Kali Linux’s live mode runs the entire operating system from the USB drive itself, in RAM — the host computer’s internal hard drive is never touched unless you deliberately mount it. Shut down and remove the USB, and the PC is exactly as it was before. This makes it ideal for testing on a machine you don’t want to permanently modify.
Before you start
You’ll need a USB drive (8 GB minimum, 16 GB+ recommended for persistence), and a PC whose BIOS/UEFI allows booting from USB. Making the USB will erase anything currently on it.
Option A — build your own boot USB
- Download the official Kali Linux ISO from kali.org and verify its checksum (security tools are exactly where you don’t want a tampered download).
- Write it to a USB drive with Rufus (Windows), balenaEtcher (Windows/Mac/Linux), or
dd(Mac/Linux terminal). - Insert the USB in the target PC and restart it.
Option B — use a ready-made Kali USB
Skips the ISO download, checksum verification, and USB-writing step — it arrives pre-verified and ready to boot directly.
Booting into Kali
- At the manufacturer logo, press the boot menu key (commonly F12, F9, or Esc) and select the USB drive.
- At the Kali boot menu, choose “Live (amd64)” for a standard session, or “Live (forensic mode)” if you specifically need to guarantee the host’s internal drives are never auto-mounted or written to — the standard for evidence-handling work.
- Kali boots to its desktop, fully usable, with nothing installed on the host machine.
Optional: persistent storage
By default, anything you do in live mode is wiped when you reboot. If you want your tool configurations, notes and files to survive between sessions, you can set up a persistence partition on the same USB drive (optionally encrypted) during setup, which live mode will then detect and offer to use automatically on subsequent boots.
Skip the setup entirely
Our Kali Linux USB is ready to boot straight out of the box — no download, no checksum verification, no USB-writing software. Just boot and go.
Shop Kali Linux USBSkip the trial and error — use a ready-made RecoveryUSB
Every RecoveryUSB ships pre-built and tested, with a step-by-step guide. Free fast worldwide shipping.
Shop Recovery USBsFrequently asked questions
Does running Kali Linux from USB affect my computer's hard drive?
No, not in standard live mode — it runs entirely from the USB drive in RAM. The internal hard drive is left untouched unless you deliberately mount or write to it.
What's the difference between Live mode and Forensic mode in Kali?
Forensic mode goes further than standard live mode by ensuring internal drives are never auto-mounted, so evidence on a host machine's disks can't be accidentally altered — the standard choice for digital forensics work.
Can I save my work when running Kali from a USB drive?
Only if you set up a persistence partition on the USB during creation. Without it, everything from the session is wiped on reboot, which is often exactly what you want for a clean, repeatable testing environment.