sporestack

Overview

SporeStack is a long-running, privacy-centric VPS host and reseller that has operated since 2017. Unlike conventional cloud providers that demand passports, phone numbers, and credit cards, SporeStack strips onboarding down to its absolute minimum: generate a token, fund it with cryptocurrency, and deploy servers through a web interface, CLI, or full API. The service resells infrastructure from established providers including DigitalOcean, Vultr, and its own "SporeStack EU" nodes, giving users geographic flexibility without ever surrendering personal data. For developers, privacy advocates, and anyone seeking anonymous VPS hosting, this architecture removes the typical identity chokepoints entirely.

The platform targets technical users comfortable with SSH keys and API calls rather than click-and-drag simplicity. You choose your server size, region, operating system, billing cycle, and even a "days to live" expiration—useful for ephemeral workloads. Support is human-only, checked at least every twelve hours with typical weekday response windows between 15:00 and 00:00 UTC. There is no AI chatbot and no round-the-clock staffing, which trades immediacy for authenticity.

Privacy & KYC

SporeStack sits at the most permissive end of the no-KYC spectrum: L0 — Trustless. No account is required. No email. No phone. No name. You generate a payment token, write it down, and that token becomes your sole credential. Lose it and you lose access to your funds and servers—there is no recovery flow because there is no identity to verify.

• IP logging: The privacy guide explicitly acknowledges that they cannot guarantee absolute privacy, but they actively reduce data exposure. Notably, they do not block requests missing a user-agent header, eliminating one common tracking vector.
• Tor access: A dedicated Tor hidden service is available for users who want to interact with the platform through Tor Browser, Tails, or Whonix.
• Operational security tips: SporeStack advises stripping identifying comments from SSH public keys, using unique keys per token or per server, and leaving hostnames vague or blank since hostnames are visible in plain text.
• Jurisdiction awareness: The service notes that legal requests may come from both the United States (where SporeStack is based) and the country hosting the specific server.

For maximum anonymity, the provider itself recommends Monero over Bitcoin or Bitcoin Cash, given Monero's shielded transaction graph.

Supported assets & payments

SporeStack accepts three cryptocurrencies: Monero (XMR), Bitcoin (BTC), and Bitcoin Cash (BCH). Deposits are denominated in USD and converted to your token's balance at payment time. The minimum deposit has drawn some community criticism—users report a $100 USD minimum to fund a token, which creates a higher barrier to entry than typical pay-as-you-go hosts. This is not an insignificant consideration for casual users or those wanting to test the service cheaply.

Once funded, your token balance acts as a prepaid wallet. Server launches draw against this balance based on size, region, and billing cycle. The "days to live" field lets you set automatic expiration, which can help control costs and reduce long-term exposure. Invoices and transaction history are tied to your token, not to any personal identity.

Security & custody

SporeStack operates on a custodial token model: your prepaid balance sits with the provider, not in a self-custody smart contract. This is a necessary trade-off for a service that must pay upstream infrastructure providers in fiat. The security of your funds depends on token secrecy and SporeStack's operational integrity. The trust score of 60/100 reflects this centralized balance risk, though the platform's longevity since 2017 provides some track record reassurance.

Server security is largely user-responsible. You provide an SSH public key for root access at launch—password authentication is not the default. The platform's acceptable use policy is strict and actively enforced: port scanning, phishing, DDoS, hacking, copyright infringement, and child exploitation result in immediate server termination and token forfeiture without refund. This hardline stance protects the provider's upstream relationships but means users must ensure their own activities stay within bounds.

Who it's for — verdict

SporeStack is purpose-built for privacy-conscious developers, researchers, and infrastructure operators who need reliable VPS hosting without identity verification. The API-first design rewards automation and scale—users launching dozens or hundreds of servers will find the tooling far more natural than those seeking a simple control panel. The Monero-native payment option, Tor gateway, and explicit operational-security guidance make it a standout for anonymity-maximizing workflows.

The $100 minimum deposit and technical onboarding will deter casual users or quick experiments. Those wanting instant, low-commitment hosting may prefer alternatives. Similarly, anyone requiring 24/7 support guarantees or managed services should look elsewhere. But for the core audience of no-KYC, anonymous server hosting, SporeStack remains one of the most principled and longest-running options in 2026.