Whonix ™ for Windows, macOS, Linux inside VirtualBox
Getting started with Whonix ™ in 4 simple steps.
GUI
- Whonix ™ with Xfce Graphical User Interface.
- This version of Whonix ™ is designed to run inside VirtualBox.
- Beginner-friendly and easy to use.
- It is the right choice for most users.
Please follow these steps to install Whonix ™ Xfce for VirtualBox.
1 Download Whonix ™ Xfce
Whonix ™ Xfce is available for Windows, MacOS and Linux
Optional: Verify the Whonix ™ Images cryptographically.
Version: 16.0.9.8

How to verify the Whonix ™ Images : Whonix ™ virtual machine images are cryptographically signed by Whonix ™ developer Patrick Schleizer using OpenPGP and signify.
Do you already how to perform digital software verification using an OpenPGP and/or signify key?
- Yes: Acquire the Whonix ™ Signing Key and the Whonix ™ signatures straight away and proceed.
- No: Consider the following instructions:
2 Install VirtualBox
Download and install VirtualBox for your operating system.
Windows
Optional: Digital software verification.
VirtualBox for Windows is not signed with OpenPGP / gpg. It is signed with authenticode.
After downloading the VirtualBox installer exe and starting it, the user should verify that sure that Verified publisher:
is Oracle Corporation
.
Figure: Windows digital software verification window for VirtualBox
macOS
Optional: Digital software verification.
VirtualBox for macOS is not signed with OpenPGP / gpg. It is notarized for macOS's gatekeeper. See also Apple's official documentation Safely open apps on your Mac.
Ubuntu
Ubuntu host operating systems:
Tested on October 2022 using Ubuntu version 22.04
. Older versions are not recommended.
Command Line (All Users)
1. On the host.
Open a terminal.
2. Update the package lists.
sudo apt update
3. Install VirtualBox and Linux kernel headers.
sudo apt install --no-install-recommends virtualbox-qt linux-headers-generic
4. Add your current user to group vboxusers
. [1]
sudo adduser $(whoami) vboxusers
5. Done.
The procedure of installing the VirtualBox host software is complete.
Software Center (only if not using SecureBoot)
Ubuntu Software Center can be used to install VirtualBox. The process is similar to installation of most other applications.
This only works for users with computers that do not have "SecureBoot" enabled. If the user's computer is using "SecureBoot" the user need to either disable "SecureBoot" in the BIOS or use the command line based instructions. [2]
1. Open the start menu.
2. Click on the Ubuntu Software Center icon.
Figure: Ubuntu Software Center icon
3. Click on the magnifying glass to search. → Type virtualbox
. → Press enter. → In the search results, click on VirtualBox.
Figure: Ubuntu Software Center - Search For VirtualBox
4. Click on Install and wait.
Figure: Ubuntu Software Center Search Result
5. Installation of VirtualBox has been completed.
When the installation has completed, the install icon changes to the uninstall icon. Do not click the uninstall button.
Figure: Ubuntu Software Center - VirtualBox has been installed
6. Click on Show Applications. → Click on Virtual Box start the VirtualBox graphical user interface (GUI).
Figure: Ubuntu Software Center #4
7. Done.
The procedure of installing and starting VirtualBox is complete.
Debian
Debian host operating systems:
- These instructions are for host operating systems running Debian
bullseye
, which is recommended. - Other Debian releases might work, but this is untested. In case of other Debian release:See also "Linux host operating systems" below.See also "Linux" on the right.
- To acquire the Recommended VirtualBox version tested with Whonix ™, package
virtualbox-qt
should be installed from Debianfasttrack
repositoryaccording to the following instructions. [3]
1. On the host.
Open a terminal.
2. Add Debian the fasttrack
repository.
Update the package lists.
sudo apt update
Install the Debian fasttrack
signing key.
sudo apt install --no-install-recommends fasttrack-archive-keyring
Add the Debian fasttrack
repository.
echo 'deb https://fasttrack.debian.net/debian/ bullseye-fasttrack main contrib non-free' | sudo tee /etc/apt/sources.list.d/fasttrack.list
3. Add Debian the backports
repository. [4]
echo 'deb https://deb.debian.org/debian bullseye-backports main contrib non-free' | sudo tee /etc/apt/sources.list.d/backports.list
4. Update the package lists again. [5]
sudo apt update
5. Install VirtualBox and Linux kernel headers.
sudo apt install --no-install-recommends virtualbox-qt linux-headers-$(dpkg --print-architecture)
6. Add your current user to group vboxusers
. [1]
sudo adduser $(whoami) vboxusers
7. Done.
The procedure of installing the VirtualBox host software is complete.
Kicksecure
Kicksecure ™ host operating systems:
Instructions for Kicksecure ™ are simpler than instructions for Debian. [6]
1. On the host.
Open a terminal.
2. Update package lists.
sudo apt update
3. Install VirtualBox and Linux kernel headers.
sudo apt install --no-install-recommends virtualbox-qt
4. Add your current user to group vboxusers
. [1]
sudo adduser $(whoami) vboxusers
5. Done.
The procedure of installing the VirtualBox host software is complete.
Linux
Hosts using a non-Debian operating system:
- Install VirtualBox as per the normal mechanism for your Linux distribution. No special instructions for Whonix ™ are required. The installation of a recent VirtualBox host software is unspecific to Whonix ™. Consult the documentation of your Linux distribution.
- Whonix ™ has has been tested with, expects VirtualBox version
latest
. - For example the outdated VirtualBox version
5.2.18
is incompatible.
3 Import Whonix ™ into VirtualBox
For Whonix ™ VirtualBox import instructions, please press on expand on the right.
Follow these steps to import Whonix ™ into VirtualBox. Click images to enlarge
Miscellaneous
There are also Video Tutorials.
If you still need help, please check the Support page.
For command line import instructions, see footnote. [8]
4 Start Whonix ™
Starting Whonix ™ is simple:
- Start VirtualBox
- Double-click the Whonix-Gateway ™ and Whonix-Workstation ™
First time user / Docs / Troubleshooting[edit]
See Also
- Documentation
- Follow Whonix ™ Developments
- In case of issues, see VirtualBox Troubleshooting.
For additional VirtualBox guides and information, please press on expand on the right.
Footnotes → press Expand
Footnotes[edit]
- ↑ 1.0 1.1 1.2
Optional: See: https://www.virtualbox.org/manual/ch02.html#install-linux-vboxusers
Also spams
~/.config/VirtualBox/VBoxSVC.log
log if not done. - ↑
This is unspecific to Whonix ™. This is because during package installation of a package that requires kernel modules when "SecureBoot" is enabled, Ubuntu's
dkms
is prompting the user for a password to encrypt the key which will be used to enroll the kernel module signing key. This is Ubuntu usability issue. It is unknown if any bug report / feature request for this exists. Please contribute, research, report this issue on Ubuntu's issue tracker. - ↑
This is
non-ideal
but required since VirtualBox in unavailable in official Debian
bullseye
repository and difficult to install due to VirtualBox Installation Challenges. Alternatively you could install VirtualBox from the Oracle (virtualbox.org) Repository, but this comes with different risks. VirtualBox might be updated by VirtualBox developers before being tested with Whonix ™ which could then lead to issues. (Described in footnote here.) - ↑
This is required because the Debian
fasttrack
repository depends on the Debian thebackports
repository. - ↑
This is to acquire the Debian
fasttrack
repository package sources. - ↑
This is because by Kicksecure ™ default:
- The Debian
fasttrack
repository is already enabled. - The Debian
backports
repository is already enabled. - Kernel headers package "
linux-headers-$(dpkg --print-architecture)
is already installed.- Debian feature request: please provide linux-image-generic / linux-headers-generic
- Debian feature request: please provide linux-image-generic / linux-headers-generic
- The Debian
- ↑
https://www.virtualbox.org/ticket/17055#comment:3
- ↑
On the Linux platform.
1. Read License Agreement: vboxmanage import Whonix-XFCE-16.0.9.8.ova --vsys 0 --eula show --vsys 1 --eula show 2. Import Whonix-Gateway and Whonix-Workstation. vboxmanage import Whonix-XFCE-16.0.9.8.ova --vsys 0 --eula accept --vsys 1 --eula accept - ↑ Test 1
CLI
- Whonix ™ with command line interface (CLI).
- This version of Whonix ™ is designed to run inside VirtualBox.
- Whonix ™ with CLI is a version suited for advanced users -- those who want Whonix ™ without a graphical user interface (GUI). Everyone else should install the user-friendly Whonix ™ VirtualBox with GUI Xfce.
Please follow these steps to install Whonix ™ CLI for VirtualBox.
1 Download Whonix ™ CLI
Whonix ™ CLI is available for Windows, MacOS and Linux
Optional: Verify the Whonix ™ Images cryptographically.
Version: 16.0.9.8

How to verify the Whonix ™ Images : Whonix ™ virtual machine images are cryptographically signed by Whonix ™ developer Patrick Schleizer using OpenPGP and signify.
Do you already how to perform digital software verification using an OpenPGP and/or signify key?
- Yes: Acquire the Whonix ™ Signing Key and the Whonix ™ signatures straight away and proceed.
- No: Consider the following instructions:
2 Install VirtualBox
Download and install VirtualBox for your operating system.
Windows
Optional: Digital software verification.
VirtualBox for Windows is not signed with OpenPGP / gpg. It is signed with authenticode.
After downloading the VirtualBox installer exe and starting it, the user should verify that sure that Verified publisher:
is Oracle Corporation
.
Figure: Windows digital software verification window for VirtualBox
macOS
Optional: Digital software verification.
VirtualBox for macOS is not signed with OpenPGP / gpg. It is notarized for macOS's gatekeeper. See also Apple's official documentation Safely open apps on your Mac.
Ubuntu
Ubuntu host operating systems:
Tested on October 2022 using Ubuntu version 22.04
. Older versions are not recommended.
Command Line (All Users)
1. On the host.
Open a terminal.
2. Update the package lists.
sudo apt update
3. Install VirtualBox and Linux kernel headers.
sudo apt install --no-install-recommends virtualbox-qt linux-headers-generic
4. Add your current user to group vboxusers
. [1]
sudo adduser $(whoami) vboxusers
5. Done.
The procedure of installing the VirtualBox host software is complete.
Software Center (only if not using SecureBoot)
Ubuntu Software Center can be used to install VirtualBox. The process is similar to installation of most other applications.
This only works for users with computers that do not have "SecureBoot" enabled. If the user's computer is using "SecureBoot" the user need to either disable "SecureBoot" in the BIOS or use the command line based instructions. [2]
1. Open the start menu.
2. Click on the Ubuntu Software Center icon.
Figure: Ubuntu Software Center icon
3. Click on the magnifying glass to search. → Type virtualbox
. → Press enter. → In the search results, click on VirtualBox.
Figure: Ubuntu Software Center - Search For VirtualBox
4. Click on Install and wait.
Figure: Ubuntu Software Center Search Result
5. Installation of VirtualBox has been completed.
When the installation has completed, the install icon changes to the uninstall icon. Do not click the uninstall button.
Figure: Ubuntu Software Center - VirtualBox has been installed
6. Click on Show Applications. → Click on Virtual Box start the VirtualBox graphical user interface (GUI).
Figure: Ubuntu Software Center #4
7. Done.
The procedure of installing and starting VirtualBox is complete.
Debian
Debian host operating systems:
- These instructions are for host operating systems running Debian
bullseye
, which is recommended. - Other Debian releases might work, but this is untested. In case of other Debian release:See also "Linux host operating systems" below.See also "Linux" on the right.
- To acquire the Recommended VirtualBox version tested with Whonix ™, package
virtualbox-qt
should be installed from Debianfasttrack
repositoryaccording to the following instructions. [3]
1. On the host.
Open a terminal.
2. Add Debian the fasttrack
repository.
Update the package lists.
sudo apt update
Install the Debian fasttrack
signing key.
sudo apt install --no-install-recommends fasttrack-archive-keyring
Add the Debian fasttrack
repository.
echo 'deb https://fasttrack.debian.net/debian/ bullseye-fasttrack main contrib non-free' | sudo tee /etc/apt/sources.list.d/fasttrack.list
3. Add Debian the backports
repository. [4]
echo 'deb https://deb.debian.org/debian bullseye-backports main contrib non-free' | sudo tee /etc/apt/sources.list.d/backports.list
4. Update the package lists again. [5]
sudo apt update
5. Install VirtualBox and Linux kernel headers.
sudo apt install --no-install-recommends virtualbox-qt linux-headers-$(dpkg --print-architecture)
6. Add your current user to group vboxusers
. [1]
sudo adduser $(whoami) vboxusers
7. Done.
The procedure of installing the VirtualBox host software is complete.
Kicksecure
Kicksecure ™ host operating systems:
Instructions for Kicksecure ™ are simpler than instructions for Debian. [6]
1. On the host.
Open a terminal.
2. Update package lists.
sudo apt update
3. Install VirtualBox and Linux kernel headers.
sudo apt install --no-install-recommends virtualbox-qt
4. Add your current user to group vboxusers
. [1]
sudo adduser $(whoami) vboxusers
5. Done.
The procedure of installing the VirtualBox host software is complete.
Linux
Hosts using a non-Debian operating system:
- Install VirtualBox as per the normal mechanism for your Linux distribution. No special instructions for Whonix ™ are required. The installation of a recent VirtualBox host software is unspecific to Whonix ™. Consult the documentation of your Linux distribution.
- Whonix ™ has has been tested with, expects VirtualBox version
latest
. - For example the outdated VirtualBox version
5.2.18
is incompatible.
3 Import Whonix ™ into VirtualBox
For Whonix ™ VirtualBox import instructions, please press on expand on the right.
Follow these steps to import Whonix ™ into VirtualBox. Click images to enlarge
Miscellaneous
There are also Video Tutorials.
If you still need help, please check the Support page.
For command line import instructions, see footnote. [8]
4 Start Whonix ™
Starting Whonix ™ is simple:
- Start VirtualBox
- Double-click the Whonix-Gateway ™ and Whonix-Workstation ™
First time user / Docs / Troubleshooting[edit]
See Also
- Documentation
- Follow Whonix ™ Developments
- In case of issues, see VirtualBox Troubleshooting.
For additional VirtualBox guides and information, please press on expand on the right.
Footnotes → press Expand
Footnotes[edit]
- ↑ 1.0 1.1 1.2
Optional: See: https://www.virtualbox.org/manual/ch02.html#install-linux-vboxusers
Also spams
~/.config/VirtualBox/VBoxSVC.log
log if not done. - ↑
This is unspecific to Whonix ™. This is because during package installation of a package that requires kernel modules when "SecureBoot" is enabled, Ubuntu's
dkms
is prompting the user for a password to encrypt the key which will be used to enroll the kernel module signing key. This is Ubuntu usability issue. It is unknown if any bug report / feature request for this exists. Please contribute, research, report this issue on Ubuntu's issue tracker. - ↑
This is
non-ideal
but required since VirtualBox in unavailable in official Debian
bullseye
repository and difficult to install due to VirtualBox Installation Challenges. Alternatively you could install VirtualBox from the Oracle (virtualbox.org) Repository, but this comes with different risks. VirtualBox might be updated by VirtualBox developers before being tested with Whonix ™ which could then lead to issues. (Described in footnote here.) - ↑
This is required because the Debian
fasttrack
repository depends on the Debian thebackports
repository. - ↑
This is to acquire the Debian
fasttrack
repository package sources. - ↑
This is because by Kicksecure ™ default:
- The Debian
fasttrack
repository is already enabled. - The Debian
backports
repository is already enabled. - Kernel headers package "
linux-headers-$(dpkg --print-architecture)
is already installed.- Debian feature request: please provide linux-image-generic / linux-headers-generic
- Debian feature request: please provide linux-image-generic / linux-headers-generic
- The Debian
- ↑
https://www.virtualbox.org/ticket/17055#comment:3
- ↑
On the Linux platform.
1. Read License Agreement: vboxmanage import Whonix-XFCE-16.0.9.8.ova --vsys 0 --eula show --vsys 1 --eula show 2. Import Whonix-Gateway and Whonix-Workstation. vboxmanage import Whonix-XFCE-16.0.9.8.ova --vsys 0 --eula accept --vsys 1 --eula accept - ↑ Test 1
Questions and answers
Questions and Answers[edit]
- Can I combine Whonix-Gateway ™ CLI with Whonix-Workstation ™ Xfce? Yes, you can! Learn more.
- Why use VirtualBox over KVM?
- Why use VirtualBox over Qubes?
- FAQ

We believe security software like Whonix needs to remain open source and independent. Would you help sustain and grow the project? Learn more about our 10 year success story and maybe DONATE!