Qubes OS
Qubes OS is a security-focused desktop operating system built on the principle of security by compartmentalisation. Each app and task runs in its own lightweight virtual machine — called a qube — isolated by the Xen hypervisor, so a compromise in one workload cannot reach the rest of your system. Window borders are colour-coded by trust level so you always know where you are working.
Key Features
- Compartmentalisation — every application and task runs in its own isolated, disposable qube
- Xen-based isolation — hardware-virtualisation boundaries separate each qube from the rest of the system
- Shared template system — qubes inherit a single immutable root filesystem, so updates and storage are handled once for many VMs
- Colour-coded windows — window borders reflect the security level of the qube they belong to
- Trusted GUI separation — the window manager isolates your keyboard and mouse input from less-trusted virtual machines
- Networking separation — run air-gapped, offline work and network-facing qubes independently
- Wide template support — official Fedora and Debian templates plus community templates for Arch, Ubuntu, Whonix and more
Why Use Qubes OS?
Qubes is for users with a real threat model — people who handle sensitive documents, work with untrusted files, or need strong separation between different parts of their digital life. Instead of trying to secure one big system, it makes isolation the operating principle, which is a fundamentally more robust approach against malware and targeted attacks.
Use Cases
- Threat-model-driven desktops for high-assurance work
- Separating personal, work and financial activities
- Opening untrusted documents and software safely
- Anonymous workloads using the Whonix template
Platform
Linux · x86-64
Licence
GPL-2.0 (mostly)