Whonix splits the connection across two virtual machines so an application cannot leak your real address even if it tries. What that buys and what it costs.
nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onionnexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onionnexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onionTwo virtual machines instead of one. Everything you do runs in the second, and the second has no route to the internet except through the first, which speaks only Tor. It is the most robust option on this site and the most work.
On an ordinary setup, an application that misbehaves can reach the network directly and reveal where you are. Whonix removes that possibility by construction. The workstation has no way to send anything anywhere except through the gateway, and the gateway only knows how to speak Tor. There is no configuration mistake that turns that off, which is the whole point.
| Question | Tails | Whonix |
|---|---|---|
| Does the machine remember | No, it forgets on shutdown | Yes, the virtual machines persist |
| Protects against application leaks | Mostly | Yes, by construction |
| Setup effort | About forty minutes | About an hour, more to maintain |
| Runs alongside your normal desktop | No, you reboot | Yes, in windows |
| Best for | Occasional use with no trace | Regular use with strong isolation |
Whonix keeps state, which is exactly what makes it convenient and exactly what makes it different from Tails. If you want an environment you return to that cannot leak, this is it. If you want no environment at all afterwards, that is Tails.
Running Whonix on a host that is itself full of your ordinary accounts weakens it. The isolation protects the network path. It does not stop you signing into something identifying inside the workstation, and it does not clean up the host.
The full Windows route to a Nexus onion address, what the operating system keeps behind your back, and the settings worth changing before you start.
DesktopHow to get to a Nexus onion address on a Mac, the Gatekeeper prompts you will meet, and which macOS conveniences work against you here.
DesktopThe Linux route to a Nexus onion address, why the distribution package is usually the wrong choice, and what a sensible setup looks like.
Where to get Tor Browser, why the source matters more than the version, and the mistakes that put a modified copy on a machine.
The signature check that proves the file came from the Tor Project unmodified, why it is worth the ten minutes, and what a failure means.
Tor Browser ships on its most permissive setting. What the three levels change, why Safest is the right default here, and what breaks.