A WireGuard VPN built on zero-trust principles.
No email. No name. No password. Pay in crypto, get a sixteen-character
account number, and route your traffic through a three-country mesh that doesn't know you.
No email, no card, no name — 7 free days get
the same anonymous token a paying customer gets. Just want to read one page?
try the free proxy, our page reader. It covers one browser tab
and is not the VPN.
◆ NO LOGS◆ NO EMAIL REQUIRED◆ BITCOIN ACCEPTED◆ OPEN-SOURCE CLIENT◆ WIREGUARD PROTOCOL◆ ZERO-TRUST MESH◆ WARRANT CANARY UPDATED◆ NO LOGS◆ NO EMAIL REQUIRED◆ BITCOIN ACCEPTED◆ OPEN-SOURCE CLIENT◆ WIREGUARD PROTOCOL◆ ZERO-TRUST MESH◆ WARRANT CANARY UPDATED
§ 01 · Operating Principles
We can't hand over what we never collected.
→ 01
No identity.
Accounts are random sixteen-character tokens. No email, no phone, no name. The token is the credential. Lose it, you lose access. We can't reset it because we don't know who you are.
→ 02
No logs.
Connection metadata is discarded at session close. Traffic content is never inspected. Diskless servers run from RAM and reset on reboot. Audited yearly by independent firms.
→ 03
No trust.
Zero-trust mesh routing means every hop authenticates every packet. No entry node sees both you and your destination. Peer rotation is automatic and key material is ephemeral.
→ 04
Crypto first.
Bitcoin. No name, no email, no account with anyone
— but Bitcoin is pseudonymous, not anonymous: every payment is on a
public chain forever, and if the coins came from an exchange that knows
you, that link exists whatever we do. A fresh address per invoice is
the most we can do from our side. Cards are available where the
operator has enabled them, and they are not private at all:
the processor learns who you are and that you bought a VPN.
What that means →
→ 05
Open client.
The client is open-source and reproducibly built. It uses the WireGuard kernel module or the userspace implementation. Verify everything; trust nothing. Including us.
→ 06
Plain price.
Five dollars per month, paid in any supported coin at current market rate. No upsells, no tiers, no "premium." One price for everyone, forever, until it isn't.
§ 02 · How it works
Sixty seconds from first click to first packet.
i.
Generate an account
Click the button. We mint a fresh UUID-derived token. Write it down. It's the only way back.
ii.
Pay in crypto
Send Bitcoin to the address shown. It activates
once the payment is confirmed on-chain — typically ten to twenty
minutes.
iii.
Download the client
Available for Linux, macOS, Windows and Android. On iOS, and with any other WireGuard client, export a config instead — same tunnel, same keys.
iv.
Enter your token, connect
The client pulls your peer config from any mesh node. Connect. Traffic now travels the encrypted mesh.
We deliberately run only three nodes, in three countries, all
outside the Five Eyes, Nine Eyes, and Fourteen Eyes intelligence-
sharing alliances. Fewer locations means more scrutiny on each
one. Each box is a RAM-only ephemeral instance — disk is tmpfs,
swap is off, keys regenerate on every reboot.
🇨🇭
Switzerland
zur · Zurich
Outside all Five/Nine/Fourteen Eyes alliances
Constitutional right to telecommunications privacy (Article 13)
Strong data-protection law (revFADP, 2023)
Federal Supreme Court has repeatedly ruled against blanket retention
🇮🇸
Iceland
rey · Reykjavik
Outside all Eyes alliances; not in EU
IMMI (Icelandic Modern Media Initiative) baseline
No mandatory data retention regime for ISPs or hosts
Strong source-protection law (Act 38/2011)
🇷🇴
Romania
buc · Bucharest
Outside all Eyes alliances
Constitutional Court struck down EU data retention directive (2014)
No general comms-data retention law currently in force
Long-standing privacy-VPN industry presence; well-understood regime
What we explicitly don't do. No exit nodes in any
Eyes country. No servers in the United States, United Kingdom,
Canada, Australia, New Zealand, Germany, France, Netherlands,
Denmark, Belgium, Italy, Spain, Sweden, or Norway. Not for
latency, not for redundancy, not for any reason.
§ 04 · Apps
One token, every device.
Same warm-dark interface across every platform. Open-source,
reproducible builds, PGP-signed releases — verifiable before you
run them. Linux gets a .deb and an AppImage; Windows gets an MSI;
Android gets an APK you download from here; macOS uses the universal
binary. iOS connects via the official WireGuard app using a QR
exported from any other client.
127.0.0.1:51827
0trustvpn
Connected
multi-hop · zur → buc · rotates in 17h
ROUTING
EntryZUR Zurich, CH
ExitBUC Bucharest, RO
Modemulti-hop
ACCOUNT
Token7K2M-****-J3WN
Expires89 days
Devices2 / 8
Desktop · Linux · macOS · Windows Browser GUI on 127.0.0.1 · also runs as a CLI
9:41●●● WiFi 100%
0trustvpn
Connected
multi-hop · zur → buc
ROUTING
EntryZUR · Zurich, CH
Multi-hop
ExitBUC · Bucharest
ACCOUNT
Expires89 days
Devices2 / 8
Android · 8.0+ (Oreo) · arm64 + armv7 direct APK · not on Play or F-Droid
iOS: use 0trust export from any desktop client to generate a QR code; scan it with the official WireGuard app from the App Store. Same tunnel, official tooling.
§ 05 · Pricing
One price. No exceptions.
$5/ month
Unlimited bandwidth, no throttling
Up to 8 simultaneous devices
3 jurisdictions outside Five/Nine/Fourteen Eyes
WireGuard protocol — kernel & userspace
30-day refund — ask with your invoice ID, no reason needed
PAID IN BITCOIN
Generate an account.
→ STEP 1 OF 3 · CHOOSE TERM
Pick a duration. Add more time later by topping up the same account.
1
month
$5
3
months
$13
save $2
12
months
$48
save $12
→ STEP 2 OF 3 · YOUR ACCOUNT NUMBER
This is your only credential. There is no email recovery, no password reset, no support that can find it for you.
—
Account token · keep safe
Write this down. Save it in a password manager, on paper, anywhere offline. If you lose it, your subscription becomes inaccessible. We designed it this way on purpose.
→ STEP 3 OF 3 · PAY IN CRYPTO
Send the exact amount to the address below. The account activates once the payment is confirmed on-chain — the status line below says how many confirmations this coin needs.
THIS PAGE UPDATES ITSELF WHEN THE PAYMENT IS SEEN.
CLOSING IT DOES NOT CANCEL THE INVOICE — THE ACCOUNT
ACTIVATES ON ITS OWN.
KEEP THE TOKEN FROM STEP 2; IT IS ALL YOU NEED.