Blog

One of the most common mistakes new security enthusiasts make is installing Kali Linux as their only operating system. A dedicated Kali machine can be useful in a controlled lab, but for day‑to‑day development, Windows 10 still offers the broadest software compatibility — especially for IDEs, game engines, and proprietary tools. Dual‑booting gives you a hardened penetration‑testing environment alongside your regular workflow without sacrificing either. This guide walks you through a secure, step‑by‑step setup that preserves your existing Windows installation and keeps both systems isolated.

What You Need Before Starting

• A PC with at least 8 GB of RAM (16 GB recommended) and 60 GB of free disk space.
• A Windows 10 installation that is fully updated and backed up.
• A 8 GB or larger USB drive (the drive will be erased).
• The latest Kali Linux ISO from the official website — verify the SHA‑256 checksum after downloading.
• Rufus (Windows) or dd (Linux) to create a bootable USB. For beginners, Rufus is simpler and includes a safe mode for UEFI systems.

Step 1: Shrink Your Windows Partition

Kali needs its own partition. Windows 10 includes a built‑in disk manager that can shrink your main C: drive without losing data.

1. Right‑click the Start button and select Disk Management.
2. Right‑click the C: partition and choose Shrink Volume.
3. Enter the amount of space to shrink in megabytes. A comfortable Kali installation with tools and swap needs at least 30 GB (30 720 MB). If you plan to store large wordlists or VM images, allocate 60 GB or more.
4. Click Shrink. After completion, you will see a block of unallocated space. Do not create a new volume in it — leave it unallocated for the Kali installer.

If you receive an error that the volume cannot be shrunk past a certain point, run a disk defragmentation or disable the Windows page file temporarily. Some system files are immovable; a third‑party partition tool like GParted (from a live Linux USB) can bypass this, but that adds complexity.

Step 2: Disable Fast Startup and Secure Boot

Windows 10’s Fast Startup hibernates the kernel, which can cause file system corruption if you later mount the Windows partition from Kali. Secure Boot can also prevent the GRUB bootloader from loading properly.

• Disable Fast Startup: Go to Control Panel → Power Options → Choose what the power buttons do. Click Change settings that are currently unavailable, then uncheck Turn on fast startup. Save changes.
• Disable Secure Boot: Reboot and enter UEFI firmware settings (usually by pressing F2, F10, Del, or Esc during boot). Find the Secure Boot option under the Boot or Security tab and set it to Disabled. Save and exit.

Some modern UEFI implementations allow you to keep Secure Boot enabled if you enroll the Kali shim loader. For beginners, disabling it is the most reliable path.

Step 3: Create a Bootable Kali USB

Use Rufus in DD mode (not ISO mode) for UEFI compatibility. After selecting your USB drive and the Kali ISO, click Start. Rufus will warn that the drive will be formatted — confirm. When prompted about writing in ISO or DD mode, choose DD Image. This writes the image directly, preserving the partition table and bootloader embedded in the ISO.

If you prefer a command‑line approach on an existing Linux system, use sudo dd if=kali-linux-2024.1-installer-amd64.iso of=/dev/sdX bs=4M status=progress — replace /dev/sdX with your USB device (check with lsblk).

Step 4: Install Kali Alongside Windows

1. Insert the bootable USB and restart your PC. Boot from the USB (select it from the one‑time boot menu, usually F12).
2. Choose Graphical install from the Kali boot menu.
3. Select your language, location, and keyboard layout.
4. Network configuration: if you are using Wi‑Fi, you can configure it now. A wired connection is simpler and avoids driver issues during installation.
5. Partitioning — the critical step. Select Manual partitioning.

You will see your existing Windows partitions (NTFS) and the unallocated space you created earlier. Create the following on that unallocated space:

• Root partition (ext4): 20 GB minimum. Mount point: /.
• Swap partition: Equal to your RAM size if you plan to hibernate, or 2 GB for light use. Leave as swap area.
• Home partition (ext4): All remaining space. Mount point: /home. This separates your personal files from the system, making future re‑installs easier.

Confirm the changes and write them to disk. The installer will copy files and ask you to set a root password and create a standard user account. Do not use a weak or reused password — this machine will be used for security testing, and a compromised Kali installation can be used against you.

Step 5: Install GRUB Bootloader

When the installer reaches the Install the GRUB boot loader step, it will detect Windows Boot Manager. Choose Yes to install GRUB to the EFI System Partition (ESP). On most UEFI systems, the ESP is a small FAT32 partition (usually 100 MB to 500 MB). The installer will add an entry for Windows 10 automatically.

After installation completes, remove the USB and reboot. You should see the GRUB menu with options for Kali GNU/Linux and Windows Boot Manager. Select Kali to finish the first‑boot setup.

Post‑Installation: Locking Down Your Kali Environment

A default Kali installation is not hardened. Immediately after logging in, run the following:

sudo apt update && sudo apt full-upgrade -y
sudo apt install ufw
sudo ufw enable
sudo ufw default deny incoming
sudo ufw allow out

This enables a basic firewall that blocks unsolicited inbound connections. If you plan to run services like SSH or web servers in your lab, explicitly allow those ports with sudo ufw allow 22/tcp.

Also consider encrypting your home partition. If you did not select LUKS during installation, you can migrate later, but it is easier to re‑install with encryption from the start. For a lab environment, encryption is less critical, but if you carry the laptop outside your home network, enable it.

Common Pitfalls and How to Fix Them

Keeping Your Dual Boot Secure

Dual‑booting does not automatically protect one OS from the other. If you mount the Windows partition from Kali (for example, to copy a file), you risk writing to it while Windows is hibernated, which can corrupt the NTFS journal. Always shut down Windows completely (not hybrid shutdown) before booting Kali. Better yet, keep the Windows partition unmounted unless you need it.

If you record your installation process for later reference, consider using a tool that captures only the screen content without exposing passwords. Our guide on the best Linux screen recorders for developers and cybersecurity labs covers applications that can record in a secure way, including options that automatically blur sensitive windows.

Finally, treat the Kali installation as a separate, potentially vulnerable environment. Do not reuse personal credentials, and avoid logging into personal accounts from Kali. If you need to access encrypted communication channels for reporting vulnerabilities, refer to our How to Contact Us Safely: Encrypted Channels and Best Practices page for proper procedures.

After the first successful boot, take a moment to verify that both operating systems can access the internet and that the GRUB timeout is set to something reasonable — 10 seconds is enough. You can change it in /etc/default/grub by editing the GRUB_TIMEOUT line and then running sudo update-grub. With that, your dual‑boot workstation is ready for both daily development and ethical security practice.