Tools Operating systems

Operating systems

Secure operating systems to protect privacy

🔵 Maximum security
🟢 Recommended
🟡 Requires configuration
🟠 With reservations
🔴 Not recommended

Why does the choice of OS matter?

The operating system is the foundation of your digital security. Mainstream systems like Windows and Ubuntu they collect telemetry and contain bloatware. For maximum privacy, consider dedicated distributions designed with security and anonymity in mind.

Maximum security

Whonix

🔵 Maximum security Open Source Thor

Whonix is ​​an operating system based on Kicksecure that routes all traffic through Tor in isolated virtual machines. It consists of two VMs – Gateway (Tor) and Workstation (work). Even if Workstation is compromised, your IP remains hidden.

Key benefits

Based on Kicksecure
All traffic through Tor
Isolation in VM
No telemetry
IP leak protection
Stream isolation

Tip:Combine with QubesOS for maximum isolation (Qubes-Whonix).

Min. 4 GB RAM (8 GB recommended)
Requires virtualization (VT-x/AMD-V)
Download Documentation

Tails

🔵 Maximum security Open Source Live USB

Tails (The Amnesic Incognito Live System) is a live OS that boots from USB anddeletes all data on shutdown. Ideal for temporary sessions with maximum privacy. It uses Tor for all network communication.

Key benefits

Live USB OS
Automatic deletion on shutdown
All traffic through Tor
No telemetry
Pre-installed privacy tools
It leaves no traces on the host PC

Persistent Storage:Optionally, you can create an encrypted store for data between sessions.

Min. 8GB USB drive
Min. 2 GB of RAM
Download Installation wizard

Qubes OS

🔵 Maximum security Open Source Isolation

Qubes OS uses Xen virtualization to isolate different activities into separate "qubes" (VMs). Compromising one qubu will not affect the others. Edward Snowden: "Qubes is the best OS for security."

Key benefits

Isolation using VM (Xen)
Department of activities (work, personal, banking)
Minimizing data leaks
No telemetry
Disposable VMs
Whonix integration

Hardware Requirements:Requires VT-x/VT-d compatible hardware. Check the HCL before installing.

Min. 16 GB RAM (32 GB recommended)
Min. 128 GB SSD
Download Hardware Compatibility

Recommended

Gentoo Linux

🟢 Recommended Open Source Advanced

Gentoo is a highly customizable minimalistic Linux distribution. Compiles packages from source code, which provides maximum transparency and control over the system. No telemetry.

Key benefits

Compilation from sources (transparency)
Maximum customization
USE flags for granular control
No telemetry
Rolling release
Minimal bloatware

Notice:Requires advanced knowledge of Linux. Installation and configuration can take hours.

Download Handbook

Kicksecure

🟢 Recommended Open Source Debian-based

Kicksecure is a hardened Debian with protections against kernel attacks, anti-forensic features and a reduced attack surface. It is the foundation for Whonix and offers solid security without Tor overhead.

Safety features

Kernel hardening
Anti-forensic protections
Reduced attack surface
No telemetry
SUID Disabler
Boot clock randomization
Download Documentation

Requires configuration

Arch Linux

🟡 Requires configuration Open Source Rolling Release

Arch Linux is a highly customizable distribution with no bloatware. Privacy depends on manual configuration - it doesn't include telemetry by default, but you need to be careful about the installed packages.

Advantages
  • • No bloatware
  • • Full control
  • • Rolling release
  • • Excellent documentation (ArchWiki)
Notice
  • • Verify thatpkgstatsis not installed
  • • Requires manual hardening
  • • May be unstable
Download ArchWiki

With caveats

Debian

🟠 With reservations Open Source Stable

Debian is a stable and reliable distribution, but it has built-in telemetry (popcon and reportbug). Telemetry is optional and can be easily removed.

Telemetry

Debian includes the following packages that can collect data:

# Remove telemetry

sudo apt purge popularity-contest reportbug

Download

Not recommended

Windows

🔴 Not recommended Telemetry Bloatware

Windows includes extensive built-in telemetry and bloatware. Microsoft collects data about your usage, search, apps and much more.Use only if absolutely necessary.

Problems

Built-in telemetry
Bloatware and ads
Forced updates
Cortana/Copilot data collection
Microsoft account required
Closed source code

Ubuntu

🔴 Not recommended Telemetry Snap

Ubuntu includes Snap packages and telemetry. Canonical collects usage data by default. For privacy, consider other Debian-based distributions.

Problems

Snap Packs (Canonical Check)
Telemetry in the default state
Canonical collects usage data
Amazon Integration (Legacy Version)

Alternative:Consider Linux Mint, Debian or Fedora instead of Ubuntu.

How to use Windows without Microsoft bloat

Windows LTSC (Long-Term Servicing Channel)

If you must use Windows, chooseWindows LTSC. No bloatware, Store, Cortana or Edge. You can activate usingmassgrave.dev.

1. Telemetry removal

Complete guide to disable Windows telemetry:

Instructions for disabling telemetry

2. Removing Microsoft Edge

Edge runs in the background and syncs data even when you're not using it. Complete removal recommended:

How to remove Edge

3. DNS blocking of Microsoft domains

Block known Microsoft tracking domains at the system level via the hosts file:

# Path to the hosts file:

C:\Windows\System32\drivers\etc\hosts

List of domains to block

4. Automation of installation (unattend.xml)

Create an unattend.xml to partially automate Windows installation and privacy settings already during installation:

Unattend.xml generator

Comparison of operating systems

OS Evaluation Telemetry Open Source Tor integration Difficulty
Whonix Max. safety None All traffic Medium
Tails Max. safety None All traffic Low
Qubes OS Max. safety None Whonix VM High
Gentoo Recommended None Manual Very high
Kicksecure Recommended None Manual Medium
Arch Linux Ex. config None* Manual High
Debian With caveats Removable Manual Low
Ubuntu Not recommended Yes Manual Low
Windows Not recommended Extensive Low

* Arch Linux: Verify that the packagepkgstatsis not installed

Which OS to choose?

Maximum anonymity

For journalists, activists, whistleblowers

Tails Whonix

Isolation and security

For advanced users with high demands

Qubes OS

Daily use

For ordinary users with an emphasis on privacy

Kicksecure Sheet