Differences Between VPN, Tor, and Proxy

VPNs, Tor, and proxies are all mechanisms related to how the communication path is visible.

However, they are not the same thing. Choosing by name alone is quite dangerous.

A VPN is a mechanism that sends communication through a VPN server. Tor is a mechanism that uses multiple relay nodes to make it harder to directly connect the source and destination. A proxy is a mechanism that sends specific traffic through a relay server.

None of them is enough by itself for anonymity. Each differs in visible information, trusted parties, suitable uses, and limits.

This article organizes the differences between VPNs, Tor, and proxies from the perspective of anonymity. We will look not at "which is strongest," but at "who you do not want to reveal which information to."

First, the Perspective for Comparison

When comparing VPNs, Tor, and proxies, it is important not to judge by name alone.

What you should look at is who can see what. Do you not want to show your home IP to the destination? Do you not want to show destinations directly to your ISP? Do you want to change the route only for a specific app?

If the purpose changes, the tool you choose also changes.

For anonymity, you need to think about accounts and browser state together with the communication path. If you separate these, failures happen, such as "the IP changed, but the Cookie shows it is the same person."

What Is a VPN?

VPN stands for Virtual Private Network.

It creates an encrypted communication path from the user's device to a VPN server, then sends traffic outward through that VPN server.

From the destination website's perspective, the access appears to come from the VPN server's IP address, not from the user's home or workplace IP address.

VPNs are also used to protect and connect communication paths on public Wi-Fi or from outside the workplace to an internal company network. They are also used when you do not want to show your home IP directly to the destination.

Concrete examples include commercial VPN services such as Proton VPN and Mullvad VPN.

Proton VPN is a VPN from Proton, which operates privacy-oriented services including Proton Mail. The reason to introduce it is that not only supported devices and servers, but also no-logs policy audits, open-source apps, and transparency reports can be checked as official information.

Proton VPN official site URL : https://protonvpn.com/

Mullvad VPN is characterized by a design that uses numbered accounts and does not require an email address or password. Its logging policy and payment methods can also be checked on the official site.

Mullvad VPN official site URL : https://mullvad.net/

The important point here is that a VPN is a tool that "changes the trusted party," not one that "removes the trusted party."

However, when you use a VPN, you trust the VPN provider. The VPN provider handles information related to the user's connection source and destinations. For that reason, you need to check the logging policy, operator, jurisdiction, app behavior, and DNS handling.

What Is Tor?

Tor is a mechanism that sends communication through multiple relay nodes to make it harder to directly connect the source and destination.

When you access a website with Tor Browser, the destination website usually sees the IP address of a Tor exit node, not the user's own IP address.

Tor does not gather the communication path into a single VPN provider. Instead, it divides roles among multiple nodes. This is a major difference from a VPN.

Tor is one of the most important mechanisms in modern anonymous communication. The onion routing that became the basis of Tor was researched at the U.S. Naval Research Laboratory in the 1990s. Today, the Tor Project develops Tor Browser and the Tor network.

The Tor Project is the official project that develops and publishes Tor Browser and the Tor network. Tor is an important mechanism for making it harder to directly connect the source and destination, and its trust model is very different from a VPN's. If you use it, check official information as well as short third-party explanations. URL : https://www.torproject.org/

However, Tor is not all-purpose. If you log in to a real-name account, behavior is linked to the account. If app traffic outside Tor Browser goes out through the ordinary connection, information leaks through a different path. Also, from an ISP or organizational network, there are environments where the fact that Tor is being used is itself visible.

In other words, Tor can aim for strong anonymity, but it is also sensitive to mistakes in use. If you install extensions with the mindset of an ordinary browser or log in to real-name services, you break the design yourself.

Detailed Tor usage, bridges, exit nodes, and operational cautions are covered in another article.

What Is a Proxy?

A proxy is a relay server that accesses destinations on the user's behalf.

When you configure a proxy in a browser or app, that communication is sent through the proxy server. From the destination website's perspective, it appears as the proxy server's IP address.

However, there are many kinds of proxies, and their protection scope varies.

Some proxies apply only to the browser, while others apply only to a specific app. How communication content is protected also changes depending on the type of proxy and the destination's HTTPS.

When using a proxy for anonymity, you need to trust the proxy operator. Also, due to misconfiguration, only some traffic may go out through the ordinary connection.

A proxy is convenient as a component that changes the communication path. However, if you place it at the center of anonymity, always check the protection scope and trust in the operator. Using an unclear free proxy as an "anonymization tool" is dangerous.

Comparing VPN, Tor, and Proxy

VPNs, Tor, and proxies are all mechanisms that change how the communication path is visible, but their design philosophies differ.

This table is a general organization. The actual visibility changes depending on settings, apps, DNS, browsers, and destination services.

What the Destination Can See

With an ordinary connection, the destination website can see the IP address of the user's connection.

When you use a VPN, Tor, or proxy, the IP address visible to the destination changes to the relay destination's IP address.

However, information other than the IP address also reaches the destination website.

• Cookie
• Login state
• User-Agent
• Browser and device characteristics
• Access time
• URL and request content
• Post content

In other words, even if you change the IP visible to the destination, if you are logged in to the same account, the behavior is linked to the account. If the same Cookie is sent, it is judged to be the same browser.

This point is covered in detail in the article "Hiding your IP is not enough for anonymity."

What the ISP Can See

When you use a VPN or Tor, the information visible to the ISP also changes.

With an ordinary connection, the ISP can observe the destination IP address, communication time, traffic volume, and similar information. When you use a VPN, the ISP sees that you are connecting to a VPN server. When you use Tor, the ISP sees that you are connecting to the Tor network.

However, even when using a VPN or Tor, traffic volume and communication timing remain. The state is "content is harder to see, but the fact of communication is visible."

The method you should choose changes depending on which actor you want to hide what from.

Be Careful About DNS and Leaks

When using VPNs, Tor, or proxies, DNS handling is also important.

DNS is the mechanism that maps domain names to IP addresses. Even if you change the communication path, if only DNS queries go out to the ordinary ISP side, which domains you tried to view becomes visible through a separate path.

This is called a DNS leak.

Also, a browser's WebRTC feature or per-app communication settings can send information through unintended paths.

When using a tool that changes the path, you need to check not only the IP address but also DNS, WebRTC, per-app communication, and browser login state.

Which Should You Choose?

There is no one answer where VPN, Tor, or proxy is always correct.

What is suitable changes depending on the purpose.

In high-risk situations, do not judge by tool name alone. You need to build the threat model first. Threat models and trust models are covered in detail in another article.

Summary

VPNs, Tor, and proxies are all mechanisms that change how the communication path is visible.

A VPN sends communication through a VPN server. The destination sees the VPN server's IP address, but you need to trust the VPN provider.

Tor uses multiple relay nodes and makes it harder to directly connect the source and destination. However, login state, Cookies, traffic outside the browser, and post content require caution.

A proxy is a mechanism that sends specific traffic through a relay server. It has many types, and its protection scope and reliability can be hard to understand.

None of these methods is enough by itself for anonymity.

When thinking about anonymity, you need to separate what is visible to the destination, ISP, VPN provider, proxy operator, website, account, and browser.

Related tools

Related articles