Note: Download both Gateway and Workstation virtual machine images.

(1.5 GB)
(1.6 GB)
Anonymous Download
Possible [1]
Download Security
without Verification
Download Security
with Verification
HTTP.png <html><a href="</html><html>/Whonix-Gateway-</html><html>.ova" target="_blank">Download Easy</a></html> <html><a href="</html><html>/Whonix-Workstation-</html><html>.ova" target="_blank">Download Easy</a></html> Yes [1] Very Low [2] High [3]
Button sig.png <html><a class="link-https" download href="/download/</html><html>-sig/Whonix-Gateway-</html><html>.ova.asc">OpenPGP Signature</a></html>

(<html><a class="link-https" download href="/download/</html><html>-sig/Whonix-Gateway-</html><html>.sha512sums">sha512</a></html>)

<html><a class="link-https" download href="/download/</html><html>-sig/Whonix-Workstation-</html><html>.ova.asc">OpenPGP Signature</a></html>

(<html><a class="link-https" download href="/download/</html><html>-sig/Whonix-Workstation-</html><html>.sha512sums">sha512</a></html>)

Yes [1] - -
Crypto key.png Verify the images using the Signing Key Yes [1] - -
Btorrent-icon.png[4] <html><a class="link-https" href="/download/</html><html>-torrent/Whonix-Gateway-</html><html>.ova.torrent">Torrent Download</a></html> <html><a class="link-https" href="/download/</html><html>-torrent/Whonix-Workstation-</html><html>.ova.torrent">Torrent Download</a></html> No Medium [5] High [3]
Onion1.png [6] <html><a href="http://bbbbbb6qtmqg65g6.onion/whonix/</html><html>/Whonix-Gateway-</html><html>.ova" target="_blank">Onion Download</a></html> <html><a href="http://bbbbbb6qtmqg65g6.onion/whonix/</html><html>/Whonix-Workstation-</html><html>.ova" target="_blank">Onion Download</a></html> Yes [1] Low High [3]
Template source.png Build from source code See Build Anonymity Very High [7] Best [7] [8]
  1. 1.0 1.1 1.2 1.3 1.4 By using the Tor Browser Bundle (TBB). For an introduction, see Tor Browser. See also Hide Tor and Whonix from your ISP.
  2. Man-in-the-middle attacks could poison the download.
  3. 3.0 3.1 3.2 It does not matter if the bulk download is done over an insecure channel if OpenPGP verification is used at the end.
  4. Torrent clients known to work: transmission, Vuze, Deluge. Check this clients table. If nobody is seeding at the time, only clients with the "as" feature can be used, because we are providing a webseed.
  5. It is at least as secure as SSL and SHA-1, and better than plain http. This is because the torrent file or magnet link is retrieved over https and the torrent/magnet client checks the SHA-1 checksum at the end. Using OpenPGP verification would be safer.
  6. Downloading over Tor is required to use the .onion. For example, using either the Tor Browser Bundle, Whonix, Tails, etc. for download.
  7. 7.0 7.1 When building from source code, audit the source code to check it is non-malicious and reasonably bug free. There is no need to Trust the developers, the website or the SSL certificate authorities.
  8. This provides better security via additional verification that the source code is from the original authors and is identical to what others are using.

Random News:

Check out the Whonix blog.

https | (forcing) onion

Share: Twitter | Facebook

This is a wiki. Want to improve this page? Help is welcome and volunteer contributions are happily considered! See Conditions for Contributions to Whonix, then Edit! IP addresses are scrubbed, but editing over Tor is recommended. Edits are held for moderation.

Whonix is a licensee of the Open Invention Network. Unless otherwise noted, the content of this page is copyrighted and licensed under the same Libre Software license as Whonix itself. (Why?)