survives heavy censorship, pick one that publishes those things.