Whonix uses two virtual machines:
- Whonix Gateway - Runs Tor and acts as the network gateway. All traffic must pass through it.
- Whonix Workstation - Your desktop environment. It can ONLY connect to the internet through the Gateway. Even malware that compromises the Workstation cannot bypass Tor.
This is more secure than running Tor 瀏覽器 on your regular OS because the isolation is enforced at the network level, not just the application level.