TOR (The Onion Router) is a free, open-source software that enables anonymous communication by routing internet traffic through a worldwide network of volunteer-operated servers (nodes/relays). TOR encrypts traffic in multiple layers (like an onion) and passes it through at least three relays before reaching the destination, making it extremely difficult to trace the traffic back to the original user. TOR protects against traffic analysis, network surveillance, and censorship. Used by journalists, activists, whistleblowers, law enforcement, and privacy-conscious individuals.
Network Statistics: TOR network has 6,000+ relays, 3,000+ bridges, and 2+ million daily users. TOR Browser downloads exceed 100 million. 80% of TOR users use it for privacy/anonymity (not illegal activities).
Common legitimate uses of TOR:
// TOR onion routing - 3-hop circuit
┌─────────┐ ┌──────────┐ ┌───────────┐ ┌──────────┐ ┌─────────────┐
│ You │ → │ Entry │ → │ Middle │ → │ Exit │ → │ Destination │
│ (Client)│ │ Node │ │ Node │ │ Node │ │ (Website) │
└─────────┘ └──────────┘ └───────────┘ └──────────┘ └─────────────┘
↓ ↓ ↓ ↓ ↓
Layer 3 Layer 2 Layer 1 Unencrypted Exit Node
Encrypted Encrypted Encrypted (final hop) IP visible
User runs TOR Browser (modified Firefox). Client builds encrypted circuit (3 nodes: entry, middle, exit).
First relay. Knows user's IP address but cannot see destination (encrypted). Long-term stable node (prevents profiling).
Second relay. Does not know user IP or destination (only previous and next node). Adds another layer of encryption.
Final relay. Decrypts final layer and sends request to destination website. Destination sees exit node IP (not user IP).
Traffic encrypted multiple times (3 layers). Each relay removes one encryption layer (like peeling onion). No single node knows both origin and destination.
Destination website sees exit node IP address, not user's real IP. Prevents tracking, geolocation, and correlation.
Websites accessible only within TOR network (.onion domains). Hosted anonymously (cannot be traced to physical server). Examples: Facebook (facebookcorewwwi.onion), ProPublica, BBC.
Undocumented relays not listed in public directory. Bypasses countries that block TOR (China, Russia, Iran, Turkey, Saudi Arabia).
Obfuscates TOR traffic to look like normal HTTPS or random data. Evades deep packet inspection (DPI) censorship.
Official TOR Browser (modified Firefox). Pre-configured for anonymous browsing. Disables JavaScript (by default), trackers, and browser fingerprinting. Includes NoScript and HTTPS Everywhere.
Live OS (boot from USB) that routes all traffic through TOR. Leaves no traces (amnesiac). Includes cryptographic tools (GPG, LUKS, VeraCrypt). Used by journalists, whistleblowers.
Share files anonymously over TOR network. Files hosted locally, recipient downloads via .onion address. No third-party servers.
Instant messaging over TOR. No central servers. Peer-to-peer .onion addresses.
// TOR network statistics (metrics.torproject.org, 2024)
- Total relays: 6,000+
- Bridge relays: 3,000+
- Daily users: 2 million+
- TOR Browser downloads: 100 million+
- Countries with most TOR users: United States (25%), Germany (12%), Russia (10%), France (8%), India (7%)
- Average circuit latency: 500ms - 1500ms (varies by exit node)
- Exit node countries: Germany (25%), Netherlands (20%), France (15%), United States (10%)
- TOR network bandwidth: 100 Gbps+
// Growth trends
- TOR users increased 200% since 2016
- Bridge relays increased 300% since 2020 (censorship circumvention)
This demonstration simulates TOR onion routing through 3 encrypted nodes:
This is a simulated demonstration. Real TOR network encrypts traffic in multiple layers (onion routing) and passes through 3 random nodes. TOR Browser disables JavaScript by default for anonymity. Do not log into personal accounts over TOR (identity correlation). Use TOR safely: disable scripts, avoid torrenting (slows network), use HTTPS.
Only TOR Browser provides full anonymity (correct TLS behavior, user agent, window size). Regular browsers leak identifying information (WebRTC, JavaScript, fonts).
JavaScript can de-anonymize users (reveal real IP). TOR Browser sets "Security Level: Safest" (disables JavaScript). Re-enable only for trusted sites.
Logging into Facebook, Gmail, or social media over TOR creates identity correlation (links anonymous session to real identity). Use separate browser for personal accounts.
BitTorrent over TOR slows entire network (exit nodes overloaded). Torrent clients leak IP address. Use VPN for torrenting, not TOR.
Best Practice - Use TOR Browser Only: Use official TOR Browser (not regular browser with proxy settings). Keep JavaScript disabled (Security Level: Safest). Never log into personal accounts over TOR. Do not torrent over TOR. Use HTTPS Everywhere (built-in). For maximum anonymity, boot TAILS OS from USB.
TOR is legal in most countries (United States, Canada, UK, EU, Australia, Japan). However, TOR use is restricted or illegal in some countries (China, Russia, Iran, Turkey, Saudi Arabia, Belarus, Turkmenistan). Illegal activities conducted over TOR (dark web marketplaces, child exploitation, hacking) are still prosecuted.
TOR is legal in most countries for legitimate purposes (privacy, journalism, anti-censorship). However, illegal activities conducted over TOR (dark web markets, hacking) are still prosecuted. Penalties include:
Important: This guide is for educational and defensive purposes only. Use TOR responsibly and legally.
Official TOR software downloads, documentation, and security guides.
Amnesiac live OS that routes all traffic through TOR. Maximum anonymity.