How to Install and Use the Tor Browser Safely (2026)

The Tor Browser (sometimes called the onion browser) is the free, official gateway to .onion sites and to private browsing on the ordinary web. If you searched *tor browser*, *onion browser*, or *tor project*, this guide walks through installing it correctly and — more importantly — using it so your privacy actually holds.

Step 1: Download Only From the Official Tor Project

This is where most people get compromised before they even start. Only download the Tor Browser from the official Tor Project download page (torproject.org). Fake "Tor browser" downloads bundled with malware are common on third-party sites and unofficial app stores.

  • Verify you're on the genuine Tor Project site (check the domain carefully).
  • On desktop, the Tor Project publishes cryptographic signatures so you can confirm the installer is authentic — the support portal explains how.
  • Avoid unofficial "onion browser" clones promising extra features — several are spyware.
  • Understanding how Tor actually routes traffic helps you see why an authentic build matters so much.

    Step 2: Set the Security Level to "Safest"

    Out of the box, Tor Browser is usable but not locked down. Open the shield icon and set the Security Level to "Safest," which disables JavaScript and other features that browser exploits have historically abused to de-anonymise users.

  • Never install add-ons or plugins — they leak identifying data and break Tor's anonymity model.

  • Don't maximise or obsessively resize the window — fingerprinting can use window dimensions.

  • Don't log into personal accounts (email, social media) over Tor if you want to stay anonymous.
  • Step 3: Understand What Tor Does and Doesn't Hide

    Tor hides your IP from the sites you visit and your browsing from your ISP. Tor does not hide things *you* reveal — logins, real names, downloaded malware, or files with metadata. The complete discipline is in our dark web OpSec blueprint and the EFF's Surveillance Self-Defense.

    > The software gives you a strong anonymous channel. Whether you stay anonymous depends on your behaviour inside it.

    Step 4: For Serious Privacy, Isolate the Whole System

    Tor Browser on your everyday computer is fine for casual private browsing. For anything sensitive, run Tor inside an isolated environment:

  • Tails — an amnesic operating system that boots from USB and forgets everything on shutdown. Our setup guide walks through it.

  • Whonix — routes an entire virtual machine through Tor, so even a browser exploit can't easily see your real IP. More in what is Whonix.

Step 5: Getting Past Censorship (Bridges)

If your government or ISP blocks Tor, use bridges and pluggable transports — special unlisted entry points that disguise Tor traffic. Tor Browser has a built-in option to request them during setup, so you can connect even where Tor is blocked, without revealing that you're using it.

Is the Tor Browser Safe? Quick Reality Check

The software is trusted worldwide and legal in most countries (is the dark web illegal). The risks are phishing, outdated software, and self-disclosure — not the browser itself. For the full breakdown, see is the Tor Browser safe.

Tor Browser FAQ

Is the Tor Browser legal? Yes, in almost all countries — see is Tor illegal.

Is the Tor Browser safe? The software is trusted worldwide; your safety depends on the "Safest" setting and good OpSec.

Onion browser vs. Tor Browser — same thing? People use "onion browser" loosely for Tor Browser. Be careful: some apps literally named "Onion Browser" are third-party — stick to the official Tor Project build.

Do I need Tor for the deep web? No — only for the dark web's .onion sites. See what is the dark web.

Should I use a VPN with Tor? Optional and debated; for most people a correctly configured Tor Browser plus Tails/Whonix is stronger than adding a VPN you must trust.

Bottom Line

Install Tor Browser only from the Tor Project, set it to "Safest," never add plugins, and isolate with Tails or Whonix for anything serious. The browser is the easy part — your habits are what keep you anonymous.