Tor Browser has a handful of settings that change your risk, and a pile of options that change nothing for a market user. This is the short list of the first kind, in the order they matter.

The security slider

The onion-shaped icon in the toolbar opens the security level. Standard is the default, and it is fine for browsing listings. Safest disables some scripts and media, which makes pages slower and occasionally broken, but it gives you a cleaner circuit at the moments that expose you: logging in, depositing coins, and entering a delivery address. The practical routine is to move it to Safest before those three actions and back to Standard afterwards. Doing it permanently costs you more in friction than in risk.

Bridges

A bridge is a relay that is not in the public list, used when your network blocks the standard relays. You only need one if the connection indicator stays red or orange for a long time, or if you are in a region where Tor is throttled. The browser can fetch a bridge for you from the settings, or you can paste one you obtained from the Tor Project. If your connection works without a bridge, do not add one. Extra configuration is extra surface area.

New identity

The New Identity button, available on some builds through the menu, closes your current circuit and builds a new one. Use it between unrelated activities, for example after you finish a market session and before you visit a normal website. Do not use it in the middle of a market session, because it logs you out of the hidden service and forces a fresh circuit build.

What to leave alone

The rest of the settings are for people debugging the network or running their own relays. The network tab, the relay tab, and the advanced proxy fields do not improve your market session, and changing them usually makes it worse. The one exception is the language setting, which affects which pages the browser offers to translate. Leave it at your language, or turn translations off entirely, because a translated market page is a page you are reading through a filter.

The habit that matters most

Settings are the floor, not the ceiling. The address check before login, the copy instead of type rule, and the habit of closing the browser after a session do more for you than any slider position. A perfect configuration with a careless login loses to a default configuration with a careful one, every time.

The setup guide covers the first run, and the Android guide covers the phone-specific differences.