Tor’s technical anonymity is strong, but most people who get identified aren’t deanonymized through a flaw in Tor itself. Simple opsec mistakes give away far more than a technical exploit ever would, and they’re often the easiest thing to fix.
Logging Into Personal Accounts #
Logging into a personal email, social media, or banking account while connected through Tor immediately links that browsing session to a real identity, regardless of how well the network itself protects your traffic. Keep identified activity and anonymous activity in completely separate sessions.
Reusing Usernames and Writing Styles #
Using the same username across an anonymous account and a personal one creates an easy link between the two, even if neither directly reveals a real name. Writing style, phrasing habits, and even typo patterns can also be matched across posts by anyone paying close attention.
Downloading Files Outside Tor Browser #
Opening a downloaded file with an external application can trigger network requests that bypass Tor entirely, revealing a real IP address the moment the file loads. Documents in particular can contain embedded content that phones home without any obvious warning.
Enabling Browser Plugins or Extensions #
Tor Browser is configured specifically to minimize what a website can learn about a visitor, and most plugins and extensions weren’t built with that goal in mind. A single extension can leak identifying details that the browser itself was designed to hide.
Ignoring Window Size and Screen Fingerprinting #
Resizing the Tor Browser window changes its dimensions to something unique enough to help fingerprint a specific visitor across sessions. Tor Browser intentionally uses a standardized window size by default, and maximizing or resizing it undermines that protection.
The Pattern Behind Most Mistakes #
Nearly every deanonymization case comes down to combining an anonymous Tor session with something tied to a real identity, whether that’s an account, a habit, or a file opened outside the browser. Understanding how law enforcement tracks dark web users makes it clear why these small habits matter so much.
