Tails (The Amnesic Incognito Live System) is a full operating system you boot from a USB stick instead of installing on your hard drive. Shut it down and it forgets everything — no browsing history, no saved files, no trace on the host computer — unless you explicitly set up encrypted persistent storage. It’s built on Debian, routes every connection through Tor by default, and is the tool of choice for journalists, whistleblowers, domestic-abuse survivors who need to use a shared or monitored computer safely, and anyone who needs a clean, verifiable environment for a single sensitive task.
What’s actually in the box
The current release line (Tails 7.x, built on Debian 13 with the 6.12 LTS kernel and GNOME 48) ships Tor Browser with uBlock Origin pre-configured, GnuPG for email/file encryption, the KeePassXC password manager, the Electrum Bitcoin wallet, and Metadata Cleaner (MAT2) for stripping EXIF and document metadata before you share a file. If you enable the optional encrypted Persistent Storage volume, it’s protected with LUKS2 and Argon2id key derivation, and Tails also supports mounting external VeraCrypt volumes. Minimum requirements are modest: a 64-bit machine, 3 GB of RAM, and a USB stick of at least 8 GB (get 16 GB or more if you want room for the persistent volume and Electrum’s blockchain data).
How this is different from just using a VPN
A VPN encrypts your traffic to one server that the VPN company controls; you’re trading "my ISP can see my traffic" for "my VPN provider could, in theory." Tor — which is what Tails forces all traffic through — instead bounces your connection through three independently-run relays, so no single party sees both who you are and what you’re doing. That’s a stronger anonymity model, but it’s slower, and some services block or CAPTCHA-wall Tor exit-node traffic.
Tails’ own documentation is explicit that combining a commercial VPN with Tails is discouraged for most users: it means trusting your VPN provider instead of Tor’s entry guard, and it can complicate Tor’s built-in stream isolation. The one legitimate reason to add a VPN or bridge is bypassing a network that blocks Tor outright (some workplaces, some countries) — not for "extra" privacy on top of Tor.
What Tails is good at, and what it isn’t
Tails is excellent for a single high-stakes session: filing a leak, communicating with a source, handling a document you don’t want linked to your identity, or using a public library computer without leaving anything behind on it. It’s not designed to be your daily-driver OS — persistence is opt-in and limited, most Windows/Mac-only software won’t run at all, and Tor’s routing makes everyday browsing (streaming, large downloads, video calls) noticeably slower than a direct connection or a VPN. It also doesn’t hide the fact that you’re using Tor from your ISP (bridges can help obscure this in restrictive countries, but they’re a separate, more advanced setup step).
Setting it up
You download the Tails image and verify it (the project provides a signature-checking tool specifically because a tampered Tails image is a realistic attack), then write it to USB with Tails’ own installer or a tool like Etcher — a standard 64GB+ USB 3.0 flash drive (around $10–15) works fine and leaves room for a persistent volume. First boot walks you through choosing an optional administration password and, if you want it, creating the encrypted persistent volume for your KeePassXC database, GPG keys, and saved files.
Tails vs. the alternatives
| Tool | What it is | Best for | Tradeoff |
|---|---|---|---|
| Tails | Amnesic live-boot OS, all traffic forced through Tor | Single sensitive session on any computer | Slow; not for daily use |
| Tor Browser (alone) | Just the browser, run on your normal OS | Anonymous browsing without rebooting | Rest of your OS isn’t protected |
| Whonix | Two-VM setup (Gateway + Workstation) routing all traffic through Tor | Persistent anonymous desktop use | Needs a hypervisor and more RAM/storage |
| Commercial VPN | Encrypted tunnel to one provider-run server | Everyday speed, streaming, general privacy from your ISP | You trust one company, not a distributed network |
FAQ
Can I use Tails as my everyday computer? Not comfortably — it’s designed for discrete sessions, and most persistent, install-everything workflows fight against how it’s built.
Does Tails hide my Tor usage from my ISP? No, by default your ISP can see you’re connecting to Tor (though not what you’re doing on it); bridges can obscure that in places where Tor itself is blocked or risky to use openly.
Is Tails legal? Yes, in the vast majority of countries — it’s free, open-source software published by a nonprofit. A small number of countries restrict or ban Tor itself, so check local law if you’re in one of them.
Does Tails replace a VPN? For the specific job of anonymous, hard-to-trace communication, Tails/Tor is the stronger tool. For everyday privacy from your ISP with normal browsing speed, a VPN is the more practical one — they solve different problems.
Verdict
Tails isn’t a VPN replacement and shouldn’t be marketed as one — it’s a specialized tool for the moments when you need a verifiably clean, anonymous environment and are willing to trade speed and convenience for it. If that’s your actual need (source protection, escaping a monitored device, handling a single sensitive task), it’s the right tool and it’s free. If you just want your day-to-day browsing hidden from your ISP at normal speed, a reputable no-logs VPN is the better fit, and the two are not meant to be stacked casually.
