Tor vs VPN – Which Is Right for You?
Tor and VPNs both anonymise your internet traffic, but they achieve this in very different ways. This guide explains how each works, compares them side by side, and helps you decide when to use which.
Who You Have to Trust
This is the real distinction, and it is a trust question rather than a technical one. A VPN replaces your ISP with a company you choose. Tor replaces your ISP with three unrelated volunteers, none of whom knows both ends of your connection.
| Question | VPN | Tor |
|---|---|---|
| Who knows your real IP? | The provider | Only the entry guard |
| Who knows your destination? | The provider | Only the exit node |
| Who can link the two? | The provider, if it logs | Nobody, without correlating traffic |
| What happens if that party is compelled? | Depends entirely on its logging and jurisdiction | One relay yields half the picture at most |
That structural difference is why Tor is the correct tool when the consequence of being identified is serious, and why a VPN is sufficient when the consequence is targeted advertising or an ISP building a profile.
What Each One Costs You in Practice
| Everyday task | VPN | Tor |
|---|---|---|
| Streaming video | Generally fine | Not realistic, and discouraged by the project |
| Video calls | Usually fine | Unusable — latency is far too high |
| Online banking | May trigger fraud checks | Frequently blocked outright |
| General browsing | Barely noticeable | Noticeably slower, frequent CAPTCHAs |
| Large downloads | Fine | Antisocial — the network is volunteer-funded |
Combining Them: Two Orders, Two Outcomes
Tor over VPN (connect the VPN, then open Tor Browser)
Your ISP sees a VPN connection rather than Tor usage, which matters on networks where Tor itself is blocked or suspicious. The VPN provider knows you use Tor but not what you do inside it. This is the easier configuration and the one most people mean when they say they combine the two.
VPN over Tor (route the VPN through Tor)
The exit node no longer sees your destination, and you can reach services that block Tor exits. It requires provider support, is fiddly to configure, and breaks the anonymity model if the VPN account is tied to your identity — which it usually is.
For most people neither combination is necessary. Pick the tool matching your threat model and configure it properly; a badly configured stack is worse than a well-configured single tool. See how to use Tor Browser for setup, and verify any VPN with our leak test.
Mistakes That Undo Either Tool
- Signing into a personal account. Identity beats network anonymity every time.
- Resizing the Tor Browser window — window dimensions are a fingerprinting signal, which is why it opens at a fixed size.
- Installing browser extensions in Tor Browser, each of which makes you more distinguishable.
- Assuming a connected VPN is a working VPN. DNS and WebRTC leaks are common and silent.
- Opening documents downloaded over Tor while online — they can fetch resources outside the tunnel.
How Tor Works
Tor (The Onion Router) routes your traffic through a volunteer-operated network of relays, adding a layer of encryption at each hop. The name "onion routing" comes from this layered encryption - Like the layers of an onion.
Entry node
Middle node
Exit node
- The entry (guard) node knows your IP but not your destination.
- The middle relay knows neither your IP nor your destination.
- The exit node knows the destination but not your real IP.
- No single node has the full picture - This is the key strength of Tor.
The Tor Browser also resists browser fingerprinting by standardising font rendering, window size, and other identifying properties.
Tor vs VPN – Detailed Comparison
| Feature | Tor | VPN |
|---|---|---|
| Anonymity level | Very High | High |
| Speed | Slow (3 hops) | Fast |
| Encryption | Multi-layer onion encryption | Strong (AES-256 / ChaCha20) |
| Centralized trust required | No – decentralised relays | Yes – VPN provider |
| Cost | Free | ~$3–12/month |
| Ease of use | Moderate | Easy |
| Suitable for streaming | No | Yes |
| Access .onion sites | Yes | No |
| Exit node can see unencrypted traffic | Yes (if no HTTPS) | No |
| Legal in most countries | Yes (but blocked in some) | Yes |
| Covers all device traffic | Browser only (Tor Browser) | Yes |
| Best for | Journalists, activists, high-risk anonymity | Everyday privacy, streaming, security |
When to Use Tor
- You are a journalist, whistleblower, or activist communicating in a high-risk environment - See the dark web guide for context.
- You need to access .onion hidden services.
- You require maximum anonymity and can tolerate slow speeds.
- You do not want to trust any single provider with your traffic.
- You are researching sensitive topics and need plausible deniability.
When to Use a VPN
- You want everyday privacy while browsing, streaming, or working remotely. Run a VPN leak test after connecting.
- Speed matters - For video calls, streaming, gaming, or file downloads.
- You need to protect all your device's traffic, not just the browser.
- You want to bypass geo-restrictions on streaming platforms.
- You are on public Wi-Fi and need to protect your data from eavesdroppers.
Using Tor Over VPN
Some privacy-conscious users combine both: connect to a VPN first, then use the Tor Browser. This hides your Tor usage from your ISP and prevents the entry node from seeing your real IP address. The trade-off is reduced speed.
Our Recommendation
For most people, a reputable VPN provides the right balance of privacy and usability. Use Tor when you have a specific, high-stakes reason to need its level of anonymity - Such as journalism or activism in repressive environments.
How to set up and use Tor Browser → | See our Best VPNs recommendations →
Important Limitations
Tor Limitations
- Exit nodes can read unencrypted traffic - Always use HTTPS when on Tor.
- Some websites actively block Tor exit node IPs. Check your IP status with the blacklist checker.
- Tor is blocked or heavily monitored in some countries (use Tor bridges in those cases).
- Browser-level only - Non-browser apps still use your real IP.
VPN Limitations
- You must trust your VPN provider - Choose one with a verified no-logs policy.
- WebRTC leaks in browsers can expose your real IP even with a VPN active.
- VPN provider can be subpoenaed by law enforcement - See can police track an IP address.