I'm worried. I connect to exact same entry node for days. Even after 100 new circuit requests, it hasn't moved. Am I being watched? How can I get TOR to connect to different first node?

  • BTW, whenever I log on, the first entry node is in Netherlands and is always the same – Bob May 5 '16 at 7:13
  • 1
    This is expected. Entry guards stay the same for a period of several months, which is by design. The other nodes in your circuit will change though. – Richard Horrocks May 5 '16 at 7:31
  • 1
    If you desperately want to change your entry guard - which is actually less secure than leaving it the same - have a read of this thread: tor.stackexchange.com/questions/4880/… – Richard Horrocks May 5 '16 at 9:05

This is your "Entry Guard", it acts as a protection mechanism. It is kept long term because it makes it harder for adversaries to deanonymize Tor users, since most of the attacks on onion routing require control of the entry and exit points to the network.

Imagine that some entry points are, hypothetically, naughty. Every time you pick a new entry point you are rolling a set of die and if the numbers come up wrong you might be subject to a naughty guard trying to perform a deanonymization attack, linking your activity on Tor to your identity. As such, the fewer times that you roll the die the less likely you will be to pick a naughty guard.

For more information on why you want to keep this guard for a longer time period, read this blog post: https://blog.torproject.org/blog/improving-tors-anonymity-changing-guard-parameters


It's about pre-seeding, so what I'm recommending to people :

  • At first, use default setup and well-known working connection and run Tor with directory mirror enabled and seed it
  • Later you can do if you want : UseEntryGuards 0 and use any of Tor nodes, to make paths more random
  • Take a spin for EntryNodes + ExitNodes + StrictNodes - play with it!

Not the answer you're looking for? Browse other questions tagged or ask your own question.