How to buy a no-KYC VPS with crypto and leave almost nothing to hand over

Legal hygiene: which mail, which VPN, which coin, and how to harden the box so a no-KYC crypto VPS or dedicated server stays a string, not a name.

نص المقال الطويل بالإنجليزية. الواجهة والكتالوج والدفع مترجمة.

What this is — and is not

This is how to buy a VPS with crypto, or buy a dedicated server with Bitcoin or Monero, so the file on our side does not name you. It is for lawful privacy: journalists, operators, people who do not want a card processor or a passport in the hosting stack. It is not a crime manual. CSAM, phishing and paid attacks stay prohibited. Offshore and no-KYC do not cancel physics or your own mistakes.

What NovaVPS actually keeps

We do not KYC. We do not take cards. We do not run AML checks on coins. We do not screen wallets with chain-analysis products. We do not store a name, phone, selfie or home address. The leftover is small: an email string, a password hash, and the invoice needed to mark the payment (amount, coin, address, transaction ID). Connection metadata is kept at most 24 hours. We do not keep payload logs. If a letter arrives from a jurisdiction that is not ours, that letter is not a reason to grow the file. A US form letter is not a kill switch and not a discovery request we volunteer extra data for.

The job of this guide is to make that leftover non-identifying. If the inbox is your Gmail and the coin left a KYC exchange, we still only have an email and a txid — but those two strings point at you. Buy a no-KYC VPS with crypto only after you pick an inbox and a wallet that do not.

Which email to use

The address must receive one SSH mail and later invoices. That is the only reason we ask for it. Do not use Gmail, Outlook or iCloud if the point is to keep a name off the account. Use a mail host that does not demand a selfie: Proton Mail, Tuta Mail, or mailbox.org. SimpleLogin gives you an alias in front of an inbox so the string we store is not your long-lived address. 1984 Hosting sells mail in Iceland if you want the same jurisdiction story as a Reykjavik VPS.

How to open the checkout

Do not place the order from a home or office ISP if that IP is the thing you are trying not to write down. Open Tor Browser or a no-account VPN such as Mullvad VPN (they sell accounts for cash or crypto and do not want an email). IVPN is the same class. Do not check out through a corporate VPN that SSO-logs your name. Do not use the same consumer VPN account you bought with a card and a real name if that trail is in scope.

A second pattern: buy a cheap no-KYC VPS with Monero first (Starter), put WireGuard official site on it from WireGuard quick start, then buy the real VPS or dedicated server through that tunnel. That is two invoices and two emails if you want isolation. We do not require it.

How to pay so the coin does not name you

To buy a VPS with Monero is the least talkative rail we offer. Use Feather Wallet or the official GUI from Monero: running a node. Send from a wallet you control. Do not withdraw from a KYC exchange straight to our invoice address: the exchange then has our deposit and your passport. If you must acquire XMR, move it to your wallet first. Bisq is a public P2P path some people use so the purchase of the coin is not an exchange KYC file. USDT and BTC work on the same page if you only wanted to skip a card; they are not privacy coins. We do not AML-score the incoming coin. We do not ask where the wallet lived.

After the box is up

We rent root. Anonymity after deploy is your sshd, not our panel. Follow OpenSSH manual: key-only login, no PasswordAuthentication, no root password over the network. Generate the key on a machine that is not your named work laptop if that is the model. Do not upload that key to GitHub. Disable password auth before you publish a service. Put WireGuard official site on the VPS first if you want admin access off the public SSH port. Do not put your legal name in the hostname, motd, TLS CN or WHOIS. A personal domain with real-name WHOIS undoes a no-KYC VPS paid in Monero.

Dedicated is the same hygiene plus IPMI: reach IPMI only through the VPN we document, not from a cafe on a named laptop. Buy a dedicated server with crypto on the same account if you need exclusive cores; the leftover file is still email plus invoice.

What we will not invent later

We do not add KYC after a spend threshold. We do not start AML-scoring wallets because a foreign office emailed. We do not keep a second shadow profile. The best-case compelled file is: this email string paid this invoice for this SKU in this datacenter. If that email and that coin are not tied to a name, there is no name to type. That is the whole design of a no-KYC crypto VPS and of offshore dedicated servers paid in cryptocurrency. It is still not a promise that you are invisible on the public internet.