Learning how to create a burner identity for Tor safely starts with a simple idea: keep the pieces of your life that don't need to touch each other separate. That means separate email, separate browsing habits, and sometimes a separate phone number, all built so that one slip doesn't unravel everything else. Done well, this takes a bit of setup and almost no daily effort. Done badly, it becomes a second job you eventually abandon.
Why Compartmentalization Matters
Most online tracking doesn't rely on breaking encryption or hacking anyone. It relies on correlation: the same email reused across sites, the same phone number tied to a delivery address, the same writing style showing up in two places. Each data point alone is harmless. Linked together, they form a profile.
Compartmentalization is the structural answer to that. Instead of one identity feeding every account you touch, you split your activity into separate identifiers that don't point back to each other. A burner identity is a deliberate, disposable version of that split.
What a Burner Identity Actually Is
A burner identity is not a disguise or a new personality. It's a bounded set of credentials, an email, maybe a number, maybe a browsing profile, used for a specific, time-limited purpose and then retired. Security researchers who work with burner phones describe the same principle: the tool is meant for a narrow job, not as a permanent stand-in for your real identity.
That narrow scope is the whole point. The more a burner identity gets reused across unrelated contexts, the more it starts behaving like a second main identity, with its own trail to protect.
The Basic Building Blocks
A workable burner setup usually has three parts:
- A separate email. A dedicated privacy-focused provider, such as Proton Mail, keeps your inbox separate from your usual accounts or contacts.
- A separate number, if needed. Apps like Burner (from Ad Hoc Labs) generate disposable phone numbers for calls or texts that don't trace back to your real line. MySudo offers a similar idea bundled with email and payment identities in one app. These are convenience tools, not anonymity guarantees.
- A separate browsing session. Tor Browser, kept distinct from the browser you use for everyday accounts.
Pick what the situation requires. A one-off web form rarely needs a new phone number. A sustained, sensitive project might need all three.
Keeping Personas Separate Inside Tor Browser
Tor routes your traffic through multiple relays, which hides your network location from the sites you visit, but it doesn't automatically keep two identities apart once you're on the page. Logging into a personal account, reusing a username, or uploading a file with identifying metadata breaks the separation regardless of Tor running underneath.
Privacy researchers who work with compartmentalized systems, such as the Whonix project, caution against using the same browser session for two identities at once. Cookies, autofill data, and open tabs from one persona can leak into the next if you don't close everything down in between. The safest pattern: one identity, one session, closed completely before the next one starts.
The same caution applies to newer browser "container" features that isolate tabs from each other. They're useful, but some data like saved passwords, extensions, or autofill details can still be shared across containers depending on the browser. Read what a container actually isolates before trusting it with a sensitive split.
Common Mistakes That Collapse a Persona
- Reusing a writing style or username. Patterns in phrasing or a recycled handle can link a burner back to you faster than any technical trace.
- Mixing payment methods. A card or wallet used for both identities connects them instantly, no matter how careful the rest of the setup is.
- Treating the burner as permanent. The point of a burner identity is that it ends. Letting it become your main account defeats the separation it was built for.
- Assuming discovery is impossible. Plan as if the connection between your burner and your real identity could surface, and keep the stakes of that discovery in mind before you start.
How Much Is Enough
Not every activity needs a full burner setup. Overbuilding is its own risk: too many identities, too many apps, too many passwords to track, and people start cutting corners or merging things back together out of fatigue.
Match the separation to the sensitivity. Browsing a public forum anonymously might only need Tor Browser and a throwaway email. A longer-term project involving your safety or someone else's deserves the fuller set, planned out in advance rather than improvised halfway through.
A Word on Limits
None of this makes you untraceable. Tor Browser hides where your connection comes from, but your behavior, the accounts you log into, the files you share, the habits you repeat can still identify you. A burner identity reduces correlation; it doesn't erase it.
If you're looking for an organization's onion service as part of this setup, get the address from that organization's official site on the regular web, not from a search result or a general-purpose link list. Directories like "the Hidden Wiki" are not a safe starting point: most versions in circulation today are unmaintained clones full of outdated or fraudulent links. A name you recognize is a starting point for verification, not proof of safety on its own.