How to Use Tor Safely (Part 3)
This is Part 3 of the series Tor Protocol Full Analysis. Part 2 explained how VPNs change your threat model. This chapter focuses on safe Tor usage and the tools that actually reduce risk.
If you missed Part 2, start here: /posts/tor-protocol-part-2
The real goal
Tor protects your network identity, not your behavior. The biggest failures come from poor isolation, reused identities, and leaking metadata. Safe Tor usage is about compartmentalization and consistent habits.
Core safety rules (short list)
- Use Tor Browser as the default. Do not use a regular browser + SOCKS proxy unless you know exactly what leaks.
- Keep identities separate. Do not log into personal accounts while using Tor for anonymity.
- Avoid browser fingerprinting: no custom fonts, plugins, or extensions.
- Use HTTPS only. Exit relays can see plaintext if you do not.
- Do not download and open files outside the Tor environment.
Threat model checklist
Before using Tor, define the observer you care about:
| Threat | Tor helps? | Notes |
|---|---|---|
| ISP tracking | Yes | ISP only sees Tor usage |
| Destination tracking | Yes (IP) | Exit IP replaces your IP |
| Global passive observer | No | Timing correlation is still possible |
| Endpoint compromise | No | Malware defeats anonymity |
