Enforcing encrypted browsing with HTTPS-Only Mode
Tor Browser includes HTTPS-Only Mode, which ensures your connections to websites are always encrypted whenever possible. This helps prevent eavesdropping, tampering, and man-in-the-middle attacks that can occur on unencrypted HTTP connections.
If you are logging into any website, you should make sure that the site offers HTTPS encryption, which protects against this kind of eavesdropping. You can verify this in the URL bar: if your connection is encrypted, the address will begin with "https://", rather than "http://".
HTTPS-Only Mode in Tor Browser
HTTPS-Only mode forces all connections to websites to use a secure encrypted connection called HTTPS. Most websites already support HTTPS; some support both HTTP and HTTPS. Enabling this mode guarantees that all of your connections to websites are upgraded to use HTTPS and hence secure.
HTTPS-only mode setting in Tor Browser
Some websites only support HTTP and the connection cannot be upgraded. If a HTTPS version of a site is not available, you will see a "Secure Connection Not Available" page:
Warning about Secure Connection not available when visiting HTTP website
If you click 'Continue to HTTP Site' you accept the risk and then will visit a HTTP version of the site. HTTPS-Only Mode will be turned off temporarily for that site.
Click the 'Go Back' button if you want to avoid any unencrypted connections.
Cryptocurrency safety
Tor Browser presents a security prompt if a cryptocurrency address has been copied from an insecure HTTP website. The cryptocurrency address could have been modified and should not be trusted. Clicking 'Reload Tab with a New Circuit' will attempt to load a secure version of the website with a new Tor circuit.
Cryptocurrency safety dialog
If you click 'Dismiss' you accept the risk and the cryptocurrency address will be copied to the clipboard.
HTTPS and Tor work together to enhance your privacy and anonymity