# Upgrade and Remove

> Move a Whisper endpoint to a newer binary in place, remove the sensor and keep the host identity, or remove everything and release the address.

*Source: https://www.whisper.security/docs/endpoint/install/remove*

---
Which of the three below you want depends on what you are willing to give up. Moving to a newer binary gives up nothing, removing the service keeps the host's address, and removing everything releases it.

## Move to a newer binary

The address survives, because the marker it lives in is untouched.

```bash
curl -fsSL https://get.whisper.online | sh
sudo -E whisper service install --sensor
whisper version
```

The second command rewrites the unit for the new binary and restarts the process only if the unit changed, so running it when nothing changed is safe. Confirm the service came back:

```bash
journalctl -u whisper-sensor -n 3
```

```text
whisper: sensor: reporting as 2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478
```

On Windows, re-run `irm https://get.whisper.online/install.ps1 | iex` from an elevated PowerShell, then `whisper service install --sensor`.

## Remove the sensor, keep the identity

```bash
sudo -E whisper service uninstall --sensor
```

The unit goes, the host keeps its address, and it stays in your fleet with no on-host visibility. Resolution, egress and the network-layer containment actions all keep working, because none of them runs on the host: that is the state [endpoints with no sensor](/docs/endpoint/no-sensor) describes. Reinstall later with `sudo -E whisper service install --now --sensor` and the host resumes reporting under the same address.

## Remove everything

```bash
curl -fsSL https://get.whisper.online/uninstall | sh
```

This removes the sensor service and the connection service, revokes the host's identity and removes the binary. Revoking is permanent: the address is withdrawn along with its reverse DNS and its egress credentials, and the same machine will get a different one if you bring it back. [Contain an endpoint](/docs/endpoint/operate/contain) is the page to read first if what you actually want is a hold you can lift.

There is no confirmation step. Running the uninstaller is the consent, so check the line before you press Return rather than expecting a prompt.

If the uninstaller cannot reach the control plane to revoke, it says so and prints the command to run from anywhere else, so the identity does not stay live on a machine you no longer own.