Whonix uses a heavily reconfigured Debian base which is run inside multiple virtual machines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and IP leaks. Applications are pre-installed and pre-configured with safe defaults to make them ready for use. The user is not jeopardized by installing custom applications or personalizing the desktop. Whonix is the only actively developed OS designed to be run inside a VM and paired with Tor.