Whonix is a security-focused operating system distribution that runs as two isolated virtual machines: a Gateway VM that handles all Tor routing, and a Workstation VM where the user runs applications. The Workstation cannot connect to the internet except through the Gateway, structurally enforcing that every packet traverses Tor regardless of application configuration. Free, open-source, maintained by the Whonix Project since 2012, designed to be installed inside VirtualBox, KVM, or Qubes OS.
What it means in practice
The two-VM architecture solves a specific problem with single-VM Tor configurations: application leaks. A misconfigured browser, a buggy application, or a deliberately deceptive piece of software cannot bypass Tor on Whonix because the Workstation VM has no network path except through the Gateway. The Gateway runs only Tor and refuses any other traffic. The trade-offs: significant system requirements (8GB RAM minimum to run both VMs comfortably), the operational learning curve of managing two VMs, and the same Tor-network performance characteristics that affect Tor Browser. The Predaxia framing: Whonix is the right answer for users who need stronger Tor enforcement than Tor Browser provides on a regular OS, particularly for high-target work where application-level Tor leaks would compromise the operation.
Who uses it, and against whom
Used by: security researchers analyzing untrusted material in a network-isolated environment, journalists working on stories where every connection must traverse Tor (Whonix-Workstation as a Qubes qube is a documented configuration for the Snowden-era operational pattern), developers building applications intended to operate over Tor (the testing environment matches the production environment), and the high-target operator population where the Tor Browser baseline is insufficient. Adversaries: nation-state services running traffic-correlation attacks against Tor (the same threats that affect Tor Browser; Whonix does not change the network-level Tor security properties), application-level deanonymization through user error in the Workstation VM (Whonix structurally prevents network leaks but cannot prevent the user from logging into a real-name account from inside the Workstation), and the standard Tor-exit-relay threats that affect any Tor traffic.
What you can change today
If your work justifies Whonix, the recommended deployment is inside Qubes OS as two qubes (sys-whonix as the Gateway, anon-whonix as the Workstation), which adds the Qubes compartmentalisation defense on top of the Whonix Tor enforcement. Standalone deployment in VirtualBox or KVM is simpler but provides less defense in depth. Download Whonix from whonix.org (verify the GPG signatures against the project keys), install in the chosen virtualization environment, configure the Workstation for your use case (Tor Browser is included; KeePassXC, GnuPG, OnionShare, OpenSSH client are pre-installed). For most readers asking “should I use Whonix”: probably no, the operational cost is significant and the Tor Browser baseline addresses most threat models; for the small population where it makes sense, it is the strongest practical Tor-enforcement architecture available.