How Tor works
For a normal web connection, a Tor client builds a circuit through three volunteer relays: a guard, a middle relay and an exit relay. The client wraps traffic in encryption layers. Each relay removes one layer and learns only enough to pass the traffic to the next hop. The website sees the exit relay’s IP address, not yours.
You → guard relay → middle relay → exit relay → example.comTor is the network. Tor Browser is a browser configured to use that network, route hostname lookups through it and limit common data leaks. Connections to .onion services stay within Tor and don’t use an exit relay.
Tor vs a proxy
Tor software often exposes a local SOCKS interface, but the route behind it has several hops. A typical proxy server forwards your connection through one intermediary.
| Tor | Typical proxy | |
|---|---|---|
| Path | Usually three relays | Usually one intermediary |
| Trust model | No relay normally sees both ends | Operator can associate source and target |
| Exit IPs | Public relays with limited selection | Fixed or pooled; location control varies |
| Best fit | Privacy browsing and onion services | Controlled exit IPs and app workflows |
Tor prioritizes separation between your identity and destination. Proxies usually prioritize predictable IP selection, location control or application traffic.
What Tor does and doesn’t protect
- Routed traffic: Only connections sent through Tor are protected. An app using a direct connection can reveal your source IP.
- Content: HTTPS keeps page contents encrypted to the website. An exit relay can read or alter ordinary HTTP traffic.
- Identity signals: Cookies, account logins and browser fingerprinting can still identify or link you.
- Tor detection: Exit addresses are public. Websites may show a CAPTCHA or return 403 Forbidden when they detect one.
- Traffic analysis: An observer able to monitor both ends may correlate timing and traffic volume. Tor isn’t a guarantee of anonymity.
Using Tor responsibly
Use a current Tor Browser release for web browsing rather than configuring an unfamiliar browser yourself. Don’t add extensions or change privacy settings without understanding how they affect fingerprinting. Use HTTPS and avoid signing into identifying accounts when anonymity is your goal.
Don’t use the volunteer network for bulk crawling. Follow site terms, respect robots.txt and keep request rates low.
FAQ
Is Tor the same as a VPN?
No. A VPN sends traffic through one provider-operated gateway, while Tor normally separates the route across several independently operated relays.
Does Tor completely hide my IP address?
No. It hides your source IP from destinations for traffic routed through Tor. Direct app connections, downloads opened in unsafe software or other leaks can still expose it.
Is Tor legal to use?
It depends on local law, but Tor is legal in many countries. Some networks and jurisdictions restrict access, and using Tor doesn’t make prohibited activity lawful.