# The Recommendations pages about browsers make Tor seem more omnipotent than it is **URL:** https://discuss.privacyguides.net/t/the-recommendations-pages-about-browsers-make-tor-seem-more-omnipotent-than-it-is/40586 **Category:** Site Development **Tags:** completed **Created:** 2026-09-10T08:47:31Z **Posts:** 26 ## Post 1 by @blibly — 2026-09-10T08:47:31Z Right now, the Recommendations pages inflate the capabilities of the Tor and Mullvad browsers: In **Desktop Browsers** > If you need to browse the internet anonymously, you should use [Tor](https://www.privacyguides.org/en/tor/) instead. We make some configuration recommendations on this page, but all browsers other than Tor Browser will be traceable by _somebody_ in some manner or another. > Like [Tor Browser](https://www.privacyguides.org/en/tor/), Mullvad Browser is designed to prevent fingerprinting by making your browser fingerprint **identical to all other Mullvad Browser users** , and it includes default settings and extensions that are automatically configured by the default security levels: _Standard_, _Safer_ and _Safest_. (Emphasis mine) > This strategy is the only way to **thwart** advanced tracking scripts, and is the same anti-fingerprinting technique used by Tor Browser. (Emphasis mine) In **Mobile Browsers** : > These are our currently recommended **mobile web browsers** and configurations for standard/non-anonymous internet browsing. If you need to browse the internet anonymously, you should use [Tor](https://www.privacyguides.org/en/tor/) instead. (Emphasis not mine) This language can give the reader the notion that Tor browser guarantees absolute protection from tracking, which isn’t true from what I’ve read, based on the discussion [here.](https://discuss.privacyguides.net/t/browser-fingerprinting-overview/40526) Further proof of my point: > [@Fingerprint.com Discovers Vulnerability That Can Link Your Tor Browsing Together](https://discuss.privacyguides.net/t/fingerprint-com-discovers-vulnerability-that-can-link-your-tor-browsing-together/37408): > > The fingerprinting company [Fingerprint](https://fingerprint.com/blog/firefox-tor-indexeddb-privacy-vulnerability/) discovered a vulnerability affecting “all Firefox-based browsers” that would allow a “stable process-lifetime identifier” during a browsing session, including after pressing the “New Identity“ button in Tor browser. This is a companion discussion topic for the original entry at [https://www.privacyguides.org/news/2026/04/24/fingerprint-com-discovers-vulnerability-that-can-link-your-tor-browsing-together](https://www.privacyguides.org/news/2026/04/24/fingerprint-com-discovers-vulnerability-that-can-link-your-tor-browsing-together) If I’m wrong about something, please correct me. Edit: People have interpreted what I’ve said as meaning I don’t think people should use Tor or Mullvad. I do think people should use them, and I use them constantly, but I don’t think we should use such strong binary language talking about them or say demonstrably false things like “This will make you look identical to all other Mullvad browser users,” to make it seem like an untrackable browser, since that could give new users who don’t know better a false sense of security. --- ## Post 2 by @blibly — 2026-09-10T09:10:56Z To fix this, it would help to change the text in the first quote changed so that it doesn’t look like Tor is the one browser that can’t be traced. The second quote should be changed to something like “make your fingerprint similar to a large number of other users,” instead of “all users.” In the third quote, I think the word “thwart” should be replaced with a softer word like “impede,” or a phrase like “reduce the capability of.” The fourth quote could honestly probably be fine as it is if other things were changed. --- ## Post 3 by @Privy — 2026-09-10T14:09:57Z So what browser should one use if they want privacy (Android)? Say they’re using a vpn, how close could they get to anonymous browsing and what would be identifying? --- ## Post 4 by @any1 — 2026-09-10T15:53:37Z > [@blibly](#): > > This language can give the reader the notion that Tor browser guarantees absolute protection from tracking, which isn’t true from what I’ve read, based on the discussion [here.](https://discuss.privacyguides.net/t/browser-fingerprinting-overview/40526) Nobody can guarantee you anything, but Tor Browser is the best option we currently have. The most I would add is a small disclaimer that it isn’t perfect, but this basically applies to all software. --- ## Post 5 by @blibly — 2026-09-10T19:18:33Z I’m not saying “Don’t use Tor, it can’t actually protect you.” It just needs clearer language. --- ## Post 6 by @blibly — 2026-09-10T19:22:48Z I agree with you that Tor is the best option we currently have, but the language in the examples I gave makes it seem more capable than it is, which could give users a false sense of security. Again, the Rec page says the Tor and Mullvad browsers are designed to make the user look identical to _all_ other users of that browser. A small disclaimer isn’t enough for a statement like that. --- ## Post 7 by @blibly — 2026-09-10T19:39:48Z When I first read the pages, and I didn’t understand this stuff very well, with statements like “You will be _somewhat traceable_ **unless** you use the Tor browser,” or “This browser makes you look identical to everyone else using that browser,” I got a false sense of security. That’s why I’m worried this happening with other users, because it happened with me. --- ## Post 8 by @any1 — 2026-09-10T19:44:35Z Yeah, the entire browser section needs an overhaul. I already spent way too much time explaining stuff the past few days, so much of the info could be taken from there. --- ## Post 9 by @blibly — 2026-09-10T19:48:09Z I’m honestly shocked such a basic misconception as “Tor/Mullvad browser makes you look identical to all other users” made it into the official guide pages and never got addressed. --- ## Post 10 by @any1 — 2026-09-10T19:53:32Z [https://mullvad.net/en/browser#:~:text=Therefore%2C%20Mullvad%20Browser%20has%20been%20developed%20with%20the%20purpose%20and%20ambition%20for%20all%20its%20users%20to%20appear%20as%20one](https://mullvad.net/en/browser#:~:text=Therefore%2C%20Mullvad%20Browser%20has%20been%20developed%20with%20the%20purpose%20and%20ambition%20for%20all%20its%20users%20to%20appear%20as%20one) This gets repeated everywhere and everyone just runs with it, even though it makes no sense at all --- ## Post 11 by @blibly — 2026-09-10T19:58:27Z Wow. From the devs themselves. Wtf??! --- ## Post 12 by @any1 — 2026-09-10T21:56:57Z [https://support.torproject.org/tor-browser/features/fingerprinting-protections/#:~:text=Tor%20Browser%20is,individual%20users%20effectively](https://support.torproject.org/tor-browser/features/fingerprinting-protections/#:~:text=Tor%20Browser%20is,individual%20users%20effectively). The Tor Browser page has it correct --- ## Post 13 by @blibly — 2026-09-11T00:09:32Z We also desperately need that page explaining how browser tracking actually works. I’m frustrated that I don’t have a way of calling the needed attention to this issue. --- ## Post 14 by @fria — 2026-09-12T17:37:38Z I opened a PR, let me know if y’all think it looks good or if you would change the wording: > > > List of changes proposed in this PR: > > - changed description of Tor Browser to …say its the best available option against fingerprinting and not imply it's untraceable > - changed the description of Mullvad browser to say it makes your fingerprint similar to a large number of other users rather than saying that all users look identical > - changed the word "thwart" to "defend against" > > relevant discussion: https://discuss.privacyguides.net/t/the-recommendations-pages-about-browsers-make-tor-seem-more-omnipotent-than-it-is/40586 --- ## Post 15 by @blibly — 2026-09-12T20:01:19Z I’d add a caveat that Tor and Mullvad browser can’t guarantee that you won’t be tracked, just for the sake of clarity. --- ## Post 16 by @privacy.slouchy — 2026-09-12T20:12:52Z This is an interesting discussion I personally read those sections to mean “every browser _except_ Tor can **definitely** be deanonymized by _someone_” I like Fria’s improvement I think you _could_ go a level deeper & make a reasonable argument that Tor Browser’s capabilities & limitations can’t be expressed without a full explanation of anonymity vs privacy, onion routing, etc, and propose that those resources should be compiled directly under the Tor Browser recommendation. I do not care enough to advocate for that --- ## Post 17 by @any1 — 2026-09-12T20:52:00Z [https://www.privacyguides.org/en/tor/#tor-browser:~:text=When%20modifying%20the%20security%20level%20setting%2C%20you%20must%20always%20restart%20the%20browser%20before%20continuing%20to%20use%20it.%20Otherwise%2C%20the%20security%20settings%20may%20not%20be%20fully%20applied%2C%20putting%20you%20at%20a%20higher%20risk%20of%20fingerprinting%20and%20exploits%20than%20you%20may%20expect%20based%20on%20the%20setting%20chosen](https://www.privacyguides.org/en/tor/#tor-browser:~:text=When%20modifying%20the%20security%20level%20setting%2C%20you%20must%20always%20restart%20the%20browser%20before%20continuing%20to%20use%20it.%20Otherwise%2C%20the%20security%20settings%20may%20not%20be%20fully%20applied%2C%20putting%20you%20at%20a%20higher%20risk%20of%20fingerprinting%20and%20exploits%20than%20you%20may%20expect%20based%20on%20the%20setting%20chosen). This could also be removed, since it forces you to restart now. Not sure if this would need to be in a different PR though. --- ## Post 18 by @fria — 2026-09-12T23:04:55Z I think that should be a separate one yeah but good to know. --- ## Post 19 by @fria — 2026-09-13T14:20:16Z > > > List of changes proposed in this PR: > > - removed the warning about restarting a…fter changing the security slider, since Tor Browser now forces you to restart when you change it > > relevant comment: https://discuss.privacyguides.net/t/the-recommendations-pages-about-browsers-make-tor-seem-more-omnipotent-than-it-is/40586/17 --- ## Post 20 by @any1 — 2026-09-13T18:02:59Z I think there should also be some disclaimer about the security levels and how/when they should actually get used. > [@What do Mullvad and Tor Browser in "safest" mode actually do for you?](https://discuss.privacyguides.net/t/what-do-mullvad-and-tor-browser-in-safest-mode-actually-do-for-you/40014/10): > > First of all, the security levels were not meant to increase fingerprinting protection, they are intended for security and the fingerprinting effects are just a side effect. You are also assuming that running the Safest setting would definitely protect you, without considering the real world, where people have various hardware configurations and different language needs. (What good is it to get the English version of a site if the user can’t understand English? It would turn their browser into… --- ## Post 21 by @fria — 2026-09-13T18:58:02Z So basically clarify that the security levels are meant for security only? Feel free to make a suggestion on Github btw and we can work on the wording from there if you want to. --- ## Post 22 by @blibly — 2026-09-13T19:44:06Z I’m confused about this. When I read [DRAFT: Browser Fingerprinting](https://arkenfox.github.io/thorin/items/02browserfingerprinting.html#part4:~:text=Test%20Sites,-Tohttps://arkenfox.github.io/thorin/items/02browserfingerprinting.html#part4:~:text=Test%20Sites,-To), it seemed like the safest security level would greatly improve FP protection by reducing how much information sites are able to collect. --- ## Post 23 by @dngray — 2026-09-14T20:38:29Z Agreed, I like the changes. The language I think now sounds a bit better. --- ## Post 24 by @blibly — 2026-09-14T20:40:34Z I found another example in the Tor overview page. > Anonymity can often be at odds with security: Tor’s anonymity requires every user to be **identical** , which creates a monoculture (e.g., the same bugs are present across all Tor Browser users). --- ## Post 25 by @dngray — 2026-09-14T21:45:05Z Fixed in [`e403761`](https://github.com/privacyguides/privacyguides.org/commit/e40376173a6c29cd8ed94654b16933ad0f153ba4) i removed some other jargon too about thumbs. --- ## Post 26 by @blibly — 2026-09-14T22:13:00Z That commit still has the Tor overview use the word “identical.”