VPN vs Tor: who you're actually trusting

A VPN and Tor both stop a website from seeing your real IP address. That is where the resemblance ends. A VPN moves your trust to one company. You pay it, and its jurisdiction, its audits, and its logging policy are what that payment actually buys. Tor removes the single point of trust instead. It routes you through three volunteer-run relays. By design — per the Tor Project’s own explanation of how the network works — “each relay along the way knows only which relay gave it data and which relay it is giving data to.” No operator ever holds both your identity and your destination. That split costs a VPN provider an audit trail. It costs Tor your connection speed. For how the VPN side works mechanically, see what a VPN is and how it works — everything below is about who is holding the risk.

VPN vs Tor, by what decides the trust (Tor Project documentation and our provider dataset, as of 28 Jul 2026)

	A VPN	Tor
Who operates it	One company you choose and pay	Thousands of volunteer relays, coordinated by the nonprofit Tor Project
What it costs	A subscription — from $2.03/mo on a long term to $16.45 on rolling monthly billing, across the eight providers ranked here (23 Jul 2026)	Free — the Tor Project has been a 501(c)(3) nonprofit since 2006
Hops your traffic makes	1 — your device to the VPN server	3 — guard, middle, and exit relay
Who can see both your identity and destination	The VPN provider, if it chooses to	No single relay — each one knows only the hop before and after it
What proves the no-logging promise	An independent audit, if the provider commissions and publishes one	Nothing to audit — no operator holds a full picture to promise away
Typical speed cost	Roughly 10-20% on a well-run paid service	Far more — shared 3-hop routing serves over a million daily users on just over 6,000 relays
What it covers once connected	Every app and background process on the device	Whatever you route through it — Tor Browser, by default

What each one actually hides, and why only a VPN needs an audit

A VPN server sees your real IP address arrive and your destination leave, every time. Reading both is what makes the tunnel work. The provider then promises not to keep a record of the match — a promise you cannot check by using the product, only by checking who has looked at its systems and what they found. Mullvad’s most recent infrastructure audit, a Cure53 engagement completed in June 2024 and scoped to “anything that would impact privacy,” found no way to compromise a user’s traffic anonymity; see our Mullvad review for the rest of its privacy record. Proton VPN has the longer paper trail: Securitum completed its fifth consecutive annual no-logs audit in 2026, and the full report is published openly alongside the 2022 to 2025 ones. Our Proton VPN review covers what else that buys you. The limits of that evidence — what an audit can and cannot establish — are set out in our guide to no-log VPN audits, and the most private VPN ranking scores all eight providers against it.

Tor has no equivalent audit because it has no equivalent single point to check. Per Tor’s own relay documentation, the guard relay that opens your connection sees your real IP address but never learns where you’re headed. The exit relay does the opposite: “the services Tor clients are connecting to… will see the IP address of the exit relay instead of the real IP address of the Tor user.” It learns your destination and never your identity. A relay operator would need to control both your guard and your exit relay in the same circuit to see the full picture. Tor’s own overview states plainly that its design means “neither an eavesdropper nor a compromised relay can use traffic analysis to link the connection’s source and destination.” No customer list and no traffic log sits with one company, so there’s nothing equivalent to a no-logs audit to run.

How much slower is Tor, actually?

By Tor’s own numbers, “the Tor network has over a million daily users, and just over 6,000 relays to route all of their traffic.” That’s three encrypted hops, shared across a network sized in the low thousands of machines. A VPN gives you one hop, on a server the provider is paid to keep fast. Tor’s own speed page still says that for ordinary browsing “you may not actually notice any change in speed from other browsers” — a fair claim for reading a page, a harder one for anything that needs sustained throughput. For scale, our guide to VPN speed loss puts a premium paid VPN’s typical cost at roughly 10-20% of a connection. That single, paid-for hop has a real, bounded ceiling. Tor has no equivalent guarantee, because no one is paid to keep any particular relay fast.

Tor over VPN vs VPN over Tor: the ordering that gets misnamed

Who sees what, by setup (Tor Project support and vendor pages, as of 28 Jul 2026)

	Tor alone	VPN, then Tor	Tor, then VPN
Your ISP sees	Tor use	VPN use only — Tor is hidden from it	Tor use
The VPN sees	—	Your real IP address, heading into Tor	The Tor exit relay's IP, not yours
The guard relay sees	Your real IP address	The VPN server's IP, not yours	Your real IP address
The exit relay sees	Your destination, not you	Your destination, not you	The VPN server, not your final site
How you get it	Tor Browser alone	Connect the VPN, then open Tor — or a built-in feature	Route the VPN client through Tor first

Vendors cannot agree on what to call the two orders, which is exactly why the labels trip people up. One order connects a VPN first and lets Tor run on top of it. NordVPN brands that “Onion Over VPN.” Proton VPN brands the identical order “Tor over VPN.” Both route your device to their VPN server first and into the Tor network second, per each provider’s own support pages. Neither requires installing Tor Browser. The reverse order — joining Tor first, then routing that circuit’s traffic through a VPN server — hides which VPN you use from your ISP, since that connection happens inside Tor’s own encryption. Your ISP still sees the Tor connection itself. Consumer VPN clients aren’t built to run behind Tor’s SOCKS connection, and it’s not a feature either provider ships. The Tor Project’s own guidance for combining the tools at all is blunt: “we don’t recommend using a VPN with Tor unless you’re an advanced user who knows how to configure both in a way that doesn’t compromise your privacy.” For most people, picking the one tool whose trust model fits the job beats stacking both.

Exit-node risk, and why HTTPS still matters

The table above shows the exit relay learning your destination. What it can also read depends on you, not Tor. An exit relay decrypts Tor’s own encryption and forwards whatever is left in the clear. In May and June 2020, the Tor Project found and removed two separate groups of malicious exit relays running sslstrip attacks. One controlled roughly 23% of the network’s exit capacity at its peak; the other, roughly 19%. Both blocked the redirect from a cryptocurrency exchange’s HTTP page to its HTTPS one, so a visitor who didn’t notice the missing padlock sent account details straight to the attacker. HTTPS is what makes that attack fail: the exit relay still learns which site you visited, but the payload itself stays encrypted end to end, unreadable at the exit. Destinations reachable as onion services skip the risk a different way. The Tor Project states that “all traffic between Tor users and onion services is end-to-end encrypted, so you do not need to worry about connecting over HTTPS,” because that traffic reaches its destination entirely inside the Tor network, without ever passing through an exit relay.

When Tor is the wrong tool

The Tor Project’s own guidance names the activity it most wants people to avoid: BitTorrent. “Most torrent clients reveal your real IP address to peers, which can deanonymize you even if you’re connected through Tor.” The same traffic also creates “unnecessary load and potential legal issues on volunteer exit relay operators.” Streaming runs into the same ceiling covered above — a catalog that needs sustained throughput will buffer on a network built for anonymity, not bandwidth. Both are exactly the job a VPN is built for. Our best VPN for torrenting ranking exists because one well-resourced server beats three volunteer relays whenever speed is the point.

When a VPN isn’t enough

A VPN’s entire defense is a promise from one company. That promise ends wherever the company can be compelled to answer — a court order, a raid, a data-retention law. An audit and a jurisdiction narrow that risk; neither removes it, because both describe a company that still exists and can still be reached. Someone whose threat model includes a government able to compel a company, not just watch a network, needs Tor’s structure instead. Per the Tor Project’s own description, no single relay can link who someone is to what they’re doing, because no relay was ever handed both pieces to begin with.

Choose a VPN if

• You want one flat monthly cost and speed close to your normal connection.
• You’re protecting everyday browsing, streaming, or public Wi-Fi traffic — not resisting a state-level adversary.
• You’d rather check an audit and a jurisdiction once than add three hops to every page load.
• You want every app on the device covered, not just what you route through one browser.

Choose Tor if

• No single party seeing both your identity and your destination matters more than speed.
• Free, volunteer-run infrastructure is an acceptable trade for not paying anyone.
• You’re circumventing censorship or reporting somewhere a VPN subscription itself would be a liability.
• You can live with slower, occasionally broken browsing — CAPTCHAs and blocked logins included — as the cost of splitting the trust.

Frequently asked questions

What is the difference between a VPN and Tor?

A VPN sends your traffic through one company's server, which sees your real IP address and your destination and promises not to log the match. Tor sends it through three volunteer relays in sequence, built so no single relay ever sees both your identity and where you're going.

Is Tor safer than a VPN?

They protect against different risks. Tor's split-trust design removes the need to trust any single operator, which is stronger against a determined, well-resourced adversary. A VPN protects your everyday traffic from your ISP and local networks at real speed, but you're trusting one company's audits and jurisdiction to hold up.

Does Tor hide your IP address the same way a VPN does?

Both replace the IP address a destination sees, but differently. A VPN swaps it for the VPN server's address at one hop. Tor swaps it for the exit relay's address after three hops, and unlike a VPN, no single relay in that chain ever has your real IP address and your destination together.

Is Tor slower than a VPN?

Yes. Tor's own numbers put the network at over a million daily users sharing just over 6,000 volunteer-run relays across three hops per connection. A VPN's one hop, run on a server the provider is paid to keep fast, typically costs a paid service only around 10-20% of your normal speed.

Can you use a VPN and Tor together?

Yes, but the Tor Project itself doesn't recommend it unless you know how to configure both without weakening your privacy. Connecting a VPN first and then Tor — what NordVPN calls Onion Over VPN and Proton VPN calls Tor over VPN — is the version vendors actually ship; the reverse order isn't something consumer VPN apps are built to do.

Does Tor encrypt all your traffic like a VPN does?

No. A VPN encrypts everything the device sends once connected. Tor Browser only protects traffic that goes through Tor itself — another browser, an email client, or a background app on the same device connects the normal way, unprotected, unless you separately route it through Tor.

Is Tor legal?

Using Tor is legal in most countries, including the US — it's privacy software, not evidence of a crime. What you do over the connection can still be illegal, the same as it would be over a VPN or the open internet. A handful of countries restrict or block anonymity tools outright, so the rule is local, not universal.

Can websites block Tor or a VPN?

Yes, both. Sites can detect and block known Tor exit-relay addresses and VPN server IP ranges, which is one reason some services show CAPTCHAs or refuse connections from either. Blocking is a per-site decision, not something either Tor or a VPN can fully prevent on its own.