Running a Tor onion service is one thing, but choosing where to actually host the backend server is a step a lot of people overlook. Your anonymity does not end at the .onion address — it depends heavily on your hosting setup too.
Here are a few things I have learned from experimenting with this:
- Pay with crypto, always. If you pay with a credit card or PayPal, your identity is tied to the server. Look for hosts that accept Bitcoin or Monero with no KYC requirements. Some providers like QloudHost let you pay anonymously with crypto and do not ask for your real name during signup.
- Jurisdiction matters. Servers hosted in countries with strong privacy laws and no DMCA-style takedown obligations give you more operational security. Netherlands-based servers are a common choice in the privacy community for this reason.
- No-log policies and no real name required. A lot of mainstream hosts require ID verification these days. That defeats the purpose entirely if you are trying to run something sensitive like a whistleblowing platform or a private communication service.
- Server-side security is still on you. Even with a privacy-friendly host, you still need to handle firewall rules, not leak your real IP through misconfigured services, and ideally use full disk encryption.
Has anyone here experimented with different hosting setups for onion services? Curious what the community recommends, especially for low-budget but serious use cases.