Njalla VPS

Njalla VPS is the reference no-KYC virtual private server — generated account handles, payment in XMR/BTC/LTC/ZEC/ETH (or cash by mail), no name + email + ID requirements, Tor signup and ongoing onion-mirror access. Listed at Grade A · editor's pick because it is operated by the same Njalla team that has been running domain-by-proxy registration for nearly a decade with a clean track record on refusing law-enforcement fishing expeditions and a public commitment to anti-censorship infrastructure.

Background. Njalla is operated by njalla.srl based in Costa Rica, with VPS infrastructure physically located in Sweden. The team's roots trace to The Pirate Bay / Piratbyrån / IPredator VPN era — including Peter Sunde (publicly known by the handle Anakata during the Pirate Bay era) — meaning the operators are veterans of anti-censorship infrastructure law and have decades of public-facing track record. Founded in 2017 as a domain registrar built around the "Njalla becomes the legal registrant of your domain" model; VPS added later, plus VPN. The name itself is Sámi for a traditional storage hut built on top of a long pole to keep predators away — fitting the brand promise.

What you trust. Account-level: signup with an email or XMPP handle (OMEMO / OTR supported); outgoing email signed + encrypted with Njalla's PGP key; no real name, no ID, no phone, no recovery email beyond what you choose to provide. Payment: BTC, LTC, XMR, ZEC, ETH, PayPal (and cash by mail for those wanting *fully* off-rail payment). The trust model is: Njalla holds your customer-data exposure to its absolute minimum, but they explicitly state they *will* respond to legal requests with legal merit ("we will help if there are legal merits to any formal government requests to our system"). Domain-by-proxy specifically: Njalla becomes the registered owner of your domain on paper, and the agreement between you and Njalla grants you full usage rights — meaning a law-enforcement subpoena against the *user* of the domain has to compel Njalla first. This is the editorial differentiator vs ordinary "domain privacy" addons that just redact WHOIS but leave the user as the legal registrant.

Operational specs. VPS tiers: €15/mo (1 core / 1.5 GB RAM / 15 GB / 1.5 TB), €30/mo (2 / 3 / 30 / 3 TB), €45/mo (3 / 4.5 / 45 / 4.5 TB), all the way to €90/mo (6 / 9 / 90 / 9 TB). Infrastructure: LXD + CEPH backend (redundant storage across nodes), 10 Gbps backbone uplink. Server access: SSH root, you manage the rest — no cPanel, no managed hosting. Outgoing SMTP is blocked (anti-spam policy); they suggest external SMTP relays if you need to send mail. No network scanning permitted. Locations: "secret locations in Sweden" per their docs. Tor onion mirror: njallalafimoej5i4eg7vlnqjvmb6zhdh27qxcatdn647jtwwwui3nad.onion. Domains: separate product, ~€15/yr per TLD, identical privacy model (Njalla = legal registrant).

Philosophy. Njalla's editorial differentiator is the inverted customer-data model: "Other organisations brag about which customers they have. We brag about not telling who our customers are." Combined with the team's anti-censorship pedigree (The Pirate Bay, Piratbyrån, IPredator VPN), the operator credibility is unmatched in the no-KYC hosting space — the people running this have spent careers defending exactly this threat model. Pricing reflects the value: not the cheapest VPS on the market, explicitly competing on privacy + operator integrity rather than dollars-per-vCPU.

Grade rationale. Grade A and editor's pick reflect: nearly a decade of operational continuity (since 2017); operator team with decades of anti-censorship track record; truly anonymous signup (XMPP/PGP signup path is rare in the hosting space); broad crypto payment options including XMR + cash by mail; Costa Rica corporate domicile + Sweden infrastructure (jurisdictional separation by design); domain-by-proxy as a structural privacy primitive, not a billing addon; Tor onion mirror operator-published; absence of major reliability / outage / mass-suspension threads in the last 24 months. Last verified 2026-05-13.

Useful when. You need a VPS to host a Matrix / Mastodon / Nextcloud / Tor hidden service / privacy-related project and you want zero KYC linkage from infrastructure → identity. You're registering a domain for a project that may attract legal pressure (journalism, leak sites, anti-censorship infrastructure) and need the registrant-of-record protection. You want a privacy-respecting host that accepts XMR. You prefer paying €15-90/mo for operator integrity over saving €3/mo on Hetzner or DigitalOcean where ID and bank cards are required.

Caveats. Not the cheapest VPS — Njalla starts at €15/mo for 1 vCPU / 1.5 GB RAM where Hetzner / Contabo would be €4-6/mo for similar specs. The premium is privacy, not compute. Outgoing SMTP blocked — you cannot run a mail server with outbound delivery from Njalla VPS; use an external SMTP relay (or look at hosting providers that allow SMTP if mail is your use case). They do respond to valid legal process — Njalla is privacy-protective, not extra-legal; if you're the subject of a serious investigation backed by valid legal authority that Costa Rica or Sweden recognises, expect Njalla to assist within those legal bounds. Domain-by-proxy adds a transfer step — if you ever need to move the domain to a different registrar with you as legal owner, Njalla supports the transfer but it's a multi-step process. Hosted-content seizures can happen at the upstream / infrastructure level (e.g., LeakBase, a breached-credentials aggregation site, was seized in early 2026 from a Njalla VPS — Njalla didn't fold, but the upstream infrastructure seizure still took the site down). No managed-hosting handholding — you get SSH and a server image; OS configuration, security hardening, and backups are your responsibility.