DuckDuckGo is a search engine and a mobile and desktop browser, but with a DuckDuckGo subscription, a VPN is also included. The company has always promised complete privacy under its VPN, but now it has the data to back it up. 

DuckDuckGo says its VPN underwent a "no-log policy audit" from the independent cybersecurity firm Securitum.

"Between October 2025 and January 2026, Securitum performed a deep-dive technical inspection, a source code review of proprietary components, and a live system analysis to verify that DuckDuckGo does not collect or retain user-identifiable data," the company announced Thursday. 

The results showed that DuckDuckGo doesn't track VPN browsing activity, and that the company's no-log policy is applied as promised. This means you can be confident that your private browsing is actually private. The full security report (PDF) was also shared.

A VPN, or virtual private network, hides your information while browsing and using the internet, and makes your data more secure. It also allows you to change your location as it appears to the sites and services you use, a feature often used to unlock content libraries around the world. Reputable VPN companies engage independent analysts to verify their privacy claims as a matter of good practice.

The DuckDuckGo subscription offers a competitively priced cybersecurity bundle that includes a VPN, identity theft protection, data removal service and more. The company's VPN previously went through a security audit in 2024, with retests in 2025 that confirmed the service had fixed all vulnerabilities of medium risk or higher. This new audit focused on the privacy practices of DuckDuckGo's VPN, which may make it more appealing to those who truly value their online privacy. 

To learn more about how VPN audits work, read our full explainer here.