Software source
- Download only from the official GitHub, and verify the hash afterward.
- Refuse any "cracked", "premium" or "optimized" client — usually backdoored.
Accounts and nodes
- Subscription URLs and node QR codes are passwords — never post them to groups or share screenshots.
- When logging into important accounts (bank, work), remember your traffic passes through a third-party node; be cautious with sensitive actions.
At the system level
- Enable split DNS and run a DNS leak test once.
- Pair browser privacy settings with it — don't let the proxy be your only line of defense.
A proxy solves connectivity, not anonymity. Real privacy comes from restrained habits: minimize exposure, trust your sources, keep your keys secret.