Complete Privacy Hosting Tutorial 2026 - Anonymous Infrastructure

Before creating any accounts, establish a clean identity that does not link to your real identity. **Email creation:** 1. Open Tor Browser (download from torproject.org if you don't have it) 2. Via Tor, create a ProtonMail account at proton.me/mail 3. Do not provide any recovery email, phone number, or personal information 4. Use a username not related to your real name (random words, not your name) 5. Save the username/password in a local password manager (KeePass) - do not use cloud sync This ProtonMail address will be used for your hosting account. ProtonMail is end-to-end encrypted and created over Tor - your ISP cannot see you created it, Tor hides your IP from ProtonMail. Alternative: SimpleLogin for email aliasing. Create a SimpleLogin alias that forwards to your ProtonMail. If the alias is ever exposed, simply delete it and create a new one.

Pay for hosting with Monero (XMR) for the highest privacy. Bitcoin with coin mixing is acceptable but more complex. **Getting Monero without identity:** Option A (simplest): Peer-to-peer exchange - LocalMonero.co or Bisq DEX - Trade fiat cash for XMR via in-person meeting (no KYC) - Or trade Bitcoin (bought with cash via Bitcoin ATM) for XMR - New Monero wallet for VPS payment - separate from any existing Monero wallet Option B: Monero mining - Mine XMR using P2Pool (decentralized pool, no account required) - Mining XMR to a fresh wallet address has no payment trail **Monero wallet setup:** Create a new Monero wallet using the GUI or CLI wallet. This wallet is used only for VPS payment - not linked to your main Monero wallet. After payment, this wallet can be discarded (or kept for renewals).

With anonymous email and cryptocurrency ready: 1. Open Tor Browser 2. Navigate to anubizhost.com 3. Register with your anonymous ProtonMail address 4. Do not provide real name, phone number, or billing address 5. Select Iceland VPS plan 6. Select Monero payment at checkout 7. Complete the Monero payment from your privacy wallet 8. VPS is provisioned automatically after payment confirmation Your Anubiz Host account now has: random username, anonymous ProtonMail email, Monero payment history (no identity in a Monero transaction), and an Iceland VPS IP. **Security note:** The VPS provisioning email confirmation goes to your ProtonMail. Read it via Tor Browser in ProtonMail web interface. Do not access this email from your regular browser or personal network.

First server access must be via Tor to prevent your home IP from being logged as the first connection (first connections are memorable). SSH over Tor using proxychains: ```bash apt install proxychains4 -y # Edit /etc/proxychains4.conf: # Add at the bottom: socks5 127.0.0.1 9050 # Make sure tor is running: sudo service tor start # Connect via Tor: proxychains4 ssh root@YOUR_VPS_IP ``` Or using the -o ProxyCommand option: ```bash ssh -o ProxyCommand="nc -X 5 -x localhost:9050 %h %p" root@YOUR_VPS_IP ``` This routes your SSH connection through the Tor network. Your VPS sees a Tor exit node IP, not your home IP. Even if your VPS provider's logs are accessed, your home IP is not in them. All future management connections: use Tor. Establish this habit from first access.

After first login, harden the server before deploying anything: ```bash # Change root password immediately passwd # Create a non-root user with sudo: adduser privacyuser usermod -aG sudo privacyuser # Set up SSH key authentication (more secure than password): mkdir -p ~/.ssh && chmod 700 ~/.ssh # Paste your public key (generated on your local machine: ssh-keygen -t ed25519): nano ~/.ssh/authorized_keys chmod 600 ~/.ssh/authorized_keys # Harden SSH config (/etc/ssh/sshd_config): # Change Port to non-standard (e.g., 22222) # PasswordAuthentication no # PermitRootLogin no # AllowUsers privacyuser systemctl restart sshd # Firewall: apt install ufw -y ufw default deny incoming ufw default allow outgoing ufw allow 22222 # Your new SSH port ufw allow 80 443 # Web ports if needed ufw enable # fail2ban: apt install fail2ban -y systemctl enable fail2ban ```

Domain registration: use a registrar that accepts cryptocurrency and includes WHOIS privacy. Recommended registrars for anonymous domain registration: - Njalla.com: privacy-focused registrar, accepts cryptocurrency, owns domains on your behalf (maximum anonymity) - Namecheap + WHOIS privacy: accepts Bitcoin, WHOIS privacy included - Porkbun: accepts cryptocurrency, free WHOIS privacy For Njalla (highest privacy): Njalla registers the domain in their name, you have usage rights. Legally the domain cannot be identified as yours. Njalla's terms allow anonymous registration. Pay with Monero. DNS configuration: point your domain to your VPS IP. Njalla handles DNS. Do not use Google DNS or Cloudflare DNS for your privacy domain (these log queries). Alternative self-hosted DNS: run BIND or PowerDNS on your VPS. Register nameservers at your domain registrar pointing to your VPS. Complete control over DNS records and no third-party DNS logging.