I have recently started to care more about my privacy and anonymity, so I am just scratching the surface and still don’t know much about it. I know that you should not log into any accounts with sensitive information while using the Tor browser to prevent your identity from being leaked. What about websites (like Lemmy, Masterdon, etc.) that can’t leak personal data because I never provide any directly? I use Mullvad + alias email addresses to log in.

What if I logged into my Lemmy account outside of Tor without a VPN one single time? So Lemmy should have received my real IP and location at some point. Could someone find personal data because of this single, unprotected login while I’m browsing Lemmy through Tor?

Thanks for any answers and explanations!

  • @DragonsInARoom
    link
    1113 hours ago

    Kinda missing the point of using TOR when you’re logged into an account, at that point just use a VPN. (Or VPN and a secure DNS)

    • qprimed
      link
      fedilink
      English
      413 hours ago

      (Or VPN and a secure DNS)

      properly setup Tor covers both of those. with proper opsec (admittedly quite hard to do), disconnecting the account from an IP or locality is a legitimate part of the protection puzzle.

      • Makhno
        link
        18 hours ago

        Orbot allows you to do this I think