Skip to content
CUNICULA

Whonix

Tor-routed VM workstation. Anonymity even if the OS is compromised.

whonix.org

Tor-routed VM workstation. Anonymity even if the OS is compromised.

Common useAdvanced OPSECPrivacy ToolsOperator dataHosted
Identity checksZero KYCNo document check recorded · identity exposure level 0/4
Evidence and riskPartial evidenceStandardSome material claims still need confirmation.; no material risk recorded in them.
Last reviewedReviewed 15 Aug 2026KYC checked 15 Aug 2026 · verified jurisdiction · Source → official siteHow to cite this pageEvidence confidence66/100
Evidence and facts

Evidence and facts

JURISDICTIONMH
NOTERuns as virtual machines - requires a trusted host OS. Combine with Qubes OS for strongest isolation. More complex setup than Tails but offers persistent anonymous workspace.
AUDITED BYNo audit listed
OPERATOR DATAHosted operator recorded
EVIDENCE CONFIDENCE
THIRD-PARTY REPORTED2/11
Why evidence is 66/100Formula 3.1
Source coverageSome material claims still need confirmation
+42
Review ageOldest recorded check is 61 days old
+24

Full scoring method

LAST CHECKED2026-06-24
LAST UPDATED2026-08-15

Specs

DOCUMENT CHECKNone recorded
IDENTITY EXPOSURELevel 0/4
KYC TRIGGERSNo account. No signup. Free download.
FEEFree
CATEGORIESPrivacy Tools
COMMON USESAdvanced OPSEC, Persistent anonymous workspace, High-risk users
FEATURESTwo-VM architecture, Tor gateway isolation, IP leak prevention, Persistent anonymous workspace, Qubes OS compatible, Open source, KVM / VirtualBox, Fingerprinting resistance
TORYes
REGIONSGlobal availability
Review analysis, source material, related services, and history

About

Operating system splitting a Tor gateway and workstation across two VMs to keep the real IP off the workstation.

Analysis

OVERVIEW

Whonix runs as two linked virtual machines, a Tor Gateway and a Workstation, so that workstation malware with root access has no path to the real IP address; sessions persist between reboots, unlike Tails.

LIMITS

The system depends on a trusted host OS underneath both VMs and received Open Technology Fund financing from the US State Department/USAGM, the same caveat the record applies to Tails and Qubes.

USEFUL FOR

Users wanting a persistent, compartmentalized workspace who already run a trusted host and often pair it with Qubes OS.

Sources · reviewed 2026-07-16

Corporate identity

Registry-sourced, not audited. The facts below come from cited web research rather than a direct registry query. Each claim links its own source.

LEGAL ENTITY
ENCRYPTED SUPPORT LLC (A Series of OTOCO RMI LLC)source ↗
REGISTRATION NO.
966308source ↗
INCORPORATED IN
Marshall Islandssource ↗
INCORPORATED ON
2023-12-04source ↗
REGISTERED ADDRESS
Trust Company Complex, Ajeltake Road, Ajeltake Island, Majuro, MH96960, Marshall Islandssource ↗
PARENT ENTITY
OTOCO RMI LLCsource ↗
PREVIOUSLY TRADED AS
  • ENCRYPTED SUPPORT LP

    Ontario Limited Partnership No. 280096637, Canada

source ↗
OFFICERS
  • Patrick Schleizer (founder and lead developer)
source ↗
Registry research · reviewed 2026-08-09

Frequently Asked Questions

Is identity verification required?

No identity verification is recorded for typical use. No account. No signup. Free download.

Which payment methods are accepted?

Please check the provider site for accepted payment methods.

Where is it available?

Recorded availability: GLOBAL.

Is the operator based in a Five Eyes country?

No. The recorded jurisdiction is MH, which is not a Five Eyes country. This is jurisdiction context and does not by itself establish that a service is safer or less safe.

How are identity, operator, and evidence fields reported?

Identity exposure is level 0 of 4. A hosted operator is recorded. Jurisdiction is shown as context, not a safety verdict. Evidence confidence is 66/100 and recorded risk is standard.

Related Services

Sources and history

Terms and privacy policy

No changes to the documents we watch since we started checking on 9 Aug 2026. Last checked 9 Aug 2026.

Evidence basis: Claims on this page are linked to published sources for comparison, not certification, audit, endorsement, or recommendation; read the methodology and coverage map before relying on an entry.