Home / Setup / Set the security level before your first visit

nexus-access.bizSet the security level before your first visit

Tor Browser ships on its most permissive setting. What the three levels change, why Safest is the right default here, and what breaks.

3 verified addresses published // 8 access routes // 6 setup steps // no accounts, no forms, nothing collected

Nexus Market onion addresses

All three reach the same market with the same account, balance and orders behind each. Copy one rather than typing it, then confirm it on the login screen before you sign in.

[01]nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onion

[02]nexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onion

[03]nexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onion

Read this before signing in Open these in Tor Browser only. When the login screen loads, compare the onion printed on the page against your browser address bar, reading from the end backwards. A copied page reproduces the design perfectly and cannot sit at the real address. If they differ, close the tab.

Tor Browser starts on Standard, which leaves scripts running everywhere. Two clicks change that, and those two clicks remove most of the ways a page can attack a browser.

Step

03 of 6

Time

2 min

Needed

Once, not per visit

Where it lives

The shield icon next to the address bar. Open it, choose settings, pick a level. That is the whole operation and it survives restarts.

What each level does

Level	Scripts	Suits
Standard	Everything runs	General browsing where nothing much is at stake
Safer	Scripts off on plain connections, some media blocked	A compromise, and the least useful of the three
Safest	Scripts off everywhere, most media blocked	Anything you actually care about, including this

Why Safest for this

Nearly every serious browser problem in the last decade came through scripting. Turning it off removes that surface entirely rather than reducing it. A marketplace worth being careful about is exactly the case where you accept a plainer page in exchange for that.

What breaks

Some pages lose layout or have controls that do nothing. That is the setting working rather than a fault.
Anything that genuinely needs scripting will tell you.
Images and fonts may be simplified, which affects appearance and not function.

Do not turn it down to fix a page

When a page misbehaves the instinct is to lower the level until it works. That trades the protection for a cosmetic improvement, permanently, because people rarely put it back. If a page will not work on Safest, decide deliberately whether that page is worth it rather than changing the setting out of habit.

The rest of the setup

STEP 04 // 3 min

Save the three addresses so you never have to search

Nearly every phishing story starts with somebody looking for an address during an outage. Saving them properly is the cheapest defence there is.

STEP 05 // 10 min

Set up the account once, properly

Username, password, recovery phrase and two factor. Ten minutes at the start that decide what a leak elsewhere costs you later.

STEP 06 // 5 min

The first login, step by step

What to do in what order the first time you open a Nexus address, including the one check that has to happen before you type anything.

Then pick a route in

Desktop