Mesh · 3 jurisdictions WireGuard · zero-trust v0.1

Encrypted mesh VPN.
Accounts. Trust.

A WireGuard VPN built on zero-trust principles. No email. No name. No password. Pay in crypto, get a sixteen-character account number, and route your traffic through a three-country mesh that doesn't know you.

Start a free week → How it works

No email, no card, no name — 7 free days get the same anonymous token a paying customer gets. Just want to read one page? try the free proxy, our page reader. It covers one browser tab and is not the VPN.

◆ NO LOGS ◆ NO EMAIL REQUIRED ◆ BITCOIN ACCEPTED ◆ OPEN-SOURCE CLIENT ◆ WIREGUARD PROTOCOL ◆ ZERO-TRUST MESH ◆ WARRANT CANARY UPDATED ◆ NO LOGS ◆ NO EMAIL REQUIRED ◆ BITCOIN ACCEPTED ◆ OPEN-SOURCE CLIENT ◆ WIREGUARD PROTOCOL ◆ ZERO-TRUST MESH ◆ WARRANT CANARY UPDATED
§ 01 · Operating Principles

We can't hand over what we
never collected.

→ 01

No identity.

Accounts are random sixteen-character tokens. No email, no phone, no name. The token is the credential. Lose it, you lose access. We can't reset it because we don't know who you are.

→ 02

No logs.

Connection metadata is discarded at session close. Traffic content is never inspected. Diskless servers run from RAM and reset on reboot. Audited yearly by independent firms.

→ 03

No trust.

Zero-trust mesh routing means every hop authenticates every packet. No entry node sees both you and your destination. Peer rotation is automatic and key material is ephemeral.

→ 04

Crypto first.

Bitcoin. No name, no email, no account with anyone — but Bitcoin is pseudonymous, not anonymous: every payment is on a public chain forever, and if the coins came from an exchange that knows you, that link exists whatever we do. A fresh address per invoice is the most we can do from our side. Cards are available where the operator has enabled them, and they are not private at all: the processor learns who you are and that you bought a VPN. What that means →

→ 05

Open client.

The client is open-source and reproducibly built. It uses the WireGuard kernel module or the userspace implementation. Verify everything; trust nothing. Including us.

→ 06

Plain price.

Five dollars per month, paid in any supported coin at current market rate. No upsells, no tiers, no "premium." One price for everyone, forever, until it isn't.

§ 02 · How it works

Sixty seconds from first click to first packet.

i.

Generate an account

Click the button. We mint a fresh UUID-derived token. Write it down. It's the only way back.

ii.

Pay in crypto

Send Bitcoin to the address shown. It activates once the payment is confirmed on-chain — typically ten to twenty minutes.

iii.

Download the client

Available for Linux, macOS, Windows and Android. On iOS, and with any other WireGuard client, export a config instead — same tunnel, same keys.

iv.

Enter your token, connect

The client pulls your peer config from any mesh node. Connect. Traffic now travels the encrypted mesh.

~/0trust — wg-mesh — 80×24
$ 0trust connect --token 7K2M-9X4P-AQ8R-J3WN
fetching peer manifest... [ok]
verifying mesh signatures... [ok]
selecting entry node by latency...
→ zur-01 28ms
→ rey-01 71ms
→ buc-01 46ms
establishing tunnel... [ok]
rotating ephemeral keys... [ok]

▸ mesh online
▸ entry: zur-01 (Zurich, CH)
▸ exit: buc-01 (Bucharest, RO)
▸ session: ephemeral

$ curl ifconfig.me
86.123.45.67

$
§ 03 · Where our servers live

Three countries.
Zero Eyes.

We deliberately run only three nodes, in three countries, all outside the Five Eyes, Nine Eyes, and Fourteen Eyes intelligence- sharing alliances. Fewer locations means more scrutiny on each one. Each box is a RAM-only ephemeral instance — disk is tmpfs, swap is off, keys regenerate on every reboot.

🇨🇭
Switzerland
zur · Zurich
  • Outside all Five/Nine/Fourteen Eyes alliances
  • Constitutional right to telecommunications privacy (Article 13)
  • Strong data-protection law (revFADP, 2023)
  • Federal Supreme Court has repeatedly ruled against blanket retention
🇮🇸
Iceland
rey · Reykjavik
  • Outside all Eyes alliances; not in EU
  • IMMI (Icelandic Modern Media Initiative) baseline
  • No mandatory data retention regime for ISPs or hosts
  • Strong source-protection law (Act 38/2011)
🇷🇴
Romania
buc · Bucharest
  • Outside all Eyes alliances
  • Constitutional Court struck down EU data retention directive (2014)
  • No general comms-data retention law currently in force
  • Long-standing privacy-VPN industry presence; well-understood regime
What we explicitly don't do. No exit nodes in any Eyes country. No servers in the United States, United Kingdom, Canada, Australia, New Zealand, Germany, France, Netherlands, Denmark, Belgium, Italy, Spain, Sweden, or Norway. Not for latency, not for redundancy, not for any reason.
§ 04 · Apps

One token,
every device.

Same warm-dark interface across every platform. Open-source, reproducible builds, PGP-signed releases — verifiable before you run them. Linux gets a .deb and an AppImage; Windows gets an MSI; Android gets an APK you download from here; macOS uses the universal binary. iOS connects via the official WireGuard app using a QR exported from any other client.

127.0.0.1:51827
0trustvpn
Connected
multi-hop · zur → buc · rotates in 17h
ROUTING
EntryZUR  Zurich, CH
ExitBUC  Bucharest, RO
Modemulti-hop
ACCOUNT
Token7K2M-****-J3WN
Expires89 days
Devices2 / 8
Desktop · Linux · macOS · Windows
Browser GUI on 127.0.0.1 · also runs as a CLI
9:41 ●●●  WiFi  100%
0trustvpn
Connected
multi-hop · zur → buc
ROUTING
Entry ZUR · Zurich, CH
Multi-hop
Exit BUC · Bucharest
ACCOUNT
Expires89 days
Devices2 / 8
Android · 8.0+ (Oreo) · arm64 + armv7
direct APK · not on Play or F-Droid
iOS: use 0trust export from any desktop client to generate a QR code; scan it with the official WireGuard app from the App Store. Same tunnel, official tooling.
§ 05 · Pricing

One price.
No exceptions.

$5/ month
  • Unlimited bandwidth, no throttling
  • Up to 8 simultaneous devices
  • 3 jurisdictions outside Five/Nine/Fourteen Eyes
  • WireGuard protocol — kernel & userspace
  • 30-day refund — ask with your invoice ID, no reason needed
PAID IN BITCOIN