Prefer sudoedit for better security when editing files.

To prevent malware sniffing the root password, before performing administrative tasks that require root access, create an admin user account with sudo permissions.

Consider disabling the root account permanently.

If root privileges are required, run the command with sudo rather than logging in as root or using sudo su.Do not run commands unless they are completely understood - first refer to a suitable Whonix ™ wiki resource if available.Utilize OnionShare to anonymously share or receive files securely over the Tor network, anonymously chat, or host anonymous websites.Digital watermarks with embedded covert data are robust, so run documents through Optical Character Recognition (OCR) before sharing the output. Be careful sharing anonymous documents.Think twice before sharing 'anonymous' photos due to unique embedded noise signatures that have no known countermeasures.

Remove metadata from documents, pictures, videos or other files before uploading them to the Internet.Text should be written in an offline text editor and then copied and pasted into the web interface when it is complete. At a minimum users should not type into browsers with JavaScript enabled, since this opens up this deanonymization vector.A browser is an unsafe environment to directly write text, regardless of whether it is a forum post, email, webmail or IMAP-related reply.To remain anonymous, follow all the Whonix ™ recommendations to minimize threats of keyboard/mouse biometrics, stylometric analysis and other covert channels.The checklist below is intended to provide a quick overview of important issues, categorized by difficulty level - easy, moderate, difficult and expert.Įasy Anonymous Blogging, Posting, Chat, Email and File Sharing Hardening is dependent upon a user's skill set, motivation and available hardware. This reduces the likelihood of a temporary or persistent compromise, while increasing the chances of successful, anonymous activity. It is possible to significantly harden the Whonix ™ and/or host platform.

Recommendations specific to Qubes-Whonix ™ or Non-Qubes-Whonix ™ are marked accordingly.

4.7 Mix Personal Tor Traffic with Own Tor Bridge or Relay.

4.6 Flash the Router with Opensource Firmware.

4.5 Ethernet/FDDI Station Activity Monitor.

2.3 Disabling and Minimizing Hardware Risks.

2.1 Anonymous Blogging, Posting, Chat, Email and File Sharing.

How to harden tor browser alternatives