Quick answer: HMA VPN (formerly HideMyAss) is still sold in October 2026. It is part of Gen Digital, the company behind Norton and Avast, and its privacy policy names Avast Software s.r.o. in Prague as the data controller. HMA now has a no-logs policy that was reviewed by the security firm VerSprite in 2020. That follows a 2011 case in which its logs helped the FBI identify a hacker. The service covers 5 or 10 devices and offers a 7-day free trial and a 30-day money-back guarantee.
HMA, short for HideMyAss, began in the UK and became known for its blunt name and its slogan “More VPN for your money”. It has since dropped the full name from its branding. This review describes HMA from its own website, its privacy policy and published reporting. We have not tested the service ourselves. An earlier version of this article quoted streaming results from unnamed users, including which services HMA could and could not unblock. We have removed those results because they could not be sourced and streaming access changes often.
Is HMA strong enough to compete with services such as CyberGhost, NordVPN or ExpressVPN? The sections below set out the facts you can check.
Who owns HMA?
- Parent company: Avast bought HMA in 2015. Avast merged with NortonLifeLock in 2022, and the combined company is now Gen Digital (“Gen”).
- Data controller: HMA’s privacy policy says HMA is part of Gen and that the controller of your personal data is Avast Software s.r.o., based in Prague, Czech Republic.
- Jurisdiction: The original article described HMA as a UK firm. Today the data controller is a Czech company, which puts it under EU data-protection law, and data is shared within the Gen Digital group, including with the US parent.
The 2011 logging controversy
HMA’s past matters to many buyers, so it is worth stating plainly. In 2011, the FBI arrested Cody Kretsinger, a member of the LulzSec hacking group, over the Sony Pictures hack. Reports at the time said investigators traced him partly through logs that HMA kept and handed over after a UK court order. HMA then stored connection timestamps and IP addresses for VPN users.
HMA later rewrote its policy, and the current version is described below. The episode shows why it matters what a VPN logs, and not just what it promises.
Logging and privacy today
HMA’s current privacy policy lists what it says its VPN does not collect:
- your originating IP address;
- DNS queries made while connected;
- browsing history;
- the content of data you download or upload.
It does collect some service data. This includes the total amount of data transmitted, which it keeps for 18 months for network planning and abuse prevention, and app connection events that it says are not paired with individual users.
The original article said HMA logged connection timestamps and part of your IP address for each session. That described the policy in force in 2020; the current policy is different. In 2020, HMA announced that the security firm VerSprite had reviewed its no-logs set-up and rated the privacy risk as low. The full VerSprite report is not public, so readers cannot check its scope in detail.
Features HMA documents today
- Network: HMA’s website lists more than 3,400 servers in over 100 locations across 65+ countries. The original article quoted servers in more than 190 countries; that figure is out of date.
- Lightning Connect: connects you to a fast server automatically. This was the headline feature of HMA’s version 5 apps when this article was first written.
- Kill switch and split tunnelling: listed on HMA’s pricing page.
- Streaming and P2P: HMA says its servers are optimised for streaming and P2P connections. Streaming platforms block VPN servers from time to time, so treat this as “may work”.
- Encryption: HMA says it uses 256-bit AES encryption and the OpenVPN protocol.
- Apps: Windows, macOS, iOS, Android and Android TV, with Linux and router set-up guides.
Pricing (as of October 2026)
As of October 2026, per HMA’s pricing page (US dollars; prices shown in India may differ):
- Plans run for 12, 24 or 36 months, covering either 5 or 10 devices. A 10-device household plan is sold as the Family Plan.
- The lowest price shown was $2.99 a month on a 36-month plan, billed $107.64 up front. A 12-month plan was shown at $4.99 a month ($59.88 for the first year). These are introductory offers.
- A 7-day free trial was offered, with $0 charged at checkout. The trial turns into a paid plan unless you cancel.
- HMA offers a 30-day money-back guarantee.
No monthly plan was shown on the pricing page. That matches the original article’s complaint that the minimum term is effectively a year. The 2020 prices in the original article ($11.99 a month, $3.99 over three years, and business plans from about $13) have been removed. HMA still sells business plans; check its business page for current terms.
Pros and cons
Pros
- Published no-logs policy that lists what is and is not collected.
- No-logs set-up reviewed by VerSprite in 2020.
- Apps for the main platforms, with a kill switch and split tunnelling.
- 7-day free trial and 30-day money-back guarantee.
- 5 or 10 simultaneous devices depending on the plan.
Cons
- History: logs were handed to investigators in 2011, under an older policy.
- No month-to-month plan on the pricing page.
- Owned by a large security group, with data shared inside that group as its privacy policy describes.
- The VerSprite audit is from 2020 and the full report is not public.
VPN legality varies by country. In India, the Indian Computer Emergency Response Team (CERT-In) issued directions in April 2022 requiring VPN providers to keep customer records for five years, and several large providers removed their physical servers from India. Check how your provider handles Indian locations if that matters to you. For other options, see our list of VPN software for Windows.
Frequently asked questions
Is HideMyAss the same as HMA?
Yes. HMA is the shortened brand of HideMyAss. The same service is now sold as HMA VPN.
Who owns HMA VPN?
Gen Digital, through Avast. HMA’s privacy policy names Avast Software s.r.o. in Prague as the data controller.
Does HMA keep logs?
HMA says it does not record your originating IP address, DNS queries, browsing history or transferred content. It does keep the total amount of data you transmit for 18 months, along with some app diagnostic events.
Does HMA have a free trial?
Yes. HMA’s pricing page offered a 7-day free trial in October 2026, plus a 30-day money-back guarantee on paid plans.
How many devices can I use with HMA?
Five on a standard plan, or 10 on the Family Plan, according to HMA’s website.
Checked in October 2026 against HMA’s pricing page, homepage and privacy policy, and reporting on the 2011 LulzSec case and the 2020 VerSprite review. We have not tested HMA ourselves, so confirm current prices and terms on HMA’s website before you buy.
