Why you might disable JavaScript in Tor

Disabling JavaScript in Tor Browser stops websites from running code that can reveal your real IP address or identify you across sites. JavaScript is a programming language that websites use to make pages interactive — things like dropdown menus, video players, and form validation all use it. The problem is that JavaScript can also be used to bypass Tor's protections, which is why some people turn it off entirely for maximum privacy.

The tradeoff is real: many websites will break or become unusable without JavaScript. Videos won't play, forms won't submit, pages won't load properly. You are choosing between functionality and an extra layer of privacy. Most people using Tor for normal browsing don't need to disable it — Tor Browser already blocks the most dangerous JavaScript attacks by default. You only need to do this if you are visiting sites you don't trust, or if you want the strongest possible isolation.

Key Takeaways

  • Tor Browser has JavaScript protections built in, so you only need to disable it if you want additional privacy on untrusted sites.
  • Disabling JavaScript in Tor Browser's settings is permanent until you turn it back on — it affects every website you visit.
  • Many websites will not work properly without JavaScript, including video sites, email, and most modern web applications.
  • You can also use Tor Browser's security slider to disable JavaScript only on certain sites, which is less disruptive than a global setting.

Disable JavaScript globally in Tor Browser settings

Open Tor Browser and click the hamburger menu (three horizontal lines) in the top right corner. Select Settings from the dropdown. On the left side of the settings window, click Privacy & Security.

Scroll down until you see the section labeled Security. You will see a slider labeled Security Level with three options: Standard, Safer, and Safest. Moving the slider to Safest disables JavaScript across all websites. This is the most straightforward way to turn it off globally. Once you move the slider, the change takes effect when ready — you do not need to restart Tor Browser.

If you want to disable JavaScript without changing other security settings, scroll further down in the same Privacy & Security section. Look for Advanced settings and find the option that says Allow JavaScript. Uncheck this box. This gives you finer control than the security slider, because you can disable JavaScript while keeping other settings at their current level.

What breaks when JavaScript is off

Most modern websites rely on JavaScript to function. Email services like Gmail, ProtonMail, and Outlook will not work — you will see a blank page or an error message. Video sites like YouTube will not play videos. Social media sites like Twitter, Facebook, and Reddit will either not load at all or will load in a very basic, unusable form. Google Docs, Sheets, and other cloud applications will not open.

Even straightforward sites often break. Shopping carts won't work. Search results may not display. Forms that require JavaScript validation will refuse to submit. Some sites will show you a message saying "Please enable JavaScript" and refuse to let you proceed. This is not a bug — it is intentional on the site's part, because they have decided JavaScript is necessary for their service.

If you disable JavaScript and then find a site you need to use, you will have to turn it back on. Go back to Settings, Privacy & Security, and either move the security slider back to Standard or re-check the Allow JavaScript box. The change takes effect when ready.

Use the security slider instead of disabling JavaScript completely

Tor Browser's security slider is a middle ground. Instead of disabling JavaScript entirely, you can move it to Safer, which disables some JavaScript features but keeps basic functionality working. This blocks the most dangerous JavaScript attacks while still letting most websites function.

The Safer setting disables JavaScript on certain types of content — specifically, it blocks some of the code that is most commonly used to attack Tor users. It is less aggressive than Safest, so more sites will work. If you are not visiting sites you actively distrust, Safer is usually enough. You get meaningful privacy gains without breaking everything.

To use this approach, open Settings, go to Privacy & Security, and move the Security Level slider to Safer. You can leave it there permanently, or move it back to Standard for sites you trust. Some people keep it on Safer all the time and only move it to Standard when they need a site that requires full JavaScript support.

Turn JavaScript back on for specific sites

If you have disabled JavaScript globally but need it for one specific website, you do not have to change your global setting. Tor Browser lets you allow JavaScript on a per-site basis. Visit the website that needs JavaScript. Click the shield icon in the address bar (it looks like a small shield on the left side of the URL). A dropdown menu will appear.

Look for an option that says something like Allow JavaScript on this site or Disable protection on this site. Click it. Tor Browser will reload the page with JavaScript enabled just for that domain. The next time you visit that same site, JavaScript will still be enabled for it — Tor Browser remembers your choice. If you want to disable it again later, click the shield icon again and select the option to re-enable protection.

This approach is useful if you have JavaScript disabled globally but use one or two sites regularly that require it. You get the privacy benefit of JavaScript being off by default, but you do not have to toggle a setting every time you need to use a specific service.

Understand what JavaScript disabling actually protects you from

Disabling JavaScript stops websites from running code that could reveal your real IP address or identify you across different sites. Some JavaScript attacks can break out of Tor's protections and show a website your actual location. This is a real risk, but Tor Browser already blocks most of these attacks by default — that is why the Standard security level is safe for normal use.

JavaScript can also be used to track you across websites by storing data in your browser that identifies you. Disabling it prevents this kind of tracking. However, Tor Browser already isolates each site you visit, which means tracking data from one site cannot follow you to another. Disabling JavaScript adds another layer on top of that isolation.

What JavaScript disabling does not protect you from: it does not hide your Tor usage from your internet service provider, it does not encrypt your traffic (Tor already does that), and it does not protect you from malicious websites that attack you through other means. It is one tool in a larger privacy toolkit, not a complete solution by itself.

Frequently Asked Questions

Will websites know I have JavaScript disabled?

Yes, websites can detect that JavaScript is disabled. Some will show you a message asking you to enable it. This does not reveal your identity or location — it just tells the website that you have chosen to disable JavaScript. Tor Browser does not hide this fact from websites.

Does disabling JavaScript make me more anonymous?

It makes you slightly more anonymous by preventing certain JavaScript attacks, but it also makes you more visible in another way: very few Tor users disable JavaScript, so doing so can actually make you stand out. For most people, keeping JavaScript enabled at the Standard security level provides better anonymity because you blend in with other Tor users.

Can I disable JavaScript on just one tab?

No, Tor Browser does not have a per-tab JavaScript setting. You can disable it globally, or you can allow it on specific sites (which affects all tabs visiting that site). If you need different JavaScript settings for different sites, use the per-site shield icon method instead of the global setting.

What if a site says it needs JavaScript but I have it disabled?

Click the shield icon in the address bar and select the option to allow JavaScript on that site. The page will reload with JavaScript enabled. If that does not work, you may need to move your security slider back to Standard, because some sites require JavaScript features that are blocked even at the Safer level.

Does disabling JavaScript slow down Tor Browser?

Slightly, but not noticeably. Disabling JavaScript means Tor Browser does not have to process JavaScript code, which saves a tiny amount of processing power. The real slowdown with Tor comes from routing your traffic through multiple servers, not from JavaScript. You will not see a meaningful speed improvement from disabling it.