- Every time you start the Tor browser, you have to set the security slider to safest. This disables JavaScript (a programming language that websites can use to de-anonymize you) by default and enables some more security features.
- If you use clearnet websites that require JavaScript (like reddit.com if you want to post, comment or vote), change the NoScript appearance so you can easily allow and disallow the scripts that you as needed.
- If a darknet market site ever asks you to enable JavaScript, leave immediately.
- When shutting the Pen down, it is best to wait until your computer is shut down completely before removing the USB stick. However, pulling it out in a moment of duress will initiate an immediate as well.
- Is it okay to leave the Pen logged in? No, you should shut it down when you are not using it anymore for a longer period of time (e.g. 10 minutes). Yes, it is a pain to restart your computer every time, but it is good security practice. Otherwise, someone could visit you unexpectantly and see your activities.