Start9 is the Bitcoin full-node platform most strongly associated with sovereignty-first design — founded by Aiden McClelland and Matt Hill (Start9 Labs) and publishing StartOS, an open-source Linux operating system with explicit minimum-third-party-dependency architecture: Tor on by default, no cloud services, everything intended to run locally with remote access via Tor onion addresses. Hardware options span the Start9 Server One (1,000+), DIY on Raspberry Pi, and existing hardware; the distinguishing feature is the design philosophy — Start9 makes sovereignty defaults that other platforms leave optional. The trade-offs are higher hardware cost than Umbrel, smaller community, and defaults that can feel paranoid to casual users. For sovereignty-aligned holders Start9 is structurally the right choice; for convenience-first users Umbrel is easier — both are legitimate, the choice reflects philosophical preference more than technical capability.
What this is
Vendor: Start9 Labs (start9.com). Founded by Aiden McClelland and Matt Hill (~2018). The team has built Start9 around an explicit sovereignty-first philosophy — they publish substantial writing about the political-philosophical foundations of their design choices.
Products as of 2026-05-14:
- Start9 Server One ($700+) — dedicated server hardware; substantial computing power; quiet
- Start9 Server Pure ($1,000+) — premium hardware option
- DIY on Raspberry Pi — StartOS image supports Pi 4/5; total cost ~$150-250
- Existing hardware — StartOS supports various x86 and ARM platforms
Platform: StartOS — Linux-based, with the Start9 Marketplace providing Bitcoin Core, LND, BTCPay Server, and a curated set of services. The Marketplace is smaller than Umbrel’s app store but is consistent with the sovereignty-first philosophy.
Licence: MIT (OSI-approved); reproducible builds; verified software.
Who this is for
Start9 is a strong fit for:
- Sovereignty-aligned holders — the design philosophy matches the strongest self-custody stance
- Privacy-conscious users — Tor by default; minimum third-party dependencies
- Users willing to pay for the design — the hardware is more expensive but the experience reflects the philosophy
- Users who would otherwise build custom — Start9 provides much of the custom-build benefit with less setup cost
- Lightning operators with sovereignty focus — Start9’s Lightning integration emphasizes sovereignty
Start9 is less appropriate for:
- Convenience-first users — Umbrel is easier
- Highly budget-constrained users — Raspiblitz DIY is cheaper
- Users wanting the largest app ecosystem — Umbrel has more
- The casually-curious — Start9’s defaults can feel like over-engineering for users without a clear sovereignty motivation
Features and capabilities
Hardware options
- Server One — Intel-based; quiet; reasonably powerful
- Server Pure — premium build; longer-life components; more storage capacity
- Raspberry Pi 4/5 — DIY supported by StartOS
- Existing hardware — broad x86 and ARM support
Software stack
- StartOS — the operating system; Linux-based; sovereignty-first defaults
- The Start9 Marketplace — curated services
- Tor by default — every relevant service is accessible via Tor onion address
- Encrypted backups — built-in backup mechanisms
Bitcoin-specific features
- Bitcoin Core (full node, pruning options)
- LND or Core Lightning
- BTCPay Server
- Electrs for wallet backend
- Sparrow Server, Specter Desktop integration
- Tor onion addresses for all wallet-accessible services
Start9-specific design choices
- Tor by default — the platform is configured to use Tor for connectivity unless explicitly disabled
- No cloud relay — remote access is via Tor only; no Start9-hosted relay
- Minimum third-party dependencies — the platform aims to function entirely on the holder’s hardware
- Explicit privacy posture — defaults err on the side of privacy rather than convenience
- Reproducible builds — third parties can verify shipped software matches published source
Tradeoffs vs alternatives
| Dimension | Start9 | Umbrel | Raspiblitz | Custom Bitcoin Core |
|---|---|---|---|---|
| Hardware cost | $300-1000 | $60-300 | $150-250 | Variable |
| UX | Good | Best | Adequate | None |
| Sovereignty | Best (explicit philosophy) | Good | Good | Best (no vendor) |
| Privacy defaults | Strong (Tor by default) | Reasonable | Reasonable | Manual |
| App ecosystem | Curated marketplace | Largest | Limited | None |
| Community size | Smaller | Largest | Medium | N/A |
| Cloud relay option | No | Yes (opt-in) | No | N/A |
| Reproducible builds | Yes | Partial | Yes | N/A |
| Licence | MIT | Polyform Strict | MIT | Various |
The Start9 vs Umbrel choice is the principal comparison most holders consider. Both are legitimate; the choice reflects philosophical preference.
Setup and operation
The setup flow:
- Acquire hardware — Server One or Server Pure shipped from Start9, or DIY Raspberry Pi following the StartOS documentation
- Install StartOS — image to the storage device; first boot configures the system
- Initial setup — set password; the system installs base services with sovereignty-first defaults
- Install Bitcoin Core — from the Marketplace; pairs with Tor by default; handles the Initial Block Download (1-3 days)
- Install Electrs — from the Marketplace
- Configure wallets — point coordinators at the Tor onion address of the Electrs service (see Connecting wallets to your own node)
The setup is more deliberate than Umbrel’s — Start9 makes the sovereignty defaults explicit, which means more configuration choices to engage. For sovereignty-aligned users, this is a feature; for casual users, it can feel like friction.
Security considerations
Strengths
- MIT-licensed open-source — the strongest open-source posture for a node platform
- Tor by default — eliminates many privacy concerns at the platform level
- No cloud relay — no Start9-hosted intermediary in normal operation
- Reproducible builds — independent verification of shipped software
- Sovereignty-first defaults — convenience trade-offs are surfaced explicitly
Known concerns
- Smaller community — fewer issues are caught publicly; fewer third-party tutorials
- Higher hardware cost — limits adoption breadth
- The Marketplace is curated — fewer services than Umbrel; some users would prefer broader options
- Slower-paced development than Umbrel — the smaller team ships features more cautiously
- Sovereignty defaults can feel paranoid — for users without a strong sovereignty motivation
Supply-chain integrity
StartOS images are signed and the GPG signatures are published. Verify before installation. Start9 hardware ships from Canada; verify packaging.
Pricing and acquisition
As of 2026-05-14:
- Start9 Server One: $700+ depending on configuration
- Start9 Server Pure: $1,000+ (premium hardware)
- StartOS (software): free
- DIY parts: $150-250 for Raspberry Pi-based builds
Authorized channels: start9.com directly; some authorized resellers (Bitcoin-focused stores).
Common pitfalls
Buying Start9 for the wrong use case. If the holder wants the simplest possible UX, Umbrel is structurally a better choice. Start9 rewards engagement with the design philosophy.
Disabling Tor defaults to “fix” connectivity. The Tor defaults are part of the sovereignty value. Convenience tweaks that disable Tor undermine what Start9 is offering.
Treating the higher hardware cost as wasted. The hardware is engineered for the use case; for sovereignty-aligned holders, the investment is justified. For convenience-first users, the investment is over-engineering.
Expecting the largest app ecosystem. Start9’s Marketplace is curated; users wanting more apps may be disappointed. The curation is part of the sovereignty position.
Forgetting to back up the StartOS configuration. Like all node platforms, Lightning channels and app data require backup. Start9 provides encrypted-backup mechanisms; use them.
Operating Start9 in a way that defeats its sovereignty defaults. If the holder configures Start9 to behave like Umbrel (cloud relay, no Tor, etc.), the philosophical match doesn’t matter. Engage the defaults.
Tooling and resources
- start9.com — official site
- The Start9 community forum
- The Start9 GitHub repositories — StartOS source
- The Start9 blog — design-philosophy posts; release notes
- Running a full node — the framework
- Node hardware options — the comparative landscape
The synthesis document: Bitcoin Self-Custody & Security (LegacyCipher, April 2026) — Start9 treated as the sovereignty-focused alternative to Umbrel.
As of 2026-05-14: Start9 is actively developed; the Server One and Server Pure hardware are the current generations. The Start9 team has expanded modestly and continues to publish substantive writing about the design philosophy.
Related notes
The framing context:
- Running a full node — when and why to run one
- Node hardware options — the platform comparison
- Connecting wallets to your own node — the wallet-side configuration
Adjacent platform:
- Umbrel — the consumer-friendly alternative
The moral framework:
- Self-custody as a moral act — Start9’s design philosophy aligns with the moral framework
- Sovereignty and personal responsibility — the political-philosophical foundation
Custody configurations:
- Multisig setups — Start9 integrates with coordinators
- Collaborative custody services
The sub-MOC home: