using tails on/off for over 4 years. here’s the no-fluff, actually-up-to-date guide: direct links, tested tips, and what works in 2025.
this isn’t theory. this is the real-world process you can follow right now.

SUPPORTED DEVICES (2025):
tails runs on almost any modern pc or mac with usb boot support.
- desktops and laptops (intel/amd)
- recent macbooks (intel only, no apple silicon)
- most chromebooks (developer mode, legacy boot)

what you need:
- usb stick (8gb or bigger, nothing fancy)
- computer (can be a public one)
- another usb stick (optional, for persistent storage)
- internet connection

WHY USE TAILS?
this blog exists to prove privacy isn’t dead. most tools claim a lot, deliver little, or break workflows. tails is different:

- no trace: run from usb, shutdown = zero history left behind
- every connection is tor, by default, no exceptions
- best for research, travel, whistleblowers, journalists, or anyone wanting a true “off-grid” session
- works anywhere: use at home, library, office, hotel, airport
- persistent encrypted storage (optional): save docs, keep gpg keys, or carry a secure password manager—only if you want to

what tails isn’t:
- it’s not a daily driver. it’s a “privacy drill” for when you need it
- not for running games, zoom, or regular work software
- not a replacement for opsec, just a tool that helps

WHAT YOU NEED BEFORE STARTING:
- download the latest tails image from https://tails.net/
- check the signature/verify download (they walk you through this)
- “burn” the image to your usb (use balena etcher, tails installer, or the built-in guide)

full step-by-step: https://tails.net/install/

STEP 1: PREPARE YOUR USB
- use a usb 3.0 stick if possible (faster boot, less waiting)
- you’ll erase all data on the stick
- follow the “install from windows/mac/linux” guide on tails.net—works for all systems

STEP 2: BOOT FROM USB
- plug tails stick into your computer
- reboot, enter boot menu (often F12, Esc, or Option key on mac)
- select the usb drive as boot device
- if it doesn’t show, check bios/uefi settings and enable legacy boot
- you’ll see the tails logo—if so, you’re in

STEP 3: FIRST BOOT BASICS
- choose language/region
- default: all network traffic routes through tor, no logins required
- you can use the default “amnesic” mode (no persistent data)
- optional: set up persistent storage for files, gpg keys, and bookmarks (all encrypted, only accessible with your password)

STEP 4: HOW TO USE TAILS
- use tor browser for all browsing (preconfigured for max privacy)
- built-in apps: keepassxc (passwords), electrum (bitcoin), libreoffice (docs), onion share (secure file sharing), and more
- don’t log into personal accounts unless you’re ok with tor exit node exposure
- shutdown wipes all traces—physically unplug, and that’s it

WHAT WORKS WELL:
- browsing anonymously
- sharing sensitive docs
- communicating securely (signal, onion share, gpg)
- storing secrets (in persistent storage, if enabled)
- public wifi (tails forces tor, hides your identity)

WHAT DOESN’T:
- running zoom/teams/video calls
- installing random linux apps (tails is locked down on purpose)
- bypassing sophisticated local surveillance (hardware keyloggers, network monitoring outside of tor)

COMMON ISSUES & FIXES:
“won’t boot from usb”
- try a different usb port or stick
- check boot order in bios
- use another computer if possible

“no internet connection”
- wifi chips on some laptops may need the “additional drivers” mode
- use ethernet if possible

“can’t use persistent storage”
- persistent storage only works after you set it up from the tails welcome screen
- requires a second reboot to enable

SECURITY FEATURES YOU GET:
- memory wiped on shutdown
- all apps go through tor
- mac address spoofing (extra wifi privacy)
- built-in secure erase
- default settings = best privacy, no extra config needed

UPDATING TAILS:
- tails will prompt for updates on boot
- update whenever prompted
- if you miss an update, download the latest image from tails.net and burn a fresh stick

THREAT MODEL REALITY:
tails protects against:
- corporate tracking and data retention
- wifi snooping on public networks
- evidence left behind after a session
- basic malware and browser exploits

tails does **not** protect against:
- physical hardware bugs, cameras, or hardware keyloggers
- advanced malware that infects the bios/firmware
- human error (logging into personal accounts or ignoring opsec basics)

WHY TAILS OVER “PRIVATE” BROWSERS OR VPNS?
- privacy browsers (brave, firefox, etc): still leave traces on your system, can’t guarantee anonymity
- vpn: hides your ip from sites, but your vpn provider still sees everything
- incognito mode: not enough. your device still keeps records
- only tails routes *everything* through tor, blocks leaks, and wipes itself clean every time

THE BOTTOM LINE:
using tails is the real answer when you need to disappear—research, activism, or just peace of mind. it’s not always convenient, but it’s the best at what it does.
if you want to truly understand privacy, try tails for a week.
total setup time: 30 minutes.
difficulty: low/medium (just follow instructions carefully).

tails isn’t magic. it’s just privacy, done right.

// next post: setting up persistent storage safely – what to keep, what to leave behind
// ghost chat: real privacy, real world, no compromises