# Njalla VPS

Category: hosting · VPS
Grade: A
KYC: anonymous_signup
Highlights: NO-KYC, XMR, REFERENCE
Features: non_custodial, wallet_funded
Fees: €15/mo VPS-S · XMR / BTC / LTC / BCH · anonymous account
Web: https://njal.la/servers/
Tor: http://njallalafimoej5i4eg7vlnqjvmb6zhdh27qxcatdn647jtwwwui3nad.onion/
Last verified: 2026-09-10
Operating since: 2017 (9y) — WHOIS redacted (likely .io or hidden TLD); operating_since estimated from archive.org first snapshot 2017
Also listed at: Web3Privacy, Monerica

> Same operator as Njalla DNS — anonymous accounts, accepts XMR / BTC / LTC.

## Review

Njalla VPS is the reference no-KYC virtual private server — generated account handles, payment in XMR/BTC/LTC/ZEC/ETH (or cash by mail), no name + email + ID requirements, Tor signup and ongoing onion-mirror access. Listed at **Grade A · editor's pick** because it is operated by the same Njalla team that has been running domain-by-proxy registration for nearly a decade with a clean track record on refusing law-enforcement fishing expeditions and a public commitment to anti-censorship infrastructure.

**Background.** Njalla is operated by **njalla.srl based in Costa Rica**, with VPS infrastructure physically located in Sweden. The team's roots trace to The Pirate Bay / Piratbyrån / IPredator VPN era — including Peter Sunde (publicly known by the handle Anakata during the Pirate Bay era) — meaning the operators are veterans of anti-censorship infrastructure law and have decades of public-facing track record. Founded in 2017 as a domain registrar built around the "Njalla becomes the legal registrant of your domain" model; VPS added later, plus VPN. The name itself is Sámi for a traditional storage hut built on top of a long pole to keep predators away — fitting the brand promise.

**What you trust.** Account-level: signup with an email **or** XMPP handle (OMEMO / OTR supported); outgoing email signed + encrypted with Njalla's PGP key; no real name, no ID, no phone, no recovery email beyond what you choose to provide. Payment: BTC, LTC, XMR, ZEC, ETH, PayPal (and cash by mail for those wanting *fully* off-rail payment). The trust model is: **Njalla holds your customer-data exposure to its absolute minimum**, but they explicitly state they *will* respond to legal requests with legal merit ("we will help if there are legal merits to any formal government requests to our system"). Domain-by-proxy specifically: Njalla becomes the registered owner of your domain on paper, and the agreement between you and Njalla grants you full usage rights — meaning a law-enforcement subpoena against the *user* of the domain has to compel Njalla first. This is the editorial differentiator vs ordinary "domain privacy" addons that just redact WHOIS but leave the user as the legal registrant.

**Operational specs.** VPS tiers: €15/mo (1 core / 1.5 GB RAM / 15 GB / 1.5 TB), €30/mo (2 / 3 / 30 / 3 TB), €45/mo (3 / 4.5 / 45 / 4.5 TB), all the way to €90/mo (6 / 9 / 90 / 9 TB). Infrastructure: LXD + CEPH backend (redundant storage across nodes), 10 Gbps backbone uplink. Server access: SSH root, you manage the rest — no cPanel, no managed hosting. **Outgoing SMTP is blocked** (anti-spam policy); they suggest external SMTP relays if you need to send mail. **No network scanning permitted.** Locations: "secret locations in Sweden" per their docs. Tor onion mirror: njallalafimoej5i4eg7vlnqjvmb6zhdh27qxcatdn647jtwwwui3nad.onion. Domains: separate product, ~€15/yr per TLD, identical privacy model (Njalla = legal registrant).

**Philosophy.** Njalla's editorial differentiator is the **inverted customer-data model**: "Other organisations brag about which customers they have. We brag about not telling who our customers are." Combined with the team's anti-censorship pedigree (The Pirate Bay, Piratbyrån, IPredator VPN), the operator credibility is unmatched in the no-KYC hosting space — the people running this have spent careers defending exactly this threat model. Pricing reflects the value: not the cheapest VPS on the market, explicitly competing on privacy + operator integrity rather than dollars-per-vCPU.

**Grade rationale.** Grade A and editor's pick reflect: nearly a decade of operational continuity (since 2017); operator team with decades of anti-censorship track record; truly anonymous signup (XMPP/PGP signup path is rare in the hosting space); broad crypto payment options including XMR + cash by mail; Costa Rica corporate domicile + Sweden infrastructure (jurisdictional separation by design); domain-by-proxy as a structural privacy primitive, not a billing addon; Tor onion mirror operator-published; absence of major reliability / outage / mass-suspension threads in the last 24 months. Last verified 2026-05-13.

**Useful when.** You need a VPS to host a Matrix / Mastodon / Nextcloud / Tor hidden service / privacy-related project and you want zero KYC linkage from infrastructure → identity. You're registering a domain for a project that may attract legal pressure (journalism, leak sites, anti-censorship infrastructure) and need the registrant-of-record protection. You want a privacy-respecting host that accepts XMR. You prefer paying €15-90/mo for operator integrity over saving €3/mo on Hetzner or DigitalOcean where ID and bank cards are required.

**Caveats.** **Not the cheapest VPS** — Njalla starts at €15/mo for 1 vCPU / 1.5 GB RAM where Hetzner / Contabo would be €4-6/mo for similar specs. The premium is privacy, not compute. **Outgoing SMTP blocked** — you cannot run a mail server with outbound delivery from Njalla VPS; use an external SMTP relay (or look at hosting providers that allow SMTP if mail is your use case). **They do respond to valid legal process** — Njalla is privacy-protective, not extra-legal; if you're the subject of a serious investigation backed by valid legal authority that Costa Rica or Sweden recognises, expect Njalla to assist within those legal bounds. **Domain-by-proxy adds a transfer step** — if you ever need to move the domain to a different registrar with you as legal owner, Njalla supports the transfer but it's a multi-step process. **Hosted-content seizures** can happen at the upstream / infrastructure level (e.g., LeakBase, a breached-credentials aggregation site, was seized in early 2026 from a Njalla VPS — Njalla didn't fold, but the upstream infrastructure seizure still took the site down). **No managed-hosting handholding** — you get SSH and a server image; OS configuration, security hardening, and backups are your responsibility.

Source: https://xmr.club/hosting/njalla-vps