Whonix is an anonymous operating system that runs like an app and routes all Internet traffic through the Tor anonymity network. It offers privacy protection and anonymity online and is available for all major operating systems.
Technical readers can refer to the Whonix technical introduction instead.
Whonix is a free and open-source desktop operating system (OS) that is specifically designed for advanced security and privacy
. It's based on the Tor anonymity network, security-focused Linux Distribution
Kicksecure™
, GNU/Linux and the principle of security by isolation. Whonix defeats common attacks while maintaining usability.
Whonix uses an extensively security reconfigured of the Debian base (Kicksecure™ Hardened) which is run inside multiple virtual machines (VMs) on top of the host OS. This architecture provides a substantial layer of protection from malware and IP leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. Learn more.
Windows
macOS
Whonix for VirtualBox Linux installer
Kicksecure
VirtualBox
Qubes
USB
KVM
ISO (not yet)
Source Code
The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Whonix is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using Whonix. Learn more.
Whonix consists of two VMs: the Whonix-Gateway™ and the Whonix-Workstation™. The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. This innovative architecture allows for maximum privacy, keeps applications in check and makes DNS leaks impossible. Learn more.
Windows
macOS
Whonix for VirtualBox Linux installer
Kicksecure
VirtualBox
Qubes
USB
KVM
ISO (not yet)
Source Code
Now we're diving deep into what makes Whonix great. We'll provide a more detailed look and lots of links for you to even more thoroughly study Whonix.
Whonix is a free and open-source desktop operating system (OS) that is specifically designed for advanced security and privacy. It's based on the Tor anonymity network, security-focused Linux Distribution
Kicksecure™
, GNU/Linux and the principle of security by isolation.
Whonix defeats common attacks while maintaining usability. Online anonymity and censorship circumvention is attainable via fail-safe, automatic and desktop-wide use of the Tor network. This helps to protect from traffic analysis by bouncing communications around a distributed network of relays run by global volunteers. Without advanced, end-to-end, netflow correlation attacks, an adversary watching an Internet connection cannot easily determine the sites visited, and those sites cannot discover the user's physical location. [1]
Whonix uses an extensively security reconfigured of the Debian base (Kicksecure™ Hardened). It consists of two virtual machines -- Whonix-Gateway and Whonix-Workstation -- which are designed to be used on a supported host OS (Host Operating System Selection). The host OS supporting Whonix is usually the one installed on the user's computer, but OSes installed on external drives will also work (USB Installation). Users choose the preferred Whonix configuration and may use either a Type I hypervisor (Qubes-Whonix™), or a Type II hypervisor like KVM and VirtualBox.
This architecture provides a substantial layer of protection from malware and IP leaks. Applications are pre-installed and configured with safe defaults to make them ready for use with minimal user input. The user may install custom applications or personalize their desktop without fear of information leaks that could lead to de-anonymization. Whonix is the only actively developed OS designed to be run inside a VM and paired with Tor. Though technically a "desktop" operating system, the security and anonymity tools Whonix provides also make it ideally suited for hosting secure and anonymous onion services.
By helping users run applications anonymously Whonix aims to preserve privacy and anonymity. A web browser, IRC client, office suite, and more come pre-configured with security in mind. Internet traffic by Whonix is all routed through the Tor anonymity network.
Whonix is Freedom Software and is based on
Kicksecure™
(security-focused Linux Distribution), Tor [2], Debian GNU/Linux [3], and the principle of security by isolation.
Privacy is a human right. The increasing threat of mass surveillance and repression all over the world means our freedoms and privacy are rapidly being eroded. Whonix is a powerful solution to this problem. Anyone who values privacy, has business secrets, needs private communication or does sensitive work on their desktop or online can greatly benefit from using Whonix. This includes the following. Also see Users of Whonix.
Whonix consists of two VMs: the Whonix-Gateway and the Whonix-Workstation. [4] The former runs Tor processes and acts as a gateway, while the latter runs user applications on a completely isolated network. The Whonix architecture affords several benefits:
.Hiding your identity is harder than just hiding your IP. Internet tracking companies don't even need to know your IP address to be able to identify you. They have multiple alternative tracking technologies in their arsenal. Whonix provides full spectrum anti-tracking protection.
Table: Surveillance Technology, Impact and Whonix Defenses
| Surveillance Technology | Impact on your Privacy | Whonix Tracking Protection Technology |
|---|---|---|
| IP address tracking | IP is tied to user identity and physical location. | IP cloaking using Tor |
| Browser fingerprinting | Tracking, creating a profile of the user even if the user is already cloaking its IP. | Tor Browser |
| Website Traffic Fingerprinting | Your internet service provider (ISP) knows which websites and when you visited but does not know the exact details. And that even if the website is using https and you are using VPN. [5]
For example, if you are posting to a discussion forum, your ISP or a man-in-the-middle could know the time and that you used that discussion forum but not the exact contents of your post. However, due to the specific timing specifically over time an attacker could figure out who you are. |
IP cloaking using Tor |
| Personal keyboard typing fingerprinting | Re-identification once you are typing on a website because of your personal typing style. | kloak (keystroke anonymizer) |
| Time attacks | Individual computer time can give away your identity. | Boot Clock Randomization and secure network time synchronization through sdwdate (Secure Distributed Web Date) |
| Other threats. | Techniques like Stylometry (analysis of writing style) and various other tracking technologies can be employed to track users without the need for IP addresses. | Whonix is a technological means to anonymity, but staying safe necessitates complete behavioral change; it is a complex problem without an easy solution. The more you know, the safer you can be. See Documentation. |
Tip: Since Ubuntu is a Debian derivative, online help for Ubuntu most often works for Whonix.
In oversimplified terms, Whonix is just a collection of configuration files and scripts. Whonix is not a stripped down version of Debian; anything possible in "vanilla" Debian GNU/Linux can be replicated in Whonix. Likewise, most problems and questions can be solved in the same way. For example: "How do I install VLC Media Player on Whonix?" -- "The same way as in Debian apt install vlc. Whonix does not break anything, limit functionality, or prevent installation of compatible software.
Whonix is the best way to use Tor and provides the strongest protection for your privacy online by hiding your real IP address, because Whonix protects from leaks. In laymen's terms a leak occurs if a user expects to be wholly using Tor, but instead some application traffic bypasses Tor and is routed over the normal internet (clearnet). A solitary leak is all that is required to de-anonymize the user, for example via IP leaks, DNS leaks, UDP and other channels.
Even when Tor provides sufficient anonymity, it can be very complicated or impossible for users to configure applications so all traffic is routed through the Tor network. The reason is networking is very complex and most applications are not designed with anonymity or privacy in mind. Some applications like the Tor Browser Bundle are specifically designed for anonymity and attempt to eliminate all known leak vectors. Unfortunately, despite all best efforts leaks have occurred in the past due to Tor Browser Bundle software defects (bugs). In such cases, Whonix users were protected and unaffected by these leaks.
In Whonix, DNS and other related leaks (IP, DNS, UDP, ICMP) are impossible. Even malware with root privileges cannot discover the user's real IP address because Whonix's split-VM design ensures all internet traffic is routed through Tor.
Whonix is divided into two VMs:
This security by isolation configuration averts many threats posed by malware, misbehaving applications, and user error.
Figure: Whonix Operating System Design
(more technical illustrative images)
This is not an empty claim -- Whonix has been audited via the corridor (Tor traffic whitelisting gateway) and other leak tests. In over a decade, no leaks were ever discovered. Technical readers can refer to the Whonix technical introduction and security overview chapters for further details.
Whonix relies on the Tor network to protect a user's anonymity online; all connections are forced through Tor or otherwise blocked. Tor helps to protect users by bouncing communications around a distributed network of relays run by volunteers all around the world. Without advanced, end-to-end, netflow correlation attacks, anybody watching a user's Internet connection cannot easily determine the sites visited, and those sites cannot learn the user's physical location. [6]
To learn more about Tor, see Why does Whonix use Tor and read the official documentation on the
Tor website
:
Table: Whonix Goals, Design and Limitations
| Category | Description |
|---|---|
| Whonix is |
|
| Whonix helps to |
|
| Whonix is not |
|
Each Whonix release is based on a particular version of Debian:
| Whonix version | Debian Version | Debian Codename |
|---|---|---|
Whonix 17.0.4.5 |
12 |
bookworm
|
Users can manually check the Whonix version at any time by following this step.
Note that Whonix does not have a fixed release schedule. A new stable release only becomes available when it is deemed ready. Interested users can query the issue tracker [8] and changelog to track developer progress. Stay Tuned.
New Debian Release
One month after a new stable version of Debian is released, Whonix VMs may no longer be supported on any older version of Debian. All users need to upgrade the Debian platform promptly after the deprecation notice in order to use Whonix safely.
New Whonix Release
One month after a new stable version of Whonix is released, older versions will no longer be supported. All users need to upgrade the Whonix platform promptly in order to remain safe.
Deprecation Notices
The deprecation notice is provided at least one month in advance and posted in the Whonix News forum. Stay Tuned! All users need to upgrade the respective platform promptly in order to remain safe. [9]
As per Debian Hosts.
The support schedule is mostly undefined at present, but likely to mirror Debian Hosts.
Qubes-Whonix version support policy
Whonix templates are supported by the Whonix Project. The Whonix Project has set its own support policy for Whonix templates in Qubes.
This policy requires Whonix template users to stay reasonably close to the cutting edge by upgrading to new stable releases of Qubes OS and Whonix templates within a month of their respective releases. To be precise:
We aim to announce both types of events one month in advance in order to remind users to upgrade. Stay Tuned.
Qubes 4.1 Whonix 16 will continue to receive security support until Qubes R4.2 is released as stable + 1 month. [10]
Recommended Qubes version:
If R4.2 rc4 works for you right now, I don’t see any benefit whatsoever to stay on R4.1.
Learning more about Whonix is the best way to determine whether it is a suitable solution in your personal circumstances. The following chapters are recommended:
, simple statistics based on data volume and timing can determine whether they match up.
Donate
sys-whonix and anon-whonix, respectively.
simple statistics can determine whether they match up.
.
Whonix About wiki page Copyright (C) Amnesia <amnesia at boum dot org>
Whonix About wiki page Copyright (C) 2012 - 2023 ENCRYPTED SUPPORT LP <adrelanos(at)whonix.org(Replace(at)with@.)Please DO NOT use e-mail for one of the following reasons: Private Contact: Please avoid e-mail whenever possible. (Private Communications Policy) Leaks Submissions: No. (No Leaks Policy) Sponsored posts: No. Paid links: No. SEO reviews: No. >This program comes with ABSOLUTELY NO WARRANTY; for details see the wiki source code.
This is free software, and you are welcome to redistribute it under certain conditions; see the wiki source code for details.
Gratitude is expressed to JonDos for permission to use material from their website. The "Summary" chapter of the Whonix Design and Goals wiki page contains content from the JonDonym documentation Features page.
The most watertight privacy operating system in the world.
At Whonix we value freedom and trust, supporting Open Source and Freedom Software
2012-2023 ENCRYPTED SUPPORT LP
We believe security software like Whonix needs to remain open source and independent. Would you help sustain and grow the project? Learn more about our 11 year success story and maybe DONATE!