Whonix

whonix.org
Whonix

Whonix is an anonymous operating system, which can run in a VM, inside your current OS. It is the best way to use Tor, and provides very strong protection for your IP address. It comes bundled with other features too: Keystroke Anonymization, Time Attack Defences, Stream Isolation, Kernel Self Protection Settings and an Advanced Firewall. Open source, well audited, and with a strong community - Whonix is based on Debian, KickSecure and Tor.

Open Source

Whonix Source Code

Author

Whonix

Description

Build tool for Kicksecure and Whonix derivative images

#build-system#debian#image-build#kicksecure#whonix

Homepage

https://www.kicksecure.com/wiki/Dev/Derivative-Maker

License

NOASSERTION

Created

15 Oct 22

Last Updated

02 Jun 26

Latest version

adrelanos_f65a6f9f513e60777ed356d7de9032de652e6b91

Primary Language

Shell

Size

31,821 KB

Stars

8

Forks

12

Watchers

8

Language Usage

Language Usage

Star History

Star History

Recent Commits

  • Patrick Schleizer (02 Jun 26)

    bumped changelog version

  • Patrick Schleizer (01 Jun 26)

    .

  • Patrick Schleizer (01 Jun 26)

    .

  • Patrick Schleizer (01 Jun 26)

    .

  • Patrick Schleizer (01 Jun 26)

    .

  • Patrick Schleizer (01 Jun 26)

    .

  • Patrick Schleizer (31 May 26)

    .

  • Patrick Schleizer (28 May 26)

    .

  • Patrick Schleizer (28 May 26)

    .

  • Patrick Schleizer (28 May 26)

    .

  • Patrick Schleizer (28 May 26)

    .

  • Patrick Schleizer (28 May 26)

    .

  • Patrick Schleizer (27 May 26)

    .

  • Patrick Schleizer (27 May 26)

    .

  • Patrick Schleizer (27 May 26)

    .

  • Patrick Schleizer (27 May 26)

    .

  • Patrick Schleizer (27 May 26)

    Merge remote-tracking branch 'org-ai-assisted/claude/kind-fermi-od4IG'

  • Claude (27 May 26)

    signing-key-create: avoid duplicate openpgp policy / cert in ~/buildconfig.d Two cleanups inside 'openpgp_policy_setup'. Both files generated here were redundant copies of data that already lived elsewhere: - openpgp-cert.pem in ~/buildconfig.d: only existed to feed 'sq-git policy authorize', which embeds the cert inline in the keyring of the generated policy. Standalone copy was dead weight after. - openpgp-policy.toml in ~/buildconfig.d: for builds where DEBFULLNAME + DEBEMAIL already match an authorization in the shipped project policy (typical for official-maintainer builds), 'sq-git policy authorize' was a no-op, so the home copy was byte-identical to the shipped one. Rework: stage the cert export and the post-authorize policy in ${binary_build_folder_dist}/sq-git-temp/ (re-derived on every run, no clobber concerns). Commit the scratch policy to ${openpgp_policy_file_user} only when (a) authorize produced a real diff vs the shipped project policy AND (b) no user-provided policy already exists there. Pre-provisioned cert in ~/buildconfig.d still takes precedence via openpgp_cert_file_resolved. Net effect on the two complaint scenarios: - Official build with matching maintainer: no ~/buildconfig.d files written; sign-and-tag falls back to the shipped project policy via existing variables.bsh resolution. - CI / user build with default DEBFULLNAME+DEBEMAIL: scratch policy differs (new auth block); committed to ~/buildconfig.d as before, no standalone cert file.

  • Claude (27 May 26)

    Merge branch 'master' of http://127.0.0.1:43901/git/org-ai-assisted/derivative-maker into claude/kind-fermi-od4IG

  • Patrick Schleizer (27 May 26)

    .

  • Patrick Schleizer (27 May 26)

    fix match `buildconfig.d/openpgp-policy.toml` `--project-maintainer` format (`Full Name <e-mail>`)

  • Patrick Schleizer (27 May 26)

    .

  • Patrick Schleizer (27 May 26)

    refactoring

  • Patrick Schleizer (26 May 26)

    .

  • Patrick Schleizer (26 May 26)

    .

  • Patrick Schleizer (26 May 26)

    .

  • Patrick Schleizer (25 May 26)

    Merge remote-tracking branch 'refs/remotes/org-ai-assisted/master'

  • Claude (25 May 26)

    local-build-dry-run: track developer-meta-files@master for launch-systemd-container developer-meta-files PR #116 merged, putting the launch-systemd-container composite action on master. Switch from the pre-merge PR-branch SHA pin (3564650a, since force-pushed past on claude/loving-fermat-ZeNGB) to @master branch-tracking, matching every other org-ai-assisted/developer- meta-files reference in this repo's workflows (local-lint.yml, consumer-{claude-code,scorecard,codex-review,codeql-actions}.yml). Single source of truth: action improvements (e.g. the loving-fermat branch's pending CI/ALLOW_LOCAL guard + style sweep) reach this caller the moment they land on master, without a per-consumer sha-bump PR.

  • Claude (25 May 26)

    local-build-dry-run: track developer-meta-files@master for launch-systemd-container developer-meta-files PR #116 merged, putting the launch-systemd-container composite action on master. Switch from the pre-merge PR-branch SHA pin (3564650a, since force-pushed past on claude/loving-fermat-ZeNGB) to @master branch-tracking, matching every other org-ai-assisted/developer- meta-files reference in this repo's workflows (local-lint.yml, consumer-{claude-code,scorecard,codex-review,codeql-actions}.yml). Single source of truth: action improvements (e.g. the loving-fermat branch's pending CI/ALLOW_LOCAL guard + style sweep) reach this caller the moment they land on master, without a per-consumer sha-bump PR.

  • Patrick Schleizer (25 May 26)

    Merge remote-tracking branch 'org-ai-assisted/master'

Whonix Website

Website

Whonix - Superior Internet Privacy

Whonix can anonymize everything you do online! It runs like an App, is a Free, Open Source and Kicksecure™ hardened Linux distribution.

Redirects

Does not redirect

Security Checks

All 65 security checks passed

Server Details

  • IP Address 46.62.185.204
  • Hostname whonix.org
  • Location Helsinki, Uusimaa, Finland, EU
  • ISP Hetzner Online GmbH
  • ASN AS24940

Associated Countries

  • FR FR
  • FI FI

Safety Score

Website marked as safe

100%

Blacklist Check

www.whonix.org was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

Whonix Reviews

More Desktop Operating Systems

  • Alpine is a security-oriented, lightweight distro based on musl libc and busybox. It compiles all user-space binaries as position-independent executables with stack-smashing protection. Install and setup may be quite complex for some new users.

  • Parrot Linux, is a full Debian-based operating system, that is geared towards security, privacy and development. It is fully-featured yet light-weight, very open. There are 3 editions: General Purpose, Security and Forensic. The Secure distribution includes its own sandbox system obtained with the combination of Firejail and AppArmor with custom security profiles. While the Forensics Edition is bundled with a comprehensive suite of security/ pen-testing tools, similar to Kali and Black Arch.

  • Qubes OS

    Qubes OS

    qubes-os.org

    Open-source security-oriented operating system for single-user desktop computing. It uses virtualisation, to run each application in its own compartment to avoid data being leaked. It features Split GPG, U2F Proxy, and Whonix integration. Qubes makes is easy to create disposable VMs which are spawned quickly and destroyed when closed. Qubes is recommended by Edward Snowden.

  • Tails is a live operating system (so you boot into it from a USB, instead of installing). It preserves your privacy and anonymity through having no persistent memory/ leaving no trace on the computer. Tails has Tor built-in system-wide, and uses state-of-the-art cryptographic tools to encrypt your files, emails and instant messaging. Open source, and built on top of Debian. Tails is simple to stop, configure and use.

About the Data: Whonix

Change History

API

You can access Whonix's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/whonix

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Whonix

Help your friends compare Desktop Operating Systems, and pick privacy-respecting software and services.
Share Whonix and Awesome Privacy with your network!

View Desktop Operating Systems (5)