*[Tor Browser](https://www.torproject.org)* is a web
browser based on [Mozilla Firefox](https://www.firefox.com/) but configured
to protect your privacy.

[[!img lib/apps/tor-browser.png link="no" alt=""]]

Some frequently asked questions about *Tor Browser* can be found in [[the FAQ|support/faq#browser]].

<h1 id="confinement">Security confinement</h1>

<div class="bug">

<div class="next">

<h1 id="https-everywhere">Secure connections with HTTPS</h1>

Using HTTPS instead of HTTP encrypts your communications with the website and prevents the [[Tor exit node from intercepting your communications|about/warnings/tor#exit]].

For example, here is how the browser looks when we try to log in to an email account at [riseup.net](https://riseup.net/), using their [webmail interface](https://mail.riseup.net/):

[[!img doc/anonymous_internet/Tor_Browser/riseup.png class="screenshot" alt=""]]

Notice the padlock icon on the left of the address bar saying "mail.riseup.net". Notice also the address beginning with "https://" (instead of "http://"). These are the indicators that an encrypted connection using [[!wikipedia HTTPS]] is being used.

When you are sending or retrieving sensitive information (like passwords), you should try to only use services providing HTTPS. Otherwise, it is very easy for an eavesdropper to steal whatever information you are sending, or to modify the content of a page on its way to your browser.

To learn more about HTTPS and how *Tor Browser* protects you, see:

<h1 id="javascript">Protection against dangerous JavaScript</h1>

Having all JavaScript disabled by default would disable a lot of harmless and possibly useful JavaScript, and might render many websites unusable.

<p>To understand better the behavior of <i>Tor Browser</i>,
for example, regarding JavaScript and cookies, you can
refer to the <a href="https://2019.www.torproject.org/projects/torbrowser/design/">
<i>Tor Browser</i> design document</a>.</p>

<h1 id="security-level">Security level</h1>

You can change the security level of *Tor Browser* to disable browser features as a trade-off between security and usability. For example, you can set the security level to *Safest* to disable JavaScript completely.

To change the security level:

Select the [[!img security-level.png link="no" class="symbolic"]] icon on the right of the address bar.