TL;DR: VPNs encrypt your traffic and hide your IP from websites, good for everyday privacy and bypassing geo-blocks. Tor routes traffic through multiple servers to hide your identity, good for maximum anonymity but slow. Proxies just change your IP address with no encryption, good for nothing important. For most people: use a VPN for daily browsing, Tor when anonymity matters more than speed, and skip proxies unless you know exactly why you need one. They're not interchangeable. They solve different problems.
Quick Comparison
| Feature | VPN | Tor | Proxy |
|---|---|---|---|
| Hides your IP | Yes | Yes | Yes |
| Encrypts traffic | Yes (to VPN server) | Yes (multiple layers) | Usually no |
| ISP can see activity | No (sees VPN connection) | No (sees Tor connection) | Yes (everything) |
| Speed | Fast (5-20% loss) | Slow (50-90% loss) | Fast (minimal loss) |
| Choose location | Yes (many countries) | Limited (random exit) | Depends on proxy |
| Protects all apps | Yes (system-wide) | Browser only (usually) | Per-app config needed |
| Trust required | VPN provider | No single entity | Proxy operator |
| Cost | $3-12/month (or self-host) | Free | Free to expensive |
What is a VPN?
A VPN (Virtual Private Network) creates an encrypted tunnel between your device and a server operated by the VPN provider [1].
How it works:
- You connect to a VPN server (you choose the location)
- All your internet traffic is encrypted before leaving your device
- Your ISP sees you connected to the VPN server, but can't see what you're doing
- The VPN server decrypts your traffic and sends it to its destination
- Websites see the VPN server's IP address, not yours
What VPNs protect against:
- Your ISP seeing what websites you visit
- Websites seeing your real IP address and location
- Hackers on public WiFi intercepting your traffic
- Geographic restrictions on content
What VPNs don't protect against:
- The VPN provider itself (they can see everything)
- Websites tracking you via cookies, fingerprinting, or login
- Malware on your device
- You logging into accounts that identify you
The trust problem:
With a VPN, you're shifting trust from your ISP to the VPN provider. If the VPN keeps logs or is compelled by law to monitor you, your privacy isn't protected, it's just been moved. This is why VPN provider choice matters enormously, and why some people self-host their own VPN to avoid trusting anyone.
What is Tor?
Tor (The Onion Router) routes your traffic through multiple volunteer-operated servers, with each layer encrypted separately [2].
How it works:
- Your traffic is encrypted three times (three layers)
- It passes through an entry node (knows your IP, not your destination)
- Then a middle relay (knows neither your IP nor destination)
- Then an exit node (knows your destination, not your IP)
- No single node knows both who you are and what you're accessing
What Tor protects against:
- Anyone linking your identity to your browsing activity
- Network surveillance and traffic analysis
- Censorship in countries that block websites
- Tracking across sessions (Tor Browser clears everything)
What Tor doesn't protect against:
- Logging into accounts that identify you
- Downloading files that phone home when opened
- Malicious exit nodes (use HTTPS)
- Advanced timing attacks by well-resourced adversaries
- Your own mistakes (biggest threat)
The speed tradeoff:
Tor is slow by design. Your traffic bounces through three servers in different locations. A simple search can take seconds. Video streaming is painful. This is the price of actual anonymity, if speed is your priority, Tor isn't for you.
For more on Tor, see our Tor basics guide and legal status worldwide.
What is a Proxy?
A proxy server acts as an intermediary, your traffic goes through it before reaching its destination, making the destination see the proxy's IP instead of yours [3].
How it works:
- You configure your browser or app to use a proxy server
- Your request goes to the proxy
- The proxy forwards it to the destination
- The response comes back through the proxy to you
Types of proxies:
- HTTP proxy, Works only for web traffic, no encryption
- SOCKS proxy, Works for any traffic type, still no encryption
- HTTPS proxy, Encrypted connection to the proxy (but proxy sees everything)
- Transparent proxy, You don't even know you're using it (ISPs use these)
What proxies protect against:
- The destination website seeing your real IP
- That's basically it
What proxies don't protect against:
- Your ISP seeing everything you do
- Anyone on your network intercepting traffic
- The proxy operator logging everything
- Any meaningful surveillance
The privacy illusion:
Proxies provide a thin disguise that only holds up if nobody bothers to check. Your ISP sees all your traffic. The proxy operator sees all your traffic. The only party that doesn't see your real IP is the destination website. For privacy purposes, proxies are mostly useless. Free proxies are worse than useless, many inject ads, steal credentials, or are honeypots.
When to Use Each
Use a VPN when:
- You want everyday privacy from your ISP
- You're on public WiFi (coffee shops, airports, hotels)
- You want to access geo-blocked content (streaming services)
- You want to hide your IP while torrenting
- You need decent speed and convenience
- You're willing to trust (or self-host) a VPN provider
Use Tor when:
- Anonymity matters more than speed
- You're researching sensitive topics
- You're a journalist, activist, or whistleblower
- You're in a country with heavy censorship
- You don't want to trust any single provider
- You need to access .onion sites
Use a proxy when:
- You just need to bypass a simple IP block
- You're running automated tools that need multiple IPs
- You understand it provides no real privacy
- You're using a trusted proxy for a specific technical purpose
Don't use a proxy when:
- You care about privacy (use VPN or Tor instead)
- You're doing anything sensitive
- The proxy is free (it's probably logging everything or worse)
Combining Tools
VPN + Tor (Tor over VPN):
- Connect to VPN first, then open Tor Browser
- Your ISP sees VPN connection, not Tor usage
- VPN provider sees you connecting to Tor, not what you do on it
- Useful if Tor is blocked or stigmatized in your country
- Adds protection against malicious Tor entry nodes
Tor + VPN (VPN over Tor):
- More complex setup, rarely needed
- Traffic goes through Tor, then VPN
- Can access sites that block Tor exit nodes
- VPN provider can't see your real IP
- Not recommended unless you have a specific reason
VPN + Proxy:
Generally pointless. The VPN already hides your IP. Adding a proxy just adds another party who can see your traffic. Unless you have a specific technical reason, don't bother.
The Tor Project's recommendation:
The Tor Project says most users don't need a VPN with Tor. Adding a VPN introduces a single point of failure and doesn't add much for typical users. However, it can help if Tor traffic itself would cause problems (work networks, ISPs that throttle Tor, countries that monitor Tor usage).
Common Mistakes
"I use a VPN so I'm anonymous"
No. Your VPN provider knows your real IP and can see all your traffic. If you log into any account, that account knows it's you. VPNs provide privacy from your ISP and websites, not anonymity. For anonymity, you need Tor, and even then, you must not log into identifying accounts.
"Free VPNs are fine"
No. Free VPNs are almost always the product, not the customer. They make money by logging and selling your data, injecting ads, or worse. If you can't afford a paid VPN, self-host one using free cloud credits.
"Tor is only for criminals"
No. Journalists, activists, domestic violence survivors, privacy researchers, and millions of ordinary people use Tor. The US government funds Tor development because it helps dissidents access information. 85% of Tor users browse regular websites, not hidden services.
"A proxy is basically a VPN"
No. A VPN encrypts your traffic. A proxy just forwards it. Your ISP can see everything you do through a proxy. They're fundamentally different tools.
"I can torrent over Tor"
Don't. Torrent clients often leak your real IP despite proxy settings. It's slow and consumes bandwidth that's meant for people who need anonymity. The Tor Project explicitly asks users not to torrent over Tor. Use a VPN for torrenting.
Self-Hosting: The Trust Solution
Don't want to trust a VPN provider? Host your own.
Options:
- Home VPN Server (WireGuard), Run a VPN on your home network. Access your home network securely from anywhere. Free, but your home IP is the exit point.
- Cloud VPS VPN, Run a VPN on a cloud server using free credits. Different exit IP from your home. More setup, more control.
- DigitalOcean, Vultr, Linode, Hetzner, Cloud providers with privacy-friendly policies and free credits to get started.
Why self-host?
- No VPN provider can log your traffic (because there isn't one)
- You control the server and can verify it's not compromised
- Often cheaper than commercial VPNs long-term
- Learn how the technology actually works
Tradeoffs:
- More technical setup required
- You're responsible for security updates
- Single server = single exit IP (less anonymity than rotating commercial VPN servers)
- If using home server, your home IP is still the exit point
Quick Decision Guide
What are you trying to do?
Hide browsing from your ISP → VPN
Access geo-blocked streaming → VPN
Stay safe on public WiFi → VPN
Torrent privately → VPN (never Tor)
Research sensitive topics anonymously → Tor
Bypass censorship in authoritarian country → Tor (with bridges)
Whistleblowing or source protection → Tor
Access .onion sites → Tor
Maximum anonymity at any speed cost → Tor
Bypass a simple website block → Proxy (but consider why it's blocked)
Run automation needing multiple IPs → Proxy (paid, reputable)
The Bottom Line
These tools aren't interchangeable. They solve different problems.
VPN: Encrypted tunnel to a server you trust. Good for everyday privacy, geo-unblocking, and public WiFi. Fast and convenient. You're trusting the VPN provider (or yourself, if self-hosted).
Tor: Multi-hop anonymity network. Good for actual anonymity when you can't trust anyone. Slow and requires discipline. The gold standard for hiding your identity, not just your IP.
Proxy: IP forwarding with no encryption. Good for almost nothing privacy-related. Use only for specific technical purposes where you understand the limitations.
For most people: get a reputable VPN or self-host one. Use Tor when anonymity genuinely matters. Forget proxies exist unless you have a specific reason to use one.
And remember: no tool protects you from logging into accounts that identify you, clicking malicious links, or posting information that reveals who you are. Technology solves technical problems. Operational security solves human problems. You need both.