Guide
Tor vs VPN
Tor hides your identity behind three relays; a VPN hides your IP behind one company's server. Compare the models and pick the right tool.
Both Tor and a VPN change the address the internet sees, and both are used for privacy. Beyond that, they are different machines with different trust models — and picking the right one comes down to what you are defending against.
How Tor works
Tor routes your traffic through three volunteer relays chosen at random: an entry node, a middle node and an exit node. Each layer peels off one hop of encryption (hence "onion routing"), so no single relay knows both who you are and where you are going. The exit node sends the request to the destination from its own address, which is why Tor exit addresses appear in reputation databases and are frequently blocked.
Crucially, Tor Browser also normalises your fingerprint — window size, fonts, canvas behaviour, timezone — so users look alike. A VPN does not do that at all.
How a VPN works
A VPN is one company's server acting as your exit. It sees the address you came from and everything you send — unless the destination is HTTPS, which almost everything is. You are trusting the provider not to log, and their published audit is the evidence you have. The mechanics are covered in how a VPN works.
Side by side
| Tor | VPN | |
|---|---|---|
| Who can link you to your traffic | A relay would need to collude with others; a global adversary can watch traffic patterns | The provider, if it logs |
| Speed | Slow — often 1–10 Mbps, higher latency | Near line rate on a nearby server |
| Fingerprint resistance | Yes, in Tor Browser | None |
| Works for every app | No — Tor Browser and apps that can be proxied | Yes, the whole device |
| Streaming and captchas | Often blocked, captcha-heavy | Usually fine, some streaming blocks |
| Mobile experience | Orbot; slower | One-tap apps |
| Cost and trust | Free, decentralised, audited design | Paid, centralised, audited providers |
Can you combine them?
Technically yes, and the order matters:
- VPN → Tor (VPN first, then Tor Browser): your ISP and the Tor entry node see the VPN, hiding that you use Tor. A common choice where Tor is blocked or its use is sensitive. It slows things further and, if the VPN logs, weakens the anonymity against that provider.
- Tor → VPN (Tor Browser, then a VPN inside it): rare, and mostly avoids exit-node blocking, at the cost of trusting the VPN with traffic that Tor was already anonymising.
For ordinary privacy, stacking them buys little and costs speed. Pick one model and understand its limits.
Which should you use?
- Everyday privacy, streaming, public Wi-Fi, gaming, geo-testing: a VPN — fast, device-wide and sufficient against your ISP and local network.
- Strong anonymity, censorship circumvention, sensitive research: Tor — free and designed for exactly that threat model, including a country-level adversary.
- Hiding from a specific platform while logged in: neither. Use separate accounts and browsers — see what incognito does and does not do.
- Verifying any of the above: check both rows and the leak tests with is my VPN working; Tor exits and VPN datacentres have distinct, visible signatures — see datacenter IPs.
Bottom line: a VPN changes your exit and trusts one company; Tor hides who you are from every hop and pays for it in speed. Most people want the first; anyone whose safety depends on anonymity wants the second — and both are legal in most of the world, though a few states restrict Tor or VPNs, so check local rules.
Frequently asked questions
Is Tor better than a VPN?
For anonymity, yes — no single hop can link you to your traffic the way a single provider could. For speed, streaming and everyday device-wide protection, a VPN is far more practical.
Should I use Tor with a VPN?
Only if you have a specific reason, such as Tor being blocked locally. VPN-then-Tor hides Tor use from your ISP; the extra hop costs speed and adds a trust dependency, so do it deliberately.
Why is Tor so slow?
Three relays on volunteer bandwidth, deliberately overlapping encryption, and a fixed circuit make latency high and throughput low — that design is what provides the anonymity. Never use a browser extension to speed Tor up; it usually breaks the protections.
Keep reading
- Proxy vs VPN
- Does a VPN slow down your internet?
- How does a VPN work?
- How to check if your VPN actually works
- MAC address vs IP address
- Static vs dynamic public IP
- IPv4 vs IPv6
- Public vs private IP addresses
- What is a DNS server?
- Are free VPNs safe?
- What is port forwarding?
- What is a proxy server?
- Browse all IP guides
- Check my public IP address
Check any other IP address
Investigating a suspicious login, a spam email header or a server log entry? Run any IPv4 or IPv6 address through the same geolocation and proxy checks.