Tor Browser explained: what it is, whether it's safe and legal, and who it's for

Tor Browser has a reputation as the "dark web browser," but most of what it does is more ordinary. It makes it hard for your internet provider to see which sites you visit, and hard for those sites to see where you are. It also has real trade-offs in speed and site access, and it doesn't make you invisible. This guide draws on the Tor Project's own documentation and on what EFF and US government sources say.

What is Tor Browser?

The name Tor covers several things: a network of volunteer-run relays, the software that connects to it, and the Tor Project, the US nonprofit behind both. Tor Browser is how most people use it. It's based on the Extended Support Release of Firefox, heavily modified to resist tracking and browser fingerprinting. The Tor Project says it's open source and free.

It's available for Windows, macOS, Linux and Android, but not iPhone. By default it keeps no browsing history, and cookies last only until you quit or request a New Identity.

The Tor Project traces onion routing to researchers at the US Naval Research Lab in the mid-1990s. The Tor Project itself became a 501(c)(3) nonprofit in 2006.

How does onion routing work?

On the normal internet, data travels in packets marked with a sender's and a receiver's address, much like an envelope. Every router along the way learns who is talking to whom, and the Tor Project notes that your internet provider is well placed to profile your browsing. Encrypting the contents doesn't fix this, because the addressing stays visible.

Tor changes the route:

1. Tor Browser builds a path, called a circuit, through three relays, one hop at a time.
2. Your traffic is encrypted in layers, with separate keys for each relay. Those layers are the "onion."
3. Each relay removes its own layer and learns only which relay handed the data over and which one gets it next. None of them knows the full path.
4. The last relay, called the exit relay, sends your traffic on to the public internet.

After about ten minutes, new requests get a new circuit, which makes earlier and later activity harder to link. You're also hiding in a crowd: the Tor Project says the more numerous and varied its users are, the better each one is protected.

What does Tor Browser protect?

• Your location, from sites. They see a connection from the Tor network instead of your IP address.
• Your browsing, from anyone watching your connection locally, such as your internet provider or someone with access to your home Wi-Fi.
• Your trail across sites. Tor Browser isolates each site, clears cookies and history when you're done, and tries to make all its users look alike so they're harder to fingerprint.
• Your access to blocked sites. It can reach sites your home network blocks. Where Tor itself is blocked, it can connect through relays called bridges.

What doesn't Tor Browser protect?

The Tor Project says plainly that perfect anonymity is generally impossible, even with Tor. These are the main gaps.

• Other apps. Only what you do in Tor Browser goes through Tor. Other software on the same device, including your regular browser, uses your normal connection.
• What you tell a site. If you sign in or fill in a form with your name, the site knows who you are, though not where you are.
• The fact that you use Tor. Anyone watching your connection can usually tell, and websites can always detect Tor connections, the Tor Project says. A bridge reduces the risk of being seen on your own network.
• An observer at both ends. Someone who can watch you and also the website or your exit relay could match up the timing of your traffic. The Tor Project says Tor doesn't defend against this.
• Sites without HTTPS. Tor encrypts traffic inside its network, but the last leg depends on the website. Tor Browser's HTTPS-Only Mode helps; still check the address bar before entering anything sensitive.
• Files you open later. Documents such as DOC and PDF files can fetch internet resources outside Tor, which reveals your IP address. Tor Browser warns you before opening them in another app. Don't ignore that warning.
• Torrents. The Tor Project says torrent apps can ignore proxy settings and reveal your real IP address, and that they slow the network for everyone.
• Extra add-ons. The Tor Project advises against adding them, since they may bypass Tor or harm your privacy. EFF adds that you don't need extra ad or tracker blockers in Tor Browser.
• Malware and scams. In our view, Tor is a privacy tool, not security software. Nothing on its list of protections covers a malicious download or a fake login page, so keep your usual security habits.

Is Tor Browser safe?

In our view, the genuine browser is a reasonable choice for most people. EFF says downloading directly from the official site should be safe. The bigger risks we see are fake copies, careless habits and the sites you choose to visit. If someone capable may be targeting you, the gaps above matter much more.

What are Tor Browser's security levels?

There are three: Standard, Safer and Safest. Safer disables JavaScript on non-HTTPS sites and makes audio and video click-to-play. Safest disables JavaScript by default on all sites and also affects some images, fonts and icons. Higher levels may stop some pages from working, the Tor Project says. EFF's guidance is that Standard is fine for everyday privacy, and Safest is for people worried about sophisticated attackers.

Why does antivirus software flag Tor Browser?

The Tor Project says some antivirus tools treat files that few people have seen as suspicious, and that these warnings are false positives if you got Tor Browser from its website or GetTor and verified it. The condition matters: confirm where your copy came from before you make any exception for it.

Does a .onion address mean a site is trustworthy?

No. The Tor Project says a .onion address lets Tor confirm it reached the right place without tampering. That's a technical assurance. In our view, it says nothing about whether the people running the site are honest.

Is Tor Browser legal in the US?

We couldn't find a US law or government page that answers this in one line, and we found none that bans it. Here's what the sources we could read do show. This isn't legal advice.

• The Tor Project is a US 501(c)(3) nonprofit, and it says onion routing began at the US Naval Research Lab.
• The National Institute of Justice, part of the Justice Department, says "a significant portion of dark web activity is lawful" and that some journalists use Tor. The same article calls the dark web an important hub of criminal commerce.
• A CISA advisory written with FBI contributions says Tor can support democracy and free, anonymous internet use, and also gives malicious actors cover. It names legitimate uses, such as overseas voters avoiding foreign monitoring and people avoiding tracking by advertisers.
• EFF's legal FAQ, written for people who run Tor relays rather than people who just browse, says EFF believes running a relay is legal under US law and knows of no operator sued, prosecuted or convicted for it. It also says police have sometimes mistakenly investigated operators, and that it isn't legal advice.

None of this makes illegal activity legal. That FAQ says Tor isn't designed or intended for breaking the law, and the NIJ article describes the FBI, DEA and others shutting down dark web markets. Laws also differ between countries, so check before you travel, and ask a lawyer licensed where you live if you have a specific question.

Separately, an employer or school may restrict it. The CISA advisory recommends that organizations assess their risk and consider blocking or closely monitoring traffic from known Tor relays.

Is Tor the same as the dark web?

No. Tor Browser opens the regular web as well as onion services, which are sites with .onion addresses that can be reached only through Tor. NIJ's article uses "dark web" for services like these that need Tor or a similar tool.

Onion services have ordinary uses. The Tor Project lists private chat and file sharing, safer contact between journalists and sources, and more secure routes to well-known sites. Illegal content exists there too. We don't list onion sites or explain how to find them, and you don't need any to get the privacy benefits described here.

How fast is Tor, and do websites work?

Expect it to be slower. The Tor Project says more than a million daily users share just over 6,000 relays, with traffic bouncing around the world, though it adds that Tor is much faster than it once was and you may not notice a difference. EFF is blunter: browsing is much slower, and certain sites may not work at all.

• CAPTCHAs. Thousands of people can share one exit relay at the same time, which can look like automated traffic to a website. The Tor Project suggests choosing New Circuit for this Site, or trying again later.
• Blocks. Some sites refuse Tor connections because they can't tell ordinary users from automated traffic.
• Banks and other sensitive accounts. A login that suddenly appears to come from another continent can get your account locked or suspended, the Tor Project warns. In our view, it's easier to keep banking in your regular browser.
• Security levels. Safer and Safest can break pages, as noted above.

Tor vs a VPN vs incognito mode

These solve different problems, and they're easy to mix up.

If you want more anonymity, EFF says Tor is a better solution than a VPN, because a VPN provider can see your device's traffic while no single Tor server can see your browsing data. A VPN has its own uses, and our guide to what a VPN protects covers them.

Incognito mode solves a smaller problem. Google says it limits what Chrome saves on your device, while websites and whoever runs your network may still see your activity. The Tor Project says Tor Browser forgets locally in the same way and also hides your IP address. Our incognito mode guide has the details.

Should you use Tor with a VPN?

Generally not, the Tor Project says, unless you're an advanced user who knows how to set up both without compromising your privacy. It also strongly recommends against connecting another browser to Tor, because other browsers can still leak identifying details.

Don't confuse this with Tor VPN, the Tor Project's own Android app for sending other apps through Tor. It's in beta, and the project warns that it may leak information and shouldn't be relied on for anything beyond testing.

How do you get the real Tor Browser?

From the Tor Project. It calls its official site the safest and simplest way to download, and EFF's desktop guide says to download only from there. For phones, EFF says to use the official app stores or follow the links on the Tor Project's download page.

Copies are a real concern. The Tor Project says Tor Browser is free, and that any browser making you pay while claiming to be Tor Browser is fake. EFF says that searching app stores for it turns up dozens of mostly for-profit apps, which the Tor Project may not endorse and which may come with unvetted VPNs. And the FBI warns that search ads can lead to look-alike pages where the download is malware.

1. Type torproject.org into your browser yourself instead of clicking a search ad, and check the address. Downloads are at download.torproject.org.
2. Choose your system. For Android, the Tor Project lists Google Play and the Guardian Project's repository for F-Droid, as well as its own site. It requires Android 8.0 or newer.
3. If you can, verify the file's signature. The Tor Project recommends this and has instructions for Windows, macOS and Linux, though it's a fairly technical step.
4. If the site is blocked where you are, the Tor Project offers official mirrors, through EFF or La Cebolla, and a service called GetTor.

If you've paid for an app claiming to be Tor Browser, it wasn't the real one. The Tor Project suggests trying to get a refund from the app store, or contacting your bank to report the charge.

Tor on iPhone: what is Onion Browser?

There's no Tor Browser for iPhone. The Tor Project recommends Onion Browser instead, an open-source iOS app that uses Tor routing and comes from a developer who works closely with the project. The catch, which both note, is that Apple requires iOS browsers to use WebKit, so Onion Browser can't have all of Tor Browser's protections.

Its makers add that it only tunnels traffic inside the app, and that iOS may send some traffic, including audio or video embeds, over your normal connection. Their FAQ also says the app's built-in Tor leaks your real IP address to websites through WebRTC, and calls using it with the separate Orbot app safer.

There's also a recent issue. EFF's guide says researchers revealed a WebKit flaw on August 5, 2026 that can expose real IP addresses, including in Onion Browser, and it recommends avoiding the app for highly sensitive browsing until Apple fixes it. Onion Browser's notes for version 3.4.1, from that month, say a leak through DNS prefetching was fixed and that Lockdown Mode, part of its Silver and Gold security levels, mitigates the others. EFF's warning was still posted on November 2, 2026, and we couldn't confirm a complete fix from Apple. If your safety depends on staying anonymous, follow EFF's advice.

Who is Tor Browser for?

• Journalists and their sources. The Tor Project says journalists use it to communicate more safely with whistleblowers and dissidents, and tools such as SecureDrop rely on onion services.
• People facing censorship or surveillance. The Tor Project calls Tor an effective way around censorship and says it was instrumental during the Arab Spring. But EFF notes that your use of Tor stays visible to anyone watching your network, and Onion Browser's makers warn that being identified as a Tor user may itself be incriminating in some places. Weigh the local risk first.
• People seeking sensitive support. The Tor Project mentions forums for abuse survivors and for people with illnesses.
• People working or voting abroad. The Tor Project mentions nonprofit staff connecting to their home site from another country, and CISA mentions deployed military and other overseas voters.
• Ordinary privacy-minded people. The Tor Project says individuals use it to keep websites from tracking them and their families, and EFF says it's a quick and easy option for people who need occasional anonymity and privacy.

Who probably doesn't need it?

If you only want to keep browsing off a shared computer, incognito mode does that. For banking, streaming and large downloads, we'd stay with a regular browser, given the speed and account-lockout issues above. At the other end of the scale, the Tor Project points high-risk users to Tails, a portable operating system.