Anonymity & Privacy OS

When attribution matters — journalist source-protection, sensitive OSINT, threat-intel "look without leaving fingerprints" — you need an opsec stack: Tor, hardened OS, sandboxing, VPN, and disciplined separation between identities. For pentest distros see Pentest Linux Distros. For sandboxing of malware see Malware Analysis. For server hardening see Server Hardening.

Privacy-focused operating systems

• ★ Tails (The Amnesic Incognito Live System) — Debian; live USB; routes everything through Tor; nothing persists by default; persistent encrypted storage optional. The reference for journalist / source / activist use. Free.
• ★ Whonix — two-VM design: Whonix-Gateway (Tor-only outbound) + Whonix-Workstation (must route through gateway). Strong torus-network isolation. Free.
• ★ Qubes OS (Joanna Rutkowska et al.) — security-by-compartmentalization; every domain (work, personal, banking, untrusted) runs in its own Xen VM (qube). Steep curve but the strongest model. Free.
• Subgraph OS — sunset; archive only.
• Kicksecure — hardened Debian (the Whonix base, sans Tor).

Tor / anonymity network

• ★ Tor Browser (Tor Project) — hardened Firefox + Tor; the universal onramp. Free.
• Tor daemon — for routing CLI tools.
• torsocks / proxychains — wrap arbitrary commands.
• Bridges (obfs4 / Snowflake / WebTunnel / meek) — for censored networks.
• Mullvad Browser — Tor-Browser-derived but VPN-routed; for "I want privacy without Tor's slowness." Free.
• I2P — alternative anonymity network; smaller user base.
• GNUnet / Yggdrasil — alternative networks; research-grade.

VPN providers (paid, generally privacy-focused)

• Mullvad VPN — Sweden; flat-rate €5/mo; account by random number; no email; cash accepted. Top privacy reputation.
• ProtonVPN — Swiss; from Proton (Mail/Drive/Pass); free tier with limits.
• IVPN — paid; small audited team.
• Windscribe — paid + 10 GB free tier.
• ★ Avoid logging-required jurisdictions for serious OPSEC.

Anti-tracking / browser

• uBlock Origin — see Browser Extensions.
• NoScript (legacy strict).
• Privacy Badger (EFF).
• Decentraleyes, CookieAutoDelete, LocalCDN.
• Firefox + arkenfox user.js — hardened Firefox profile.
• LibreWolf — hardened Firefox-fork with privacy defaults.
• Brave — built-in adblock; privacy-leaning Chromium.
• Mullvad Browser — see above.

Sandboxing / per-app isolation

• ★ Firejail (Linux) — sandbox arbitrary applications; many profiles included; SUID binary. Free.
• Bubblewrap (bwrap) — lower-level Linux sandbox; underlies Flatpak.
• Flatpak / Snap — package + sandbox apps.
• Sandboxie-Plus (Windows) — free; sandbox apps.
• AppArmor / SELinux — system-level MAC; see Runtime Security.
• macOS App Sandbox / Hardened Runtime — Apple-side sandboxing.
• Cuckoo / DRAKVUF — for malware-grade isolation; see Malware Analysis.

VM / container daily-driver

• VMware Workstation Player / VMware Fusion — free for personal.
• VirtualBox — free OSS.
• UTM — free; macOS Apple Silicon.
• Hyper-V — Windows Pro.
• Proxmox VE — for the home-lab option; see Local k8s for orchestration analogs.

Disk / message encryption

• ★ VeraCrypt — full-disk + file-container encryption; free. Successor to TrueCrypt.
• LUKS (cryptsetup) — Linux-native FDE.
• BitLocker — Windows; bundled with Pro.
• FileVault — macOS; built-in.
• Cryptomator — file-level cloud-friendly encryption.
• age / rage — modern simple file encryption.
• GPG — classic, ubiquitous, gnarly UX.
• Signal — secure messenger; the reference; free.
• Session / SimpleX / Threema — alternative messengers.
• Briar — peer-to-peer; offline mesh.

Email / privacy services

• Proton Mail / Tutanota / Mailbox.org — encrypted email; paid + free tiers.
• SimpleLogin / AnonAddy / Firefox Relay / Apple Hide My Email — email aliases.
• Proton Pass / 1Password / Bitwarden — password managers; see Authentication.

Hardware

• YubiKey 5 / SoloKey 2 / NitroKey — FIDO2 / WebAuthn / OpenPGP smartcards.
• GrapheneOS (Pixel) — hardened Android replacement; the reference for hostile-environment phones. Free.
• CalyxOS — Pixel-side; mainstream-friendly hardened Android.
• Faraday bags / RFID-blocking wallets — when physical isolation matters.
• Silent Pocket / Mission Darkness — known brands.

OPSEC patterns

• ★ Identity separation. Different OS profile / VM / browser / VPN / phone for different work.
• Don't reuse usernames across investigations / accounts.
• Don't log into personal accounts in research environments.
• Disable JavaScript on suspicious sites; use Tor Browser "Safest" setting.
• Compartmentalise by Qube (if using Qubes); by VM otherwise.
• No hostnames / no MAC that identifies you on Wi-Fi (use random MAC).
• Plan exit strategies before sensitive activity.

Pick this if…

• Journalist / source protection: Tails (live USB) + Tor Browser.
• Long-term anonymity workstation: Whonix or Qubes-Whonix.
• Maximum compartmentalisation, mainline use: Qubes OS.
• Daily privacy browser: Tor Browser or Mullvad Browser.
• Per-app sandbox on Linux: Firejail.
• Hardened Android: GrapheneOS on Pixel.
• Encrypted file containers: VeraCrypt or age.
• Trustworthy VPN: Mullvad or ProtonVPN.