Can you use a VPN without giving an email address?

Yes. A VPN only needs your email address when there is something to restore or someone to contact: a paid subscription that has to follow you to a new phone, or a billing problem that needs a reply. A free tier has neither, so a well-designed free VPN can run entirely from a key stored on your phone and never ask. If an app demands an email before it will connect at all, the email is for the app's benefit, not yours.

What an email address does in a VPN app

Four things, in roughly descending order of legitimacy.

• Restoring a subscription. You paid on one phone and want the same plan on another. The store can often do this on its own when both phones use the same Google account, but a provider that wants to support any phone to any phone needs an identifier of its own, and email is the one everybody has.
• Reaching you about money. A failed payment, a refund, a change to the plan.
• Account recovery. A password reset link has to go somewhere.
• Marketing. Onboarding sequences, discount reminders, "we miss you" emails and, with some providers, sharing the list with partners.

For a free user, none of the first three apply. There is nothing to restore, no money to discuss and no password to reset. What remains is the fourth.

How a VPN identifies you without one

The service still needs to tell your phone apart from everyone else's, to count devices, apply fair-use limits and handle abuse. It can do that with a key the phone generates in its secure hardware. The app sends the public half of the key to the server, keeps the private half where nothing can read it, and signs each request. The server recognises the signature and knows it is the same phone; it does not know, and has no reason to know, whose. The no-sign-up explainer walks through the mechanism.

That is a stronger identity than an email, not a weaker one. An email can be typed into any phone; a hardware key cannot be copied out of the one that made it.

Where an email is genuinely needed

The honest exception is paying. When you buy a subscription you get something that must survive losing the phone, and the two ways to make that work are an email address or a recovery phrase you write down. An email is more familiar and harder to lose; a recovery phrase keeps the provider from knowing anything about you at all, at the cost of being your responsibility. Why an account with no email needs a recovery phrase compares the two, and restoring a subscription on a new phone shows what the email is for in practice.

What to look for is when the question is asked. A provider that asks at purchase, and only then, is using the email for the job it is needed for. A provider that asks at install has decided it wants your address regardless.

What the email costs you

An email address is the identifier that ties everything else together. Given to a VPN provider, it links your connection records to a name, to any other service you used the same address for, and, if the provider is ever breached or acquired, to whoever ends up with the database. It is also the channel for every marketing message the provider decides to send.

None of that is catastrophic on its own. It is simply not worth spending on a free service that does not need it.

Throwaway addresses, and why they are a poor fix

You can give an alias or a disposable address, and for a free tier it does no harm. For a paid plan it is a trap: the address is the thing that restores your subscription, and a disposable one that has expired restores nothing. If a provider requires an email for Premium, use one you will still have in a year.

What "no email" does not mean

It does not mean the provider knows nothing about you. Its server sees the IP address your phone connects from, because it has to send your traffic back to it, and most providers keep that for some period to respond to abuse complaints. The difference an email-free design makes is that the address is not attached to a person. Ask any provider what it keeps and for how long; the answer belongs in its privacy policy, and reading one properly takes about ten minutes.

A quick way to check an app

Install it and tap connect. If you are connected before any form appears, the free tier is email-free. Then open the upgrade screen without buying: if it asks for an email there and nowhere else, the design is sound. If the email was demanded at the first screen, or if the app will not connect without one, it wanted your address for reasons the tunnel does not have.

Culvert VPN's free tier asks for no email at all (the account is a hardware-backed key created on your phone, the service does not log the sites you visit, your DNS queries or your traffic contents, its servers see only an opaque connection id, and it keeps your IP address for up to 30 days for abuse handling as set out in its privacy policy); an email is requested only if you buy Premium, so the subscription can be restored on another phone, and the app is on Google Play.