Electrum question

why i need to change like this?

  • Proxy: SOCKS5
  • Host:
  • Port: 9111
    if not change my security is dangerous?

Since the Gateway is the source of the Tor connection and its Tor-connected interface address is that is why the host is changed to that instead of localhost.
Port 9111 is a SocksPort that Whonix has set up for the Electrum service. Every application in Whonix is connected to its own SocksPort. this way activity stays isolated in Tor’s network and everything is not going through the same port
This is a strong feature and will not affect your security

It’s better.