Whonix

Whonix is a free and open-source operating system built on Debian GNU/Linux and the Kicksecure hardened base, designed for anonymity and privacy. It is maintained by the project's contributors and is notable for an architecture that splits the system into two cooperating virtual machines to make IP and DNS leaks structurally difficult.

Gateway and Workstation

Whonix runs as two VMs. The Whonix-Gateway handles all Tor processing and network routing, while the Whonix-Workstation runs user applications on an isolated network that can only reach the internet through the Gateway. Because the Workstation has no direct route to the physical network, even malware running with root privileges inside it cannot discover the user's real IP address, and DNS leaks are prevented by design.

Tor-by-default networking

Every connection from the Workstation is forced through the Tor network via the Gateway, providing location and identity separation without relying on the application to behave correctly. This isolation model is a key reason Whonix is bundled as the networking option inside Qubes OS, where the Gateway and Workstation become separate qubes.

Whonix differs from a live amnesic system in that it is typically installed and persistent, trading the always-clean-slate property for a hardened, leak-resistant network boundary. Sovereign users often weigh it against Tails OS and run it inside Qubes OS, depending on whether amnesia or compartmentalization is the priority. Both build on the same underlying Tor network.