The Anonymity Spectrum
Online anonymity isn't binary — it's a spectrum. On one end, you browse the web with your real IP, real name, and cookies everywhere. On the other end, you connect through Tor on a privacy-hardened OS with no persistent storage. Most people need something in between.
Layer 1: Network Privacy
VPN
A VPN encrypts your traffic and hides your IP from the websites you visit. It's the most basic building block. Choose a privacy-focused VPN with no-logs policies and anonymous payment options.
Tor
For stronger anonymity, Tor routes your traffic through three relays. Each relay only knows the previous and next hop, so no single relay sees both your IP and your destination. The tradeoff is speed — Tor is significantly slower than a VPN.
VPN + Tor
Some privacy advocates use VPN → Tor (connecting to a VPN first, then routing through Tor). This hides Tor usage from your ISP but adds complexity and potential failure modes.
Layer 2: DNS Privacy
DNS queries can leak your browsing history even through a VPN. Use DNS-over-HTTPS or DNS-over-TLS. Verify with our DNS Leak Test. See our DNS Leak Prevention guide for detailed setup instructions.
Layer 3: Browser Hardening
Your browser is the biggest attack surface. Key steps:
- Disable WebRTC (guide)
- Configure privacy settings per our browser settings guide
- Minimize fingerprint surface (guide)
- Use separate browser profiles for different identities
- Consider Tor Browser for sensitive activities
Layer 4: Identity Separation
Technical tools alone aren't enough. Behavioral OPSEC is critical:
- Email: Use anonymous email providers (ProtonMail, Tutanota) with unique addresses per service
- Payments: Use cryptocurrency, prepaid cards, or cash to avoid linking purchases to your identity
- Accounts: Never link anonymous identities to real ones by logging in from the same browser
- Writing patterns: Stylometry analysis can identify you from your writing style. Use formal, generic language for anonymous communications
Layer 5: Operating System
For maximum anonymity, consider:
- Tails OS: A live USB operating system that routes all traffic through Tor and leaves no trace on the host machine
- Whonix: A two-VM setup where all traffic from the workstation VM is forced through a Tor gateway VM
- Qubes OS: Compartmentalizes different activities into isolated VMs, preventing cross-contamination
Define Your Threat Model
The most important step is defining what you're protecting and from whom:
- Against advertisers: A VPN + browser extensions are usually sufficient
- Against ISP surveillance: VPN with DNS-over-HTTPS
- Against corporations: Browser isolation + separate identities
- Against nation-state adversaries: Tor + Tails + strict behavioral OPSEC
Audit Your Current Setup
Start by understanding where you stand. Run PrivKit's Full Privacy Scan to get your privacy score, identify leaks, and receive personalized recommendations for improvement.