Tor Browser

Tor Browser is the official browser of the Tor Project, a hardened build of Firefox ESR pre-configured to route traffic through the Tor network. Default security slider with three settings (Standard, Safer, Safest), anti-fingerprinting normalization, JavaScript opt-out controls, and integration with Tor bridges for circumvention in censored environments. Free, open-source, the most-studied privacy browser in production.

What it means in practice

Tor Browser is the privacy ceiling for general-purpose browsing. The combination of Tor routing (three hops, no single relay knows source and destination), anti-fingerprinting (every Tor Browser instance presents identical attributes within version), and security-slider control delivers anonymity that no VPN-plus-Firefox configuration matches. The trade-offs are real: throughput typically under 10 Mbps, latency 200 to 500ms higher than direct connection, some sites block Tor exit nodes (Cloudflare’s captcha treatment is the most visible example), and account login on Tor Browser ties the account to Tor traffic regardless of the network anonymity. The operational rule: never log into a real-name account from Tor Browser, ever.

Who uses it, and against whom

Used by: investigative journalists accessing whistleblower drop boxes (SecureDrop runs over Tor onion services), activists in countries with comprehensive internet censorship, domestic-violence survivors researching escape options from a monitored device, sources contacting journalists through onion-hosted submission systems, law enforcement on undercover operations, and ordinary users who do not want their ISP profiling them. Adversaries: nation-state services running large numbers of relays attempting traffic correlation, exit-node operators who run cleartext-credential harvesters, and the structural threat that any logged-in account collapses the anonymity Tor provides at the network layer.

What you can change today

Download Tor Browser from torproject.org (verify the GPG signature against the published key). Set the security slider to “Safer” by default; “Safest” for sensitive sessions disables JavaScript globally and breaks many sites. Never log into accounts tied to your real-life identity from Tor Browser. For higher anonymity, run Tor Browser inside Tails on a USB stick, or in a Whonix workstation on Qubes OS. If your country blocks the Tor network, configure bridges (obfs4 by default, snowflake or meek for harder censorship environments) from Tor Browser settings before connecting.

Related articles