Skip to content
Irregularpedia Logo Irregularpedia

Tor Network Guide

Tor Network Guide

Section titled “Tor Network Guide”

Tor (“The Onion Router”) anonymizes your traffic by routing it through three volunteer-run relays, each peeling one layer of encryption, so no single relay knows both who you are and what you’re doing. It’s the most widely used anonymity network — and also the most widely misused, because the network can be sound while your behavior gives you away.

Tor Browser

Section titled “Tor Browser”

For web browsing, use Tor Browser — don’t roll your own. It bundles Tor with a hardened Firefox that defeats browser fingerprinting by making every user look identical (uniform window size via letterboxing, one User-Agent, restricted fonts/canvas).

Onion services

Section titled “Onion services”

Onion services (.onion addresses, v3) let a server be reached through Tor without revealing its IP, with end-to-end encryption to the service built in. Benefits: the server’s location is hidden, the connection never leaves the Tor network (no exit-node exposure), and the address is self-authenticating (derived from the service’s public key). Many mainstream sites publish onion mirrors for censorship resistance.

Relays and bridges

Section titled “Relays and bridges”

Tor is run by volunteers; you can contribute:

  • Relay — donate bandwidth as a guard/middle relay (sees Tor traffic only) or an exit relay (traffic exits to the clearnet through your IP). Run exits only with legal/ISP awareness — abuse complaints land on you.
  • Bridge — an unlisted entry relay used by people in censored networks where the public relay list is blocked. Running a bridge (especially obfs4) is a low-risk, high-impact way to help; bridge traffic doesn’t exit through you. See Bypassing VPN Blocks for the censorship-circumvention context.

The Tor-over-VPN debate

Section titled “The Tor-over-VPN debate”

Two orderings, often confused:

SetupWhat it doesCaveat
Tor over VPN (you → VPN → Tor)Hides Tor use from your ISP; VPN sees you use Tor but not your trafficYou now trust the VPN; usually unnecessary
VPN over Tor (you → Tor → VPN)Exit appears as the VPN; can reach VPN-only servicesBreaks Tor’s anonymity model; advanced/rare

For almost everyone the right answer is plain Tor Browser, no VPN. Adding a VPN mostly shifts trust to the VPN provider without improving anonymity. Use Tor-over-VPN only for the narrow goal of hiding that you use Tor from a hostile local network — and prefer a bridge for that instead.

Common misuses that deanonymize you

Section titled “Common misuses that deanonymize you”

The network protects the transport; these defeat it anyway:

  • Logging into real-name accounts (email, social) over Tor — instantly links the session to you.
  • Mixing identities — using the same Tor circuit/session for an anonymous persona and a real one. Use “New Identity” between contexts.
  • Opening downloaded documents online — a PDF/DOC can fetch a resource outside Tor, leaking your real IP. Open them offline; scrub them first (see Metadata Hygiene).
  • Torrenting over Tor — leaks your IP via the peer protocol and abuses the network.
  • Defeating fingerprint uniformity — see the Tor Browser caution above.

Performance: .onion vs clearnet

Section titled “Performance: .onion vs clearnet”

Tor trades speed for anonymity — three hops (six for onion services) add latency and reduce throughput, so expect slower page loads and streaming. Onion services avoid the exit hop and the wider internet, so a .onion can actually feel snappier and more reliable than reaching a clearnet site through an exit. For bulk transfers or low-latency needs, Tor is the wrong tool.

Section titled “Related”