Is TorGuard safe? Solid app protection, unverified no-logs promise
Privacy and jurisdiction 2.3/10 and security 3.6/10 (segment medians 2.7 and 2.1). No red flag in our data. Independent no-logs audit: ✕ No.
In 10 seconds
- Kill switch
- Jurisdiction in 5 Eyes
Privacy
- Jurisdiction
- USA, 5 Eyes
- Legal entity
- VPNetworks LLC
- No-logs policy
- Yes does not collect or log any data from its VPN or Proxy services
- Data retention
- Matomo 90 days; Apache logs regularly purged
- Shared with third parties
- payment processors only
- Trackers on the website
- self-hosted Matomo (masked IPs)
What the privacy policy says is collected
Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.
- Email✕ Yes
- IP at sign-upNot stated
- Connection IP✓ No
- Session timesNot stated
- BandwidthNot stated
- Device infoNot stated
- App analytics✓ No
- Crash reportsNot stated
Security
- Kill switch
- Yes (yes (full or per-app))
- DNS leak protection
- Yes (yes (IP leak protection, internal encrypted DNS))
- Encryption
- AES-256
- Security audits
- No
- Two-factor sign-in
- Not stated
Our data shows no public security incidents for TorGuard, and no red flags either. It handles connection protection well: a kill switch for all traffic or individual apps, protection against IP and DNS leaks through its own encrypted DNS, AES-256 encryption, WireGuard and OpenVPN. For security it scores 3.6 out of 10 against a segment median of 2.1. The weak spot is privacy: 2.3 against a median of 2.7.
Why privacy is rated low
The policy promises that the VPN and proxy collect and record no data at all. There is no way to verify this: there is no independent no-logs audit, and no security audit either. The company VPNetworks LLC is registered in the US, which is a 5 Eyes alliance member. The policy says nothing about how TorGuard responds to law enforcement requests, and there is no warrant canary or transparency report. For a jurisdiction like this, that is the main gap: the service gives you no way to confirm the promise holds up under a government request. The people and companies behind the brand are covered in who owns TorGuard.
What the service knows about you
Registration requires an email, so anonymity is only partial: you can pay with cryptocurrency or gift cards, but the email address stays in the account. According to the policy, the connecting IP and app analytics are not collected. The policy is silent about the IP at registration, session times and traffic volume. The website runs self-hosted Matomo analytics with masked visitor IPs, and that data is kept for 90 days.
Which services have passed a no-logs audit?
If you need a verified no-logs policy, see VPNs with a no-logs audit. TorGuard does not claim RAM-only servers, open-source apps or two-factor login.