RiseUp VPN Review (2026)

Quick answer

RiseUp VPN is free, run by a Seattle activist collective, and asks you for nothing, not even an email address. It is also one of the lowest-scoring VPNs we track, at 2.64. Both things are true, and they are not the contradiction they look like. RiseUp was never built to be a consumer VPN. It is a privacy tool made by and for activists, and judged on that job it is trustworthy and limited in roughly equal measure. If you want to stream or choose from thousands of servers, it is the wrong tool, and a paid provider will serve you better.

Who runs RiseUp VPN

RiseUp VPN comes from Riseup, a tech collective in Seattle that has built free communication tools for activists since 1999 (Riseup). It runs on donations, not subscriptions or advertising, which is the first thing that separates it from almost every other name in this market. There is no company, no investors, no growth target. The people who run the VPN are the same people who run encrypted email and mailing lists for protest movements and labour organisers.

That alignment matters more than it sounds. A commercial VPN earns money from you, so over time its interests and yours can drift apart in the parts of the privacy policy nobody reads. Riseup earns nothing from you. Its only incentive is the mission, which is the cleanest alignment you can ask for. It is also the source of its fragility, because a collective funded by donations has none of the legal armour a Swiss company can pay for.

Is RiseUp VPN safe?

There is a real test case here rather than a hypothetical, and it is the reason this question keeps getting asked.

In November 2016, the warrant canary on Riseup's site quietly stopped being updated. A warrant canary is a short published line saying, in effect, "we have not been served with a secret warrant." The point of it is a gap in the law: a court can force you to stay silent about a warrant, but it cannot easily force you to keep publishing a statement you know to be false. So when the canary goes stale, the people watching it draw the obvious conclusion.

In February 2017, after exhausting its legal options, Riseup confirmed what the silence had implied. It had received two sealed FBI warrants and a gag order, and it had complied, because the alternative was contempt of court, jail for its staff, and the end of the organisation (Riseup canary statement; The Inquirer). The two accounts were not activists. One was the contact address for a DDoS extortion ring, the other an account running ransomware.

Read honestly, that cuts both ways, which is exactly why it is worth telling. Riseup sits in the United States, inside the reach of sealed federal warrants and gag orders, and when it was pushed to the wall it handed over what it was ordered to. No promise on a website survives a judge. But look at what it handed over, and what it could not. The warrants named specific criminal accounts, not a sweep of its users, and afterwards Riseup rebuilt its email storage so that even its own administrators cannot read message contents, then narrowed the canary to events that genuinely threaten users (Vice).

For the VPN the sum is gentler still, because the VPN holds far less than the email service ever did. There is no account to seize. RiseUp asks for no name, no email and no payment, so the data a future warrant could reach is close to nothing by design (Riseup VPN). That is the real answer to "is it safe." Not "trust the no-logs promise," which every provider makes and almost none can prove, but "they have deleted most of what a court could force them to hand over." That is a stronger position than a promise. It is a weaker one than Swiss or Swedish jurisdiction would give you, and you should hold both of those thoughts at once.

What RiseUp VPN actually gives you

Not much, and some of that is deliberate. There is no account and no signup. You install the app, which is built on the open-source Bitmask and LEAP code, and you connect. It is free, with no paid tier hovering above the free one to upsell you.

What you give up is everything a paid VPN competes on. The server list is short, so you cannot shop around for a country the way a large network lets you. Speeds are modest. It will not reliably unblock streaming services, and it has never claimed it would. There is no support desk, because there is no company to staff one. This is why it sits at 2.64 in our matrix. The score rewards platform breadth, streaming, dedicated IPs and the rest, and RiseUp has almost none of them, while it scores full marks on the criteria its makers actually care about, transparency, independence and ethics (methodology). The number is fair. It is also measuring a race RiseUp never entered.

Who should use RiseUp VPN

Use RiseUp if you want a free, no-strings VPN from people whose record on privacy is longer and more tested than almost anyone now selling one, and your main need is to protect a connection on a hostile network rather than to stream or hop between exotic locations. For an activist, a journalist on no budget, or anyone who simply will not hand a company their email just to get a VPN, it is a genuinely good answer, and the price is right.

Choose a paid provider if you want streaming, speed, a large network, apps on every device, and someone to contact when it breaks. On our evidence NordVPN leads on raw score, and Proton VPN pairs a strong audited Swiss no-logs record with the kind of jurisdiction RiseUp, sitting in the US, cannot offer. Both are disclosed affiliate partners, and that disclosure is the reason you can trust the ranking, which is computed from evidence rather than from who pays us. You can weigh every provider we grade in our comparison tool.

The only real mistake is to ask RiseUp to be something it refuses to be. Judge it as a free tool from an activist collective and it is one of the most trustworthy things in that small category. Judge it as a Netflix machine and it will lose to providers that cost money and would quite like yours.

Frequently asked questions