We're going to see how staying anonymous online on multiple points:
First rule
- Don't be stupid, never talk about your life, your interest points, your name, in fact everything directly tied to your identity. (an example here of why)
What configuration ?
An easy one: buy a cheap laptop and a privacy screen filter to protect your screen against cameras and voyeurists, install TailsOS on a USB key. Because you want to stay anonymous, do not create a persistance on so every session is fully ephemeral.
You can buy a mini-leash to tie your USB key to your wrist then if someone tries to steal your latpop (example here), the session will be corrupted because the USB key were removed by force with the leash (example here). (it's a killswitch in a nutshell)
How do i connect to Internet ?
If you can, do not use your own Internet Service Provider. Go outside and find an open WiFi hotspot (Wigle can help you). You also can buy 4G hotspot keys but be sure they aren't tied to your identity and take some cheap because you have to throw them after a long usage due to the static's IMEI number.
Tor OpSec ?
If you use Tor for usages might be punished and under targeted surveillance, you should use Tor bridges. If it's not the case you can normally use the Tor network. Do no "Tor over VPN" you'll just deanonymize your Tor entries trough the VPN. When you're using Tor, you have deniability on your sessions. So you can admit having used Tor while hiding your deniablility by saying you were browsing something other than what you're accused. But, if you're not accused of having used Tor, say nothing about it (first rule).
Tor browser security parameters ?
Select the Strict security level (here) to protect your browser against malicious JavaScript content and more methods for trying to deanonymize or exploit your network browser. You also can put all the uBlock available filters to protect yourself against other types of tracking.
Tor browser hygiena ?
You have a new identity icon at the top right of your browser you should use to clean your Tor session. Example: I searched and found a cookie recipe, now I want to buy ingredients I should click on new identity, then previous session is forgot.
General internet hygiena (on-site)
- Don't create / use an account to browse content or interact with the service if they allows you to do it in a accountless way.
- If you have to make one, be sure you're using Mail, SMS ect.. provider who's not requiring your informations. Check this list
- Do one account per interaction, one SMS and one mail per registration (never reuse an information, here's an example of why.)
- Use Monero when you have to pay online or your payment will be transparent or tied to your identity.
- If you're uploading files, remove metadata before simply by doing a right-click (here's an example of why), use OnionShare when possible to keep the transfer in peer-to-peer over Tor.