Tor Browser setup & hardening
Download, configure, and harden Tor Browser for safer access to onion services.
Read guide →Mars Market Forum: Tor bridges in censored regions
Mars Market Forum: how to configure obfs4, Snowflake, and meek bridges when Tor is blocked by your ISP or government. Step-by-step guide for EU and US users.
What are Tor bridges?
Tor bridges are unlisted Tor relays that help users circumvent censorship. When a country or ISP blocks access to the public Tor network, bridges provide an alternative entry point that is not publicly listed in the Tor directory. This makes them harder for censors to block.
Bridges are essential for users in countries where Tor is actively blocked, including China, Iran, Russia, Turkey, and Egypt. They are also useful in corporate or institutional networks that filter Tor traffic.
Step 1: Download Tor Browser Beginner
Always download Tor Browser from the official source. Never use third-party mirrors or unofficial builds.
- Visit torproject.org and download the latest version for your operating system.
- Verify the download signature using the Tor Project's PGP key (see our PGP verification guide).
- Install and launch Tor Browser. Do not connect yet.
Step 2: Configure bridges Beginner
Tor Browser includes built-in bridge configuration. You can choose from several bridge types depending on your threat model.
- Click "Configure" on the Tor Browser connection screen before connecting.
- Select "Use a bridge" and choose "Select a built-in bridge".
- Choose from: obfs4 (most common, good for general use), Snowflake (uses WebRTC, harder to block), or meek-azure (uses Microsoft Azure, very hard to block but slow).
- Click "Connect" and wait for Tor to establish a circuit.
Step 3: Request bridges from Tor Project Intermediate
If built-in bridges are blocked, you can request fresh bridges from the Tor Project.
- Visit bridges.torproject.org (use a different browser or a proxy if Tor is blocked).
- Complete the CAPTCHA to receive 3 bridge addresses.
- In Tor Browser, go to Settings → Connection → Bridges → "Enter bridge addresses manually".
- Paste the bridge lines (format: `obfs4 IP:PORT FINGERPRINT cert=... iat-mode=0`).
- Restart Tor Browser and connect.
Step 4: Email bridge request Intermediate
If the bridges website is blocked, you can request bridges by email.
- Send an email to [email protected] from a Gmail or Riseup address.
- Include the text get transport obfs4 in the body of the email.
- You will receive bridge addresses in reply. Paste them into Tor Browser as described in Step 3.
- Note: this method is slower and may be monitored by email providers.
Step 5: Troubleshooting Advanced
If bridges are not working, try these steps:
- Try a different bridge type. obfs4 may be blocked while Snowflake works, or vice versa.
- Use the Tor Project's OONI Probe app to test which bridges are blocked in your region.
- Check if your ISP uses deep packet inspection (DPI). If so, meek-azure may be your best option.
- Restart Tor Browser after changing bridge configuration.
- If all else fails, try connecting through a VPN first, then use Tor.
tor-browser — bridge-config
Tor Browser: Settings → Connection → Bridges
Bridge type: obfs4
Bridge address: obfs4 192.0.2.1:443 CERT=... iat-mode=0
Status: Connected
_
Bridge types compared
Each bridge type has different strengths and weaknesses. Choose based on your threat model and network conditions.
- obfs4 — Most common. Obfuscates Tor traffic to look like random data. Good for general censorship circumvention. Fast and reliable.
- Snowflake — Uses WebRTC to route through volunteer proxies. Harder to block because it uses ephemeral IP addresses. Slower but more resilient.
- meek-azure — Routes through Microsoft Azure CDN. Very hard to block because it looks like normal HTTPS traffic to Azure. Slowest option.
- WebTunnel — Newer protocol that mimics HTTPS web traffic. Good balance of speed and stealth.
Related guides
Continue reading on connected topics.
PGP encryption: keys, signing, verification
Generate and manage PGP keys for secure communication.
Read guide →Operational security (OpSec) basics
Protect your identity through habits, not just tools.
Read guide →Phishing domain checklist
How to spot clone markets and verify onion addresses.
Check links →Questions about Tor bridges?
Ask in the forum. Community members and moderators respond in English.
Go to forum