<span class="application">[Tor Browser](https://www.torproject.org)</span> is a web
browser based on [Mozilla Firefox](https://www.mozilla.org/firefox/) but configured
to protect your privacy.

Sending your connections to websites through the Tor network is not enough to totally protect you while browsing the web:

Some frequently asked questions about <span class="application">Tor Browser</span> can be found in
[[the FAQ|support/faq#browser]].

<p>This is why you get the following error if you try to download files to
another folder:</p>

If you want to upload a file from *Tor Browser*, copy it first to one of these folders.

<h1 id="https-everywhere">Secure connections with HTTPS</h1>

Notice the padlock icon on the left of the address bar saying "mail.riseup.net". Notice also the address beginning with "https://" (instead of "http://"). These are the indicators that an encrypted connection using [[!wikipedia HTTPS]] is being used.

<h1 id="javascript">Protection against dangerous JavaScript</h1>

<h1 id="security-level">Security level</h1>

You can change the security level of <span class="application">Tor Browser</span>
to disable browser features as a trade-off between security and usability.
For example, you can set the security level to *Safest* to disable JavaScript completely.

To change the security level, click on the [[!img security-level.png
class="symbolic" link="no"]] icon on the right of the address bar
and choose **Settings&hellip;**.

<h1 id="circuit-view">Tor circuit</h1>

<h1 id="new-identity"><span class="guilabel">New Identity</span> feature</h1>

The New Identity feature of
<i>Tor Browser</i>:

- Closes all open tabs.

- Clears the session state including cache, history, and cookies.

- Closes all existing web connections and creates new Tor circuits.

<h1 id="noscript">NoScript to have even more control over JavaScript</h1>

<span class="application">Tor Browser</span> includes the
<span class="application">NoScript</span> extension to:

Protect from more JavaScript attacks. For example, cross-site scripting (XSS) attacks.