What is Tor Browser?

Tor Browser is a privacy-focused web browser from the Tor Project. It is based on Mozilla Firefox ESR (Extended Support Release), heavily modified to resist tracking and browser fingerprinting.

Tor Browser routes all your web traffic through the Tor network, a distributed system of volunteer-run relays around the world, before it reaches the website you are visiting. Tor Metrics counted about 8,900 relays in October 2026. Each request bounces through three relays, and each relay only knows the previous and the next hop. The result: no single party can see both who you are and what you are doing.

Tor Browser gives stronger browsing privacy than a VPN, resists most fingerprinting techniques and is free to use. But it has trade-offs: it is slower, some sites block it, and you need to understand what it does and does not protect. By default it keeps no browsing history, and cookies last only for one session.

How does Tor Browser privacy work?

Tor uses onion routing: your data is wrapped in three layers of encryption, and each relay removes one layer. The name Tor comes from "The Onion Router".

  1. Guard (entry) relay: sees your IP address, but only encrypted Tor traffic. It does not know which site you visit. Your guard stays the same for 2–3 months to protect against a known attack.
  2. Middle relay: knows only the guard and the exit relay.
  3. Exit relay: sends your request to the website. It knows the destination, but not who sent it.

The website sees a connection from the exit relay, not from you. Tor Browser also uses separate circuits for different sites in the URL bar. If two sites load the same third-party tracker, the tracker sees two different Tor circuits and cannot tell that both visits come from your browser.

WhoSees your IP addressSees the site you visit
Your ISP or Wi-Fi ownerYesNo (only that you use Tor)
Guard relayYesNo
Middle relayNoNo
Exit relayNoYes (content only if not HTTPS)
WebsiteNo (sees exit relay)Yes

What does Tor Browser protect against?

Tor Browser protects against IP tracking, local traffic monitoring, most fingerprinting and cross-site tracking.

  • IP tracking: your real IP address is never revealed to the websites you visit.
  • Browser fingerprinting: Tor Browser standardises many fingerprint values, such as canvas, fonts, screen size and User-Agent, so users fall into a few large groups. The Tor Project itself says users are "nearly identical", not fully identical.
  • Traffic analysis by your ISP: your ISP, and anyone on your local network, cannot see which sites you visit or what you do. They only see that you connect to Tor.
  • DNS leaks: Tor Browser sends its DNS lookups through the Tor network instead of your ISP's resolver. You can confirm this with a DNS leak test.
  • Censorship: Tor helps reach sites blocked in your region. Where Tor itself is blocked, bridges (unlisted entry relays) help.

What does Tor Browser NOT protect against?

Tor Browser hides your location, not your identity. Your own actions can still reveal you.

  • Account logins: logging into a real account immediately identifies you to that site, regardless of Tor. The same applies to names, email addresses or phone numbers you enter in web forms.
  • Exit node surveillance: the exit relay can see unencrypted traffic. Always use HTTPS with Tor. Tor Browser includes HTTPS-Only Mode for this.
  • Malicious browser plugins and add-ons: plugins can reveal your real IP address. Extra add-ons can also make your fingerprint unique, so the Tor Project strongly discourages them.
  • Downloaded documents: DOC or PDF files opened in another program can load internet resources outside Tor and reveal your real IP address.
  • Other apps: Tor Browser protects only its own traffic. Your mail client, games and system updates still use your normal connection.
  • Torrents: torrent software can ignore proxy settings and send your real IP address.

How do you use Tor Browser safely?

Download it only from the official Tor Project website, keep it updated and change as few settings as possible.

  1. Download from torproject.org and, if you can, verify the file's signature.
  2. Keep HTTPS-Only Mode on and check for https:// or an onion icon before you send sensitive data.
  3. Pick a security level. "Standard" keeps all site features. "Safer" disables JavaScript on non-HTTPS sites and makes audio and video click-to-play. "Safest" disables JavaScript on all sites.
  4. Do not install extra add-ons, not even ad blockers like uBlock Origin.
  5. Keep the default window size. Tor Browser uses letterboxing so your screen size does not single you out.
  6. Use "New Identity" when you want a fresh session that cannot be linked to the previous one.
  7. Do not mix identities: do not log in to your personal accounts in the same session as anonymous research.
  8. Open downloaded files offline or in a safe viewer.

Tor Browser vs private browsing: what is the difference?

Private browsing, such as incognito mode in Chrome or private windows in Firefox, only deletes local data like cookies and history when you close the window. It does not hide your IP address, your browsing from your ISP or your fingerprint.

Tor Browser also forgets your session when you close it, and on top of that it hides your IP address, your browsing habits and many device details that trackers use for fingerprinting. Private browsing protects you from other people who use the same computer. Tor Browser protects you from observers on the network and from the websites themselves.

How do bridges help when Tor is blocked?

Bridges are Tor relays that are not listed publicly, so they are harder to block. If your network or country blocks Tor, open "Configure Connection" in Tor Browser and add bridge addresses in the "Bridges" section. On Android, the same option is under "Config Bridge". If a bridge stops working, request new bridge addresses and try again.

Is Tor Browser safe to use?

Yes, for most people Tor Browser is safe, as long as you follow the rules above. The Tor Project itself says perfect anonymity is impossible, even with Tor. The main risks are user mistakes, outdated versions and unencrypted traffic past the exit relay. Websites can always detect that a connection comes from Tor, and some banks or shops block Tor exit relays or lock accounts after a login from an unusual country.

Tor and the dark web: what are onion services?

Onion services are websites that are only reachable through Tor. Their addresses consist of 56 letters and numbers followed by ".onion". The location and IP address of an onion service are hidden, and all traffic between you and the service is end-to-end encrypted inside Tor. Some news sites and privacy services offer an onion version. Some websites advertise their onion address with an "Onion-Location" header, and Tor Browser then shows ".onion available" in the URL bar.

When to use Tor vs VPN?

Use Tor for maximum anonymity, such as journalism, research and accessing onion sites. Use a VPN for everyday privacy and speed.

Tor BrowserVPN
Who must you trust?No single relay knows both endsThe VPN provider sees who you are and where you go
Fingerprint protectionBuilt inNone
Covers all appsNo, only the browserYes
SpeedSlower (multi-hop routing)Close to normal
CostFreeUsually paid

Tor is significantly slower than a VPN because of the multi-hop routing through volunteer relays. The Tor Project does not recommend combining Tor with a VPN unless you are an advanced user who knows how to configure both safely. Most users benefit from running Brave for everyday tasks and Tor Browser separately for sensitive research. Our Brave vs Firefox vs Tor comparison shows the differences, and the WireGuard vs OpenVPN guide covers VPN protocols.

How can you check that Tor Browser is working?

The SpeedIQ privacy check includes a Tor check. It asks check.torproject.org whether your current IP address is a Tor exit relay, and it shows the IP address and network (ASN) that websites see. In the same run you see your WebRTC, IPv6 and fingerprint values, such as the Canvas hash, screen size and timezone. The results stay in your browser. Run the SpeedIQ test in Tor Browser and in your normal browser to compare. For the full list of checks, see our online privacy check guide and the guide on browser fingerprinting.

FAQ

Does Tor Browser hide my IP address?

Yes. Websites see the IP address of the Tor exit relay, not yours. Your ISP still sees that you connect to the Tor network.

Can my ISP see what I do in Tor Browser?

No. Your ISP sees encrypted traffic to a Tor relay, but not the sites you visit or what you do there.

Is Tor Browser better than a VPN for privacy?

For anonymous browsing, yes: no single relay knows both who you are and where you go, and Tor Browser resists fingerprinting. A VPN is faster and protects all apps, but you must trust the provider.

Should I install an ad blocker in Tor Browser?

No. The Tor Project strongly discourages extra add-ons, because they can make your fingerprint unique and harm your anonymity.

Why do some websites block Tor Browser?

The list of Tor exit relays is public, so websites can always detect Tor connections. Some block them to fight abuse or fraud.

Sources