Tor Browser anonymity doesn’t equal privacy.
Arguing that you don’t care about the right to privacy because you have nothing to hide is no different than saying you don’t care about free speech because you have nothing to say
Edward Snowden
What is Tor browser, and why does it need a VPN?
Unless you’ve been living under a rock for the past few years, there’s a good chance you’ve heard of the dark web; but do you know what it actually is?
Quite honestly, it’s not as sexy as it sounds. We access most of what we think of as the internet through web browsers, like Chrome or Firefox, or Edge; this is called the Clear Web. These sites can all be seen and indexed by Google and other search engines.
However, most of the internet is locked away behind things like paywalls or memberships or anything that requires sign-in credentials. This is called the deep web, making up an estimated 99% of the internet as a whole. The deep web also includes the dark web.
The dark web is a section of the deep web on a type of network known as a darknet. Any private network can be considered a darknet if it is secured from the rest of the internet. The dark web refers to a darknet known as the Tor network or The Onion Router. The Tor network has websites that have a .onion address and are often extremely difficult to find.
The Onion Router network works by encrypting your data and bouncing it off different servers in the grid randomly, so it is impossible to see where you originated. These server nodes act as layers of anonymity, much like the skin of an onion, hence the name.
The Tor browser itself is needed to connect to the Tor network with the correct protocols. Tor network sites can’t be accessed with a standard browser. The downside to bouncing off all the nodes is pretty apparent; all the extra steps along the way mean your browsing speeds take a big hit. This pretty much rules out using Tor from streaming and downloading large files, and torrenting is a big no-no. Torrent clients like uTorrent may reveal your original IP address, so even if you could hit decent speeds, it would be pointless using Tor anyway.
Therein lies Tor’s most significant issue. Anonymity does not equal security. The Onion Router network is still susceptible to all the usual attacks you can encounter, and the dark web is a haven for malicious hackers. Identity theft is at an all-time high, as are ransomware attacks, and the dark web is one of the most dangerous places on the internet when it comes to staying secure. While you might be anonymous using the Tor network, that doesn’t mean it’s safe for you to enter any crucial credentials into a website there.
How a VPN will help you use Tor browser?
There are two ways to use a VPN with the Tor browser, and each has its own benefits and drawbacks. However, it should be noted that whichever route you take, you can expect a significant hit to your speed.
Tor over VPN
Using this method, the user first connects to their VPN and then connects to the onion network using Tor browser. The advantage of this method is that ISPs cannot see you connect to the network, and your IP address is hidden from the first node, as it can only see the IP address of the VPN server.
The downside to this approach is that the VPN provider can still log your IP. Depending on your reason for using Tor and your VPN provider’s logging policy and jurisdiction, this could be a crucial point. For the same reason, a kill-switch on the VPN is a must-have, as a sudden drop-out would reveal your activities to your ISP.
It should also be noted that this approach will still leave you vulnerable to malicious Tor exit nodes.
VPN over Tor
Using this second method, the user first connects to the onion network, then enables their VPN. This provides the user with anonymity to the VPN server, as your actual IP address is now hidden from the VPN. It also prevents your ISP from knowing that you are using a VPN, which can be illegal in some places. Many users prefer this method to purchase Bitcoin anonymously.
Of course, there are also several downsides to this approach. If your VPN collects logs, it may be possible to determine your identity via correlation, something to bear in mind. Also, just as some websites and ISPs ban Tor usage, so some ban VPNs.
This setup can be arduous to configure and is perhaps then best left to those with some technical know-how.
In short-
use Tor over VPN for extra security and use VPN over Tor for extra anonymity.
So which is the best VPN for Tor?
Now that we know what Tor is and why a VPN might be helpful in combination with it, it’s time to look at which VPN would be the best to use when browsing the onion router network.
As we’ve mentioned earlier, using both a VPN and Tor will slow your connection speed considerably, so it’s essential to find a VPN that offers high speeds. Another must-have is a kill switch. This disables your internet connection should your VPN disconnect while in use and prevents anyone from seeing your actual IP address.
Another serious consideration is your VPN’s logging policy and the legal jurisdiction of their offices. While the dark web is mainly thought of as the refuge of criminals, a large proportion of its users are perfectly legitimate; for example, journalists may use the dark web to talk to sources in global hotspots. In these circumstances, anonymity can be all-important, so getting the right VPN is a must.
Let’s take a look at the best VPN options available to use with TOR.
1. ExpressVPN
- Strong 256-bit encryption
- Dedicated .onion website
- 30-day money-back guarantee
- Kill switch
- Zero log policy
- Based in the British Virgin Islands
- 3000 servers in 94 countries
ExpressVPN is one of the most popular VPNs on the internet, and for good reason. It offers excellent Tor support, with a dedicated .onion site that lets you download the VPN anonymously. 256-bit encryption ensures your data is safe and you are completely anonymous while using Tor, even from the entry and exit nodes. Express VPN also uses RAM servers, which means no data is logged whatsoever.
ExpressVPN is based in the British Virgin Islands, which would make it hard for any law enforcement agencies to compel them to hand over data. Coupled with the zero-logging policy, this should mean you are entirely safe while browsing the onion router network.
Speeds are much higher than many other VPNs, which is crucial when using Tor. ExpressVPN also features a kill switch that will cut off your internet connection should the VPN connection drop, ensuring you remain anonymous.
2. Surfshark
- Strong 256-bit encryption
- IP and DNS leak protection
- Zero log policy
- High speed
- Multi-hop and Camouflage modes
- Based in the British Virgin Islands
- Kill switch
Surfshark is another great entry on our list of VPNs that work well with Tor. Surfshark’s main selling point is its excellent security. 256-bit encryption means your data is safe while browsing, and coupled with its camouflage and multi-hop features; it should be next to impossible for anyone to deanonymize you while using the Tor network.
Multi-hop connects to two VPN servers before joining Tor, providing extra anonymity, and camouflage mode uses obfuscation techniques to make it seem as though you aren’t using a VPN at all. Surfshark also has IP and DNS leak protection, so if anonymity is an absolute must for you, then this, coupled with a kill switch, is excellent news.
Surfshark has a zero log policy and is based in the British Virgin Islands, so you should be safe from any tracking with them.
3. PrivateVPN
- Strong 256-bit encryption with 2048 DH key
- Zero log policy
- Supports VPN over Tor
- High-speed servers
- 30-day money-back guarantee
PrivateVPN is one of the few VPNs that encourage VPN over Tor usage and actually provide an excellent step-by-step configuration guide on their website. If you aren’t the most technically gifted, then Teamviewer support is also available, and a member of their tech support with set up PrivateVPN for you.
PrivateVPN has a zero-logging policy and some of the strongest encryption available, so your data should be secure. However, it is worth noting that PrivateVPN is based in Sweden, which is part of the 14 eyes alliance. This is an information-sharing agreement between several countries and could see PrivateVPN forced to hand over any data to law enforcement.
4. Windscribe
- 256-bit encryption with 4096-bit RSA key
- Kill switch
- Multiple security features
- 110 cities in 60 countries
- 30-day money-back guarantee
Even more so than PrivateVPN, Windscribe excels at keeping your data secure. Your data should be almost impossible to intercept with the strongest encryption on this list and features such as a kill switch and IP and DNS leak protection.
Windscribe has some of the fastest servers we have come across, which is extremely important when using Tor. While some slow down is inevitable, Windscribe gave us the highest speeds while using the Tor browser.
Windscribe is based in Canada, which is part of the five eyes alliance, which means that they can be compelled to share any logged data. Windscribe’s logging policy states that some data is collected. This may be a severe concern if anonymity is essential for you.
5. CyberGhost
- Encrypted email sign up
- 256-bit encryption
- IP and DNS leak protection
- Kill switch
- NoSpy servers
- Zero log policy
- Accept Bitcoin
- 45-day money-back guarantee
CyberGhost is another wonderful option for anyone looking to use a VPN with Tor. On signup, the user is given a unique anonymous ID, and the signup email is encrypted, meaning it cannot be connected back to a user account.
No logs are kept, and CyberGhost is based in Romania, which has no data logging laws and is not part of the 14 eyes alliance. The NoSpy servers on offer are physically located in Romania and are only accessible by the CyberGhost team. These servers also offer extended bandwidth and are excellent for using a VPN with Tor.
CyberGhost also accepts bitcoin, which can be bought anonymously online with minimal effort using Tor. For those who anonymity is a must, this can be the ideal way to pay sources or any other activity you wish to keep away from prying eyes.
Which is the best VPN for Tor browser?
All of the VPNs we’ve looked at on this list are excellent services under normal circumstances. However, if you need the anonymity of the onion router network, chances are a standard VPN just won’t cut it. For that reason, it’s hard to recommend any VPN based in the 5,9 or 14 eyes alliance.
Even so, there are still some excellent choices. If strong security is required, Surfshark is highly recommended. It offers some of the most robust data encryption of any VPN and has plenty of useful features such as tracker blockers and leak protection.
Our overall recommendation for a VPN to use Tor browser is CyberGhost. High-speed servers, top-notch data encryption, and a zero log policy make it a stand-out choice in a strong field. Its NoSpy servers in Romania are perfect for anyone who needs 100% anonymity without compromising on other features, and the ability to pay in Bitcoin could be crucial in certain circumstances.
CyberGhost is the best choice for using a VPN on Tor network, and a generous 45-day money-back guarantee means there’s no reason not to try it out.