Why you might disable JavaScript in Tor

Disabling JavaScript in Tor Browser stops websites from running code that can reveal your real IP address or identify you across sites. JavaScript is a programming language that websites use to make pages interactive — it powers things like dropdown menus, live chat, and video players. But it can also be used to bypass Tor's protections.

The Tor Project (the organization that builds Tor Browser) does not recommend disabling JavaScript for most users, because it can break many websites and create a more obvious fingerprint that identifies you as a Tor user. However, if you are visiting a website you do not trust, or if you are in a high-risk situation where you need maximum protection, turning it off is a real option.

This guide walks you through the steps to disable JavaScript, what to expect when you do, and when it actually makes sense to use this setting.

Key Takeaways

  • JavaScript is disabled through Tor Browser's security settings, not through your operating system or a separate tool.
  • Disabling JavaScript breaks many websites — videos will not play, forms may not work, and pages may look incomplete.
  • The Tor Project warns that disabling JavaScript can make you stand out more, not less, because very few Tor users do it.
  • You can disable JavaScript for all sites at once, or use Tor Browser's NoScript extension to block it on specific sites only.

Disable JavaScript through Tor Browser settings

Open Tor Browser and click the hamburger menu (three horizontal lines) in the top right corner. Select "Settings" from the dropdown menu. On the left side of the Settings window, click "Privacy & Security".

Scroll down to the section labeled "Security". You will see a slider for "Disable JavaScript". Move the slider to the right to turn it on. Tor Browser will ask you to confirm — click "Yes, disable JavaScript" when the popup appears. The setting takes effect immediately for all new tabs and windows you open.

To turn JavaScript back on, follow the same steps and move the slider back to the left. You can toggle this setting on and off as often as you need.

What breaks when JavaScript is off

Many modern websites rely on JavaScript to function. When you disable it, you may see blank areas where content should be, buttons that do not respond when you click them, or error messages. Videos embedded on pages will not play. Live chat features will not load. Search boxes may not work properly.

Some websites will refuse to load at all and display a message saying you need to enable JavaScript. News sites, social media, email services, and streaming platforms are particularly likely to break. Text-based sites like Wikipedia, news archives, and documentation pages usually work fine without JavaScript.

If a site does not work with JavaScript disabled, you have two choices: enable JavaScript just for that site, or use a different site. There is no way to force a website to work if it requires JavaScript.

Use NoScript to disable JavaScript on specific sites only

Tor Browser comes with the NoScript extension already installed. Instead of disabling JavaScript everywhere, you can use NoScript to block it only on sites you do not trust, while leaving it on for sites you use regularly.

Click the NoScript icon (it looks like an "S" with a slash through it) in the top right corner of Tor Browser. You will see a list of scripts running on the current page, organized by domain. Click the toggle next to any domain to block scripts from that source. The change takes effect immediately — refresh the page to see the result.

NoScript remembers your choices. If you block scripts from a domain, it will stay blocked on future visits to any site that uses scripts from that domain. You can view and change all your NoScript rules by clicking the gear icon in the NoScript popup, then selecting "Options".

Understand the fingerprinting trade-off

Tor Browser is designed to make all users look as similar as possible to each other, so websites cannot identify you individually. When you disable JavaScript, you are changing your browser in a way that very few Tor users do. This can actually make you stand out more, not less — like wearing a bright red coat in a crowd of people wearing gray ones.

The Tor Project's official documentation states that disabling JavaScript may increase your fingerprinting risk rather than decrease it. This is especially true if you disable it globally for all sites. Using NoScript to block scripts only on specific untrusted sites is a middle ground that causes less disruption to your fingerprint.

If you are concerned about a specific threat — for example, you are visiting a website run by someone who has tried to attack you before — disabling JavaScript for that visit makes sense. If you are trying to be anonymous in general, leaving JavaScript on is usually the better choice.

When to actually use this setting

Disable JavaScript if you are visiting a website you have strong reason not to trust, or if you are in a situation where you believe someone is actively trying to identify you. Examples include visiting a site that previously tried to attack Tor users, or accessing a resource in a country where the government actively targets Tor users.

Do not disable JavaScript as a general privacy measure. The Tor Browser defaults are designed by security researchers who have thought through these trade-offs. Changing them without a specific reason usually makes your situation worse, not better.

If you are unsure whether you need to disable JavaScript, you probably do not. Tor Browser's default settings protect you from most threats. Disabling JavaScript is a tool for specific, high-risk situations.

Frequently Asked Questions

Does disabling JavaScript make me more anonymous?

Not necessarily. While JavaScript can be used to attack Tor, disabling it can make you stand out because so few Tor users do it. The Tor Project recommends leaving it on for most users. Disable it only if you have a specific reason to distrust a particular website.

Will websites know I have JavaScript disabled?

Yes, websites can detect whether JavaScript is running. Some will refuse to load or will show you a message asking you to enable it. This detection itself can be part of your fingerprint, so disabling JavaScript globally may make you more identifiable, not less.

Can I disable JavaScript for just one tab?

No, the global setting applies to all tabs and windows. However, you can use NoScript to block specific scripts on specific domains, which gives you finer control without disabling JavaScript entirely.

What if a website does not work after I disable JavaScript?

Enable JavaScript again through Settings, or use NoScript to unblock scripts from that specific domain. There is no way to make a JavaScript-dependent website work without JavaScript running.

Is disabling JavaScript the same as using private browsing mode?

No. Private browsing mode (which Tor Browser uses by default) prevents your browser from storing cookies and history. Disabling JavaScript prevents websites from running code. They are separate protections that do different things.