All activity in a virtual machine, all internet traffic through the Tor® network

Whonix is the best way to use Tor® and provides the strongest protection of your IP address.

Impossible to leak IP address

Connections are forced through Tor®. DNS leaks are impossible, and even malware with root privileges cannot discover the user's real IP address. Leak tested through corridor (Tor® traffic whitelisting gateway) and other leak tests.

Live Mode

Booting into Live Mode is a simple as choosing Live Mode in the boot menu.

Based on Kicksecure ™

Whonix ™ is based on Kicksecure ™ which is a a security-hardened Linux distribution.

Based on Tor®

Whonix utilizes Tor®, which provides an open and distributed relay network to defend against network surveillance.

Keystroke Anonymization

Keystrokes can be used to track users. To prevent this, Whonix comes with kloak installed by default.

Protect against guard discovery and related traffic analysis attacks

vanguards

Entropy Enhancements

Better encryption thanks to preinstalled random number generators.

Stream Isolation

Distinct applications are routed through different paths in the Tor® network.

AppArmor

AppArmor profiles restrict the capabilities of commonly used, high-risk applications.

Kernel Self Protection Settings

Whonix uses Kernel Hardening Settings as recommended by the Kernel Self Protection Project (KSPP).

Virus Protection

Additional security hardening measures and user education through Whonix provide better protection from viruses.

Console Lockdown

Console Lockdown disables legacy login methods for improved security hardening.

Advanced Firewall

Configured for anonymous Tor® use.

Tor® Browser

Visit any destination including modern websites such as YouTube.

swap-file-creator

Running low on RAM isn't a security problem. swap-file-creator will create an encrypted swap file.

Hosting Location Hidden Servers

Whonix is the safest way to host Onion Services.

Complete respect for privacy

Your data always belongs to you, and only you. We don’t make advertising deals or collect sensitive personal data. We’re funded directly by our users paying what they want. And that’s how it should be.

Warrant Canary

A canary confirms that no warrants have been served on the Whonix project.

Based on Debian

In oversimplified terms, Whonix is just a collection of configuration files and scripts. Whonix is not a stripped down version of Debian; anything possible in "vanilla" Debian GNU/Linux can be replicated in Whonix. About Whonix

Complete user freedom

There are no artificial restrictions on how users can reconfigure the system.

Digitally signed releases

Downloads are signed so you can verify they are genuine Whonix releases.

Open Source

All of Whonix source code is licensed under OSI Approved Licenses. We respect the rights of our users. All of Whonix is available for review, scrutiny, modification, and redistribution by anyone. This improves security and privacy for everyone.

Research and Implementation Project

Be wary of those confidently calling themselves all-knowing, all-perfect. Whonix is an actively maintained research project making constant improvements -- no shortcomings are ever hidden from users.