Highest Safety grade
Windscribe
- Privacy
- 6.8
- Safety
- 8.1
- Open source
- No-logs policy
- Independent audit
Infrastructure · October 2026
An anonymous VPN is one you can buy and use without telling the provider who you are: no email address, no card on file, payment in Monero, Bitcoin or cash. The provider still sees your IP address when you connect, so what it logs, and whether anyone has checked, matters as much as how you paid.
This page grades VPNs on sign-up and payment privacy, published audits, open-source clients and ownership transparency. Providers that pay large affiliate commissions dominate most VPN rankings; the ones that score best here mostly pay none.
19 vpns usable without mandatory ID are listed and graded here. 10 have terms that rule out identity checks entirely. The highest Safety grade belongs to Windscribe (8.1/10), and the highest Privacy grade to Mullvad VPN (9.7/10). 9 accept Monero and 5 publish a Tor onion address.
Reflects the listings as of 22 Oct 2026.
Our picks
Highest Safety grade
Highest Privacy grade
Best that never asks for ID
Picked by rule from the recorded facts, not by payment. Compare Windscribe and Mullvad VPN side by side →
19 listed
Must have
Hide services that
| # | Service | KYC | Privacy | Safety | Evidence | Accepts | Incidents |
|---|---|---|---|---|---|---|---|
| 01 | Windscribe Open source Canadian VPN with open-source apps, a free tier and crypto payment | Not mentioned KYC 1 | 6.8 | 8.1 | Docs reviewed | ||
| 02 | Mullvad VPN Tor onion address Accepts Monero No account needed Open source Swedish VPN using numbered accounts; accepts cash by post and Monero | Never KYC 0 | 9.7 | 7.6 | Docs reviewed | BTCBCHXMR | |
| 03 | AzireVPN No account needed Swedish-founded VPN with no-email sign-up; now card and PayPal payment only | Not mentioned KYC 1 | 7.2 | 7.4 | Docs reviewed | ||
| 04 | Proton VPN Open source Swiss VPN with a free tier; paid plans payable in Bitcoin or cash | Not mentioned KYC 1 | 6.4 | 7.3 | Docs reviewed | BTC | |
| 05 | IVPN Accepts Monero No account needed Open source VPN with generated account IDs, no email, and cash, Monero or Bitcoin payment | Never KYC 0 | 9.4 | 7.2 | Docs reviewed | BTCXMR | |
| 06 | Amnezia VPN Open source Open-source VPN client for self-hosted servers, plus free and paid hosted VPN plans | Not mentioned KYC 1 | 6.9 | 7.2 | Docs reviewed | BTCETHUSDT +1 | |
| 07 | NymVPN Accepts Monero No account needed Open source Decentralised VPN with passphrase-only accounts and broad crypto payment | Never KYC 0 | 8.8 | 6.3 | Docs reviewed | BTCXMRLTC +3 | |
| 08 | Meile dVPN No account needed Open source Open-source desktop client for the Sentinel decentralized VPN network, paid in crypto | Never KYC 0 | 8.2 | 6.3 | Docs reviewed | P2PATOMOSMO +2 | |
| 09 | Sentinel dVPN No account needed Open source Open-source decentralized VPN network with on-chain sessions and independent nodes | Never KYC 0 | 7.8 | 6.3 | Docs reviewed | P2P | |
| 10 | Safing SPN Accepts Monero Open source Onion-routed privacy network built into the open-source Portmaster firewall | Not mentioned KYC 1 | 7.4 | 6.3 | Docs reviewed | BTCXMR | |
| 11 | Xeovo VPN Tor onion address Accepts Monero Finnish VPN with no-email sign-up; accepts cash, Monero, Bitcoin and Litecoin | Never KYC 0 | 8.9 | 6.1 | Docs reviewed | XMRBTCLTC | |
| 12 | cryptostorm Tor onion address No account needed Token-authenticated VPN with Tor and I2P mirrors and no customer accounts | Never KYC 0 | 8.7 | 6.0 | Docs reviewed | ||
| 13 | AirVPN Tor onion address Activist-founded VPN that asks for no personal information | Not mentioned KYC 1 | 6.8 | 6.0 | Docs reviewed | ||
| 14 | Obscura VPN Accepts Monero No account needed Open source Two-party VPN relaying through Mullvad exits; pay with Lightning or Monero | Never KYC 0 | 8.8 | 5.8 | Docs reviewed | BTCXMR | |
| 15 | RiseupVPN No account needed Open source Donation-funded VPN from the Riseup collective that needs no account | Never KYC 0 | 8.4 | 5.8 | Docs reviewed | BTC | |
| 16 | nVPN Accepts Monero No-log VPN with port forwarding and dedicated IPs; accepts Monero and Bitcoin | Not mentioned KYC 1 | 7.0 | 5.2 | Docs reviewed | BTCXMRLTC +3 | |
| 17 | Mysterium VPN Open source Subscription VPN that routes traffic through residential IP addresses | Not mentioned KYC 1 | 6.0 | 5.0 | Docs reviewed | ||
| 18 | uncensore.net Tor onion address Accepts Monero No account needed Xray-based anti-censorship VPN with generated account IDs, paid in crypto | Never KYC 0 | 8.9 | 4.6 | Docs reviewed | XMRUSDTUSDC +1 | |
| 19 | PonVPN Accepts Monero Low-cost VPN sold as configuration files for standard protocols, paid in crypto | Not mentioned KYC 1 | 6.8 | 4.6 | Docs reviewed | XMR |
Across all 19
The share of listed services that offer each feature, and that carry each warning in their terms. Select a row to see the services behind it.
How many offer
How many have this in their terms
Criteria
On record
low
Hack or exploit IVPN
IVPN reported that attackers used a BTCPay Server vulnerability disclosed on 7 August 2026 to extract its Lightning node credentials and move 0.6168 BTC of the company's operating funds. According to the company, its VPN systems were not involved, no customer data was accessed and no customer funds were lost. Lightning payments on its website were unavailable from 7 to 10 August and were then restored.
Funds lost Source: ivpn.net ↗
low
Other Mullvad VPN
Mullvad disclosed that it became aware on 15 May 2026 of a fingerprinting issue: a client reconnecting through a different server was likely to receive an exit address at the same relative position in that server's range, which could let an observer infer that the same user had moved between servers. The company said this does not reveal a user's identity and that a change in behaviour was being tested for rollout in the following weeks.
Outcome unknown Source: mullvad.net ↗
Providers that issue a random account number instead of asking for an email address. They are marked "Account-number login" on this page.
It hides your identity from the payment record. The provider still sees your IP address when you connect, so its logging policy and audits remain the main protection.
No. It hides your IP address from the services you connect to. It does not change what a public blockchain records.
Related categories