The service is acceptable, but the uptime isn't great and support is nonexistent.
Cock.li
Communitycock.li
Free email service operational since 2013, with over 1 milion users worldwide, with great reputation.
Live preview
cock.li
Review
EditorialOverview
Cock.li is an independent email hosting project that has remained operational since 2013, carving out a niche as one of the few genuinely no-KYC communication services on the web. With over one million registered accounts, it offers standard IMAP and POP access alongside a newer webmail client, plus XMPP messaging through the same infrastructure. The project wears its irreverent branding openly, but behind the provocative name sits a principled stance against mandatory identity linkage and commercial data extraction. Unlike ad-supported platforms that monetize inbox content, Cock.li funds itself through donations and accepts payment in Monero, Bitcoin, Lightning, and even cash by mail.
The service is pitched explicitly to users who want email without feeding the surveillance state. Registration requires nothing more than choosing a username and password—no phone number, no government ID, no email verification loop. This makes it a rare functional option for journalists, activists, researchers, or ordinary privacy seekers who need a working address without creating a paper trail.
Privacy & KYC
Cock.li sits at KYC tier L1: fully anonymous and pseudonymous. The provider does not ask for legal names, addresses, or any government-issued identifiers at signup. Its own privacy policy, last updated in April 2025, states plainly that no personally identifiable information is required to register. Users who want maximum separation from their real identity are advised to connect through Tor or a VPN and follow basic operational security practices.
That said, the policy discloses that certain metadata is retained: registration IP address and user agent, session cookies, 48–72 hours of IMAP and SMTP connection logs, and standard HTTP access logs. Mail content itself is stored unencrypted on the server unless users independently apply X.509 or GPG encryption. The operator is transparent about this limitation, noting that no email provider can truthfully promise end-to-end protection of incoming plaintext messages because the server necessarily sees them first. For users willing to self-encrypt and regularly download or delete mail, the exposure window shrinks considerably.
- No identity verification required at any tier
- IP and user agent logged at registration and during sessions
- Short retention window for mail connection logs
- Recommends GPG or X.509 for content encryption
- Tor and VPN use explicitly encouraged
Supported assets & payments
Cock.li operates on a donation model rather than fixed subscription pricing. Contributors can send Monero, Bitcoin, Lightning Network payments, conventional fiat, or physical cash. This flexibility matters for privacy-conscious users: Monero and cash donations leave essentially no financial trail, while Lightning offers Bitcoin-scale settlement with reduced on-chain footprint. The absence of mandatory fees keeps the barrier to entry at zero, though reliance on voluntary funding partly explains the lean support structure.
Security & custody
There is no custodial crypto wallet here—Cock.li is an email and XMPP service, not an exchange or storage platform. Security hinges on user behavior and transport-layer protections. The service provides a Tor onion mirror for both the main site and webmail interface, with additional hidden service endpoints supporting IMAP, POP, and XMPP directly over the onion network. This allows users to interact with the entire stack without ever touching the clearnet.
The operator publishes a warrant canary and transparency page, though the practical reassurance these offer depends on user trust in the single-person or small-team operation. Password resets are explicitly unavailable: lose your password and the account is unrecoverable. This is a deliberate anti-surveillance measure that eliminates a common social-engineering attack vector, but it places full responsibility on users to store credentials safely.
Who it's for — verdict
Cock.li fills a specific gap in the privacy tooling landscape: functional, no-questions-asked email for people who cannot or will not attach their legal identity to a communication account. The privacy score of 89 reflects strong policy alignment with this goal, while the trust score of 48 acknowledges the operational risks of a small, donation-funded project with intermittent uptime and no formal support channel. Community sentiment consistently flags reliability and help-desk absence as pain points.
We recommend Cock.li for threat models where anonymity outweighs enterprise-grade uptime: burner research accounts, secondary activist communications, XMPP federation nodes, or any scenario where linking an email to a real identity creates unacceptable risk. Users who need 99.99% delivery rates, prompt support tickets, or built-in end-to-end encryption should look elsewhere. For everyone else willing to layer their own encryption and tolerate occasional hiccups, Cock.li remains one of the few genuinely no-KYC email options still standing in 2026.
A long-running anonymous email host that lets anyone register without identity verification, though users trade uptime reliability for radical privacy.
- + Zero identity verification required—pure pseudonymous signup
- + Tor onion services for webmail, IMAP, POP, and XMPP
- + Accepts Monero, Bitcoin Lightning, and cash for donations
- + Explicit anti-surveillance stance with published warrant canary
- + Free to use with no ad-based data harvesting
- − History of inconsistent uptime and service interruptions
- − No password recovery mechanism—account loss is permanent
- − No formal customer support or ticketing system
- − Mail stored in plaintext unless user encrypts with GPG/X.509