Overview
RiseupVPN is the VPN arm of Riseup, a Seattle-based activist collective that has operated privacy-focused communication tools since the late 1990s. Unlike commercial VPNs built around subscription revenue, RiseupVPN runs as a 501(c)(4) nonprofit experiment: entirely free to use, sustained by user donations, and designed to prove that a no-KYC, no-account VPN can remain viable. The service targets activists, journalists, and everyday users who need censorship circumvention and traffic encryption without handing over identity documents or even an email address.
The VPN uses the LEAP Encryption Access Project's open-source Bitmask client, rebranded as RiseupVPN, with native apps for GNU/Linux, macOS, Windows, and Android. There is no iOS client, though iOS users can fall back to WireGuard or other standard protocols. The infrastructure spans five locations, Seattle, Miami, Montreal, New York (via Calyx), and France, giving users a modest but strategically placed network for bypassing regional blocks.
Privacy & KYC
RiseupVPN sits at KYC Tier L1, Anonymous, the most permissive level on our scale. There is no registration, no username, no password, and no email requirement. You download the client, connect, and route traffic immediately. This pseudonymous model is rare among VPNs; even many "no-logs" competitors still demand payment details or email verification at signup.
The collective's privacy policy explicitly states that Riseup does not log IP addresses for VPN connections. This is not merely a marketing claim, it is baked into the architecture. Without accounts, there is no user database to correlate against connection timestamps. The policy does note that email services (separate from VPN) retain minimal metadata, but VPN users generate no comparable trail. Session identifiers are temporary and erased on disconnect.
- No personal data collected at any stage
- No IP logging for VPN sessions
- No third-party cookies or tracking embedded in client software
- Tor bootstrap available via Snowflake for users in heavily censored regions
However, the service is US-based, which places it within Five Eyes jurisdiction. The collective has a history of fighting subpoenas for email user data, but VPN users seeking maximum geopolitical neutrality may weigh this factor. The experimental, donation-dependent funding model also creates sustainability uncertainty, if donations dry up, the infrastructure could shrink without warning.
Supported assets & payments
RiseupVPN is free to use, but the collective actively solicits donations to cover approximately $60 USD per person per year in operating costs. Payment methods are unusually privacy-friendly for a US nonprofit. Donors can contribute via Monero, Bitcoin, and Lightning Network, alongside conventional options like credit/debit card (through Liberapay), PayPal, Euro bank direct debit, and even cash by mail. The cryptocurrency addresses are published directly on the VPN donation page, with a Bitcoin address of 3LBqFZpv397VEyDeZo3oneTK1qgJ8hsqvJ listed for transparent verification.
This multi-asset approach lets privacy-conscious users fund the service without linking their identity to their contribution. The collective explicitly warns that donating through generic Riseup pages rather than the VPN-specific portal prevents them from attributing funds to VPN sustainability, so donors should use the designated links.
Security & custody
RiseupVPN operates as a self-custodial privacy tool in the sense that users retain full control over their client and keys. The LEAP/bitmask client is open source and has been publicly auditable for roughly a decade, with repositories on GitLab covering desktop and Android builds. Transparency extends to the collective's warrant canary, published separately, though VPN-specific canary details are less granular than those for email services.
Technical security features include:
- Automatic kill switch on desktop clients (all traffic blocked when VPN drops)
- System tray indicator showing connection state in real time
- Tor split-tunneling in development (WIP merge request as of recent codebase review)
- Snowflake/Tor bootstrap for users whose ISPs block standard VPN protocols
The client defaults to automatic server selection, which simplifies use but removes granular control from advanced users. There is no manual server switching within the GUI, no multi-hop routing, and no obfuscation beyond what the LEAP libraries provide. Speed reports from community testers range from 40–120 Mbps, adequate for streaming and general browsing but not competitive with premium tier-1 networks.
Who it's for, verdict
RiseupVPN earns its niche as a no-KYC, no-signup privacy VPN for users who prioritize ideological alignment and zero identity friction over feature depth. It suits activists, journalists in hostile regions, and casual users seeking basic censorship circumvention without funding surveillance capitalism. The open-source stack, Tor compatibility, and cryptocurrency donation pipeline reinforce its credibility among the privacy-conscious.
That said, the overall score of 7/10 reflects real limitations: a small server fleet, no iOS support, US jurisdiction, and an unsustainable-if-generous funding model. Users needing guaranteed uptime, dedicated streaming support, or audited no-logs certifications from third parties should look elsewhere. For everyone else willing to donate and tolerate occasional rough edges, RiseupVPN delivers genuinely anonymous access without the usual account-creation ritual.
