Overview
Cock.li is a free, no-KYC email hosting service that has been operational since 2013, carving out a niche for users who want email access without linking it to real-world identity. The platform now serves over one million users and has built a reputation as a deliberately unprofessional alternative to surveillance-centric providers like Gmail or Outlook. Its branding is crude, its terms are blunt, and its admin team makes no pretense of corporate polish, but the service functions as a genuine, open-source email host with IMAP, POP, and XMPP support. Users can register with nothing more than a username and password, making it one of the more accessible anonymous email options still standing in 2026.
The project is small-team operated, funded by donations rather than advertising or data monetization. It offers a custom webmail client, maintains its own server hardware, and provides Tor hidden services for users seeking additional network-layer anonymity. That said, the service's irreverent tone and occasional reliability issues have made it polarizing in privacy communities.
Privacy & KYC
Cock.li operates at KYC tier L1, fully anonymous or pseudonymous. No personal information is required to register, and the service explicitly states it will never ask users to verify their identity. This makes it attractive to journalists, activists, researchers, and ordinary users seeking to compartmentalize their online communications.
However, the privacy picture is more complicated than the signup process suggests. Cock.li's own privacy policy, last updated in April 2025, discloses retention of:
- Registration details: email address, hashed password, IP address, user agent, timestamps
- 48–72 hours of IMAP and SMTP connection logs, including IP addresses and login outcomes
- HTTP access logs with IP, user agent, and request metadata
- Mail storage contents, filters, and XMPP buddy rosters
The admin acknowledges that while they do not read or scan email content, any provider could, and they offer no cryptographic guarantee otherwise. They recommend X.509 or GPG encryption with correspondents, plus regular download-and-deletion of mail from their servers. Notably, the service lacks DMARC configuration according to community analysis, and the privacy score of 0/100 reflects these logging practices and the fundamental trust requirement placed in a single operator.
Supported assets & payments
Cock.li is free to use, with no tiered pricing or premium accounts. The project sustains itself through donations, and the donation page accepts multiple privacy-preserving payment methods. Users can contribute via Monero, Bitcoin, Lightning Network, traditional fiat channels, or physical cash by mail. This range aligns well with the service's no-KYC ethos, Monero in particular offers donors a way to fund infrastructure without creating a financial paper trail. There are no fees for standard usage, no storage upsells, and no indication that donation status affects account functionality.
Security & custody
Cock.li operates a custodial model: your mail resides on their servers, encrypted at rest with keys they control. The admin is transparent about this limitation, noting that even providers advertising "encrypted email" receive messages in plaintext before re-encrypting, leaving a window for interception. Their honest assessment is refreshing, but it underscores that Cock.li is not a zero-knowledge architecture.
Security features include valid HTTPS with Let's Encrypt certificates, Tor hidden services for webmail and mail protocols, and open-source code. The service maintains a warrant canary and transparency page, though these are not frequently updated. Password resets are not available, lose your password and your account is unrecoverable. This is a deliberate anti-support burden measure, but it places full custody responsibility on the user. Community reports cite inconsistent uptime and effectively nonexistent customer support, with the admin themselves joking that support may be handled by "aliens, intoxicated aliens, or wild animals."
Who it's for, verdict
Cock.li suits users who prioritize anonymity over sophistication and understand the trade-offs of a small, ideologically driven operation. It is ideal for throwaway accounts, newsletter signups, forum registrations, and other use cases where linking an email to your real identity creates unacceptable risk. The no-KYC signup, Tor integration, and Monero donation option form a coherent privacy stack for the pseudonymous internet.
It is not for users needing guaranteed uptime, professional support, or advanced security hardening. The logging of IP addresses and connection metadata, combined with the lack of end-to-end encryption by default, means sensitive communications should use GPG or move to a more hardened platform. With an overall score of 7/10, Cock.li earns its place in the no-KYC directory as a functional, if imperfect, tool for identity-segregated email, provided users bring their own operational security and keep expectations grounded in the project's deliberately anti-corporate reality.
