Third-party “fast Tor packs” remain a common malware vector into market accounts. Speed promises usually trade away the threat model you need. Install from the Tor Project only.
- Wait for bootstrap to finish before pasting anything.
- Paste an onion from Dark Markets — not from search.
- Check the anti-phishing phrase.
- Bookmark that exact onion, then keep a second mirror warm.
For higher-risk sessions, Safest mode reduces scripted clone tricks. Keep market personas off the same browser profile you use for mail and work logins when you can.
Related: Safest habit note · Anti-phishing.