{"rid":"egress/cryptostorm","card":{"rid":"egress/cryptostorm","eid":"cryptostorm","topic":"egress","slug":"cryptostorm","provider":"Cryptostorm","url":"https://cryptostorm.is/","domain":"cryptostorm.is","category":"tunnel (hosted): VPN with an anonymous access token, WireGuard and OpenVPN, on shared exit addresses","tier":"1 year token (4 devices)","verdict":"paid-only","vorder":3,"grp":"paid","self_hosted":0,"confidence":"documented","binding":"none","identity_kind":"anonymous","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":0,"country":null,"crypto":null,"interfaces":null,"egress_metered":0,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-11-04T10:11:45.490Z","verified_basis":"live","checked_on":"2026-11-04","stale_on":"2026-12-05","n_evidence":18,"usd_month":null,"usd_per_tb_month":null,"summary":"No free tier. The cheapest 1-year token is USD 52: the order page lists 'yearly - $52 (4 devices)' as a PayPal subscription and 'one year - $52 (4 devices)' ...","duplicate_of":null,"n_unknown":2,"free_unit":"none"},"record":{"topic":"egress","slug":"cryptostorm","provider":"Cryptostorm","url":"https://cryptostorm.is/","category":"tunnel (hosted): VPN with an anonymous access token, WireGuard and OpenVPN, on shared exit addresses","tier":"1 year token (4 devices)","free_tier":{"stated":"No free tier. The cheapest 1-year token is USD 52: the order page lists 'yearly - $52 (4 devices)' as a PayPal subscription and 'one year - $52 (4 devices)' as a single order; the same page lists 'two years - $94 (5 devices)', 'monthly - $6 (1 device)' and 'weekly - $1.86 (1 device)'.","unit":"none","metered_on":"none","source_url":"https://cryptostorm.is/","read_on":"2026-11-04","notes":"Prices are read from the order forms of the vendor's home page. The FAQ states a device limit that depends on the token's duration: one year gives 4 WireGuard keys and 4 OpenVPN sessions."},"per_object_cap":{"stated":"not applicable","bytes":null,"notes":"","source_url":"https://cryptostorm.is/faq"},"retention":{"stated":"not applicable: a tunnel, not stored bytes","days":null,"source_url":"https://cryptostorm.is/faq","notes":"The FAQ states the servers keep no logs that identify a customer; no stored-object retention applies."},"egress":{"terms":"No byte cap and no throttling are stated: the FAQ answers 'Are there any speed/traffic limits?' with \"No. We don't do any kind of throttling/QoS.\" Servers are 1 Gbps, and 10 Gbps at five named sites; bandwidth is shared with other servers in the same cabinet.","metered":false,"free_allowance":"none: no free tier","price_per_tb":null,"source_url":"https://cryptostorm.is/faq"},"interface":["unknown"],"interface_detail":"A tunnel, not a data API: OpenVPN (ECC and RSA configurations) and WireGuard, authenticated with a token. Protocols: OpenVPN and WireGuard. UDP: the home page states 'UDP or TCP (1-65535)', so both transports run on any port. Port forwarding: yes, from 30000 to 65535, enabled at http://10.31.33.7/fwd inside the tunnel, 100 forwards per internal IP on each server. SOCKS5 endpoint: unverified: no page read states one. Obfuscation: SSH, HTTPS (Xray or stunnel) and obfs4. BitTorrent: allowed ('BitTorrent allowed').","tooling":"Any OpenVPN or WireGuard client with the vendor's published server configs; the vendor states all server-side configs are public. Port forwards are made from a web page reachable only inside the tunnel. The vocabulary has no wireguard, openvpn or socks5 interface token, so the interface list says unknown.","chaining":"A tunnel exit for traffic that must leave from a shared VPN address: a job connects with a token, and the upstream sees one of the provider's shared addresses (over 450 IPs listed).","limits":[{"kind":"volume-quota","value":"none published: \"No. We don't do any kind of throttling/QoS.\"; servers are 1 Gbps (10 Gbps at Switzerland, Finland, Atlanta, Chicago and Oregon)","source":"https://cryptostorm.is/faq"},{"kind":"per-ip-shaping","value":"shared exit addresses: 'Currently over 450 available IPs', used by many clients at once, so destination-side limits and reputation on an address apply to every client behind it","source":"https://cryptostorm.is/"}],"limits_note":"Concurrent connections are capped by token length and the vocabulary has no kind for it: a one-week or one-month token allows 1 WireGuard key and 1 OpenVPN session, a one-year token allows 4 and 4, a two-year token 5 and 5, a lifetime token 6 and 6.","binding":"none","binding_note":"No byte quota, speed cap or request rate is published; the only stated ceiling is the concurrent-session count of the token, which the limit vocabulary cannot name.","identity_cost":{"kind":"anonymous","detail":"A token is the account. The order page's Monero form is labelled 'no 3rd parties, no email or JS required', and the vendor states it accepts Monero 'so people can order an access token anonymously without providing any personal information'. Card and PayPal orders go through PayPal or CCBill, and only recurring subscriptions get the token by email; other orders show it in the browser. The vendor states it has no KYC policy.","country":null},"reliability_note":"The FAQ states servers share bandwidth with other servers in the same cabinet, so peak hours can lower speed; port forwards are per server and have to be recreated when moving to another server.","confidence":"documented","confidence_note":"Documented: price, protocols, UDP, port forwarding, obfuscation and the BitTorrent line are quoted from the vendor's own home page, FAQ and port-forwarding page. Nothing was connected through the service, so no speed, address class or forwarding behaviour is measured. A SOCKS5 endpoint is unverified because no page read mentions one.","verdict":"paid-only","price_per_tb_month":"USD 52 for a 1-year token (4 devices); a subscription price, not a per-TB price","notes":"Cheapest yearly price: USD 52 for 1 year, 4 devices (2 years: USD 94, 5 devices). The port-forwarding page says the vendor runs a yearly half-off sale every Black Friday to Cyber Monday; the price above is the list price read on the page.","verified_at":"2026-11-04T10:11:45.490Z","evidence":[{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:d63724cad233c5d439e350da2d4e610b1dbf52ad184b487e4f3137853e6ba87f","quote":"yearly - $52 (4 devices)","proved":"The 1-year token is USD 52 for 4 devices on the order form."},{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:d63724cad233c5d439e350da2d4e610b1dbf52ad184b487e4f3137853e6ba87f","quote":"two years - $94 (5 devices)","proved":"The 2-year token is USD 94 for 5 devices."},{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:d63724cad233c5d439e350da2d4e610b1dbf52ad184b487e4f3137853e6ba87f","quote":"no 3rd parties, no email or JS required","proved":"The Monero order form needs no email and no JavaScript."},{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:7f6bafab398b5ddb8f9310838c3f83c944cba632dcc501665f2e8d4dedfc83b7","quote":"UDP or TCP (1-65535)","proved":"Both transports on any port from 1 to 65535."},{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:7f6bafab398b5ddb8f9310838c3f83c944cba632dcc501665f2e8d4dedfc83b7","quote":"BitTorrent allowed","proved":"The home page states BitTorrent is allowed."},{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:7f6bafab398b5ddb8f9310838c3f83c944cba632dcc501665f2e8d4dedfc83b7","quote":"Port forwarding supported","proved":"The home page states port forwarding is supported."},{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:7f6bafab398b5ddb8f9310838c3f83c944cba632dcc501665f2e8d4dedfc83b7","quote":"Obfuscate your VPN traffic to look like SSH or HTTPS traffic (via Xray or stunnel), or with obfs4, like nothing","proved":"Obfuscation by SSH, HTTPS (Xray or stunnel) and obfs4."},{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:7f6bafab398b5ddb8f9310838c3f83c944cba632dcc501665f2e8d4dedfc83b7","quote":"ChaCha20 for symmetric encryption, authenticated with Poly1305, using RFC7539's AEAD construction","proved":"WireGuard is offered (its ciphersuite is listed)."},{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:7f6bafab398b5ddb8f9310838c3f83c944cba632dcc501665f2e8d4dedfc83b7","quote":"OpenVPN ECC","proved":"OpenVPN is offered with ECC configurations."},{"url":"https://cryptostorm.is/","date":"2026-11-04","capture":"sha256:7f6bafab398b5ddb8f9310838c3f83c944cba632dcc501665f2e8d4dedfc83b7","quote":"Currently over 450 available IPs","proved":"Exit addresses are shared; over 450 are listed."},{"url":"https://cryptostorm.is/faq","date":"2026-11-04","capture":"sha256:afdd6698a80a6a2030b42f1b77aa1dfd75a4dbacde86149b19dc658e0f92c942","quote":"No. We don't do any kind of throttling/QoS.","proved":"The FAQ states no speed or traffic limits."},{"url":"https://cryptostorm.is/faq","date":"2026-11-04","capture":"sha256:afdd6698a80a6a2030b42f1b77aa1dfd75a4dbacde86149b19dc658e0f92c942","quote":"| one year | 4 | 4 |","proved":"A 1-year token allows 4 WireGuard keys and 4 OpenVPN sessions."},{"url":"https://cryptostorm.is/faq","date":"2026-11-04","capture":"sha256:afdd6698a80a6a2030b42f1b77aa1dfd75a4dbacde86149b19dc658e0f92c942","quote":"For everyone else the delivery happens in-browser only.","proved":"Only recurring subscriptions receive the token by email; other orders show it in the browser."},{"url":"https://cryptostorm.is/portfwd","date":"2026-11-04","capture":"sha256:8a0a6f55fd249245c4c4279af1f843965fd1d0f02b4429bed67454b4696c588a","quote":"choose a port between 30000 and 65535","proved":"Forwarded ports run from 30000 to 65535."},{"url":"https://cryptostorm.is/portfwd","date":"2026-11-04","capture":"sha256:8a0a6f55fd249245c4c4279af1f843965fd1d0f02b4429bed67454b4696c588a","quote":"The limit is 100 port forwards per internal IP (per server).","proved":"Forward limit is 100 per internal IP on each server."},{"url":"https://cryptostorm.is/portfwd","date":"2026-11-04","capture":"sha256:8a0a6f55fd249245c4c4279af1f843965fd1d0f02b4429bed67454b4696c588a","quote":"BitTorrent will still work correctly on cryptostorm even without port forwarding enabled.","proved":"BitTorrent works without a forward; the forward improves swarm reachability."},{"url":"https://cryptostorm.is/tos","date":"2026-11-04","capture":"sha256:ab2d5c98398df62666f2022990a703acf93509deef2110f591bb93df3d15b7dc","quote":"That's why we have a .onion and .i2p and why we accept Monero, so people can order an access token anonymously without providing any personal information.","proved":"A token can be ordered anonymously with Monero."},{"url":"https://cryptostorm.is/tos","date":"2026-11-04","capture":"sha256:ab2d5c98398df62666f2022990a703acf93509deef2110f591bb93df3d15b7dc","quote":"we will not be implementing any kind of \"Age/ID verification\"","proved":"the vendor states it implements no age or ID verification"}]},"claims":[{"path":"$.free_tier","kind":"has-free-tier","num":0,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"ok"},{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[0].value","kind":"limit:volume-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.limits[1].value","kind":"limit:per-ip-shaping","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"},{"path":"$.price_per_tb_month","kind":"price","num":52,"unit":null,"per":null,"currency":"USD","usd":52,"fx_date":null,"parse":"ok"}],"unknown":[["$.interface","interface-unknown"],["$.per_object_cap.stated","not-applicable"]],"history":[],"drift":[]}