Whonix

Superior Internet Privacy with Whonix

Whonix is an operating system focused on anonymity and security. It hides the user's IP address and location and uses the Tor network to anonymize data traffic, so contacted servers, network eavesdroppers, and Tor network operators cannot easily determine which sites are visited or the user's physical location. It runs like an app inside your operating system and is based on Debian GNU/Linux, the Tor anonymity network, KVM, VirtualBox, and Qubes. Whonix has been in use for over 12 years.

12 alternatives to Whonix

Ranked by how well each tool replaces Whonix: shared features, audience, price and popularity.

Tor Project (Tor Browser)
Browse the internet anonymously with Tor Browser
Covers 0 of 15 key features.
Free planOpen source
64 out of 100 matchFree
Proton VPN
VPN service for private, secure internet access
Covers 0 of 15 key features.
Free planOpen source
60 out of 100 matchContact sales
anonymoX
Free browser add-on that reroutes traffic through proxy servers to hide your real IP
Covers 0 of 15 key features.
Free plan
60 out of 100 matchContact sales
Privoxy
Non-caching web proxy with advanced filtering capabilities for enhancing privacy, modif
Covers 0 of 15 key features.
Open source
59 out of 100 match—
IVPN
Audited, open-source VPN service with WireGuard, killswitch and tracker blocker. No logs,
Covers 0 of 15 key features.
Open source
58 out of 100 match$6/mo
DotVPN
Say hello to the better way to VPN
Covers 0 of 15 key features.
Free plan
58 out of 100 match$2.99/mo
Xeovo
VPN and stealth proxy service for privacy and bypassing restrictions
Covers 0 of 15 key features.
57 out of 100 match$3.32/mo
OVPN
The VPN service that protects you without getting in the way
Covers 0 of 15 key features.
57 out of 100 match$4.22/mo
Betternet
Privacy protection, simplified.
Covers 0 of 15 key features.
Free plan
57 out of 100 match$1.99/mo
TorrentPrivacy
Hide your online activity + Download Torrents Anonymously.
Covers 0 of 15 key features.
56 out of 100 match—
bash.ws
Network security and privacy testing tools
Covers 0 of 15 key features.
Free plan
54 out of 100 matchFree
Hide My IP
Unblock Sites and Surf Anonymously
Covers 0 of 15 key features.
52 out of 100 match$2.91/mo

Key facts

Starts at: Free
Free plan: Yes
Free trial: No
Open source: Yes

What it does

Dual vm architecture whonix gateway and whonix workstation for ip hiding
Full ip dns protocol leak protection
Fail closed mechanism application traffic is either sent over tor or completely blocked
Tor browser pre installed for browsing
Stream isolation to prevent identity correlation through circuit sharing
Boot clock randomization and secure network time synchronization sdwdate against timing fingerprinting
Keystroke anonymization kloak to prevent keyboard typing style tracking
Mouse movement anonymization
Transparent proxying for applications without proxy support
Torification of custom and user installed applications
Support for tor bridges and obfuscated bridges via anon connection wizard
Onion services onion hosting support
Corridor tor traffic whitelisting gateway
Disposable whonix workstation in qubes whonix
Live mode in non qubes whonix loses all data after shutdown also available as disposable in qubes whonix loses all data after shutdown in qubes whonix live mode is available in non qubes whonix installed software is hidden from network observers including internet service providers optional isolating proxy whonix prevents anyone from learning the user s ip address whonix prevents anyone from learning the user s physical location whonix prevents targeted malicious upgrades because all upgrades are downloaded over tor support for private obfuscated bridges is offered simplification of tor and meek lite bridge connections via anon connection wizard whonix protects user privacy protocol leak protection and fingerprinting protection boot clock randomization secure and distributed time synchronization mechanism security by isolation stream isolation prevents identity correlation through circuit sharing transparent proxy whitelist tor traffic with corridor kicksecure hardened numerous security and anonymity features strong organisational separation even the whonix project does not have access to ip connection logs see organisational separation keyboard keystrokes and mouse movements clicks can be used to track users to reduce behavioral tracking whonix comes with defenses by default including mouse movement anonymization tor ctrl observer can show which applications connect to which destinations over tor protect against guard discovery and related traffic analysis attacks not available in whonix 18 due to vanguards being removed from debian cpu fingerprinting resistance tcp isn randomization to help prevent de anonymization of tor onion services through tirdad kernel module for random isn generation better encryption thanks to preinstalled random number generators security misc misc security settings kernel hardening settings as recommended by the kernel self protection project kspp protect linux user accounts against brute force attacks strong linux user account isolation console lockdown disables legacy login methods for improved security hardening isolation of root privileges from standard user accounts via user sysmaint split anon apps config anonymity privacy and security settings pre configuration tor network torification the everything tor os reliable ip hiding fail closed mechanism application s traffic is either sent over tor or completely blocked application unspecific this applies to all applications and even other operating systems connected to whonix gateway most applications in whonix can be routed to the internet over the tor anonymity network instead of clearnet access this process is called torification or torify not only pre installed but also custom user installed applications can be torified there are no intentional user freedom restrictions full ip dns protocol leak protection depends on which internet protocols the application requires to function most applications do not require any awareness of being run inside whonix for functional connectivity this is called transparent proxying see this chapter it is difficult to know for users which application uses which internet protocol tcp udp icmp if in doubt please use search engines and see documentation first ask the developers of the application try it out main supported protocol tcp onion domain reachability yes udp tunnel udp over tor 2 icmp same as above hosting location hidden services onion services server support yes see onion services ephemeral onion services server support for applications such as zeronet onionshare bisq yes if an onion grater profile was made available filesharing and torrenting some servers are blocking connections from the tor network inexhaustive list can torify other operating systems can torify windows circumvents censorship dnssec over tor 2 tor enforcement vanguards protect against guard discovery 3 not available in whonix 18 due to vanguards being removed from debian related whonix track record against real cyber attacks leak tests tunnels this tunnels chapter and the tunnels subchapters are for advanced users who have knowledge and experience with tunneling tunnel and chaining support connect to a proxy vpn or ssh before tor connect to tor before a proxy vpn o

Information is collected from whonix.org and public sources. Spotted something wrong? Tell us