SECURITY OPERATIONS CENTER

Your darknet identity must be completely walled off from your real-world identity ("clearnet"). Never cross-contaminate data points.

• Usernames: Never reuse a username from Reddit, Discord, or any other site. Create a unique handle strictly for DarkMatter.
• Passwords: Use a randomly generated alphanumeric password (20+ chars). Store it in KeepassXC, never in the browser.
• Metadata: Strip EXIF data from any images before uploading. Do not discuss your location, time zone, or weather.

Man-in-the-Middle (MitM) attacks serve fake versions of the market to steal credentials. Verification is the only defense.

• PGP Verification: The market signs its mirror list with a PGP key. Always import the official public key and verify the signature of the mirror list.
• Onion Structure: Familiarize yourself with the V3 onion address format. DarkMatter addresses are always 56 characters long ending in .onion.
• Source of Truth: Only obtain links from trusted directories like this one or Dread. Never trust links sent via PM or found on clearweb wikis.

Software configuration and financial hygiene are the technical backbone of your safety.

• Tor Settings: Set Tor Browser Security Level to "Safest" (disables JavaScript). This prevents browser fingerprinting and exploit execution.
• OS Hygiene: Use Tails OS or Whonix if possible. Windows 10/11 creates extensive logs and is not recommended for darknet activity.
• Financial Siloing: NEVER send crypto directly from an exchange (Coinbase, Binance) to the market.

DarkMatter enforces mandatory PGP (Pretty Good Privacy). Unencrypted shipping data is a critical vulnerability.

• Two-Factor Auth (2FA): Enable PGP 2FA immediately upon account creation. This prevents account takeover even if your password is stolen.
• Manual Encryption: Do not rely on "Auto-Encrypt" checkboxes. Manually encrypt your address using the vendor's public key on your own device before pasting.