Whonix

Desktop Security Through Isolation

How Whonix Works

Whonix consists of two virtual machines: a Gateway (handles all Tor traffic) and a Workstation (where you work). The Workstation can ONLY connect through the Gateway, making IP leaks virtually impossible.

Architecture
Workstation VM → Gateway VM → Tor Network → Internet
(No direct internet access from Workstation)

Whonix vs Tails

FeatureWhonixTails
TypeVM-basedLive USB
PersistenceFullOptional
Leak ProtectionExcellentVery Good
Hardware AccessVirtualizedDirect
Best ForLong-term usePortable/temporary

Installation

  • Requires VirtualBox, KVM, or Qubes OS
  • Download both Gateway and Workstation images
  • Import into hypervisor
  • Start Gateway first, then Workstation