Here’s an uncomfortable fact about the internet you’re using right now: your Internet Service Provider (ISP) can see every website you visit. Not just the domains — they can see how long you spent there, what pages you loaded, and in some cases, what you downloaded.
Tor fixes that. It doesn’t just hide your activity — it makes it practically impossible for anyone watching your connection to know where you’re going or what you’re doing.
I’ll explain how it works in plain language, define all the jargon, and help you understand whether Tor is something you actually need.
- Tor = The Onion Router. Free, open-source software for anonymous communication
- How it works: Your data gets encrypted in three layers and bounced through three volunteer-run servers (relays). Each relay peels off one layer, like an onion
- What it’s good for: Privacy from ISPs, bypassing censorship, protecting communications in hostile environments
- What it’s NOT: A magic “make me invisible” button. Tor has limits — speed, some sites block it, and it won’t protect you from bad habits
- Current version: Tor Browser 15.0.14 (May 2026), based on Firefox 140 ESR
What Is Tor?
Tor — short for The Onion Router — is free software that anonymizes your internet traffic. It was originally developed by the US Naval Research Laboratory in the mid-1990s and is now maintained by the Tor Project, a non-profit organization.
The core idea is simple: instead of connecting to a website directly (which reveals your IP address to the site and the site’s address to your ISP), Tor routes your connection through three randomly selected servers around the world. Each server only knows the one before it and the one after it — no single server knows both where you are and where you’re going.
The name “onion” comes from how the encryption works. Your data is wrapped in three layers of encryption, one for each relay. As the data passes through each relay, one layer is peeled off, revealing routing instructions for the next hop.
How Tor Works (Simplified)
Here’s what happens when you visit a website using Tor:
| Step | What Happens | Who Sees What |
|---|---|---|
| You | You type a URL in Tor Browser | You know the destination |
| Entry Guard | Your encrypted data enters the Tor network through a guard node | Knows your IP, but not where you’re going |
| Middle Relay | Data bounces to a middle relay | Knows neither your IP nor the destination |
| Exit Relay | Data leaves the Tor network through an exit node | Knows the destination, but not your IP |
| Website | Your request arrives at the website | Sees the exit relay’s IP, not yours |
No single relay can connect you to your destination. An entry guard knows who you are but not where you’re going. An exit relay knows where you’re going but not who you are. That separation is the entire point.
A new circuit is created every 10 minutes for regular traffic, so different sites you visit appear to come from different exit relays, making it even harder to connect your activities.
Key Tor Terms Explained
Tor comes with a lot of jargon. Here’s every term you need to know, explained simply:
Node / Relay
Any server that participates in the Tor network. There are roughly 7,000 volunteer-run relays as of 2026.
Entry Guard (Guard Node)
The first relay your data touches. It sees your IP address. Entry guards are chosen carefully and stay the same for weeks to prevent certain kinds of attacks.
Middle Relay
The second hop. It receives data from the entry guard and forwards it to the exit relay. It has no idea who sent the data or where it’s going. Most relays in the network are middle relays.
Exit Relay (Exit Node)
The final relay. It decrypts the final layer of encryption and sends your request to the destination website. The website sees the exit relay’s IP, not yours.
Bridge
A private, unlisted relay used to bypass censorship. If Tor is blocked in your country, you can use a bridge to connect. Bridges are not publicly listed, so censors can’t block them by IP.
Pluggable Transport
Software that disguises Tor traffic to look like something else — like a video call (Snowflake), a random noise (obfs4), or a regular HTTPS connection to a normal website (WebTunnel).
Circuit
The path your data takes through the Tor network: Entry → Middle → Exit. Circuits are rebuilt every 10 minutes.
Onion Service (formerly Hidden Service)
A website that ends in .onion and can only be accessed through Tor. The server’s location is hidden, making it extremely difficult to take down.
Orbot
Tor for Android. A proxy app that routes other apps on your phone through the Tor network, not just your browser.
Tails
A complete operating system that forces all traffic through Tor and leaves no trace on the computer you run it on. Boot from a USB stick and nothing is saved.
Surface Web vs Deep Web vs Dark Web
These three terms get mixed up constantly. Here’s the actual difference:
| Layer | What It Is | How to Access | Size |
|---|---|---|---|
| Surface Web | Websites indexed by Google, Bing, DuckDuckGo — anything you can search for | Regular browser | ~4% of the internet |
| Deep Web | Content not indexed by search engines — your email inbox, bank account, private databases, Google Drive | Regular browser (login required) | ~90% of the internet |
| Dark Web | Websites intentionally hidden and accessible only through specific software | Tor Browser (.onion sites) | ~6% of the internet |
The dark web is a small slice of the deep web. And contrary to what movies show, most of it is mundane — forums, blogs, email services, and file sharing. The illegal stuff exists, but it’s a minority and it’s much harder to access than media suggests.
When people say they’re “accessing the dark web,” they usually mean they’re using Tor to browse .onion sites. That’s all.
What Is Orbot?
Orbot is a free app for Android (and now iOS) that acts as a Tor proxy for your entire phone. While Tor Browser only protects your web traffic inside that one app, Orbot routes traffic from any app — email clients, messaging apps, map apps — through the Tor network.
It works by creating a local VPN on your phone that all traffic passes through. You can configure which apps use Tor and which connect directly.
Orbot 17.9.4 (released May 2026) includes:
- Tor engine 0.4.9.8
- Shadowsocks proxy support for extra censorship circumvention
- Support for obfs4, Meek, and WebTunnel pluggable transports
- DNS tunneling for highly filtered locations
For a full guide on setting up Orbot, read Tor on Mobile: Using Orbot and Tor Browser.
Benefits of Using Tor
Privacy from Your ISP
Your internet provider cannot see which sites you visit, what you search, or how long you spend. They can see you’re using Tor, but nothing beyond that.
Bypassing Censorship
If your country blocks certain websites (news, social media, video platforms), Tor can get around those blocks using bridges and pluggable transports.
Anonymous Publishing
Whistleblowers, journalists, and activists use Tor to communicate safely. The Tor Project maintains onion services for SecureDrop, a tool used by news organizations to receive documents anonymously.
Protection from Data Collection
Websites and advertisers cannot track your real IP address. Each site sees a different exit relay’s IP, making it difficult to build a profile of your browsing.
No Central Point of Failure
The Tor network is decentralized. There’s no company to shut down, no server to raid, no single entity to compromise.
Disadvantages of Using Tor
Speed
Tor is slower than a regular connection. Your data bounces through three relays on different continents. Expect 2-10x slower speeds compared to direct connections. Don’t use Tor for streaming video or large downloads.
Some Sites Block Tor Exit Nodes
Many websites (including banks, streaming services, and some social media) block known Tor exit IPs. This is because exit relays are often abused for spam and other malicious activity. You may see CAPTCHAs or get blocked entirely.
Not Immune to Browser Fingerprinting
Tor Browser includes aggressive anti-fingerprinting measures, but determined adversaries can still identify users through less common methods. The “Safest” security level helps, but it breaks most modern websites.
Exit Node Can See Unencrypted Traffic
If you visit an HTTP site (not HTTPS), the exit relay can read your traffic. Always look for HTTPS. This is why you should never enter passwords or personal information over Tor without HTTPS.
Legal Suspicion
Using Tor can attract attention. In some countries, Tor use alone is enough to draw scrutiny. Even in free countries, Tor exit traffic is sometimes viewed with suspicion by authorities.
Doesn’t Protect Against All Threats
Tor cannot protect you from malware, phishing, or your own mistakes. If you download a malicious file or enter personal information into a fake site, Tor won’t save you.
Frequently Asked Questions
Is Tor illegal?
No. Using Tor is legal in most countries. A few countries (China, Iran, Russia, Belarus) actively block Tor, and using it can raise suspicion. Check your local laws.
Can I be tracked while using Tor?
A well-configured Tor setup makes tracking extremely difficult but not impossible. Advanced adversaries (governments, sophisticated attackers) with the ability to monitor both your entry and exit traffic might be able to correlate timing patterns.
Do I need a VPN with Tor?
The debate is ongoing. Generally, using a VPN before Tor can hide Tor usage from your ISP. Using Tor before a VPN can hide your Tor use from your exit node. But misconfigured setups can reduce anonymity. See the Tor vs VPN guide for details.
Is the dark web only used for crime?
No. The dark web hosts privacy-focused email services, whistleblowing platforms, forums for journalists, blogs in censored countries, and repositories for privacy tools. Crime exists, but it’s not the majority of activity.
Which Tor version should I use?
Download the latest stable version from torproject.org. As of May 2026, that is Tor Browser 15.0.14. The alpha channel (16.0a5) is available for testing.
What to Read Next
- How to Install Tor Browser Step by Step — Download, install, and configure Tor on Windows, macOS, Linux, and Android
- Tor vs VPN: Which One Do You Actually Need? — The differences, use cases, and whether you should use both together
- How to Stay Safe on the Dark Web — Security protocols, Tails OS, verifying .onion sites, and a pre-session checklist
Related Articles
Deepen your understanding with these curated continuations.
