What Is Tor?
Tor makes it harder to directly connect the user and the destination through multiple relays, but login state, content, files, and timing still matter.
Tor is an important mechanism that always comes up when thinking about anonymity.
However, it is dangerous to understand Tor only as "a browser that hides IP addresses." The essence of Tor is making it harder to directly connect the user and the destination. Instead of simply relaying communication through one place, it uses multiple relay nodes to separate the communication path.
Tor is a powerful mechanism, but using it does not automatically make someone anonymous.
Logging in to a real-name account. Installing extensions with the same mindset as an ordinary browser. Writing routine places or a workplace in post content. If you operate this way, even if you hide the communication path, other clues will link back.
This article organizes the basics of Tor, the scope it can protect, and the risks that remain. Detailed operational procedures are covered in the Tor Browser practice article.
Tor Basics
Tor is a mechanism that makes it harder to directly connect the user and the destination by sending communication through multiple relay nodes.
In ordinary web access, the destination site can see the source IP address. When you use Tor Browser to access a website, the destination usually sees the IP address of a Tor exit node, not the user's home IP address.
The Tor Project is the official project that develops and publishes Tor Browser and the Tor network. If you use Tor, check official information, not only unofficial summaries.
URL : https://www.torproject.org/
| Element | Role | Meaning for anonymity |
|---|---|---|
| Tor Browser | Browser that makes Tor easier to use | Adjusts the communication path and browser settings for anonymity |
| Entry node | First relay point near the user side | Sees the source, but does not directly see the final destination |
| Middle node | Relays traffic in the middle of the path | Weakens the direct connection between the user and the destination |
| Exit node | Last node that goes out to the destination site | Becomes the IP address visible to the destination |
| Destination site | The party ultimately accessed | Processes post content, Cookies, and login state |
Tor has a different trust model from VPNs, which make the VPN provider a major trusted party.
By dividing the path into multiple roles, Tor makes it harder for any one relay point alone to see the whole picture.
How Visibility Changes With Tor
When you use Tor, the IP address visible to the destination changes.
Also, from an ISP or a workplace or school network, it may look like you are connecting to the Tor network rather than directly connecting to an ordinary website.
| Party | Visible information | Information that becomes harder to see |
|---|---|---|
| Destination site | Tor exit node, request content, Cookies, login state | User's home IP |
| ISP | The fact of connecting to the Tor network, traffic volume, time | Final destination and page content |
| Entry node | User's source IP | Final destination |
| Exit node | Destination, and content if communication is plaintext | User's original IP |
| Service operator | Account information, post content, logs | Does not disappear through the communication path alone |
What matters here is that Tor makes it harder to directly connect the source IP and destination, but it does not erase post content or login state.
If you log in to a real-name account through Tor, that action is linked to the real-name account.
Situations Where Tor Is Suitable
Tor becomes an important option in situations where strong anonymity is needed.
You may want to avoid censorship, avoid showing your home IP to the destination, separate the source of investigation or information gathering, or provide information anonymously. In these situations, Tor may be more suitable than an ordinary connection or a simple VPN.
| Situation | Why Tor helps | Caution |
|---|---|---|
| Censorship circumvention | Can avoid ordinary connection paths | Tor use itself stands out in some regions |
| Investigation | Makes it harder to show your home IP to the destination | Login and search terms can be correlated |
| Anonymous posting | Makes it easier to separate the source IP | Post content and time become clues |
| Information submission | Makes it harder to directly connect the communication path | Also look at the submission destination and file metadata |
| Use in public environments | Changes how it looks from the local network | Security cameras and on-site records are separate issues |
For high-risk information submission or whistleblowing, do not make decisions based on Tor alone.
The trustworthiness of the submission destination, document metadata, access times, internal organizational logs, and legal risks also matter.
What Tor Cannot Protect
Tor failures do not happen only because of Tor encryption or routing.
Many happen because of operational mistakes.
| Remaining risk | Example | Reason |
|---|---|---|
| Login state | Logging in to a real-name social media account | The account indicates the person |
| Cookies | Revisiting with the same browser | Treated as the same user |
| Post content | Writing about workplace, region, or family | The person's profile becomes visible from the content |
| Writing style | Similar to real-name posts | Becomes correlation for the writer |
| Files | Author name or location information remains | Information separate from the communication path |
| Time | Posting right after being on-site | Connects to action time |
Tor is an important mechanism for hiding the communication path.
However, anonymity is not determined by the communication path alone. Accounts, browsers, files, post content, and past information must be looked at together.
Checks Before Using Tor
Before using Tor, decide what you want Tor to protect.
If you only think "I am anxious, so I will use Tor," the operation breaks down. The items to check change depending on whether you do not want to show your home IP to the destination, want to separate investigation activity from a real-name environment, want to avoid censorship, or want to separate the route for information submission.
| Check item | Reason |
|---|---|
| Will you avoid real-name accounts? | Login links the action to the person |
| Will you avoid mixing it with your usual browser? | Cookies and history correlate |
| Is there no routine-place information in post content? | The communication path cannot hide the content |
| Did you check before sending files? | Metadata and author names may remain |
| Is Tor use itself conspicuous in the environment? | It may be visible from an ISP or organizational network |
Tor is a strong tool.
The stronger the tool, the more operational mistakes matter. Use it without breaking the standard settings, without mixing it with real-name environments, and while separating what Tor can protect from what it cannot protect.
What to Keep in Mind as Tor Basics
This article covers the basics of Tor.
Bridges, Snowflake, exit node details, Tor Browser security levels, combinations with operating systems, and how to choose between Tails and Whonix are covered in separate articles.
The central point to remember here is that Tor changes the visibility of the communication path. It does not automatically erase post content or login state.
Summary
Tor is a mechanism that uses multiple relay nodes to make it harder to directly connect the user and the destination.
The IP visible to the destination is usually a Tor exit node. From an ISP, the fact that you are connecting to the Tor network may be visible.
Tor is an important technology that supports strong anonymity, but it is not a complete solution by itself.
If real-name logins, Cookies, post content, writing style, file metadata, or posting time are correlated, anonymity breaks down even if the communication path is hidden.
When using Tor, always check not only "what becomes invisible," but also "what still remains."
Related tools
BrowserLeaks WebRTC
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
BrowserLeaks Fingerprint
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
EFF Cover Your Tracks
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.
Tor Project
An external resource related to this article. Open it only when it fits your situation and threat model.
Why it is listed: It can help with the article topic, but it is outside Anonymity Sense and should be checked before use.