What Is Tor? How Onion Routing Protects Anonymity
Tor is a free network that protects anonymity by bouncing your traffic through several relays so that no single point can see both who you are and what you are doing. This guide explains how Tor and onion routing work, and their real limits.
What is Tor?
Tor, short for "The Onion Router," is a free, open network designed to make it hard to trace who is communicating with whom online. When you use Tor, your traffic does not travel straight from your device to a website. Instead it is relayed through a series of volunteer-run servers scattered around the world, wrapped in layers of encryption so that no single relay learns the whole picture.
The result is that the website you visit sees the IP address of the last relay rather than yours, and the relays themselves cannot tie your identity to your destination. Tor is used by journalists protecting sources, people in restrictive regions, researchers, and anyone who wants stronger anonymity than a plain connection provides.
Tor's protection comes from separation of knowledge. Your entry relay knows who you are but not where you are going; the exit relay knows where you are going but not who you are. No single relay knows both.
How onion routing works
The "onion" in the name is a good metaphor. Before your data leaves your device, the Tor software wraps it in several layers of encryption, one for each relay in the chosen path. As the data travels, each relay peels off exactly one layer, revealing only the address of the next hop.
A typical Tor path, called a circuit, has three relays:
- The entry (guard) relay receives your traffic. It knows your IP but only sees encrypted data destined for the next relay.
- The middle relay passes the traffic along. It knows neither your origin nor your final destination, only the relays on either side.
- The exit relay removes the final layer and sends the request to the website. It sees the destination but not your identity.
Because each relay can only unwrap its own layer, tracing a message back to its source would require cooperation across the whole path. Tor also builds a fresh circuit periodically, so your traffic does not always follow the same route.
Tor vs a VPN vs a proxy
Tor is often compared with a VPN or a proxy server, but they solve slightly different problems. A VPN routes your traffic through a single provider that you have to trust. A proxy usually reroutes one app's traffic. Tor spreads trust across multiple independent relays so that no single operator can deanonymise you.
| Tor | VPN | Proxy | |
|---|---|---|---|
| Hops | Three relays | One server | One server |
| Trust model | Distributed, no single point | Trust the provider | Trust the operator |
| Speed | Slower | Fast | Fast |
| Best for | Anonymity | Everyday privacy | Targeted IP change |
Our guide on how to hide your IP address weighs these options against one another in more detail.
The Tor Browser and onion services
The easiest way to use Tor is the Tor Browser, a modified version of Firefox that routes everything through the network and is hardened against tracking. It disables features that could leak your identity and makes all users look as similar as possible, which reduces browser fingerprinting.
Tor also hosts onion services, sites whose addresses end in .onion. These live entirely inside the network, so both the visitor and the site stay anonymous, and the traffic never touches an exit relay. Many news organisations and privacy tools run onion versions of their sites so people can reach them safely.
The limits of Tor
Tor is powerful, but it is not a magic cloak, and honesty about its limits is important. First, it is slower than a direct connection because your traffic takes a longer, encrypted path. Second, the exit relay can see your traffic if you visit a plain HTTP site, so encrypted HTTPS still matters. Third, anonymity can be undone at the application level: logging into a personal account, enabling risky plugins, or downloading files that phone home can all give you away.
There is also the human factor. Tor protects the network path, not careless behaviour. Strong anonymity depends on habits, and the Tor Project publishes guidance on using the browser safely. Used thoughtfully, though, Tor remains one of the most effective anonymity tools available.
Who runs Tor, and why it matters
Tor is maintained by a non-profit and powered by thousands of volunteer relays run by individuals, universities, and organisations around the world. That volunteer structure is exactly what makes the trust distributed: no company owns the whole path. It also means the network's health depends on people donating bandwidth to run relays.
If you are curious how much your ordinary connection reveals before any of this, you can check the IP a website normally sees at IP Animals. Then you will understand precisely what Tor is working to hide, and why the question of what an IP can reveal about you matters in the first place.
Frequently asked questions
What is Tor in simple terms?
Tor is a free network that hides who is talking to whom by bouncing your traffic through several volunteer-run relays before it reaches its destination. Each relay only knows the step before and after it, so no single point sees both who you are and what you are visiting.
How does onion routing work?
Onion routing wraps your data in several layers of encryption, like an onion. Each relay in the path peels off one layer to learn only where to send the traffic next. The final relay removes the last layer and forwards the request to the website, but it never learns your real IP address.
Is Tor legal to use?
In most countries Tor is perfectly legal and is used by journalists, researchers, and privacy-minded people every day. As with any tool, it can be misused, but running Tor itself is lawful in the majority of places. A few governments do try to block or restrict access to the network.
Does Tor make me completely anonymous?
Tor greatly improves anonymity but is not a magic cloak. Logging into personal accounts, enabling risky browser features, or leaking information at the application level can still expose you. Strong anonymity depends on careful habits as much as on the network itself.