I added a fresh installation of Tor browser to the Visitor account of my Windows 10/11 pc, changed security to “strict,” and logged in to Proton’s Onion site. After I logged in, I happened to click on the Onion logo to view the circuit and observed the three IP hops, including the Guard IP changing in rapid succession multiple times. This went on for a short while as I watched, after which it seemed to “stabilize” and settle on a Guard and the two additional IP addresses that follow it. Why did it do this, and is this normal?
1 Like