Dev/Page Homepage
<a href="/wiki/Pre-release">Pre-release</a> - <a href="/wiki/Download">Try it for FREE</a>
Kicksecure is still in development and contributions are welcome.
<a href="/wiki/Debian">
Hardware
<img class="image" src="/w/images/thumb/f/fa/Logo-debian-500x500.png/128px-Logo-debian-500x500.png" alt="Download for Debian" decoding="async" loading="lazy" />
Debian+
</a>
<a href="/wiki/USB_Installation">
Hardware
<img class="image" src="/w/images/thumb/5/5c/Logo-usb-500x500.png/128px-Logo-usb-500x500.png" alt="Kicksecure on USB" decoding="async" loading="lazy" />
On USB
</a>
<a href="/wiki/Download">
Hardware
<img class="image" src="/w/images/thumb/a/a5/Cd-rom-icon.png/128px-Cd-rom-icon.png" alt="Kicksecure ISO" decoding="async" loading="lazy" />
<img class="image coming-soon" src="/w/images/thumb/4/4f/Coming-soon.png/100px-Coming-soon.png" alt="Comming Soon" decoding="async" loading="lazy" />
ISO
</a>
<a href="/wiki/Windows">
VM
<img class="image" src="/w/images/thumb/e/ee/Windows_logo_-_2012.svg.png/128px-Windows_logo_-_2012.svg.png" alt="Download for Windows 10" decoding="async" loading="lazy" />
Windows
</a>
<a href="/wiki/MacOS">
VM
<img class="image" src="/w/images/thumb/9/9e/Logo-apple-500x500.png/128px-Logo-apple-500x500.png" alt="Download for Mac" decoding="async" loading="lazy" />
MacOS
</a>
<a href="/wiki/Linux">
VM
<img class="image" src="/w/images/thumb/0/0f/Logo-linux-500x500.png/128px-Logo-linux-500x500.png" alt="Download for Linux" decoding="async" loading="lazy" />
VirtualBox Linux installer
</a>
<a href="/wiki/VirtualBox">
VM
<img class="image" src="/w/images/thumb/d/d5/Virtualbox_logo.png/128px-Virtualbox_logo.png" alt="Download for VirtualBox" decoding="async" loading="lazy" />
VirtualBox
</a>
<a href="/wiki/Qubes">
VM
<img class="image" src="/w/images/thumb/9/94/Qubes-logo-blue.png/128px-Qubes-logo-blue.png" alt="Download for Qubes" decoding="async" loading="lazy" />
Qubes
</a>
<a href="/wiki/KVM">
VM
<img class="image" src="/w/images/thumb/0/0f/Kvm-new-logo.png/128px-Kvm-new-logo.png" alt="Download for KVM" decoding="async" loading="lazy" />
KVM
</a>
<a href="/wiki/Chroot">
Special
<img class="image" src="/w/images/thumb/9/9e/Logo-chroot-500x500.png/128px-Logo-chroot-500x500.png" alt="Kicksecure on chroot" decoding="async" loading="lazy" />
chroot
</a>
">Forum</a>">News</a>
Pre-installed applications are reviewed and configured for security
<a href="/wiki/E-Mail" target="_blank" rel="noopener">
<img decoding="async" loading="lazy" width="64" height="64" src="/w/images/thumb/b/b1/Thunderbird256.png/64px-Thunderbird256.png" alt="Encrypted Email Symbol" />
Thunderbird
</a>
<a href="/wiki/Passwords" target="_blank" rel="noopener">
<img decoding="async" loading="lazy" width="64" height="64" src="/w/images/thumb/c/c1/KeePassXC.svg/64px-KeePassXC.svg.png" alt="KeePassXC Symbol" />
KeePassXC
</a>
<a href="/wiki/HexChat" target="_blank" rel="noopener">
<img decoding="async" loading="lazy" width="64" height="64" src="/w/images/thumb/7/7b/Hexchaticon.png/64px-Hexchaticon.png" alt="HexChat Symbol" />
HexChat
</a>
<a href="/wiki/Software#Media_Player" target="_blank" rel="noopener">
<img decoding="async" loading="lazy" width="64" height="71" src="/w/images/thumb/c/cd/2000px-VLC_Icon.svg.png/64px-2000px-VLC_Icon.svg.png" alt="VLC Symbol" />
VLC
</a>
<a href="/wiki/Software#Terminal" target="_blank" rel="noopener">
<img decoding="async" loading="lazy" width="64" height="64" src="/w/images/thumb/c/c2/Utilities-terminal.png/64px-Utilities-terminal.png" alt="Terminal Symbol" />
Terminal
</a>
<a href="/wiki/Electrum" target="_blank" rel="noopener">
<img decoding="async" loading="lazy" width="64" height="64" src="/w/images/thumb/6/63/Electrum-appimage.png/64px-Electrum-appimage.png" alt="Electrum Symbol" />
Electrum
</a>
<a href="/wiki/Bitcoin" target="_blank" rel="noopener">
<img decoding="async" loading="lazy" width="64" height="64" src="/w/images/thumb/2/29/BC_Logo_.png/64px-BC_Logo_.png" alt="Bitcoin Symbol" />
Bitcoin
</a>
<a href="/wiki/Monero" target="_blank" rel="noopener">
<img decoding="async" loading="lazy" width="64" height="64" src="/w/images/thumb/0/05/Monero-symbol-1280.png/64px-Monero-symbol-1280.png" alt="Monero Symbol" />
Monero
</a>
Fully Featured with Advanced Security Components
<a href="/wiki/Operating_System_Software_and_Updates" class="card-wrapper" draggable="false" id="explain-protectedupdates">
<img class="image image-cover" alt="Protection from Targeted Malicious Updates" src="/w/images/thumb/1/16/Malware-updates-promo.jpg/450px-Malware-updates-promo.jpg" decoding="async" loading="lazy" />
Protection from Targeted Malicious Updates
Kicksecure update servers know neither the identity nor IP address of the user because all upgrades are downloaded over Tor.
</a>
<a href="https://github.com/Kicksecure/security-misc
Kernel Self Protection Settings
Kicksecure uses strong Kernel Hardening Settings as recommended by the Kernel Self Protection Project (KSPP).
</a>
<a href="/wiki/sdwdate" class="card-wrapper" draggable="false" id="explain-time">
<img class="image image-cover" alt="Time Attack Defense" src="/w/images/thumb/6/6d/Stopwatch.jpg/300px-Stopwatch.jpg" decoding="async" loading="lazy" />
Time Attack Protection
Kicksecure defeats time attacks on its users through Boot Clock Randomization and secure network time synchronization using sdwdate.
</a>
<a href="/wiki/Debian_Tips#Open_Ports" class="card-wrapper" draggable="false" id="explain-ports">
<img class="image image-cover" alt="No Open Ports" src="/w/images/thumb/2/29/Closed-ports-promo.jpg/300px-Closed-ports-promo.jpg" decoding="async" loading="lazy" />
No Open Ports by Default
Kicksecure provides a much lower attack surface since there are no open server ports by default unlike in some other Linux distributions.
</a>
<a href="https://github.com/Kicksecure/tirdad
CPU Information Leak Protection (TCP ISN)
Without TCP ISN randomization, sensitive information about a system's CPU activity can be leaked through outgoing traffic, leaving it vulnerable to side-channel attacks. tirdad prevents that.
</a>
<a href="/wiki/Download" target="_blank" class="card-wrapper" draggable="false" id="explain-virtualizercompatible">
<img class="image image-cover" alt="Available for many virtualizers" src="/w/images/thumb/8/8e/Virtualizer-compatible.jpg/300px-Virtualizer-compatible.jpg" decoding="async" loading="lazy" />
Available for many virtualizers
With support for multiple virtualization options, trying out Kicksecure is easy. VMs also help contain and prevent the spread of malware.
</a>
15 more amazing features →
<a href="https://github.com/Kicksecure/security-misc
Brute Force Defense
Kicksecure protects Linux user accounts against brute force attacks by using pam tally2.
</a>
<a href="/wiki/Dev/Entropy" class="card-wrapper" draggable="false" id="explain-entropy">
<img class="image image-cover" alt="Entropy Enhancements" src="/w/images/thumb/e/ec/Entropy-promo.jpg/300px-Entropy-promo.jpg" decoding="async" loading="lazy" />
Entropy Enhancements
Strong entropy is required for computer security to ensure the unpredictability and randomness of cryptographic keys and other security-related processes. Kicksecure makes encryption more secure thanks to preinstalled random number generators.
</a>
<a href="/wiki/Live_Mode" class="card-wrapper" draggable="false" id="explain-livemode">
<img class="image image-cover image-left" src="/w/images/thumb/7/7e/Live-mode-promo.jpg/300px-Live-mode-promo.jpg" alt="Live Mode" decoding="async" loading="lazy" />
Live Mode
Kicksecure offers a much requested Live Mode. After the session all data will be gone.
</a>
<a href="/wiki/Debian" class="card-wrapper" draggable="false" id="explain-linuxbased">
<img class="image image-cover" src="/w/images/thumb/6/62/Linux-based-kicksecure-promo.jpg/300px-Linux-based-kicksecure-promo.jpg" alt="Based on Linux" decoding="async" loading="lazy" />
Based on Linux
Linux is highly reliable, secure, free and open source. That's why Kicksecure is based on Linux.
</a>
<a href="/wiki/Forcing_.onion_on_Project" class="card-wrapper" draggable="false" id="explain-onionwebsite">
<img class="image image-cover" src="/w/images/thumb/3/33/Onion-website-promo.jpg/300px-Onion-website-promo.jpg" alt="Onion Website" decoding="async" loading="lazy" />
Onion Website Option
Our website offers an alternative onion version. This offers a higher connection security between the user and the server.
</a>
<a href="/wiki/AppArmor" class="card-wrapper" draggable="false" id="explain-apparmor">
<img class="image" alt="Risk Minimization" src="/w/images/thumb/e/ec/AppArmor-logo-promo.png/300px-AppArmor-logo-promo.png" decoding="async" loading="lazy" />
Risk Minimization
AppArmor profiles restrict the capabilities of commonly used, high-risk applications.
</a>
<a href="https://github.com/Kicksecure/security-misc
Strong Linux User Account Separation
Linux User Account Separation is not always a given on Linux systems. In Kicksecure it is.
</a>
<a href="/wiki/Documentation" class="card-wrapper" draggable="false" id="explain-docs">
<img class="image image-cover" alt="Extensive Documentation" src="/w/images/thumb/5/55/Advanceddocumentation213123.jpg/300px-Advanceddocumentation213123.jpg" decoding="async" loading="lazy" />
Extensive Documentation
The more you know, the safer you can be: Extensive Kicksecure Documentation
</a>
<a href="/wiki/Malware" class="card-wrapper" draggable="false" id="explain-virus">
<img class="image" src="/w/images/thumb/c/cf/Shield.png/300px-Shield.png" alt="Virus Protection" decoding="async" loading="lazy" />
Virus Protection
Kicksecure provides additional security hardening measures and user education for better protection from virus attacks.
</a>
<a href="/wiki/Dev/Strong_Linux_User_Account_Isolation#Console_Lockdown" class="card-wrapper" draggable="false" id="explain-console">
<img class="image image-cover" alt="Console Lockdown" src="/w/images/thumb/7/74/Console-lockdown.jpg/300px-Console-lockdown.jpg" decoding="async" loading="lazy" />
Console Lockdown
Legacy login methods can be a security risk. Console Lockdown disables them for improved security hardening.
</a>
<a href="https://forums.kicksecure.com
Vibrant Community
Our vibrant community features Forums, Contributors and RSS.
</a>
<a href="/wiki/About" class="card-wrapper" draggable="false" id="explain-debian">
<img class="image" src="/w/images/thumb/3/30/Debian.png/300px-Debian.png" alt="Based on Debian" decoding="async" loading="lazy" />
Based on Debian
Kicksecure is based on Debian, one of the most reliable Linux distributions.
</a>
<a href="/wiki/Verifying_Software_Signatures" class="card-wrapper" draggable="false" id="explain-signed">
<img class="image" src="/w/images/thumb/7/77/Key-lock-gpg.png/300px-Key-lock-gpg.png" alt="Digitally signed releases" decoding="async" loading="lazy" />
Digitally signed releases
Downloads are signed so genuine Kicksecure releases can be verified.
</a>
<a href="/wiki/Trust#canary" class="card-wrapper" draggable="false" id="explain-canary">
<img class="image image-cover" alt="Warrant Canary" src="/w/images/thumb/4/49/Canary-promo.jpg/300px-Canary-promo.jpg?20220902121433" decoding="async" loading="lazy" />
Warrant Canary
A canary confirms that no warrants have ever been served on the Kicksecure project.
</a>
<a href="https://github.com/Kicksecure/swap-file-creator
Swap File Creator
Running low on RAM isn't a security problem with swap-file-creator. It will create an encrypted swap file.
</a>
<a href="https://www.kicksecure.com/wiki/SUID_Disabler_and_Permission_Hardener
SUID Disabler and Permission Hardener
SUID Disabler and Permission Hardener enhances system security by strengthening the isolation of Linux user accounts and more.
</a>
Freedom Values
<a href="/wiki/History" target="_blank" class="card-wrapper" draggable="false" id="explain-success">
<img class="image" alt="12 Years of Success" src="/w/images/thumb/f/ff/Success-symbol.png/300px-Success-symbol.png" decoding="async" loading="lazy" />
12 Years of Success
For over 12 years as the creators of Whonix we have successfully protected our users from everyday trackers and even from high level attacks. And we're just getting started!
</a>
<a href="https://github.com/Kicksecure
Open Source
We respect user rights to review, scrutinize, modify, and redistribute Kicksecure. This improves security and privacy for everyone.
</a>
<a href="/wiki/Reasons_for_Freedom_Software" class="card-wrapper" draggable="false" id="explain-freedom">
<img class="image" alt="Freedom Software" src="/w/images/thumb/a/a3/Heckert_gnu.big.png/300px-Heckert_gnu.big.png" decoding="async" loading="lazy" />
Freedom Software
Kicksecure is Freedom Software and contains software developed by the Free Software Foundation and the GNU Project.
</a>
<a href="/wiki/What_we_do" class="card-wrapper" draggable="false" id="explain-research">
<img class="image" src="/w/images/thumb/7/7f/Cornues.png/300px-Cornues.png" alt="Research and Implementation Project" decoding="async" loading="lazy" />
Research and Implementation Project
Kicksecure is an actively maintained research project making constant improvements; no shortcomings are ever hidden from users.
</a>
<a href="/wiki/Reasons_for_Freedom_Software" class="card-wrapper" draggable="false" id="explain-auditable">
<img class="image image-cover" alt="Fully Auditable" src="/w/images/thumb/4/44/Bho78-4ycp0.jpg/300px-Bho78-4ycp0.jpg" decoding="async" loading="lazy" />
Fully Auditable
Kicksecure is independently verifiable by security experts and software developers around the world. This improves security and privacy for everyone.
</a>
<a href="/wiki/Reasons_for_Freedom_Software#No_Intentional_User_Freedom_Restrictions" class="card-wrapper" draggable="false" id="explain-respect">
<img class="image image-cover" alt="Complete respect for privacy and users freedom" src="/w/images/thumb/e/ef/Respect-freedom-symbol.jpg/300px-Respect-freedom-symbol.jpg" decoding="async" loading="lazy" />
Complete respect for privacy and user freedom
Kicksecure respects data privacy principles. We don’t make advertising deals or collect sensitive personal data.
</a>
Upcoming Security Enhancements
<a href="/wiki/Linux_Kernel_Runtime_Guard_LKRG" target="_blank" rel="noopener" class="card-wrapper" draggable="false">
<img class="image image-cover" src="/w/images/thumb/c/cf/Lkrg.png/300px-Lkrg.png" alt="LKRG" decoding="async" loading="lazy" />
Linux Kernel Runtime Guard (LKRG) performs runtime integrity checking of the Linux kernel and detection of security vulnerability exploits against the kernel.
</a>
<a href="/wiki/Hardened_Malloc_Light" target="_blank" rel="noopener" class="card-wrapper" draggable="false">
<img class="image image-cover" src="/w/images/thumb/e/ef/Malloc.jpg/300px-Malloc.jpg" alt="Hardened Malloc Light" decoding="async" loading="lazy" />
Hardened Malloc Light is a hardened memory allocator which can be used with many applications to increase security which is already installed by default and will be enabled by default.
</a>
<a href="/wiki/Sandbox-app-launcher" target="_blank" rel="noopener" class="card-wrapper" draggable="false">
<img class="image image-cover" src="/w/images/thumb/6/60/Sandboxing123123.png/300px-Sandboxing123123.png" alt="Sandboxed Application Launcher" decoding="async" loading="lazy" />
sandbox-app-launcher is an application launcher that can start each application inside its own restrictive sandbox. Each application runs as its own user, in a bubblewrap sandbox and confined by AppArmor.
</a>
8 more Enhancements →
<a href="/wiki/apparmor.d" target="_blank" rel="noopener" class="card-wrapper" draggable="false">
<img class="image image-cover" src="/w/images/thumb/7/79/Mandatoryaccesscontrol.jpg/300px-Mandatoryaccesscontrol.jpg" alt="AppArmor" decoding="async" loading="lazy" />
apparmor.d - Full system Mandatory Access Control (MAC) policy - "AppArmor for everything"
</a>
<a href="https://forums.whonix.org/t/untrusted-root-does-it-make-sense-to-try-to-improve-security-by-restricting-root/7998
Untrusted Root User
</a>
<a href="https://forums.whonix.org/t/allow-loading-signed-kernel-modules-by-default-disallow-kernel-module-loading-by-default/7880
Enforce kernel module software signature verification
</a>
<a href="/wiki/Dev/VirusForget" target="_blank" rel="noopener" class="card-wrapper" draggable="false">
<img class="image image-cover" alt="Deactivate malware after reboot" src="/w/images/thumb/e/e7/Malware-symbol.jpg/300px-Malware-symbol.jpg" decoding="async" loading="lazy" />
Deactivate malware after reboot from non-root compromise
</a>
<a href="/wiki/Hardened-kernel" target="_blank" rel="noopener" class="card-wrapper" draggable="false">
<img class="image image-cover" alt="Hardened Linux Kernel" src="/w/images/thumb/6/6d/Hardenkernel.jpg/300px-Hardenkernel.jpg" decoding="async" loading="lazy" />
Hardened Linux Kernel
</a>
<a href="https://forums.whonix.org/t/use-codecrypt-to-sign-whonix-releases/7844/2
Post-quantum cryptography resistant signing of releases
</a>
<a href="https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707
Mount Options Hardening
</a>
<a href="https://forums.whonix.org/t/multiple-boot-modes-for-better-security-persistent-root-persistent-noroot-live-root-live-noroot/7708
Multiple boot modes for better security (user, live, secureadmin and superadmin)
</a>
Investors
<a href="/wiki/Investors" class="image-link">
<img class="image" decoding="async" loading="lazy" width="697" height="354" src="/w/images/thumb/f/f7/Shaking-hands.jpg/800px-Shaking-hands.jpg" alt="Investor shaking hands" />
</a>
Interested in becoming an investor? See <a href="/wiki/Investors">Project Metrics and contact details</a>.
Join the team!
<a href="/wiki/Contribute">
<img decoding="async" loading="lazy" width="450" height="415" src="/w/images/thumb/6/62/Digital-nomad.jpg/450px-Digital-nomad.jpg" alt="Help Welcome" />
Your help is very welcome! As a patron, as a multiplier or even as a contributor!
</a>
<img src="/w/images/thumb/1/16/Malware-updates-promo.jpg/600px-Malware-updates-promo.jpg" alt="Protected Updates" decoding="async" loading="lazy" />
Kicksecure update servers know neither the identity nor IP address of the user because <a href="wiki/About#torified_updates" target="_blank" rel="noopener">all upgrades are downloaded over Tor by default</a>.
<img src="/w/images/thumb/8/8d/Tux-halo-promo.jpg/600px-Tux-halo-promo.jpg" alt="Kernel Hardening" decoding="async" loading="lazy" />
Kicksecure uses strong Kernel Hardening Settings as recommended by the Kernel Self Protection Project (KSPP).
<img src="/w/images/thumb/6/6d/Stopwatch.jpg/600px-Stopwatch.jpg" alt="Time Attacks Defense" decoding="async" loading="lazy" />
<a href="/wiki/Time_Attacks">Time attacks</a> on Kicksecure users are defeated by <a href="/wiki/Boot_Clock_Randomization">Boot Clock Randomization</a> and secure network time synchronization through <a href="/wiki/sdwdate">sdwdate</a> (Secure Distributed Web Date).
<img src="/w/images/thumb/2/29/Closed-ports-promo.jpg/600px-Closed-ports-promo.jpg" alt="Closed Ports" decoding="async" loading="lazy" />
Kicksecure provides a much lower attack surface since <a href="/wiki/Debian_Tips#Open_Ports">there are no open server ports by default unlike other Linux distributions.</a> All unsolicited incoming connections are rejected.
<img src="/w/images/thumb/a/a9/Data-leak.jpg/600px-Data-leak.jpg" alt="Prevent TCP ISN Leaks" decoding="async" loading="lazy" />
Without TCP ISN randomization, sensitive information about a system's CPU activity can be leaked through outgoing
traffic, leaving it vulnerable to side-channel attacks. <a target="_blank" class="external text" href="https://github.com/Kicksecure/tirdad">TCP ISN randomization</a>
prevents that.
<img src="" alt="Many virtualizers" decoding="async" loading="lazy" />
You can easily try Kicksecure by using <a href="/wiki/Download"> various virtualizers </a> , which enables security compartmentalization by running a Kicksecure VM on top of a Kicksecure host to isolate malware and testing inside the VM.
<img src="/w/images/thumb/d/d7/Franck-v-_E1PQXKUkMw-unsplash.jpg/600px-Franck-v-_E1PQXKUkMw-unsplash.jpg" alt="Brute Force defense" decoding="async" loading="lazy" />
Kicksecure protects Linux user accounts
<a href="https://github.com/Kicksecure/security-misc" target="_blank">against brute force attacks</a>
by using pam tally2.
<img src="/w/images/thumb/e/ec/Entropy-promo.jpg/600px-Entropy-promo.jpg" alt="Better encryption" decoding="async" loading="lazy" />
Strong entropy is required for computer security to ensure the unpredictability and randomness of cryptographic keys and other security-related processes. Kicksecure makes encryption more secure thanks to <a href="/wiki/Dev/Entropy">preinstalled</a> random number generators.
<img src="/w/images/thumb/7/7e/Live-mode-promo.jpg/600px-Live-mode-promo.jpg" alt="Live mode option" decoding="async" loading="lazy" />
Booting into <a href="/wiki/Live_Mode">VM Live Mode</a> is as simple as choosing Live Mode in the boot menu. Alternatively Debian and perhaps other Debian-based hosts can boot their existing host operating system into <a href="/wiki/Host_Live_Mode">Host Live Mode</a>.
<img src="/w/images/thumb/6/62/Linux-based-kicksecure-promo.jpg/600px-Linux-based-kicksecure-promo.jpg" alt="Based on Linux" decoding="async" loading="lazy" />
Linux is highly reliable and secure. Its open source and freedom paradigm sets it apart from other OS. That's why Kicksecure <a href="/wiki/Debian"> is based on Linux. </a>
<img src="/w/images/thumb/3/33/Onion-website-promo.jpg/600px-Onion-website-promo.jpg" alt="Onion website" decoding="async" loading="lazy" />
Our website offers an alternative onion version which offers a higher connection security between the user and the server. This is because connections over onions are providing an alternative end-to-end encryption which is independent from <a href="/wiki/Forcing_.onion_on_Project"> flawed TLS certificate authorities </a> and the mainstream Domain Name System (DNS).
<img src="/w/images/thumb/8/82/Firewall-symbol.png/600px-Firewall-symbol.png" alt="Advanced Firewall" decoding="async" loading="lazy" />
Our Firewall is configured specifically for securely using the Internet.
<img src="/w/images/thumb/e/ec/AppArmor-logo-promo.png/600px-AppArmor-logo-promo.png" alt="Apparmor" decoding="async" loading="lazy" />
<a href="/wiki/AppArmor">AppArmor</a> profiles restrict the capabilities of commonly used, high-risk applications such as Tor Browser.
<img src="/w/images/thumb/8/87/Account-separation-promo.png/600px-Account-separation-promo.png" alt="Strong account separation" decoding="async" loading="lazy" />
Learn more about our Linux User Account Separation
<a href="https://github.com/Kicksecure/security-misc" target="_blank">security-misc</a>
.
<img src="/w/images/thumb/5/55/Advanceddocumentation213123.jpg/600px-Advanceddocumentation213123.jpg" alt="Extensive documentation" decoding="async" loading="lazy" />
The more you know, the safer you can be: <a href="/wiki/Documentation">Extensive Kicksecure Documentation</a>
<img src="/w/images/thumb/c/cf/Shield.png/600px-Shield.png" alt="Virus Protection" decoding="async" loading="lazy" />
Kicksecure provides additional security hardening measures and user education to provide better protection from <a href="/wiki/Malware">viruses</a>.
<img src="/w/images/thumb/7/74/Console-lockdown.jpg/600px-Console-lockdown.jpg" alt="Console lockdown" decoding="async" loading="lazy" />
<a href="/wiki/Dev/Strong_Linux_User_Account_Isolation#Console_Lockdown"> Console Lockdown </a> disables legacy login methods and thereby improves security hardening.
<img src="/w/images/thumb/a/af/Discourse_logo.png/600px-Discourse_logo.png" alt="Vibrant community" decoding="async" loading="lazy" />
Our vibrant community features
<a href="https://forums.kicksecure.com" target="_blank">Forums</a>,
<a href="/wiki/Contributors">Contributors</a> and
<a href="https://forums.kicksecure.com/c/news.rss" target="_blank">RSS</a>
<img src="/w/images/thumb/3/30/Debian.png/600px-Debian.png" alt="Based on Debian" decoding="async" loading="lazy" />
In oversimplified terms, Kicksecure is just a collection of configuration files and scripts. Kicksecure is not a stripped down version of Debian; anything possible in "vanilla" Debian GNU/Linux can be replicated in Whonix. <a href="/wiki/About">About Whonix</a>
<img src="/w/images/thumb/7/77/Key-lock-gpg.png/600px-Key-lock-gpg.png" alt="Securely signed" decoding="async" loading="lazy" />
Downloads are <a href="/wiki/Verifying_Software_Signatures">signed</a> so genuine Whonix releases can be <a href="/wiki/Verify_the_Kicksecure_images">verified</a>.
<img src="/w/images/thumb/4/49/Canary-promo.jpg/600px-Canary-promo.jpg" alt="Warrant caranry" decoding="async" loading="lazy" />
A <a href="/wiki/Trust#canary">canary</a> confirms that no warrants have ever been served on the Kicksecure project.
<img src="/w/images/thumb/7/7b/File-swap-promo.jpg/600px-File-swap-promo.jpg" alt="Swap file creator" decoding="async" loading="lazy" />
Running low on RAM isn't a security problem.
<a href="https://github.com/Kicksecure/swap-file-creator" target="_blank">swap-file-creator</a>
will create an encrypted swap file.
<img src="/w/images/thumb/f/ff/Success-symbol.png/600px-Success-symbol.png" alt="12 years of success" decoding="async" loading="lazy" />
Kicksecure is created by the developers of
<a href="https://www.whonix.org" target="_blank">Whonix</a>,
the great privacy tool with over 12 years of success. We have successfully protected our users from
<a href="https://www.whonix.org/wiki/Security_in_Real_World#Everyday_Trackers" target="_blank">everyday
trackers</a>
and even from
<a href="https://www.whonix.org/wiki/Security_in_Real_World" target="_blank">high level attacks</a>
. Kicksecure is the rock solid foundation that Whonix is based on.
<img src="/w/images/thumb/0/09/Osi_standard_logo_0.png/600px-Osi_standard_logo_0.png" alt="Open Source" decoding="async" loading="lazy" />
All the <a href="https://github.com/Kicksecure" target="_blank">Kicksecure source code</a> is
licensed under
<a href="https://opensource.org/licenses/" target="_blank">OSI Approved Licenses</a>.
We respect user rights to review, scrutinize, modify, and redistribute Kicksecure.
This improves security and privacy for everyone.
<img src="/w/images/thumb/a/a3/Heckert_gnu.big.png/600px-Heckert_gnu.big.png" alt="Freedom Software" decoding="async" loading="lazy" />
Kicksecure is
<a href="/wiki/Reasons_for_Freedom_Software">Freedom Software</a>
and contains software developed by the
<a href="https://www.fsf.org/" target="_blank">Free Software Foundation</a>
and the
<a href="https://www.gnu.org" target="_blank">GNU Project</a>.
<img src="/w/images/thumb/7/7f/Cornues.png/600px-Cornues.png" alt="Research Implementation Project" decoding="async" loading="lazy" />
<a href="/wiki/What_we_do" title="Research">Research</a> and Implementation Project: Kicksecure makes modest claims and is wary of overconfidence. Kicksecure is an actively maintained research project making constant improvements; no <a href="/wiki/Warning" title="Warning">shortcomings</a> are ever hidden from users.
<img src="/w/images/thumb/4/44/Bho78-4ycp0.jpg/600px-Bho78-4ycp0.jpg" alt="Independently verifiable" decoding="async" loading="lazy" />
Kicksecure is independently verifiable by security experts and software developers around the world; you don’t have to trust developer claims. <a href="/wiki/Reasons_for_Freedom_Software"> This improves security and privacy for everyone. </a>
<img src="/w/images/thumb/e/ef/Respect-freedom-symbol.jpg/600px-Respect-freedom-symbol.jpg" alt="Respect for privacy principles" decoding="async" loading="lazy" />
Kicksecure respects data privacy principles. We don’t make advertising deals or collect sensitive personal data. There are <a href="/wiki/Reasons_for_Freedom_Software#No_Intentional_User_Freedom_Restrictions"> no artificial restrictions imposed on possible system configurations </a>.
<img decoding="async" loading="lazy" alt="SUI Disabler and Permission Hardener" src="/w/images/thumb/e/ed/Disablesuidbinary.jpg/600px-Disablesuidbinary.jpg" />
The purpose of <a href="/wiki/SUID_Disabler_and_Permission_Hardener"> SUID Disabler and Permission Hardener </a> is to enhance system security. It does this by strengthening the isolation of Linux user accounts, implementing stricter file permission settings, and decreasing potential security vulnerabilities by turning off SUID-enabled binaries.