VPN vs Tor: How They Differ

A VPN and Tor both route your traffic through other computers before it reaches a website, so a site sees an address that is not your own. Beyond that, they are built for different jobs. A VPN is a convenient, device-wide, single-provider tunnel for everyday privacy and security on untrusted networks. Tor is a volunteer-run network designed to make it hard for any single party to link you to what you read, at the cost of speed and convenience.

This article explains how each works, what each hides from whom, and how to choose. For the VPN side in more detail, see how a VPN works.

How a VPN routes traffic

With a VPN, your device builds one encrypted tunnel to a server operated by the VPN provider. Everything you send goes into the tunnel, comes out at the server, and continues to the website using the server's IP address.

• One hop. Your traffic passes through a single provider's server.
• Device-wide. Browsers, mail clients, games and system services can all use the tunnel.
• Who sees what. The local network sees an encrypted link. The VPN provider can see your real IP address and the destinations you contact. The website sees the server's address.

The privacy model is therefore: trust one provider instead of your local network and internet provider. See what a VPN is for the foundations.

How Tor routes traffic

Tor, whose software is maintained by the Tor Project, sends traffic through a circuit of three relays operated by volunteers, using layers of encryption, often called onion routing.

1. The Tor client picks three relays: an entry (guard), a middle and an exit.
2. It encrypts your request in layers, one for each relay.
3. Each relay removes only its own layer, learning just the previous and next hop.
4. The exit relay sends the request to the website, which sees the exit relay's address.

The design aims to ensure that no single relay knows both who you are and what you are accessing. The entry relay knows your IP address but not the destination; the exit relay knows the destination but not your IP address.

Most people use Tor through Tor Browser, a modified browser that applies Tor routing to its own traffic and adds protections against fingerprinting. Tor Browser does not route your other apps through Tor.

Side-by-side comparison

Aspect	VPN	Tor
Hops	One server	Three relays
Who runs the path	A single provider	Volunteers worldwide
Who you must trust	The VPN provider	No single party, but exit relays can see unencrypted traffic
Scope	Whole device	Usually only Tor Browser traffic
Speed	Often close to normal, depends on server	Typically slower and more variable
Setup	One app or profile	Install Tor Browser
Fingerprinting protection	None built in	Tor Browser makes users look alike
Everyday use	Streaming, calls, apps, downloads, travel	Sensitive browsing, research, whistleblowing, journalism
Cost	Paid pass or subscription	Free

What each one hides from whom

From the local network (cafe, hotel, office). A VPN hides destinations and content of everything on the device. Tor hides destinations and content of Tor Browser traffic. Both show the network a connection to a single VPN server or Tor entry relay.

From your internet provider. Similar: with either tool the provider sees that you connect to a VPN server or to Tor, not the sites inside.

From the website. Both replace your IP address with another. Tor's address pool is public and some sites treat Tor visitors differently; some VPN addresses are also recognised and restricted.

From the tool operator. This is the key difference. A VPN provider could see which sites you connect to, because your traffic passes through one point. Tor splits knowledge across relays so none sees both ends. In exchange, exit relays can see traffic that is not itself encrypted with HTTPS, so Tor users also need HTTPS.

A worked example

Take two situations.

Situation 1: you are travelling and want to check email, messaging apps and bank sites on hotel Wi-Fi. You want all apps covered, normal speed and a simple setup. A VPN fits: connect once, and every app uses the tunnel. Tor Browser would cover only browser tabs and would be slow for calls or large downloads. See VPN for public Wi-Fi.

Situation 2: you are researching a sensitive topic and want to avoid your searches being linked to your identity or IP address by anyone, including a single provider. Tor Browser fits better: traffic is split across relays and the browser reduces fingerprinting. Be aware that logging in to a personal account inside Tor Browser links your activity to that account regardless of routing.

Limits of each

VPN limits

• You trust the provider with your traffic metadata. Look for clear terms, and do not assume a logging policy unless it is stated.
• Websites can still recognise you by accounts, cookies and browser fingerprints.
• A VPN will not remove malware or stop phishing. See what a VPN cannot protect you from.

Tor limits

• It is slower, and some services block or challenge Tor traffic.
• It protects only what goes through it. If you run other apps outside Tor, they are unprotected.
• Behaviour matters. Signing in to personal accounts, downloading and opening files, or revealing personal details can identify you even on Tor. The Tor Project and the EFF both stress careful habits.
• Exit relays can observe unencrypted traffic, so use HTTPS sites.

Using them together

Some people combine a VPN and Tor. It can change who sees the entry point of the Tor connection, but it also adds a party and can make mistakes easier. It is not an automatic upgrade. If you are considering it for a sensitive need, read the Tor Project documentation and the EFF's guidance, and decide based on your specific threat rather than assuming more layers means more safety.

How to choose

1. Everyday security on untrusted networks, all apps, normal speed: VPN.
2. Browsing where you want to avoid a single party linking you to your destinations, and you can accept slow speeds: Tor Browser.
3. Mixed needs: Use a VPN for general device traffic and Tor Browser for specific sensitive sessions, treating them as separate tools.
4. Not sure of your threat: Write down who you are worried about, such as the local network, your provider, advertisers or someone targeting you personally. The right tool depends on that answer. Can a VPN make you anonymous explains why a VPN alone does not cover every case.

Summary

A VPN is a single encrypted tunnel from your whole device to one provider, suited to everyday privacy and security on public networks. Tor is a free volunteer network that routes browser traffic through three relays so no single relay knows both sides, suited to sensitive browsing but slower and narrower in scope. They address different problems, and neither provides complete anonymity on its own.

If an everyday, device-wide VPN is what you are looking for, you can see the options on the pricing page.