CannaExpress Market Security Guide 2026

Network Security: Using Tor Correctly

CannaExpress Market is only accessible via the Tor network, which provides three layers of encryption across three independent relay nodes. However, Tor's protection depends on using it correctly. A misconfigured Tor Browser can leak identifying information even while connected to the Tor network.

• Always download Tor Browser from the official source at torproject.org
• Keep Tor Browser updated — security patches are released regularly
• Set the security level to Safest before accessing any .onion marketplace
• Disable WebRTC to prevent real IP exposure: media.peerconnection.enabled = false
• Do not install additional browser extensions in Tor Browser
• Do not resize the browser window — non-standard dimensions contribute to fingerprinting

PGP Two-Factor Authentication

CannaExpress requires PGP 2FA on all accounts. This means even if your password is compromised — through a data breach, keylogger or shoulder surfing — an attacker cannot access your account without your PGP private key.

Set up PGP 2FA correctly:

• Generate a 4096-bit RSA or Ed25519 key pair using GPG4USB, GPG Suite or the GPG command line
• Use a strong, unique passphrase on your private key
• Upload only your public key to CannaExpress — never your private key
• Store your private key on an encrypted, offline device — not on your daily computer
• Back up your private key securely; losing it means losing account access permanently

Monero Payment Security

Monero (XMR) is the only payment method accepted by CannaExpress. Unlike Bitcoin, Monero transactions are private by default through ring signatures, stealth addresses and RingCT. This means deposits cannot be traced back to your wallet without your private keys.

Best practices for Monero use on CannaExpress:

• Use a non-custodial Monero wallet (Feather Wallet or the official Monero GUI)
• Acquire Monero through a peer-to-peer exchange (LocalMonero) rather than a KYC exchange
• Use a fresh deposit address for each transaction — CannaExpress generates unique addresses
• Do not hold large balances on the marketplace — withdraw to your own wallet regularly
• Allow at least 10 Monero network confirmations before a deposit is credited

Device and System Security

Your device security is the foundation of your operational security. A compromised device undermines all network-level protections provided by Tor and Monero.

• Use a dedicated device or operating system for marketplace activity where possible
• Tails OS provides an amnesic operating system that leaves no trace on disk after shutdown
• Keep your operating system and all software updated with security patches
• Use full-disk encryption on all storage devices
• Do not access CannaExpress from public networks or devices you do not control

Account and Communication Security

Operational security extends to how you communicate and behave on the marketplace:

• Use a username that reveals nothing about your real identity or location
• Do not reuse usernames from clearnet accounts or other darknet platforms
• Communicate with vendors exclusively through the encrypted messaging system on CannaExpress
• Use PGP encryption for any sensitive information exchanged with vendors
• Provide only the minimum necessary delivery information — use a pseudonym and a safe delivery address
• Do not discuss transactions outside the marketplace platform

Recognising and Avoiding Scams

The most common threats to CannaExpress users are phishing sites, exit scam attempts and social engineering. Protect yourself:

• Always verify the onion address against the latest PGP-signed announcement before use
• Never send Monero to wallet addresses provided outside the official marketplace platform
• Use escrow for all orders — CannaExpress offers full escrow protection
• Be suspicious of vendors who pressure you to finalise orders early (FE)
• Check vendor reviews and transaction history before placing large orders