Tails vs Whonix vs Qubes for Tor market shopping

Tails, the amnesic USB stick

Tails is a full Debian based operating system that boots from a USB stick and forgets everything when you shut it down. You plug in the stick, restart the machine, pick the stick as the boot device, and you are inside a session that leaves no trace on the host disk. Everything you type into Tor Browser during that session dies with the shutdown.

You can enable persistent storage on the stick itself, which lets you keep a KeePassXC database, GPG keys, downloads and Tor Browser bookmarks between sessions. Persistent storage is encrypted with a passphrase you pick. Nothing else on the stick survives a reboot.

Best for people who share a computer with someone else, who use random hardware in different places, or who just want the strongest guarantee that no evidence stays behind after they close the session.

What Tails does well

• Forces every application through Tor. No app can accidentally leak to the clear net.
• Leaves no trace on the host disk if you turn persistent storage off.
• Runs on almost any PC with 4GB of RAM and a USB port.
• The Tor Browser inside Tails is preconfigured and preverified.

What Tails does badly

• You have to reboot to use it, which is friction.
• If you catch malware inside a session and you enabled persistent storage, the malware can persist too.
• No compartmentalization inside the session. Everything runs in the same user account.

Whonix, the two VM setup

Whonix is two virtual machines that run side by side on your normal desktop. One VM is the Gateway. It is the only machine allowed to talk to the outside world, and it routes every packet through Tor. The other VM is the Workstation, where you actually browse, chat and edit files. The Workstation is walled off from your real network. It can only reach the Gateway, and the Gateway will only send its traffic through Tor.

The point is that even if something inside the Workstation goes wrong, malware that thinks it is calling home cannot reach the real internet at all. Its packets hit the Gateway and either go through Tor or nowhere.

You run both VMs on top of VirtualBox or KVM on your normal Windows, macOS or Linux desktop. Nothing on your host OS changes.

What Whonix does well

• Even a broken Workstation cannot leak your real IP. The Gateway physically cannot bypass Tor.
• You keep the Workstation running for months. No reboot required.
• You can snapshot the Workstation, do risky things, and revert to a clean snapshot.

What Whonix does badly

• It runs on top of your regular operating system, which is not itself hardened. If your Windows install has a keylogger, Whonix does not help you.
• Two VMs eat RAM. You want at least 8GB, comfortably 16.

Qubes OS with a Whonix VM

Qubes is a desktop operating system that turns every task into its own virtual machine. Email in one, browsing in another, banking in a third, Tor stuff in a Whonix Workstation. The whole point of Qubes is that a breach in one cube cannot touch the others.

Qubes ships with a Whonix Gateway and Workstation as a preinstalled option. This is the strongest of the three setups because your Tor session runs inside a compartmented VM, the Gateway forces Tor on it, and even if the Workstation is compromised, your other cubes are unreachable.

What Qubes does well

• Real separation between your identities and tasks.
• Whonix inside Qubes gets the Whonix guarantees plus the Qubes guarantees on top.
• Once set up, hard to accidentally cross wires between compartments.

What Qubes does badly

• Wants a modern laptop with 16 GB of RAM at a minimum, 32 GB is more comfortable.
• Very picky about hardware. Check the compatibility list before installing.
• Steep learning curve. Everything you do the first week feels like too many steps.

Which one to pick

If you are new, start with Tails on a spare USB stick. It is one hour of setup and it works. You can graduate later.

If you use one machine for everything and want compartmentalization without wiping your OS, install Whonix on top of what you already run.

If your threat model is serious, you have the hardware for it, and you are willing to relearn how to use a computer, install Qubes and put Whonix inside it. That is the strongest realistic setup you can build yourself in 2026.