3.9
our score no user ratings - rate it →

Tor (The Onion Router) Review

The reference point for anonymity - but not a VPN, and this dossier is honest about that. Tor is a US-registered 501(c)(3) nonprofit (2006, born from mid-1990s US Naval Research Laboratory research) running a decentralized volunteer network with no central operator, no accounts, no price and nothing to buy. Logging is a non-issue by construction: there is no central place where logs could exist, and Tor's transparency layer (public relay metrics, financial reports, incident statements) has no commercial equivalent. The costs are equally structural: speeds are slow by design (3 hops, volunteer nodes - 'extremely slow', per the community's own refrain), sites treat exits with suspicion, exits can observe unencrypted traffic, and the history of adversarial-relay research (CMU 2014, FBI Freedom Hosting, FSB contractor projects) means the trust model is 'no single point of trust' rather than 'trusted provider'. It is also government-funded (OTF, Sida, US State Dept DRL - disclosed on its own sponsors page). If your threat model is the advertiser or your ISP, a good paid no-logs VPN is faster and easier; if it is the state, Tor with bridges is still the answer.

open source community-owned3 red flagsfacts verified - operator pages (home/about/history/download/support/donate/sponsors/metrics/reports/Snowflake), Privacy Guides reference, Wikipedia, Google News, HN index and Reddit archives all fetched live 2026-09-29
outbound link - direct to the provider, no affiliate parameters

site reachable · checked 19 h ago · daily check

Red flags (3):
  • Documented deanonymization history: 2014 CMU relay-early attack ($1M FBI contract per HN coverage), FBI Freedom Hosting takedowns, GCHQ 'Tor Stinks' - the adversary model is state-level, not marketing-grade
  • Browser-exploit surface: JavaScript exploits against Tor Browser have been actively used (HN 2016, 314 pts); Tor is only as safe as its browser discipline
  • Government-funding lineage (NRL origins, State Dept/OTF money) is public and routinely weaponized in propaganda - understandable distrust driver even though funding is disclosed

Review

draft generated by Qwen3, fact-checked by the vpncomparison editorial desk · review version 2 · prose updated 2026-10-20 · facts as of 2026-09-29 · how we verify

Honesty note: we have not run our own tests on Tor (The Onion Router) yet (leak tests, speed, kill switch). Everything on this page is source-based meta-research with dated links. When we test it, results appear here and on the change log.

Overview

Screenshot: Tor (The Onion Router) homepage
Tor (The Onion Router) homepage - live capture 2026-09-29

Tor is not a commercial VPN but a nonprofit anonymity network built on decentralized volunteer relays, accessible via the free Tor Browser. Operated by The Tor Project, Inc. - a U.S.-based 501(c)(3) since 2006 - it enables censorship circumvention and anonymity through layered encryption across three hops. While structurally designed to prevent central logging, it’s slow by design and unsuitable for streaming or daily browsing, best reserved for high-risk users.

Logging & privacy

Tor’s architecture makes central logging impossible: traffic is split across three volunteer relays, each seeing only one hop, and the Tor Project itself never handles user data. The logging claim is "policy-only" in form, but the network’s design enforces it structurally - there is no central operator to log. Jurisdiction is the U.S., but transparency mitigates risk: public metrics, financial reports, and incident disclosures are published. However, exit nodes can see unencrypted traffic, and state-level adversaries have exploited browser flaws or run malicious relays (e.g., 2014 CMU/FBI attack, GCHQ "Tor Stinks"). No warrant canary exists, and no third-party audits cover the network, though the code is open source.

Pricing & the renewal trap

There is no price: Tor Browser and the network are completely free, funded by donations (starting at $2) and institutional grants. No subscription, account, or payment is required.Tor is free - there is no renewal ratio and no three-year cost, because nothing is billed. You pay nothing, now or later. Payment methods for donations include credit card, PayPal, and crypto, but using Tor itself requires no financial transaction.

Features & performance

Screenshot: Tor (The Onion Router) apps / download page
Tor (The Onion Router) apps / download page - live capture 2026-09-29

Tor uses onion routing with layered TLS encryption across three hops, supporting obfuscation via Snowflake, obfs4 bridges, WebTunnel, and meek domain-fronting. It has no kill switch or split tunneling, and multihop is inherent in its design. P2P and streaming are unsupported, and speeds are extremely slow due to volunteer relays and encryption overhead. The Tor Browser is available for Windows, Mac, Linux, and Android. Server and country counts are not published, as the network relies on dynamic volunteer relays. No independent performance tests have been run, but community consensus confirms slow speeds unsuitable for video calls or gaming.

Ownership & track record

The Tor Project is a U.S.-registered nonprofit with no corporate owner, funded by public donations and institutions like the Open Technology Fund, Sida, and the U.S. State Department. Its transparency - public financials, metrics, and incident reporting - is unmatched among privacy tools. However, its origins in the U.S. Naval Research Lab and government funding fuel distrust, despite full disclosure. Documented incidents include the 2014 CMU relay-early attack (used by the FBI), GCHQ/NSA surveillance efforts, and FSB contractor deanonymization attempts. The data_quality is verified, and sources confirm a 20-year history of peer review, attacks, and resilience.

Censorship resistance

Tor is a leading tool for bypassing state censorship, especially when using obfuscation like Snowflake or obfs4 bridges. Snowflake, in particular, is the most-used obfuscation method in Iran (per Tech Policy Press), and the Tor Project actively develops anti-censorship features. The browser includes built-in bridge request systems, and tools like Snowflake Volunteer allow users to contribute proxy access via Android. While not foolproof - determined adversaries like China or Iran can block known relays - Tor with bridges remains a critical resource for activists and journalists in censored regions.

Verdict

Use Tor if your threat model includes state surveillance or censorship; avoid it for everyday browsing or speed-dependent tasks. It’s not a VPN, has no support desk, and requires technical tolerance for slowness and complexity. The money-trail note: Tor does not pay review sites - it’s donation-funded and nonprofit, with no affiliate program or commercial incentives.

++ What holds up

  • Strongest anonymity architecture available: 3-hop onion routing with no central operator and no accounts (operator + Wikipedia)
  • Radical transparency: live network metrics, published annual and financial reports, incident statements - nothing a commercial VPN offers
  • Free forever; donations ($2+) and crypto accepted; volunteer-run (donate portal fetched 2026-09-29)
  • Best-in-class censorship tooling: obfs4, meek, WebTunnel and Snowflake bridges; Snowflake is the most-used obfuscation tool in Iran (Tech Policy Press)
  • Open source everywhere, frequently peer-reviewed, Rust core rewrite ongoing (HN 2025, 348 pts)
  • The baseline recommendation of the independent privacy community (Privacy Guides)

-- What to watch

  • Slow by design: 3 hops and volunteer capacity make video, gaming and large downloads impractical (r/TOR and HN consensus)
  • Not a commercial product: no support desk, no server-choice convenience, no kill-switch/split-tunnel feature set; iOS is third-party only
  • Exit-node trust model: unencrypted traffic is readable at the exit; malicious or research-controlled relays are a documented risk (CMU 2014, FSB-contractor project 2019)
  • Many major sites block or CAPTCHA Tor exits (user reports)
  • US incorporation and US government funding (State Dept, OTF) are disclosed but weighed by high-risk users
  • Real-world friction at platform level: antivirus false positives (Microsoft Defender 2023) and app-store rejections (Google Play 2020) hit Tor specifically

Pricing reality check

Intro pricesee provider site
NotesNo price: Tor Browser and the network are free. Funded by donations ($2 minimum, credit card/PayPal/crypto at donate.torproject.org) and institutional grants (OTF, Sida, US State Dept DRL).

See the 3-year total next to the marketing number: true-cost calculator →

How to get Tor

Sign up attorproject.org
Identity checknone
Appswindows, mac, linux, android

Check the renewal price above before any multi-year plan - true-cost calculator.

Is Tor legit?

Legal domicile: United States. Logging claim: Tor logs nothing per design: no central logs exist to keep - traffic is split across three volunteer relays, each seeing only one hop, and the Tor Project itself never touches user traffic; the network's design goal (dolphin-design: no central logs, no central authority) makes central logging structurally impossible - evidence class: promise only (no proof). No incidents on file in our research - absence of evidence is not proof of innocence. Facts verified - operator pages (home/about/history/download/support/donate/sponsors/metrics/reports/Snowflake), Privacy Guides reference, Wikipedia, Google News, HN index and Reddit archives all fetched live 2026-09-29 (not fully verified) as of 2026-09-29 - read the sources below.

Evidence classes and scoring: methodology · user experiences: meta-review.

The money trail - what review sites earn by recommending this

affiliate status not verified yet

If we sign up for this program, every link here becomes rel="nofollow sponsored" and routes through /go/. Until then our links point straight to the provider's website with zero tracking. Ranking logic physically cannot read affiliate fields - here is the proof.

On the website

Captured by our screenshot bot from the live site (or its public archive). A capture is evidence of what the page showed at capture time - not an endorsement.

Screenshot: Tor (The Onion Router) homepage
Tor (The Onion Router) homepage - live capture 2026-09-29
Screenshot: Tor (The Onion Router) apps / download page
Tor (The Onion Router) apps / download page - live capture 2026-09-29

Before you pay: check the renewal price, the refund window, and whether a cheaper or free path covers your use case - the honest checklist.

Visit Tor or compare all VPNs →

Tor FAQ

Is Tor (The Onion Router) legit?

Based on our checks as of 2026-09-29: Tor (The Onion Router) scores 3.9/10 in our weighted review. We logged 3 red flags (listed above). User reports, ownership and the incident record are documented with dated sources in the meta-review below.

What do I actually get with Tor?

You get the free Tor Browser and access to a decentralized anonymity network that routes traffic through three volunteer relays, hiding your IP and resisting tracking. No account, no payment, and no central logs exist - just open-source software designed for privacy and censorship circumvention.

What is the renewal price and total 3-year cost?

There is no renewal price or cost at all. Tor is completely free to use, with no billing, no subscription, and no fees - now or in the future. The `derived_pricing` confirms no `three_year_cash_total` because no money changes hands.

What evidence supports Tor’s no-logs claim?

The claim is "policy-only" in classification, but the network’s decentralized design makes central logging structurally impossible. There is no entity that can log all traffic. However, malicious exit nodes can observe unencrypted data, and state adversaries have exploited browser flaws - so trust is distributed, not absolute.

Does Tor work in censored countries like China or Iran?

Yes, but only with obfuscation tools like Snowflake or obfs4 bridges, which disguise Tor traffic as normal web traffic. Snowflake is the most-used obfuscation method in Iran. Success varies by country and network controls, but Tor remains a frontline tool for circumvention in high-censorship environments.

Can I pay anonymously to use Tor?

You don’t need to pay to use Tor - there are no fees. If you donate, you can do so anonymously via cryptocurrency, but using the network itself requires no payment or identity disclosure. No account or personal data is collected.

What happens if Tor shuts down?

If The Tor Project ceased operations, the open-source code and network would likely persist through volunteer mirrors and forks (like Tails OS). The decentralized nature means no single point of failure, but updates, funding, and coordination would suffer without the central nonprofit.

What’s the honest free or cheap alternative?

Tor itself is the honest free alternative to commercial VPNs. For less anonymity but better speed, consider a reputable no-logs VPN with independent audits. But if you need true anonymity and can tolerate slowness, no other free tool matches Tor’s peer-reviewed design and global relay network.

The meta-review: what the internet says about Tor (The Onion Router)

We do not expect you to trust us. This review is a meta-review: below you see what other review sites claim - with their conflicts of interest labeled - what users report on Reddit and forums, and who actually operates Tor (The Onion Router). Every claim links to its source so you can verify it yourself.

What other reviewers say (1)

Every source carries a conflict label from our review-site database. "Affiliate-funded" means the site earns money if you buy what it recommends. We include critical voices deliberately.

privacyguides.org neutral community

Privacy Guides: Tor recommendation page

Fetched 2026-09-29 (HTTP 200): the independent privacy community's reference site treats Tor Browser as its baseline anonymity recommendation (dedicated Tor page alongside VPN guidance), with warnings about browser fingerprinting and reliance on volunteer relays.

source dated n.d. · verified by us 2026-09-29 · HTTP 200 · established track record

What users say (2)

Reddit, forums, HN - paraphrased and linked, never quoted out of context. Anecdotes, not proof - but refund complaints and leak reports are the best early-warning system this market has.

hn.algolia.com neutral

HN thread index: tor project / tor browser

Fetched 2026-09-29 (HTTP 200): major HN threads - 'Hackers breach FSB contractor, expose Tor deanonymization project' (356 pts, 2019), 'Tor Project Sued' (290 pts, 2014), 'Two months after FBI debacle, Tor Project still can't get an answer from CMU' (285 pts, 2016), 'Tor Project is switching to Rust' (348 pts, 2025), 'Microsoft Defender was flagging Tor browser as a trojan' (400 pts, 2023), 'Google Play rejected Tor Browser update with security fixes' (334 pts, 2020).

source dated n.d. · verified by us 2026-09-29 · HTTP 200 · established track record
arctic-shift.photon-reddit.com neutral

arctic-shift Reddit: r/TOR posts + VPN/TOR comments

Fetched 2026-09-29 (HTTP 200): 25 recent r/TOR posts + 65 comments from r/VPN, r/TOR, r/privacy mentioning Tor Browser (speed complaints, bridges/Snowflake, 'Tor for anonymity not VPN' advice); permalinks cited in voices.

source dated n.d. · verified by us 2026-09-29 · HTTP 200 · established track record

AI fact summary - everything we know, compressed

Generated by Qwen3 on 2026-10-20 from our fact database plus the linked sources. It summarizes - it does not add facts. Check anything that matters against the linked sources.

Bottom line: Tor is not a commercial VPN but a free, decentralized anonymity network designed for high-threat users. It provides strong structural anonymity by routing traffic through volunteer-run relays, making mass surveillance difficult. However, it is slow, not suited for streaming or gaming, and has been successfully attacked by state-level actors in documented cases.

The logging truth: Tor cannot log user traffic by design - there is no central operator or server to store data, and traffic is split across multiple relays. The network’s architecture prevents any single point from seeing both origin and destination. Jurisdiction is legally the United States, but the decentralized, nonprofit model limits practical enforcement leverage.

Pricing reality: There is no cost to use Tor Browser or the network - no accounts, no subscriptions, no payments. It is entirely free and donation-funded, with no upsells or renewal traps. Donations are voluntary and accepted via credit card, PayPal, or cryptocurrency.

What reviewers say vs what users say: Reviewers and privacy advocates consistently rank Tor as the gold standard for anonymity, especially in censored regions. Users confirm its effectiveness but universally report extremely slow speeds and usability challenges. While reviewers emphasize its technical robustness, users stress that it requires tinkering and is not an everyday tool - this alignment suggests honest consensus, not affiliate bias.

Who runs it: The Tor Project, Inc. is a U.S.-based 501(c)(3) nonprofit founded in 2006, originally developed at the U.S. Naval Research Laboratory. It is run by a small team with public reporting and relies on global volunteers to operate relays and bridges. Funding comes from institutional donors like the Open Technology Fund and U.S. State Department, which is publicly disclosed.

Sources & how this review was built

Every external source used on this page, with the date we fetched it and its evidence class [A]-[D] (A = primary/operator, B = serious press/research, C = community, D = our own measurements). Methodology: how we verify. Sources disappear or change - if a link is dead, tell us via contact.

Evidence classes on this page: [A] A: 9[B] B: 6[C] C: 2[D] D: 0 (D stays empty until our own test phase)

  1. [1][A] operator torproject.org - Homepage fetched 2026-09-29 · HTTP 200
  2. [2][A] operator torproject.org - About / History fetched 2026-09-29 · HTTP 200
  3. [3][A] operator torproject.org - Download fetched 2026-09-29 · HTTP 200
  4. [4][A] operator support.torproject.org - Support portal: FAQ + Censorship circumvention fetched 2026-09-29 · HTTP 200
  5. [5][A] operator donate.torproject.org - Donate portal fetched 2026-09-29 · HTTP 200
  6. [6][A] operator torproject.org - Sponsors / funders fetched 2026-09-29 · HTTP 200
  7. [7][A] operator metrics.torproject.org - Tor Metrics portal fetched 2026-09-29 · HTTP 200
  8. [8][A] operator snowflake.torproject.org - Snowflake fetched 2026-09-29 · HTTP 200
  9. [9][A] operator torproject.org - Annual and financial reports fetched 2026-09-29 · HTTP 200
  10. [10][B] review privacyguides.org - Privacy Guides: Tor recommendation page fetched 2026-09-29 · HTTP 200
  11. [11][B] news en.wikipedia.org - Tor (network) - Wikipedia fetched 2026-09-29 · HTTP 200
  12. [12][B] news news.google.com - Google News RSS: tor network censorship fetched 2026-09-29 · HTTP 200
  13. [13][B] news cyberinsider.com - Tor launches Snowflake Android app to help users bypass censorship fetched 2026-09-29 · HTTP 200
  14. [14][B] news lifehacker.com - I Tried the Android App That's Helping People Around the World Bypass Censorship Laws fetched 2026-09-29 · HTTP 200
  15. [15][C] community hn.algolia.com - HN thread index: tor project / tor browser fetched 2026-09-29 · HTTP 200
  16. [16][C] community arctic-shift.photon-reddit.com - arctic-shift Reddit: r/TOR posts + VPN/TOR comments fetched 2026-09-29 · HTTP 200
  17. [17][B] news www.helpnetsecurity.com - Tor Browser 10.5 improves circumvention for Tor users in censored places fetched 2026-09-29 · HTTP 200

Rate Tor (The Onion Router)

Community score: no ratings yet

One rating per user and provider. Smoothed display (statistical prior) prevents single-vote manipulation.

User comments (0)

No comments yet - be the first. Posting runs a short proof-of-work in your browser (anti-spam), no account needed.

Alternatives to Tor (same kind)

Comparable providers of the same kind only - a free app is never "an alternative" to a commercial VPN. Ranked by the same deterministic score.

Lantern (Brave New Software)

A censorship-unblocking tool that now wears nonprofit clothes: Lantern's parent became the 501(c)(3) Brave New Software Project and the site now reads like a…

4.9
canary open source
intro $3.63 /mo
United States privacy tool 45 d ago

Control D (premium encrypted DNS resolver)

A DNS-layer filtering service that has grown up in public: born January-April 2021 out of the Windscribe team (same three founders, spun out precisely because…

4.5
open source
intro $3 /mo
Canada - CONTROLD, Inc., Toronto, Ontario; operator about-us page states 'Founded in 2021 - Toronto, Canada' and site footer reads '2026 CONTROLD, Inc.'; free-dns FAQ calls it 'based in Toronto, Canada... the sister company of Windscribe' privacy tool 9 d ago

Hysteria2 (QUIC/UDP-based censorship-resistant proxy)

Hysteria 2 is not a VPN provider - it is free, MIT-licensed proxy software you deploy on your own server, and this dossier treats it that way: there is no…

4.3
open source
intro $5 /mo
none - Hysteria is not a company; it is MIT-licensed open-source software (Go) developed by a volunteer community around lead developer 'Toby' (GitHub: tobyxdd), with the repo on GitHub and docs at hysteria.network privacy tool 9 d ago