If anonymity is important, don’t forget there’s other aspects to anonymity besides just your ip address (browser fingerprinting, cookies, etc) so it’s safer to just use Tor Browser the standard way without a vpn endpoint unless you really know what you’re doing. The networking chain would look like this: sys-net > sys-firewall > sys-whonix > vpn-mullvad > any-app-vm.

You’d use a separate VM with a different browser (firefox/chrome/whatever) and this VM would use vpn-mullvad as the networking VM. Keep in mind, with this set up you can’t use Tor Browser. People usually do this to prevent any website you visit from knowing you’re using Tor. When you visit a website, your ip address would appear to be a tor exit node.īut if you want to connect to your vpn after you connect to tor, you’d have to set “sys-whonix” as the networking VM in the vpn-mullvad VM. The networking chain would look like this: sys-net > sys-firewall > vpn-mullvad > sys-whonix > any-app-vm. That means instead of sys-whonix connecting to the internet directly through sys-firewall, it will connect through vpn-mullvad. If that is what you want to do and assuming you already created your vpn-mullvad VM, you’ll need to assign vpn-mullvad as the networking VM in your sys-whonix VM. Usually people try to do this to prevent their ISP from knowing they are using tor.

Do you want to connect to your vpn before you connect to tor? (vpn before tor).

Whonix tor bridge