From Whonix

< Dev


  • header hardcode
  • footer style
  • fix feature list 3 into 2 into 1 columns
  • code cleanup


  • confirm using google fonts is ok
    • not ok
  • Footer style
  • Header style
  • Big image for spotlight feature? "Enforces tor network connections, with full operating system virtualization". Replaces current duckduckgo image


  • Gray scale freedom of press logo. As per [archive] ?
    • The one small red square actually looks good.
  • lower size of duckduck go browser image (it currently is out of proportion, way bigger than all other images)
    • Both the tbb screenshot section and the "impossible to leak" are [large text | large image] image sections that highlight the biggest reasons to use whonix.
    • I realized "uses tbb" isn't a special feature, and I combined the two into "All activity takes place inside a virtual machine, all internet traffic is routed through Tor". Will need better text and image
  • The "Advanced Security Features" section could be similar to the "Fully Featured" section. Also using medium images.
    • At this point we'd be making "one big list of features" that our inspiration websites don't do. (One long list is boring and everything is treated as one thing in a long list.
    • The advanced security features tend to be more nerd stuff directed at an audience that doesn't need an image if isn't required, and easily ignored (but appreciated) by the nontechnical



media mentions

  • History
    • An eight year history of protecting our users against Real World Attacks.

    • https://
  • Fully-featured operating system
    • With so many completely free software applications available, we know there is something for everyone, including popular software applications from categories like internet, sound, and video, graphics, office, programming, education and games. Since Whonix ™ is based on Debian, thousands of software packages are available.

  • Default installed lightweight applications come preconfigured for anonymity, privacy and security
          • Tor Browser - https://
          • crypto currencies
            • bitcoin logo - https://
            • electrum logo - https://
            • monero logo - https://
          • Thunderbird - https://
          • OnionShare - https://
          • HexChat - https://
          • Thunar - https://
          • VLC - https://
          • KeePassXC - https://
          • xfce4-terminal - https://
          • discussion: 11 so far. elementary OS has 10. Should be enough. ristretto, xarchiver and xpdf maybe not so important.
          • ristretto image viewer - /usr/share/icons/hicolor/128x128/apps/ristretto.png (not looking good)
          • xarchiver - /usr/share/icons/hicolor/scalable/apps/xarchiver.svg (not looking good)
          • xpdf
  • Complete user freedom
    • In simple terms, Whonix is just a collection of configuration files and scripts. Whonix ™ is not a stripped down version of Debian; anything possible in "vanilla" Debian GNU/Linux can be replicated in Whonix ™. Likewise, most problems and questions can be solved in the same way. For example: "How do I install VLC Media Player on Whonix ™?" -- "The same way as in Debian apt-get install vlc. Whonix ™ does not break anything, limit functionality, or prevent installation of compatible software. Since Ubuntu is a Debian derivative, online help for Ubuntu most often works for Whonix ™.

    • https://
  • Anonymous browsing using Tor Browser
    • screenshot Tor Browser image duckduckgo, maximized, inside full screen inside Whonix-Workstation XFCE
      • https://
    • screenshot Browser image YouTube, maximized, inside full screen inside Whonix-Workstation XFCE
      • https://
  • Live mode
    • screenshots of grub boot menu with live mode - Whonix Live
      • https://
  • Android support
    • Run Android applications using Anbox.

    • icon: https://
    • screenshot showing anbox including F-Droid running in Whonix-Workstation XFCE
      • https://
  • Virus and malware protection
    • https://
    • description, bits (best ones, fitting only):
      • Viruses are trapped inside virtual machines.

      • Due to compartmentalization, viruses do not have access to the whole system.

      • There is a lot less malware for the Linux than for the Windows platform.

      • The design of GNU/Linux distributions is inherently more secure against viruses.

      • Additional Security Hardening measures and user education through Whonix ™ provide better protection from viruses.

  • Security hardening
    • AppArmor profiles to restrict the capabilities of commonly used, high-risk applications.
    • Full system Mandatory Access Control (MAC) [archive] policy (in development) - "AppArmor for everything" [1]
    • Linux Kernel Runtime Guard (LKRG) - kernel exploit protection
      • https://
    • TCP ISN CPU Information Leak Protection [archive] (tirdad [archive])
      • https://
    • Keystroke Anonymization [archive] (kloak [archive])
      • https://
    • security-misc [archive]
      • Whonix ™ uses Kernel Hardening Settings as recommended by the Kernel Self Protection Project (KSPP).

      • Making extensive use of strong Linux user account isolation.

      • Protect Linux user accounts against brute force attacks.

      • Console lockdown.

      • Preconfiguration of preinstalled applications for better security hardening.

    • Better encryption thanks to preinstalled true random number generators.

      • https://
    • Protected by a firewall.
      • https://
    • Based on Kicksecure ™, a security-hardened Linux distribution

    • Built-in Time Attack Defenses.
      • Clock is set to UTC and randomized at boot. (Boot Clock Randomization).

      • Secure network time synchronization through sdwdate (Secure Distributed Web Date).

        • https://
    • Stream Isolation
      • Identity separation through Stream Isolation.

      • https://
    • Swap file encryption.
      • https://
      • swap-file-creator [archive] will create an encrypted swap file when there is too little RAM.

  • Servers
  • Compatibility
    • Whonix ™ is available for all major operating systems. Most commonly used applications are compatible with the Whonix ™ design.

    • virtualizers
      • icons for VirtualBox, KVM, Qubes
        • https://
        • https://
        • https://
    • operating system support:
      • icons:
        • https://
        • https://
        • https://
        • https://
  • Fully auditable operating system
    • Whether you are a technology enthusiast, someone looking to protect the digital life of your family, or an enterprise IT/security department, you can use Whonix ™ freely for any purpose, study and share its source code, and adapt it to your needs.

    • Whonix ™ is a fully auditable operating system: you don’t have to trust our word that it respects and protects you. It is independently verifiable by security experts and software developers around the world.

    • https://
  • Open source
    • We respect the rights of our users. All of Whonix ™ is available for review, scrutiny, modification, and redistribution by anyone. Which improves security and privacy for everyone.

    • Learn Why

  • Safe and secure
    • We’re built on GNU/Linux, one of the most secure systems in the world. It’s the same software powering the U.S Department of Defense, the Bank of China, and more.

    • Digitally signed releases
      • https://
    • warrant canary
      • https://
  • Complete respect for privacy
    • Your data always belongs to you, and only you. We don’t make advertising deals or collect sensitive personal data. We’re funded directly by our users paying what they want. And that’s how it should be.

  • Based on Tor
    • Whonix ™ utilizes Tor's free software, which provides an open and distributed relay network to defend against network surveillance.

    • https://
  • Leak impossibility
    • Connections through Tor are enforced. DNS leaks are impossible, and even malware with root privileges cannot discover the user's real IP address.

      • https://
    • Leak tested through corridor (Tor traffic whitelisting gateway) and other leak tests.
  • Extensive documentation
    • https://
  • Vibrant community
  • Research and Implementation Project
    • Be wary of those confidently calling themselves all-knowing, all-perfect. Whonix is an actively maintained research project making constant improvements -- no shortcomings are ever hidden from users.

    • https://
  • Social share links
    • keep the already existing social share at the very bottom
    • remove google plus (since deprecated by google)
    • stylistic changes are OK
  • Legal links
    • keep the already existing legal links at the very bottom
    • Imprint Privacy Policy Cookie Policy Terms of Service DMCA E-Sign Consent Priority Support Professional Support Donate Investors

    • stylistic changes are OK

Resize Images[edit]


2000px-VLC Icon.svg.png

Error creating thumbnail: File with dimensions greater than 12.5 MP



Computer n screen.png


Tor browser duckduckgo2.jpg



Encrypted-156514 1280.png

2000px-AppArmor logo.svg.png


Osi standard logo 0.png


Virtualbox logo.png


P lkrg2.png


Random entropy.png

Error creating thumbnail: File with dimensions greater than 12.5 MP


Error creating thumbnail: File with dimensions greater than 12.5 MP



Tor browser youtube.jpeg

  1. Including APT, systemd, init, all systemd units, and all applications.