Accessing Tor &quot;safely&quot; is something over and above accessing the normal internet safely.  Advice like &quot;don&#x27;t open PDFs&quot; isn&#x27;t very helpful.  Nor is &quot;don&#x27;t use javascript&quot; or &quot;don&#x27;t log into social media.&quot;  Such inactions don&#x27;t help you access anything safely, they help you not access things in the first place.<p>(1) Use a secure OS.  Unless you are security guru, that should be some flavour of linux.  A liveUSB of Tails is pretty idiot proof.  It worked for Snowden.<p>(2) Don&#x27;t run any web browser, tor or otherwise, under any sort of elevated privilege (ie not while admin).<p>(3) Understand how to verify a website&#x27;s certificates.  You can indeed log into social media safely via tor (ie your password won&#x27;t be harvested by the exit node) if you know how to verify the website.<p>(4) Don&#x27;t take anonymity casually.  Understand why you are using Tor, what you are protecting, who your adversary is, and develop relevant procedures.  Don&#x27;t rely on easy checklists you find at Tor-for-Dummies.com.