Before you connect
Documentation describes updating Tor Browser, setting security to Safest, disabling extra extensions, and closing clearnet tabs tied to real identity. It documents a dedicated OS profile, unique credentials per service, and a password manager with a memorized master passphrase. Mixing identities across sessions is documented as unsafe.
PGP and communications
Documentation describes generating the key offline and publishing only the public key. Registration is described as a ceremony: publishing the pubkey, decrypting the server nonce, proving ownership. Encrypting sensitive messages by default, verifying vendor keys against two independent sources, and signing continuity statements across rotations are documented.
Financial hygiene
Documentation describes funding a private Monero wallet, churning once, then funding escrow per order. Paying outside escrow and finalizing early for strangers are documented as unsafe. Transaction keys are described as recorded privately for dispute evidence, never in clearnet notes. Preference is documented for XMR-native vendors with 6+ month history and Trust Weight above 1M.
What never to do
- Never open Nexus onion links in a regular browser.
- Never install software a mirror suggests.
- Never reuse passwords or PGP keys across markets.
- Never discuss orders on clearnet channels.
- Never paste a seed phrase anywhere.