TorZonStart at torproject.org and download the latest stable release for your OS. Do not use third-party mirrors unless you trust them. Once downloaded, verify the GPG signature against the official key from the Tor Project. A mismatch means the file was tampered with or corrupted. If the signature fails, delete the file and start over.
Launch the browser immediately after installation. Go to Settings and change Security Level from Standard to Safer. This disables JavaScript, which is the biggest vector for fingerprinting leaks. Most darknet markets work fine without JS. If a specific site breaks, switch back to Standard temporarily, then revert. Never leave it at Safest; many market interfaces become unusable.
Disable Flash entirely. It is obsolete but still present in older builds if not explicitly turned off. Ensure "Use HTTPS Everywhere" is active. Check that your system clock is synchronized manually if automatic sync is disabled, as time skew can break TLS handshakes. Do not install extensions like uBlock Origin unless absolutely necessary, as they can leak metadata through timing attacks.
Keep the window size consistent between sessions. Resizing the browser changes your screen resolution fingerprint, helping correlators link your visits. Use the same profile every time you connect. Do not log into personal accounts on regular websites while connected through Tor. That defeats the purpose of isolation. Close all other browsers during your session to avoid accidental clicks on tracking pixels.
If you run Linux, consider using Whonix or Tails for an extra layer of network isolation. On Windows, stick to the standard installer but ensure your antivirus does not scan traffic in real-time, which can introduce latency spikes. For more details on accessing markets safely, check the [access guide](/access.html).
FAQ
Do I need to update Tor Browser weekly?
Only when the Tor Project releases a new version. Check their blog for security patches. Forced updates mid-session can reset your circuit and expose temporary data.
Can I use Tor Browser on mobile?
Yes, but desktop remains more secure for long sessions. Mobile batteries drain faster and touch inputs can leak additional metadata patterns compared to mouse movements.