🖕 Cloud Exodus Notice: All No iLLusion services are migrating off cloud platforms to a home-grown, fully encrypted server within 6-12 months. Protected by a 100-character password scattered across 10 sticky notes in different languages. Just eat one note and the whole thing goes dark.
No real names, no tracking, no overlords.

Tails OS Complete Guide

Master the amnesic incognito live system that leaves no trace and protects your privacy through Tor

Latest Release: Tails 7.14 (September 30, 2026)

Built on Debian 13 "Trixie" with GNOME 48 (since Tails 7.0). Ships with Tor Browser 15.0.24, tor 0.4.9.13, and Linux kernel 6.12. Tails releases roughly every few weeks, mostly security updates, so always run the latest version. Automatic upgrades work from any Tails 7.x release.

Processor

64-bit x86-64 only

Memory

3 GB RAM recommended

USB Stick

8 GB minimum

Last verified: October 2026

What is Tails?

Tails (The Amnesic Incognito Live System) is a security-focused Debian-based Linux distribution designed to preserve privacy and anonymity. It runs from a USB stick, sends all internet traffic through Tor, and forgets everything when you shut down unless you deliberately save it to encrypted Persistent Storage.

Amnesic

Runs from RAM, nothing written to the host computer

Anonymous

All traffic through Tor, non-Tor connections blocked

Encrypted

LUKS-encrypted Persistent Storage, encryption tools built in

Tails Installation Guide

Hardware check first: Tails only runs on 64-bit Intel/AMD (x86-64) computers. Apple Silicon Macs (M1 and newer), ARM laptops, Chromebooks with ARM chips, and 32-bit machines cannot run Tails. Older Intel Macs work but often need extra steps.

1Download & Verify Tails

Always download from the official Tails website and verify the download before using it:

  1. 1.Visit tails.net/install (the only official source)
  2. 2.Pick your current operating system to get matching instructions
  3. 3.Download the USB image (tails-amd64-7.14.img, about 1.8 GB)
  4. 4.Use the built-in verification on the download page, or check the OpenPGP .sig file with GPG

Security Note: Never skip verification. A tampered Tails image could expose everything you do.

Which file do I need?

  • • .img: for USB sticks (most people)
  • • .iso: for DVDs and virtual machines

Advanced: OpenPGP check

gpg --verify tails-amd64-7.14.img.sig tails-amd64-7.14.img

Import the Tails signing key from tails.net first.

2Create Bootable USB Drive

Tools That Write the Image Correctly:

Windows
  • • balenaEtcher (Tails' documented method)
  • • Select the .img, select the USB, Flash
macOS (Intel)
  • • balenaEtcher
  • • dd in Terminal (advanced)
Linux
  • • GNOME Disks: "Restore Disk Image"
  • • dd (advanced)

Already have Tails? Use Applications → Tails → Tails Cloner to make a copy for someone else. Tools change over time, so check tails.net/install for the current recommendations.

USB Drive Requirements:

  • • Minimum 8 GB capacity (16 GB or more if you plan to use Persistent Storage)
  • • USB 3.0 or newer for faster boot and app loading
  • • Everything on the stick will be erased
  • • Use a new drive from a reputable brand, not a found or gifted one

3Boot From the USB Stick

Most computers can boot from USB through a one-time boot menu. Steps vary by manufacturer:

  1. 1.Plug in the Tails USB stick and shut the computer down
  2. 2.Power on and immediately press the boot menu key (see below)
  3. 3.Choose the USB stick from the list
  4. 4.No boot menu? Enter BIOS/UEFI setup (F2, Del, or Esc) and move USB to the top of the boot order
  5. 5.If the stick is refused, some machines need Secure Boot disabled. Check the Tails start docs for your computer first

Common Boot Menu Keys: F12 (Dell, Lenovo), F9 (HP), F8 (ASUS), F11 (MSI), F12 or Esc (Acer)

Intel Macs: hold Option (⌥) right after the startup chime and pick the yellow "EFI Boot" drive. Macs with a T2 chip need external boot allowed in Startup Security Utility.

4First Boot & Initial Setup

Boot Process Sequence:

  1. 1.The Tails boot menu appears. Press Enter on "Tails" (the default)
  2. 2.The Welcome Screen loads (usually under a minute)
  3. 3.Choose language, keyboard layout, and formats
  4. 4.Click "Start Tails"
  5. 5.The desktop loads and the Tor Connection assistant opens
✓ Success Indicators:
  • • GNOME desktop appears
  • • Tor Connection assistant opens
  • • Onion icon in the top bar turns solid once connected
  • • Clock synchronizes after Tor connects
⚠ If It Doesn't Boot:
  • • Black screen: pick "Tails (Troubleshooting Mode)" in the boot menu
  • • Freezes: check tails.net known issues for your model
  • • Stick not listed: re-flash and verify the image
  • • No Wi-Fi: try Ethernet or a USB Wi-Fi adapter

Initial Setup & Configuration

1Welcome Screen Configuration

Settings on the Welcome Screen apply to this session only, unless you save them in Persistent Storage. Click the + under Additional Settings to see these:

Language & Region:

  • • Language
  • • Keyboard layout
  • • Formats (date, currency)

Additional Settings:

  • • Administration Password: off by default; only set it when you need to install software
  • • MAC Address Anonymization: on by default, leave it on
  • • Offline Mode: disables all networking for air-gapped work
  • • Unsafe Browser: disabled by default; only for captive portals at cafes and hotels

2Network Connection & Tor Setup

Connection Process:

  1. 1.Connect to Wi-Fi from the top-right system menu, or plug in Ethernet
  2. 2.The Tor Connection assistant asks how to connect
  3. 3."Connect to Tor automatically" works for most people
  4. 4.Wait for the connection (usually under a minute)
If Tor Is Blocked or You Want to Hide It:
  • • Choose "Hide to my local network that I'm connecting to Tor"
  • • Enter bridges (obfs4 first, WebTunnel next)
  • • Get bridges at bridges.torproject.org or the Telegram bot @GetBridgesBot
  • • Save the bridge in Persistent Storage so you don't retype it
Connection Issues:
  • • Captive portal (hotel/cafe login): enable Unsafe Browser on the Welcome Screen and sign in there
  • • Clock badly wrong: Tor can fail; fix the time in the assistant
  • • Try a different network or a bridge
  • • Wi-Fi card not detected: use Ethernet or a supported USB adapter

3Desktop Environment Overview

Key Included Applications:

  • Tor Browser: the main web browser, pre-configured
  • Thunderbird: email with OpenPGP built in
  • KeePassXC: password manager
  • OnionShare: share files and chat over Tor
  • Metadata Cleaner: strip metadata from files before sharing
  • LibreOffice: documents and spreadsheets
  • Electrum: Bitcoin wallet

Desktop Layout (GNOME 48):

  • • Applications menu, top-left
  • • Places menu for files and Persistent Storage
  • • Onion icon, top-right: Tor status and the Tor Connection assistant
  • • System menu, top-right: Wi-Fi, sound, lock, shut down
  • • Tails-specific tools live under Applications → Tails

4Initial Security Verification

Security Checklist:

✓ Verify These Work:

  • • Tor Browser opens and loads pages
  • • .onion sites load
  • • Clock is synchronized
  • • You are running the latest Tails version

⚠ Built-in Protections:

  • • MAC address anonymized by default
  • • Apps that try to bypass Tor are blocked
  • • Memory is wiped at shutdown
  • • Unsafe Browser disabled by default

Test Your Setup:

  • • Visit check.torproject.org to confirm you're using Tor
  • • The system clock shows UTC; that's expected and keeps all Tails users looking alike
  • • If Tails offers an upgrade at startup, install it before doing anything sensitive

Persistent Storage Management

Persistent Storage is an optional LUKS-encrypted area on your Tails USB stick. Anything you don't put there is gone at shutdown. Only save what you truly need.

1Create Persistent Storage

  1. 1.Open Applications → Tails → Persistent Storage
  2. 2.Click "Continue" and enter a strong passphrase twice
  3. 3.Click "Create Persistent Storage" and wait for it to finish
  4. 4.Turn on only the features you need (see step 2)
  5. 5.Next boot: unlock it on the Welcome Screen with your passphrase

Passphrase Rules:

  • • Use 5 to 7 random words (diceware style)
  • • Example format: plaza-ivory-sprout-tango-mural
  • • Never reuse a password from anywhere else
  • • There is no recovery: forget it and the data is gone

2Choose What to Persist

Persistent Folder

Your documents, in Places → Persistent

Welcome Screen

Language, keyboard, and additional settings

Tor Bridge

Remember your last bridge

Network Connections

Saved Wi-Fi passwords (links you to those networks)

Tor Browser Bookmarks

Keep verified .onion addresses

Thunderbird / GnuPG / SSH

Email, encryption keys, SSH keys

Electrum / KeePassXC

Wallet and password database

Additional Software / Dotfiles / Printers

Extra packages, config files, printer setup

Every feature you enable makes your sessions a little more linkable. Start minimal.

3Back Up Persistent Storage

USB sticks fail. Keep a second Tails stick as a backup:

  1. 1.Boot your main Tails and unlock Persistent Storage
  2. 2.Plug in a second USB stick (8 GB or larger, same size or bigger)
  3. 3.Open Applications → Tails → Tails Cloner
  4. 4.Check "Clone the current Persistent Storage" and run it
  5. 5.Store the backup somewhere physically separate, and refresh it regularly

4Change Passphrase or Delete

Change Passphrase:

  • • Unlock Persistent Storage at startup
  • • Open Applications → Tails → Persistent Storage
  • • Click "Change Passphrase"
  • • Update any backup sticks too

Delete Persistent Storage:

  • • Start Tails without unlocking it
  • • Open Applications → Tails → Persistent Storage
  • • Click "Delete Persistent Storage"
  • • Deletion is permanent; to retire a stick completely, physically destroy it

Daily Usage & Best Practices

1Keep Identities Separate

  • • Use one Tails session per identity. Restart Tails before switching to a different persona
  • • Never log into accounts tied to your real name in the same session as anonymous work
  • • Use "New Identity" in Tor Browser between unrelated tasks
  • • Watch your writing style, time zone hints, and habits; they can link accounts too

2Handle Files Safely

  • • Run files through Metadata Cleaner before sharing (photos carry GPS and camera data)
  • • Open downloaded documents with Tails offline or in the included apps, never on your everyday OS
  • • Share files with OnionShare instead of cloud services
  • • Encrypt sensitive files with Kleopatra/GnuPG or keep them in KeePassXC

3Stay Updated

  • • Tails checks for upgrades after connecting to Tor; accept them
  • • Automatic upgrades work across all Tails 7.x releases
  • • If an automatic upgrade fails, do a manual upgrade from tails.net/upgrade
  • • Read release notes at tails.net/news for security warnings

4Common Mistakes to Avoid

  • • Using real names, emails, or phone numbers
  • • Leaving Tails running unattended (lock with the system menu)
  • • Setting an admin password when you don't need one
  • • Persisting everything "just in case"
  • • Using a computer you suspect has a hardware keylogger
  • • Mixing anonymous and personal activity in one session

Troubleshooting & Issues

Won't Boot

  1. 1. Re-verify the download and re-flash the stick
  2. 2. Try another USB port (rear ports on desktops)
  3. 3. Choose "Tails (Troubleshooting Mode)" in the boot menu
  4. 4. Disable Secure Boot or Fast Boot if your firmware blocks the stick
  5. 5. Search your model at tails.net/support/known_issues

Can't Connect to Tor

  1. 1. Check you're online (sign in to captive portals with Unsafe Browser)
  2. 2. Fix the clock in the Tor Connection assistant
  3. 3. Use a bridge: obfs4, then WebTunnel, then Snowflake
  4. 4. Try a different network

Persistent Storage Problems

  1. 1. Double-check the passphrase and keyboard layout on the Welcome Screen
  2. 2. If Tails reports file system errors, follow its prompt to repair
  3. 3. Restore from your Tails Cloner backup stick
  4. 4. Forgotten passphrase: the data cannot be recovered

Slow or Freezing

  1. 1. Use a computer with more than 3 GB of RAM
  2. 2. Close apps you aren't using; everything lives in memory
  3. 3. Use a fast USB 3 stick
  4. 4. Keep large files out of RAM and in the Persistent folder

Advanced Features & Customization

1Install Additional Software

  1. 1.Turn on Additional Software in Persistent Storage
  2. 2.Restart and set an Administration Password on the Welcome Screen
  3. 3.Connect to Tor, then install a Debian package (downloads go over Tor)
  4. 4.When asked, choose "Install Every Time" to reinstall it automatically each boot
# example
sudo apt update
sudo apt install mat2

Every extra package is more code that can leak or be exploited. Only install what you need, and never install software that ignores proxy settings and connects on its own.

2Dotfiles

  • • Turn on the Dotfiles feature in Persistent Storage
  • • Put config files (for example .bashrc or app settings) in /live/persistence/TailsData_unlocked/dotfiles
  • • At each boot, Tails links them into your Home folder
  • • Good for shell aliases and app preferences; don't store secrets here unencrypted

3Administration Password Caveats

  • • With an admin password set, malware running as you can more easily gain full control
  • • Set it only for the session where you need it, and pick a different passphrase from Persistent Storage
  • • Don't change firewall or Tor settings; Tails is tuned so changes are more likely to leak than help

Security Reality Check

Your Network Can See You Use Tor

The Reality: Without bridges, your ISP or network admin can tell you are connecting to Tor (and likely using Tails). They can't see what you do, but the fact itself may matter where you live.

What Helps:

  • • Use obfs4 or WebTunnel bridges to hide Tor use from the local network
  • • Using your home network is fine for most people; it just reveals Tor use to your ISP
  • • For high-risk work, a network not tied to your name adds another layer

Persistent Storage Is Detectable

The Reality: Anyone who examines your USB stick can tell it's a Tails stick and that it holds encrypted Persistent Storage. They can't read it without your passphrase, but they know it's there. Tails offers no hidden volume or plausible deniability.

What Helps:

  • • Keep Persistent Storage minimal; save only what you need
  • • Use a long random passphrase (5+ diceware words)
  • • For the highest-risk work, don't create Persistent Storage at all

Tails Can't Protect Against Compromised Hardware

The Limitation: Tails protects against software on the computer's hard drive, but not against hardware keyloggers, malicious firmware, or someone watching your screen. A compromised BIOS can defeat Tails.

What Helps:

  • • Use a computer you trust; avoid public or work machines for sensitive tasks
  • • Keep MAC Address Anonymization on (the default)
  • • Keep your Tails stick physically secure and never leave it plugged in unattended

Performance Trade-offs

The Reality: Tails runs from a USB stick and memory, and routes everything through Tor, so it is slower than a normal computer. That's the price of anonymity.

Optimization Tips:

  • • More RAM helps: 3 GB is recommended; more makes everything smoother
  • • Fast USB stick: USB 3 drives boot and load apps much faster
  • • Minimize multitasking: close unused apps to free memory

Resources & Official Links

Official Resources

Stay Current