OffshoreVps
Accounts Two-factor Records

Security at OffshoreVps: what we hold, what we do not, and what is on you

This page lists what the service does with your account and what it deliberately does not do. It describes the current design. It is not a certification, and we do not claim audits or standards we have not published.

Page by the OffshoreVps teamUpdated Written from our terms and dashboard features

What we hold

Account data: what exists and what does not

ItemWhat we do
Name, real email, ID, phone, addressNever requested and never stored
LoginA login we generate at sign-up. The email-style login has no inbox
PasswordStored only as a hash. We cannot read it or reissue it
Balance and ordersKept, because we need them to run the service
Support historyKept, so a ticket can be handled
Login historyDevice and browser history is kept. IP addresses are not
Inside your serversWe do not monitor or log what happens inside them

From our terms, privacy policy and FAQ.

Design choices

Deliberate trade-offs

01

No account recovery

We hold no identity to verify against, so a lost login cannot be reissued. If you lose it and have no copy, the account and balance are permanently inaccessible.

02

Two-factor authentication

Standard TOTP: scan a QR code with an authenticator app, confirm a 6-digit code and keep the one-time backup codes.

03

One deposit address per order

Each top-up gets its own address and quote, valid for a 10-minute window.

04

Refunds as credit

Because crypto payments are one-way, refunds are account credit at our discretion, not a return to your wallet.

What to do

Five things that keep your account and servers safe

Save your login the day you create it

Use a password manager and keep an offline copy. Treat the login like cash.

Turn on two-factor authentication

Enable it in the Security section of your dashboard and store the backup codes offline.

Use SSH keys on your servers

Turn off password logins. See SSH keys explained.

Harden the server first

Follow secure a new VPS in 15 minutes before you install anything.

Back up what matters

Enable backups or keep your own copies. See how to back up a VPS.

Not claimed

What this page does not claim

  • We do not publish an external security audit, certification or penetration-test report.
  • We do not offer a formal SLA with financial credits. See the terms and the status page.
  • No hosting is invisible. IP addresses are public and a server’s existence can be seen.

Report a vulnerability

If you find a security problem, tell us through the contact page or a ticket from your dashboard. Please give us time to fix it before you publish details.

FAQ

Security questions

01Do you store my password?

Only as a hash. We cannot read it or recover it. If you forget it, you can generate a new password from your dashboard while you are logged in.

02What if I lose my login?

There is no account recovery. If you have no copy of your login, the account and any balance are permanently inaccessible. This is a deliberate trade-off for not collecting personal data.

03Do you log what I do on my server?

We do not monitor or log customer activity inside your servers. Account records are limited to balance, orders, support history and login device and browser history, never IP addresses.

04Do you support two-factor authentication?

Yes, standard TOTP with an authenticator app, with one-time backup codes in case you lose your device.

05Are you certified or audited?

We do not claim any certification and do not publish an external audit. We describe what the service does and let you judge.

06How do I report a security issue?

Use the contact page or a ticket from your dashboard.

Questions about security?

Read the terms and privacy policy, or ask us.