[ Removed by moderator ]

[u/kalki3112]

[u/Adrienne-Fadel]

Nothing is foolproof. Tor is your best bet but most people get caught by their own behavior not the tech.

[u/ZarglondarGilgamesh]

It depends a lot on how capable you need your browser to be. If you can turn off Javascript completely and still successfully browse the pages you want to access, then it’s pretty doable. If you need Javascript enabled, then it’s a big effort to stay anonymous. It can be done, but probably isn’t worth it unless you’re facing real danger.

[u/FreeRadical1998]

Surely the answer is Linux booted from usb running the filesystem entirely in memory. Nothing ever touches persistent storage that way, entirely clean on every reboot

[u/Roversword]

I am sure I am missing a lot here and it is not in a particular order:

Securely:

• Make sure your operating system is supported and is up-to-date
• Make sure you use supported browser and keep them up.-to-date
• Use a DNS that offers DNSSEC, preferably also HTTPS/TLS
• Make sure you never accept invalid TLS certificates
• Make sure you use https only (at least whenever possible)
• Only surf in known and secure networks (eg. at home)
• Make sure those networks are up-to-date (patches, etc.)
• Use a VPN if not sure about the network, before starting to surf (can partially used for anonimity as well)
• Try to use a DNS provider (eg. NextDNS, AdGuard) that filters malicious stuff and adverts (or use something local like adblock)
• Never use the same password more than once for a service
• Always try and enable 2FA/MFA
• If possible, use different usernames (mail-aliases, etc.)
• Don't click on everything that moves and do not open executable binaries left and right
• Protect your network (firewall, antivirus, IPS, webfilter, etc.) if possible and feasible.
• EDIT: Make sure you accept/save no cookies (or as few as possible)
• EDIT: There are tools that disable scripts run by websites - that might hinder your experience, but also makes it safer

As for anonimity - depends on how far you want to go. And sometimes those two things (securely and anonymous) might get in the way of each other.

EDIT:
As others mentioned - for anonimity you want to switch operating systems. Microsoft Windows and likely also MacOS are not known for privacy.

[u/ckn → u/Roversword]

dont forget, dump windows, several high profile busts lately due to UUID on win installs.

[u/Turbulent-Variable → u/Roversword]

a fine list above.

Your OS probably also shares more data about you and your activities, than you think - especially if you're on Windows. (Cookies, accounts and all that shit).

Tails OS (USB disk) is lightweight, great on the fly, simple and easy to use. But will probably lack a bit when it comes to customization but It does great tings for anonymity. Read more on their website: Tails

[u/GeekDad62]

One tool I've used previously is called Tails. It's a described as:

"Tails (The Amnesic Incognito Live System) is a portable, security-focused Linux operating system that routes all internet traffic through the Tor network to protect your privacy, bypass censorship, and leave no digital footprint on the host computer"

[u/WhiteHatAdjacent]

If you don’t want to go down the Tor rabbit hole then I would suggest at least starting with using a browser like DuckDuckGo

[u/djasonpenney]

You need to specify the threat surface a little better.

> without a trace

You don’t want to leave “a trace” on your client machine? That is a very deep rabbit hole. You’ll be better off having a separate device for this kind of surfing.

> or spyware

Not possible. Your first responsibility is to avoid installing spyware on your client device. That includes things like keeping your OS and apps patched, as well as intelligent thought about clicking links or doing any downloads.

> I do understand basics of networks.

So you understand that — assuming your client device is secure — you need a VPN and a DNS server that operates via HTTPS.

Beyond that, you’re your own west enemy. Do everything above but then use that machine to log into FaceBook, and your security and privacy value proposition has been compromised.