Ok, just some basics:

TOR: you can do to 2 things

• use the latest tails disro at https://tails.boum.org/ this is the most secure option. (either run it as a live distro on a virtual machine (least secure), or install it on a CD/USB bootable drive and boot your computer with it (more secure - when you reboot it's like it was never there - stores no info)).

• Use a tor browser https://www.torproject.org/download/ (this is less secure than the 1st option)

Note on using TOR: be prepared to accept a lesser experience. Do not cave to temptation and log in to places like facebook, or google services, or you email. If you do, set up an encrypted email account on like https://mail.tutanota.com/ , or https://mail.protonmail.com/ etc. USE throw away emails like https://temp-mail.org/ to recieve emails etc.

VPN: you will need to pay for a VPN service, it basically hides your IP and makes you appear as if in another country. Generally you have to pay, which can be a vector of identification. Pay with BTC if privacy is important, but obfusticate the trail.

Disabling javascript can be handled in Tails distro or the tor browser (above), or you can get plugins like ublock or noscript (blocking the scripts is difficult and requires trial and error). Your browser may have an option to disable all javascript. Javascript runs on the client side (your computer) and sends information back to the server you are using. Some browsers can disable this. Entirely disabling javascript leads to an even more limited experience on the internet.

You want to disable javascript wherever possible,because you can leak lots of info.

Additionally you can use these sites to examine what others can see about you:

https://ipleak.org/

https://ipleak.net/

https://www.expressvpn.com/dns-leak-test

https://www.grc.com/x/ne.dll?bh0bkyd2

https://ipx.ac/run

https://dnsleaktest.com/

https://browserleaks.com/webrtc

https://www.expressvpn.com/webrtc-leak-test

https://test-ipv6.com/

https://www.perfect-privacy.com/en/tests/check-ip