Summarise this article with:
Use a VPN for everyday privacy. Use Tor when you need anonymity that no single party can break. If your threat is your ISP logging your browsing or a coffee shop seeing your passwords, a VPN solves it. If your threat is a well-resourced adversary that could compel your VPN provider to hand over data, only Tor's distributed model protects you.
The rest of this post walks through the mechanics, the real-world speed cost, and a use-case matrix so you can pick the right tool without guesswork.
How Each Tool Actually Works
A VPN routes all your traffic through one server you trust. Your ISP sees an encrypted tunnel to a VPN server and nothing else. Websites see the VPN server's IP, not yours. The VPN provider, however, sees everything. You are trading ISP visibility for provider visibility.
Tor routes your traffic through three volunteer-run relays using layered encryption (onion routing). Your traffic is wrapped in three encryption layers before it leaves your device. The first relay (guard node) knows your IP but not your destination. The middle relay knows neither. The exit relay knows the destination but not you. No single relay ever holds the full picture.
This compartmentalized design means there is no single party to compel, subpoena, or hack to unmask you, which is the core difference.
The Speed Reality
Tor's anonymity comes at a measurable cost. Because your traffic bounces through three volunteer relays, often in different countries, latency climbs and throughput drops. In independent speed tests, Tor typically delivers 1-10 Mbps download and latency of 250-400 ms to servers that might normally be 20 ms away. VPNs on good servers add modest overhead, typically 20-50 ms extra latency with bandwidth in the hundreds of Mbps.
In my testing, Tor is perfectly usable for reading articles and loading static pages. Streaming video is nearly impossible. Video calls are impractical. File downloads that would take seconds take minutes.
This is not a bug; it is the structural cost of routing through many volunteer machines instead of one commercial server.
Use-Case Decision Matrix
The right tool depends on what you are defending against:
| Threat | VPN | Tor |
|---|---|---|
| ISP sees your browsing | Yes, hidden | Yes, hidden |
| Public Wi-Fi snooping | Yes, encrypted | Yes, encrypted |
| Website IP tracking | Yes, masked | Yes, masked |
| Streaming geo-blocks | Yes | No (too slow) |
| VPN provider compelled to log | No | Yes (no single party) |
| Government traffic correlation | No | Partial (varies) |
| Browser fingerprinting | No | Yes (standardized) |
| Accessing .onion sites | No | Yes |
| Casual daily browsing speed | Fast | Slow |
The honest summary: VPN is the right default for 95 percent of users. Tor is the right tool for the cases where VPN's "single point of trust" is the specific weakness you need to defend.
What VPN Protects Against
A reputable paid VPN protects you from:
- Your ISP seeing which sites you visit and selling that data
- Public Wi-Fi packet sniffers at cafes, airports, and hotels
- Websites logging your real IP address across sessions
- Geo-restrictions on streaming services
- Basic IP-based DDoS targeting in gaming contexts
The key limitation: the VPN provider sees your traffic. Reputable providers like Mullvad and ProtonVPN have independently audited no-logs policies. ProtonVPN completed its fifth annual external audit in August 2025, confirming no user activity or connection metadata is logged. Audits reduce risk but cannot fully eliminate it. You are trusting the provider and the legal jurisdiction it operates under.
For a deeper look at how VPN services compare, see our VPN services guide.
What Tor Protects Against
Tor protects against everything VPN does, plus:
- The provider itself. No relay in the Tor circuit knows both who you are and where you are going, so there is no single party that can be compelled to unmask you.
- Browser fingerprinting. Tor Browser deliberately standardizes the signals sites use to fingerprint you: screen dimensions are rounded to coarse buckets, all Windows installs report as Windows 10, all macOS as 10.15, and canvas or WebGL reads are blocked. Every Tor user looks similar, not unique.
- Long-term IP correlation. Each Tor session builds a fresh circuit with different exit IPs.
Important limits. Tor exit nodes can see your traffic if it is unencrypted HTTP. A portion of exit nodes have historically been operated by adversarial actors attempting SSL-stripping attacks against cryptocurrency sites and other targets. Always use HTTPS when on Tor. Tor Browser 11.5 and later enables HTTPS-Only mode by default, which substantially reduces this risk.
Check your current browser fingerprint exposure at WhatIsMyLocation's fingerprint tool.
When to Use Both: Tor Over VPN
You can connect to a VPN first and then open Tor Browser. The VPN hides from your ISP the fact that you are using Tor at all. Your guard node sees the VPN server IP instead of your home IP.
This configuration is called "Tor over VPN" and is the more practical of the two combination approaches. It is worth doing if:
- Tor is restricted or monitored in your country (China, Russia, Iran)
- You want to hide your Tor usage from a network-level observer
- Your entry guard being compromised is a concern
The reverse configuration, "VPN over Tor," sends traffic through Tor and exits through a VPN server. It defeats Tor exit node snooping but is significantly harder to set up and only a few VPN providers support it.
Neither configuration is needed for most users. The speed penalty of Tor alone is already steep; stacking both makes Tor even slower.
Common Mistakes to Avoid
Logging into personal accounts on Tor. If you sign into Gmail through Tor, Google knows who you are from your credentials. The IP no longer matters. Keep Tor sessions separate from accounts tied to your real identity.
Using Tor for everything. Tor's latency makes it impractical for video calls, large downloads, or interactive apps. Use a VPN for daily browsing and reserve Tor for specific high-stakes activities.
Skipping HTTPS on Tor. Exit nodes can see plaintext HTTP traffic. Stick to HTTPS-only sites, which Tor Browser now enforces by default.
Mixing identities in one Tor session. If you log into a personal account and an anonymous account in the same Tor browser session, you have linked them. Use separate sessions, or use Tails OS if identity separation is critical.
Trusting "free VPNs" for privacy. Free VPNs typically monetize through data collection, which defeats the purpose. See our free VPN guide for options that are genuinely trustworthy.
Tor on Mobile
Android: The Tor Project publishes an official Tor Browser for Android, available from their site and the Play Store.
iOS: A full Tor Browser is not available because Apple's platform restrictions prevent running Tor as a subprocess. The Tor Project recommends Onion Browser and Orbot for iOS, both open-source and developed in close collaboration with the Tor Project.
Neither mobile implementation matches the fingerprinting protections of the desktop Tor Browser, because iOS and Android browsers expose platform signals that desktop Tor normalizes. Treat mobile Tor as better than nothing, not equivalent to desktop.
Checking Your Current Exposure
Whatever tool you use, it is worth verifying what a website actually sees. Check your current IP and location at WhatIsMyLocation's IP tool, run a VPN leak test to confirm your VPN is not leaking your real IP through WebRTC or DNS, and check your DNS leak status separately since some VPNs route DNS outside the tunnel.
If you are using Tor, your browser fingerprint should show a standardized profile consistent with other Tor users.
FAQ
Is Tor legal to use?
Tor is legal in most countries, including the United States and the European Union. Several authoritarian governments restrict or block it, including China, Russia, and Iran, where connecting to known Tor relays may be detected and penalized. In those countries, Tor bridges with pluggable transports like obfs4 can disguise Tor traffic as ordinary encrypted traffic, reducing detection risk, though not eliminating it entirely against resourceful adversaries.
Will my ISP know I am using Tor?
By default, yes. Your ISP can see you are connecting to known Tor guard relay addresses, though they cannot see your actual traffic or destination. To hide Tor usage from your ISP, use Tor bridges with pluggable transports, or connect through a VPN first (Tor over VPN). Bridges replace the public guard relay with an unlisted address, and obfs4 makes the traffic pattern look like random bytes rather than Tor.
Can I use Tor and a VPN at the same time?
Yes, and the order matters. "Tor over VPN" means you connect to a VPN first, then open Tor Browser. This hides from your ISP that you are using Tor and hides your home IP from the Tor entry relay. "VPN over Tor" means connecting to Tor first, then a VPN. This hides Tor usage from destination websites and defeats exit-node snooping, but is far harder to configure and slower. For most users, Tor over VPN is the practical option if you need both.
Does Tor protect against browser fingerprinting?
Yes, more than any other mainstream browser. Tor Browser standardizes screen dimensions, operating system version, font metrics, and canvas outputs so all Tor users appear similar rather than unique. It blocks WebGL and canvas reads that are common fingerprinting vectors. Remaining gaps exist: WebGL is not perfectly normalized in all configurations, and traffic-analysis attacks that operate at the network level rather than the browser level are outside Tor Browser's defense scope.
Is the dark web dangerous to access through Tor?
The Tor network itself is not dangerous. Specific sites you visit can be. Legitimate .onion services exist for privacy-respecting purposes, including DuckDuckGo, ProPublica, and the BBC's uncensored news service. Avoiding unverified marketplaces, download sites, and unfamiliar links is the same common-sense practice that applies to the regular web, with higher stakes because .onion sites have fewer public reputation signals. Using HTTPS-Only mode (on by default in current Tor Browser) mitigates the largest technical risk from malicious exit nodes.
Sources
WhatIsMyLocation Team
Our team of network engineers and web developers builds and maintains 25+ free networking and location tools used by thousands of users every month. Every article is reviewed for technical accuracy using real-world testing with our own tools.
Related Articles
Try Our Location Tools
Find your IP address, GPS coordinates, and more with our free tools.