---
title: Common Opsec Mistakes That Deanonymize Tor Users
description: "Tor's technical anonymity is strong, but most people who get identified aren't deanonymized through a flaw in Tor itself. Simple opsec mistakes give away far more than a technical exploit ever would, and they're often the easiest thing to fix.…"
url: "https://thehiddenwiki.pro/docs/opsec-mistakes-deanonymize-tor-users/"
updated: "2026-09-04"
tags:
  - "law-enforcement"
  - tor
---

# Common Opsec Mistakes That Deanonymize Tor Users

Tor's technical anonymity is strong, but most people who get identified aren't deanonymized through a flaw in Tor itself. Simple opsec mistakes give away far more than a technical exploit ever would, and they're often the easiest thing to fix.

![Glowing hooded figure silhouette with light leaking through, representing opsec mistakes that reveal a Tor user's identity](https://thehiddenwiki.pro/wp-content/uploads/2026/08/image-8.jpg)

## Logging Into Personal Accounts

Logging into a personal email, social media, or banking account while connected through Tor immediately links that browsing session to a real identity, regardless of how well the network itself protects your traffic. Keep identified activity and anonymous activity in completely separate sessions.

## Reusing Usernames and Writing Styles

Using the same username across an anonymous account and a personal one creates an easy link between the two, even if neither directly reveals a real name. Writing style, phrasing habits, and even typo patterns can also be matched across posts by anyone paying close attention.

## Downloading Files Outside Tor Browser

Opening a downloaded file with an external application can trigger network requests that bypass Tor entirely, revealing a real IP address the moment the file loads. Documents in particular can contain embedded content that phones home without any obvious warning.

## Enabling Browser Plugins or Extensions

[Tor Browser](https://www.torproject.org/)is configured specifically to minimize what a website can learn about a visitor, and most plugins and extensions weren't built with that goal in mind. A single extension can leak identifying details that the browser itself was designed to hide.

## Ignoring Window Size and Screen Fingerprinting

Resizing the Tor Browser window changes its dimensions to something unique enough to help fingerprint a specific visitor across sessions. Tor Browser intentionally uses a standardized window size by default, and maximizing or resizing it undermines that protection.

## The Pattern Behind Most Mistakes

Nearly every deanonymization case comes down to combining an anonymous Tor session with something tied to a real identity, whether that's an account, a habit, or a file opened outside the browser. [Understanding how law enforcement tracks dark web users](https://thehiddenwiki.pro/docs/how-law-enforcement-actually-tracks-dark-web-users/) makes it clear why these small habits matter so much.