OffshoreVps
Guide Threat model first Honest limits

Hosting for journalists, researchers and activists: what it can and cannot protect

Choosing a host is one small part of staying safe. This guide is about what a no-KYC server in another country changes for people whose work puts them at risk, and, just as important, what it does not. We are a hosting company, not a security consultancy, so we say where to learn more.

Guide by the OffshoreVps teamUpdated Written from our own terms and features

What hosting changes

What a no-KYC offshore server does and does not do

ConcernWhat changesWhat does not
The host holding your identityWe never ask for a name, email, ID or phone, so there is no identity file to leak or be subpoenaedAnything you tell anyone else, and anything linking your payment to you
Which courts can reach the serverYou choose the country the server sits in. See offshore hostingYour own government's power over you personally
Payment trailCrypto instead of a card, and Monero for the least traceable on-chain trailExchange records if you bought the coin with your identity
What the host can seeWe state that we do not monitor or log what happens inside your serversNetwork-level facts: an IP address is public and a server's existence is visible
Losing accessNo account recovery, deliberately, because there is nothing to verify againstNothing: save your login and turn on two-factor authentication
Being taken offlineWe act on valid legal process and credible abuse reports under our termsA promise that nothing will ever be removed

We cannot promise protection from a determined, well-resourced adversary. We can promise to be clear about what we do and do not hold.

Build a plan

Start with a threat model, then choose tools

Who are you worried about?

A stalker, an employer, a company, a local authority and a national intelligence service need very different protection. Name the one you actually face.

What are you protecting?

Your identity, your sources, your location, your data, or the fact that a site exists. Each needs different steps.

What happens if it fails?

Decide how bad each failure is, so you spend effort where it matters.

Pick the smallest set of tools that covers it

Often that is a separate identity, a strong password manager, two-factor authentication and an encrypted channel, plus a host that does not hold your identity.

Habits

Habits that matter more than the host

  • Keep identities separate. A project should not share a name, email, username or payment trail with your personal life.
  • Save your login safely. We cannot recover it. Use a password manager and keep an offline copy.
  • Use two-factor authentication. It is available in your dashboard and issues one-time backup codes.
  • Back up your data. A server can be removed for many reasons. See how to back up a VPS.
  • Think about metadata. Who connects, when and from where often reveals more than content.
  • Use a domain with privacy. Domain registration here includes WHOIS privacy at no extra cost. See buy a domain anonymously.
Choosing a host

Questions to ask any host, including us

Ask

  • What do you collect when I sign up?
  • Which country and which law apply to my server?
  • What do you do when you get a legal request?
  • What happens if I lose my login?

Be wary of

  • Promises of total anonymity or invisibility
  • Hosts that will not name their jurisdiction
  • "We ignore all complaints" as a selling point
  • Pressure to skip basics such as backups
FAQ

Hosting and personal safety questions

01Can a hosting provider make me anonymous?

No. It can reduce what the provider knows about you. Anonymity depends on much more, including your habits, your devices and your network. We say so plainly.

02Is it safe for sources to use a server I rent here?

We cannot assess your situation. A server you control with no identity attached is one useful layer. Treat it as one part of a plan made with a specialist if the risk is serious.

03What do you know about me?

Account records are limited to what runs the service: your balance, orders and support history, plus login device and browser history, never IP addresses. We do not hold a name or ID because we never ask. See the privacy policy.

04What happens if I get a legal request?

We respond to valid legal process and credible abuse reports under our terms. See how we handle abuse and legal requests.

05Which country should I choose?

It depends on your threat. Our jurisdiction selector and country comparison help you shortlist, and a lawyer should review anything you depend on.

06Where can I learn more?

The Electronic Frontier Foundation’s Surveillance Self-Defense site offers guides and a security-plan module. A local legal or press-freedom organisation can advise on your specific case.

Sources

Where these numbers come from

Checked 19 October 2026. Chain sizes and software requirements change, so confirm against the source before you order.

One layer of a plan

Generate a login with no identity attached, pay in crypto and deploy.