We've got a new update. We now offer our own Web Console. Open the console and type ssh root@your-server-ip to reach any server you own, right from your browser. No SSH app needed.
A VPN you run yourself sends your traffic through one server you control, in a country you choose, with nobody else sharing the address. It is simple to set up and cheap to run. It is also not magic, so here is exactly what it does and does not do.
WireGuard is light. Prices are one-month prices; a 12-month term takes 50% off.
or $2.88/mo on a 12-month term (−50%)
Our cheapest size. It handles browsing, streaming and a handful of devices.
Configure and orderor $4.25/mo on a 12-month term (−50%)
More CPU headroom for many people connected at once, with room for a DNS filter or other services.
Configure and orderOn Ubuntu and Debian the package is wireguard. Check the current WireGuard documentation before you rely on any option. For a fuller walkthrough read set up WireGuard on your VPS.
sudo apt install wireguard
umask 077
wg genkey | tee server.key | wg pubkey > server.pub[Interface]
Address = 10.8.0.1/24
ListenPort = 51820
PrivateKey = <contents of server.key>
# send client traffic out through the server's public interface (replace eth0 if yours differs)
PostUp = iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
PostDown = iptables -t nat -D POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
[Peer]
# one block per device
PublicKey = <device public key>
AllowedIPs = 10.8.0.2/32echo 'net.ipv4.ip_forward=1' | sudo tee /etc/sysctl.d/99-wg.conf && sudo sysctl --system
sudo ufw allow 22/tcp
sudo ufw allow 51820/udp
sudo ufw enable
sudo systemctl enable --now wg-quick@wg0Give each device its own key, remove a device by deleting its peer block, keep the server patched, and set up SSH keys before anything else. Our 15-minute hardening guide covers it.
Yes. A small KVM VPS with full root can run WireGuard or OpenVPN. The $5.76 size (1 vCPU, 2 GB, 40 GB NVMe) is enough for a few devices.
No. It protects your traffic on the local network and changes the address websites see, but you are the only user, so the address points back to you. It is a privacy tool, not an anonymity tool.
For a personal server WireGuard is simpler and fast, and uses UDP only. OpenVPN can also run over TCP port 443, which helps on networks that block UDP. Pick WireGuard first and keep OpenVPN as a fallback.
A 1 vCPU server handles a household. For a team or a family with many devices at once, use 2 vCPU and 4 GB ($8.50 in Romania). Your real limit is the network port and your fair share of it.
Yes. Generate a login and pay with Monero, Bitcoin, USDT or another supported coin, with no name, ID or phone. See no-KYC VPS hosting.
Often not. Many streaming services block known datacenter addresses. Self-hosted VPNs are better for security and remote access than for unblocking.
Use a protocol built to resist detection. See censorship-resistant VPS.
Checked 19 October 2026. Chain sizes and software requirements change, so confirm against the source before you order.
Pick a country, pay in crypto, log in as root. No ID, no card.