[OPSEC] Nexus Market Security
XMR nexus wallet + PGP 2FA Security Guide
Complete OpSec manual for nexus darknet market. Secure XMR nexus wallet setup, PGP 2FA configuration, Tor circuit hygiene, phishing countermeasures. January 2026 standards.
/security checklist
monero-wallet-cli:~$
generate-from-keys nexus-wallet
gpg:~$
gpg --sign-message 2fa-challenge
tor-control:~$
NEWNYM signal NEWNYM
[01] XMR nexus wallet
Secure Monero Wallet Setup
1.1 Monero Wallet
- monero-wallet-cli (official)
- Generate fresh wallet
- 25-word seed backup
- Never reuse addresses
- Hardware wallet optional
./monero-wallet-cli --generate-from-spend-key nexus-market-wallet
1.2 Deposit Process
- Minimum: 0.001 XMR
- Confirm 6+ blocks
- Wallet-less escrow
- Multisig protection
- No market custody
1.3 Coin Mixing
- Ring size: 16+ rings
- Multiple wallet hops
- Churn coins 2-3 times
- Wait 24h between deposits
- Use decoy outputs
[02] PGP nexus market 2FA
PGP Message Signing 2FA
2.1 Generate PGP Key
gpg --gen-key --expert
- RSA 4096-bit key
- 256-bit subkey (signing)
- Backup private key
- Never share private key
2.2 Login Signing
- Copy 2FA challenge text
- gpg --sign --clearsign challenge.txt
- Paste signed message
- Verify signature matches
- 30-second timeout
[03] Tor Circuit Hygiene
Tor Browser Circuit Management
3.1 New Circuit
- Ctrl+Shift+L (New Identity)
- New 3-hop circuit
- Clear all cookies
- Fresh Tor exit node
- Every 15-30 minutes
3.2 Tor Bridges
- ISP blocks → Bridges
- Obfs4 protocol
- Request from torproject.org
- Rotate bridges weekly
- Snowflake fallback
3.3 DNS Leaks
- Never disable Tor proxy
- Check: ipleak.net
- Block WebRTC globally
- Disable DNS over HTTPS
- Verify: 3 exit nodes
[04] Phishing Protection
Advanced Phishing Countermeasures
Phishing Indicators
- Clearnet domains (.com/.net)
- "Urgent action required"
- BTC payment requests
- Phone/SMS 2FA
- PGP fingerprint mismatch
Legitimate Signs
- .onion URLs (56 chars)
- XMR-only payments
- PGP 2FA challenge
- Wallet-less escrow
- 15K+ live listings
[05] Safe Trading Rules
Secure Transaction Protocols
Escrow Protection
- Funds locked until FE
- Multisig 2-of-3 escrow
- Dispute resolution team
- 7-day FE hold period
- Vendor ratings visible
Vendor Vetting
- 100+ completed orders
- 4.8+ star rating
- PGP-signed profile
- Recent activity
- Check dispute history
Finalize Early
- Only after receipt
- Stealth packaging verified
- Quality matches listing
- No damage/discrepancies
- Leave detailed feedback
[CHECKLIST] Daily Routine
Pre-Session Security Routine
Before Login
- 1 Tails OS or Qubes
- 2 New Tor circuit
- 3 Verify PGP fingerprint
- 4 Fresh XMR wallet
- 5 Security: Safest
After Session
- 1 New Identity
- 2 Clear RAM
- 3 Shutdown VM
- 4 Wipe workspace