Keep sessions short

Tor Browser sessions accumulate state over time. Cookies (locally), history, cached DOM state. None of this is inherently dangerous, but a long-lived session is a longer window for anything to go wrong (extension update, JavaScript on an unrelated tab misbehaving, cross-origin exposure).

The Bureau's recommendation: close Tor Browser after each Nexus session. Open it fresh when you need it again. Use New Identity between different market accounts and between browsing Nexus and browsing anything else.

This is a small habit, mostly invisible to your workflow if you already close the browser when you finish. Worth reinforcing.

Why short sessions are not the goal

People read this as a rule to be in and out quickly, which produces the opposite of what it should. The first page of a session pays for the whole connection setup and every page after it is nearly free, so four short visits cost four times the setup and accomplish less than one continuous sitting. The point is not brevity, it is not leaving a session open and unattended afterwards, which is a different thing entirely.

What to do at the end of one

Sign out rather than closing the tab, and close the browser rather than leaving it running. A session left open is a session somebody else can reach if the machine is. This costs nothing, since the next visit pays for its connection setup whether or not the previous one was closed properly.

What a long session is not

It is not an argument for staying signed in across days. The point is that work done in one sitting costs one connection setup instead of several, not that a session should be left running. Finish, sign out, close the browser. The next visit builds a fresh connection either way.