I2P is a genuinely different thing from a VPN and should never be bought as one: it is a free, decentralized garlic-routing network optimized for services INSIDE the network - eepsites, torrenting, mail - not for hiding your traffic to the regular internet, where the few volunteer-run outproxies are limited, discouraged by the project itself, and (per r/i2p veterans) can read your plaintext traffic. It scores real points no commercial VPN can match: no company, no account, no logs surface, universal participation in routing, built-in torrenting, and a PGP warrant canary via its supporting nonprofit StormyCloud (July 2026 statement verified live). But it is slow (community consensus: 100-500 KB/s typical torrent speeds), eepsites are a niche ecosystem, there is no third-party security audit, and February 2026 was rough - a DoS campaign plus the Kimwolf botnet's attempt to join 700,000 infected routers disrupted the network for a week. Use it for in-network services and torrent privacy, not as a clearnet VPN replacement.
site reachable · checked 19 h ago · daily check
draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 2 · prose updated 2026-11-06 · facts as of 2026-11-03 · how we verify
I2P is a free, open-source garlic-routing overlay network, not a commercial VPN. Run by a volunteer community since 2003, it has no corporate owner - supporting infrastructure is managed by the US-based nonprofit StormyCloud Inc. It’s designed for anonymity within its own network (eepsites, torrenting, mail), not as a clearnet privacy tool. You install it like software, not subscribe.
There is no central operator to log traffic: I2P’s design ensures every participant routes others’ encrypted data, with no central authority. The project website claims it does not collect IP addresses or PII, only aggregated analytics. However, logging evidence is policy-only - no independent audit verifies these claims. Outproxy operators (volunteers) can see your plaintext traffic and source IP. The network’s warrant canary, published by StormyCloud Inc., is PGP-signed quarterly and asserts no secret subpoenas or backdoors. Jurisdictionally, StormyCloud operates in the US (Five-Eyes), but the network itself is globally distributed.
I2P is completely free - there is no cost to use, no subscription, and no paid tier. It runs on donations accepted in Monero (recommended), Bitcoin, and Zcash, which fund reseed servers, development, and future audits. The derived_pricing data confirms no billing events, no renewal ratio, and no three-year cash total - because nothing is billed. You pay nothing, now or later.
I2P uses its own garlic-routing protocol with multihop encryption and supports TCP/UDP applications. It offers obfuscation via NTCP2 and SSU2 transports, but no kill switch or split tunneling. P2P is built-in and encouraged, but streaming and geo-unblocking are not supported. Official clients exist for Windows, Mac, Linux, and Android - no iOS support. Server and country counts are undefined due to the network’s decentralized nature. Performance, based on community reports, is slow: typical downloads range from 100-500 KB/s, with uploads often below 50 KB/s. No independent performance tests have been conducted.
I2P has no corporate owner; development is community-driven, with StormyCloud Inc. (a Texas 501(c)(3)) formalizing support since 2025. Red flags include the February 2026 incident: a DoS attack combined with 700,000 bot join attempts from the Kimwolf IoT botnet disrupted the network for a week (KrebsOnSecurity). The network remains vulnerable to address-based blocking, per a 2018 study. While the warrant canary is updated, some r/i2p users question its trustworthiness due to lack of verifiable key ownership. Data quality is reported, not independently verified.
I2P resists censorship through decentralized routing and obfuscation (NTCP2/SSU2), with workarounds like reseed-over-proxy or offline bundles if reseed servers are blocked. However, research shows a censor with 10 strategically placed routers could block over 95% of known peers. The February 2026 attacks exposed fragility under mass node influx. It is not reliably resistant to nation-state censorship like China or Iran - use Tor with bridges or specialized tools instead.
Use I2P if you need anonymous torrenting, eepsite hosting, or in-network services - not for browsing the clearnet. It’s free, decentralized, and avoids corporate trust, but outproxies are risky and untrusted. The lack of audits and 2026’s instability are serious caveats. This provider pays no review sites - its funding comes from donations, not affiliate trails.
| Intro price | $0 /mo |
|---|---|
| Notes | Free, donation-funded: there is nothing to buy. Donations accepted in Monero (recommended 'for maximum anonymity'), Bitcoin and Zcash per the official financial-support page (fetched 2026-11-03); donations fund reseed servers, build systems, post-quantum research and future independent security audits. StormyCloud Inc. also accepts donations as the community-support vehicle for I2P development |
See the 3-year total next to the marketing number: true-cost calculator →
| Sign up at | geti2p.net |
|---|---|
| Identity check | none |
| Apps | windows, mac, linux, android |
Check the renewal price above before any multi-year plan - true-cost calculator.
Legal domicile: United States (no corporate operator - the network is distributed with no central authority; the formalized support vehicle is StormyCloud Inc., a Texas 501(c)(3) nonprofit, US/ Five-Eyes jurisdiction; traffic routes through volunteer routers worldwide). Logging claim: The network itself has no operator to log anything: 'I2P is fully distributed - there are no central controls or authorities' (threat-model doc) and the website privacy policy (updated 2026-01) states the project website collects only pages visited, aggregated country/city and visit time, and 'We do NOT collect: IP addresses, Browser type or version, Operating system, Referring website addresses, Any personally identifiable information (PII)'. The router software keeps only local logs on the user's own machine (viewable in the router console at /logs) - evidence class: promise only (no proof). No incidents on file in our research - absence of evidence is not proof of innocence. Facts reported - operator pages (home, Tor comparison, threat model, privacy policy, FAQ, financial-support, blog index, Stormy Weather incident post), StormyCloud Inc. pages (about, warrant canary, joins-I2P post), GitHub license file, Wikipedia, KrebsOnSecurity, HN Algolia thread archives and Reddit arctic-shift archives all fetched live 2026-11-03; no third-party security audit located (not fully verified) as of 2026-11-03 - read the sources below.
Evidence classes and scoring: methodology · user experiences: meta-review.
affiliate status not verified yet
If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.
Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.
Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.
Based on our checks as of 2026-11-03: I2P (Invisible Internet Project) scores 3.8/10 in our weighted review. We logged 4 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.
You get free, open-source software that routes your traffic through an encrypted, decentralized network of volunteer nodes. It’s designed for anonymous access to .i2p sites (eepsites), P2P file sharing, and private messaging - not for hiding your IP from regular websites.
There is no price - $0 now, $0 later. Derived_pricing confirms no renewal, no billing events, and a `three_year_cash_total` of null. I2P is donation-funded, not sold.
The claim is policy-only: the network’s design prevents central logging, but outproxy operators can see your traffic. No third-party audit has verified the website or router logs. The StormyCloud warrant canary is PGP-signed but lacks verifiable key ownership.
Not reliably. While it offers obfuscation and reseed workarounds, research shows it’s vulnerable to blocking with minimal infrastructure. The 2026 attacks also revealed scalability flaws under stress - use Tor with pluggable transports instead.
You don’t pay at all - no account, no signup. If you donate, Monero is recommended for maximum anonymity. The software itself requires no KYC or personal information.
The network is decentralized, so no single point of failure. However, StormyCloud Inc. runs key infrastructure - if it collapses, reseeding and outproxies could fail. The 2026 botnet incident showed resilience but also fragility under extreme load.
I2P *is* the honest free alternative to commercial VPNs for in-network anonymity. For clearnet privacy, consider Tor (free) or a flat-priced, audited, independent VPN like Mullvad or ProtonVPN - not affiliate-touted “lifetime” deals.
Comparable providers of the same kind only - a free app is never "an alternative" to a commercial VPN. Ranked by the same deterministic score.
A censorship-unblocking tool that now wears nonprofit clothes: Lantern's parent became the 501(c)(3) Brave New Software Project and the site now reads like a…
A DNS-layer filtering service that has grown up in public: born January-April 2021 out of the Windscribe team (same three founders, spun out precisely because…
Hysteria 2 is not a VPN provider - it is free, MIT-licensed proxy software you deploy on your own server, and this dossier treats it that way: there is no…
No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.