A VPN that never has to know who you are
Veilway keeps paying and connecting apart. This portal holds your subscription. The coordinator that hands your client an exit only ever sees an anonymous, single-use token, never your account.
How the privacy actually works
Not a promise on a marketing page. A split between two services that each hold a different half of the picture.
Unlinkable access tokens
Your client mints blinded VOPRF tokens here. The coordinator verifies one, spends it against a double-spend set, and assigns an exit. It never learns which account the token came from.
No per-request logs
The coordinator's anonymous path runs with request tracing switched off by design, and publishes aggregate counters only. There is no per-session record to hand over, because none is written.
Rendezvous over Veilid
Clients meet exits through Veilid's distributed hash table instead of dialling a published gateway, so there is no single front door to watch, block, or subpoena.
Pay without a card
Redeem a prepaid code and no payment method is ever attached to your account. Codes are stored as a SHA-256 hash, so even we cannot reproduce the one you used.
Devices you control
Enrolled daemons refresh their session without storing your password. Every one of them is listed in your account with its last-used time, and one click revokes it everywhere.
Checkable claims
A PGP-signed warrant canary with a freshness anchor, a published disclosure policy, and per-region fleet health on a public status page. Verify them yourself rather than taking our word.
Two plans, one privacy model
Both plans run through the same unlinkable token path. Pick one at the checkout, where the current price is shown before you pay.
Basic
monthlyPlus
monthlyPrepaid
no cardEvery plan includes
- Blinded VOPRF session tokens, rate-limited per account and single-use at the coordinator
- Exits across multiple regions, with per-region health published openly
- Device enrolment with revocable refresh tokens, so no daemon stores your password
- Desktop and Android clients built from the same open source tree
Your account
A username and password are all it takes. Email is optional.
Lost your password? A recovery code issued at signup is the only reset path, by design: we hold no email you have not given us.
An email address is optional. A one-time recovery code is shown right after signup. Save it then, because it is never shown again.
Subscription
Checking your subscription…
Redeem a prepaid code
Extends your current window rather than replacing it, so redeeming early never costs you days.
Subscribe with a card
Opens Stripe Checkout in a new tab. The current price is shown there before you confirm.
Devices
Enrolled daemons that can refresh a session without re-entering your password. Revoke anything you do not recognise.
Session
Your bearer token lives in this browser's local storage. Logging out clears it here; clear site data to drop it everywhere this browser is signed in.