Guides

Download both the installer or archive and its matching `.asc` signature from the Tor Project.

Install Tor Browser for Android from a distribution source listed by the Tor Project, then open it and connect.

Keep Tor Browser current because browser security fixes can affect anonymity as well as ordinary web safety.

Protect the onion service's private key, keep Tor and the web server updated, restrict access to the local service, and check that pages do not leak the host's real address or other identifying details.

Check the Tor Project's troubleshooting and known-issues pages first.

Download the correct Windows, macOS, or Linux package from the Tor Project and follow its platform instructions.

Run a local web service, install and configure Tor, and map an onion service port to the local service as shown in the Tor Project's setup guide.

Start at the Tor Project's official download page rather than an advertisement, mirror you found at random, or an unofficial app store listing.

Open Tor Browser's connection configuration and try Connection Assist or an available bridge or transport.

Get the address from the organization through a trusted channel, such as its official website or an independently verified announcement, and compare the entire address carefully.

You can run a non-exit relay, a bridge, or a Snowflake proxy, depending on your bandwidth and hosting conditions.

Tor Browser is designed not to retain browsing history after a session, and its cookies are limited to the current session.

No.

Tor hides your home IP address from sites you visit through Tor Browser and makes a site see a Tor exit location instead.

Yes.

With a normal direct connection, a provider or local network observer can usually recognize that you are connecting to Tor, but cannot see the websites you visit through it.

Yes, volunteers operate the relays that carry Tor traffic.

Yes, but the service will know which account you used, so that activity is no longer anonymous to that service.

Yes.

An exit relay can observe traffic between itself and an ordinary website when that traffic is not protected by HTTPS or another end-to-end encryption layer.