⌁
Hardened by default
DNS, browser settings, ad blocking, and a desktop firewall are configured as part of the same predictable install.
For a fresh Debian 13 Cinnamon install
A hardened desktop, without a black box.
PrivacyOS configures encrypted DNS, a practical firewall, hardened browsers, tracker blocking, and security updates from one readable script. No account. No service. Nothing hidden.
Please read the requirements before installing. It is designed for a new machine, not an existing desktop.
System Active
Debian 13 · Cinnamon
01 / Know the scope
Built for fresh Debian 13 Cinnamon installs only.
02 / Encrypt first
Set up full-disk encryption in Debian's installer before running PrivacyOS.
03 / Audit everything
The complete installer is public, small enough to read, and MIT licensed.
Privacy is a practice
Useful defaults, visible trade-offs.
PrivacyOS makes the sensible baseline easy. It does not promise anonymity, replace good account security, or protect an already-compromised machine.
◫
One update routine
A single upgrade command refreshes packages, browser hardening, and the hosts list without losing your local changes.
◎
Choose deliberately
Each browser and optional bundle is a flag. Pick your DNS provider and components before you run anything.
↗
No hidden service
No hosted control plane, analytics account, or proprietary installer. The script uses APT and configuration files you can inspect.
Start carefully
Build an install command that matches your machine.
Review requirements, choose your components, and copy the exact command. Nothing runs from this website.