Can running a WEPN service expose my real identity to malicious actors?

When you share the generated access keys, it contains your home IP address so that remote users can connect to it. The content of incoming connections are password protecting and encrypted, however, they need the destination IP address and port to connect to, which are not encrypted. 

 

Generally, an IP address can only be traced to an individual's identity by the ISP (Internet Service Provider) which are often in US/Canada/EU. 

 

The public information that can be extracted from an IP address may reveal the ISP name and overall location of the service area (city/country) but not the individual's identity. For example, you use the following website to check what information someone can find out given your IP address:

 

https://ipinfo.io/

 

Lastly, we recommend only sharing access with friends and family that you trust since their traffic would go through your ISP and if someone tries to violate ISP rules (such as downloading pirated/illegal content over torrent, etc), the provider may get a notice from their ISP.

 

So far, we have not had any instances of this. We are also working on more fine grained access control that allows providers/hosts to block certain problematic content (such as torrent traffic) based on their own preferences.