Should you use Tor with a VPN? Explained simply
Tor and VPNs both hide your IP address, in different ways. When combining them helps, when it does not, and why Tor bridges are often the better choice today.
"Should I use a VPN with Tor?" was one of the most argued-about questions in 2014, and people still ask it. The short answer today: for most people, Tor on its own is the right choice. If you need to hide that you use Tor, use a Tor bridge first.
How each one works
- A VPN sends all your internet traffic through one company's server. Websites see the VPN's address instead of yours, and your internet provider only sees that you use a VPN. But the VPN company can see everything your provider used to see, so you must trust it.
- Tor sends your traffic through three volunteer servers, each knowing only part of the route. No single server knows both who you are and where you are going. You do not have to trust any one company.
Why VPN "no logs" promises matter
A VPN is only as private as its company. In 2011, a well-known VPN that advertised privacy handed customer records to authorities after a court order, and those records identified one of its users. Choose a VPN with a proven, audited no-logs policy, that you can pay for anonymously, like Mullvad or IVPN. See how to use a VPN.
The two ways to combine them
1. VPN first, then Tor ("Tor over VPN"): you connect to the VPN, then open Tor Browser.
- Your internet provider sees only the VPN, not that you are using Tor.
- The VPN company sees that you use Tor (but not what you do).
- It does not make Tor itself more anonymous, and adds a company you must trust.
2. Tor first, then a VPN ("VPN over Tor"): your traffic goes through Tor and then out through a VPN.
- Can help with websites that block Tor.
- Usually makes you less anonymous: the VPN account becomes a fixed identity linking all your activity. Not recommended for most people.
The better option: Tor bridges
If the reason you want a VPN is to hide that you are using Tor (for example on a network or in a country where Tor is watched or blocked), use a Tor bridge instead. Bridges are unlisted entry points, and pluggable transports like obfs4, Snowflake and WebTunnel disguise Tor traffic as something else.
- Tor Browser: Settings > Connection > Bridges, then choose a built-in bridge or request one.
- Tails: choose Hide to my local network that I'm connecting to Tor when connecting.
- Orbot on Android: choose a bridge in the connection settings.
Summary
- Everyday privacy: a trusted VPN is fine.
- Anonymity: Tor Browser or Tails, on its own.
- Tor is blocked or watched where you are: Tor with a bridge.
- Never sign in to personal accounts in the same Tor session as anonymous activity.
Comments
Loading comments…