Tor Browser Safety Guide: Use Tor Without Getting Tracked

Tor Browser gives you network anonymity, not invincibility. Most de-anonymizations happen at the application layer: you log into the same account, reuse a username, or install an extension that fingerprints you. This guide is defensive - follow it to reduce those mistakes.

1. Before You Install: Threat Model

Ask: who is your adversary and what are you protecting? Tor helps against network observers (ISP, public Wi-Fi snoop, state-level passive adversary) but does not help if your device is infected or you voluntarily identify yourself.

Good fit: research, journalistic source contact, avoiding tracking by ad networks.
Not magic against: malware, phishing, or logging into personal accounts over Tor and linking identities.

Keep Tor Browser separate from your daily browser. Never install it alongside random extensions.

2. Install and Verify

Download only from torproject.org/download or via GetTor.
Verify the signature per Tor's verification guide (GPG). On first run, Tor connects via the guard relay - allow it firewall access.
Keep it updated - Tor Browser updates include Tor and Firefox security fixes.

Do not download Tor from third-party stores. Cloned installers with adware still circulate. Check the signing key fingerprint on the Tor site.

3. Harden Without Breaking Anonymity

Security Level

Menu -> Settings -> Privacy & Security -> Security Level:

Level	What changes	When to use
Standard	All features enabled	Default for most users
Safer	Disables some risky features (JS on non-HTTPS)	Recommended for research
Safest	No JS, limited media, NoScript strict	When content is untrusted

Higher is not always better - disabling JS can make you stand out if most Tor users stay on Standard. For general use, Safer is a good balance.

HTTPS-Only

Keep HTTPS-Only Mode enabled (default). Exit relays can see unencrypted HTTP. Combine with Tor's built-in New Identity and New Circuit for this Site when switching contexts.

What NOT to do

Do not install extensions (they increase fingerprint surface).
Do not maximize the window arbitrarily - Tor Browser's letterboxing reduces fingerprinting.
Do not open downloaded files while online; Tor warns about this - move them offline first.

4. Behavior That De-anonymizes You

Even perfect network anonymity fails if you reuse identity signals:

Logging into Gmail, Facebook, or a work SSO over Tor links the Tor activity to that identity.
Reusing nicknames, writing style, or PGP keys across contexts.
Uploading photos with EXIF GPS/metadata.
Copy-pasting links with tracking parameters (?utm_, etc.).

Compartmentation rule: one Tor identity per task. Use New Identity between different personas. For OSINT work, read OSINT threat monitoring for a clean workflow.

5. Quick Checklist

˜ Downloaded from torproject.org and verified signature
˜ Security Level = Safer (or Safest for untrusted pages)
˜ HTTPS-Only enabled, no extra extensions
˜ Letterboxing kept default, window not aggressively resized
˜ Separate identities per task via New Identity
˜ No personal logins over the same Tor session you use for research

Tor metrics (2024-"2026) show ~2M+ daily users and ~6,500 relays. You hide among that set. Standing out by over-customizing harms you. Sources: Tor Metrics, Tor Support.

Related: What Is the Darknet? for concepts, Myths vs Facts for deterrence, and After a Breach if your data is exposed.

Disclaimer: Educational only. Follow local law. If you are at high risk, consult a digital-security trainer (e.g., EFF, Access Now) for personalized guidance.