PRIVACY · CRYPTO · OPSEC
Operational Security Beyond Tor
Tor hides your IP, but your identity leaks through payment trails, file metadata, writing style, and behavioral patterns. This guide covers the full stack: cryptocurrency privacy, encryption hygiene, and compartmentalization.
1. Monero: Why Bitcoin Fails at Privacy
Bitcoin is pseudonymous, not anonymous — every transaction is permanently recorded on a public ledger. Chain-analysis firms (Chainalysis, Elliptic) routinely de-anonymize users. Monero (XMR) uses ring signatures, stealth addresses, and RingCT to obscure sender, receiver, and amount by default.
- Use the official Monero CLI or GUI wallet over Tor (built-in option).
- Run your own node — remote nodes can log your IP + viewkey requests.
- Never reuse wallet addresses across vendors or platforms.
- Avoid exchanges requiring KYC to buy XMR; use peer-to-peer with escrow.
2. PGP Encryption Hygiene
Every message on any market or forum should be encrypted client-side. Best practices:
- Generate keys on an air-gapped machine; never on a daily-driver OS.
- Use a strong passphrase (diceware, 7+ words).
- Publish public key on keys.openpgp.org, verify fingerprints out-of-band.
- Rotate subkeys yearly; never reuse old signing keys after a breach.
3. Metadata Stripping
Photos, PDFs, and documents carry EXIF data: GPS coordinates, device serials, timestamps. Strip before sharing:
4. Compartmentalization Model
| LAYER | DEVICE/OS | PURPOSE | RISK |
|---|---|---|---|
| Daily | Regular PC / phone | Normal life, no anon activity | None |
| Research | Tails USB or Whonix VM | Browsing, OSINT, forums | Medium |
| Cold ops | Air-gapped laptop | PGP keys, wallet seeds | High-value target |
Rule: never cross-contaminate identities between layers. Different usernames, passwords, writing styles, schedules.
5. Pre-Mission Checklist
- ☐ Tails/Tor updated within 7 days
- ☐ Bridges configured if needed
- ☐ Monero wallet synced over Tor
- ☐ PGP keys loaded from air-gapped media
- ☐ EXIF stripped from all files to share
- ☐ New identity generated in Tor Browser
⚠ Disclaimer: This material is published for educational and research purposes only — for security professionals, journalists, and OSINT analysts studying darknet ecosystems. We do not encourage or facilitate illegal activity.
Related reading: Tor OpSec Hardening Guide · Nexus Official Onion Links