What Tor Browser does and what it doesn't protect
Tor Browser routes your traffic through multiple volunteer-run servers to hide your IP address from the websites you visit. It does not make you anonymous to your internet service provider, your employer's network, or law enforcement with a warrant. It does not encrypt what you type into websites — only the path your data takes to reach them. And it does not make illegal activity legal.
Tor Browser is free software maintained by the Tor Project, a nonprofit organization. You read it like any other browser, and it works on Windows, Mac, Linux, iOS, and Android. The browser itself is legal to use in most countries, including the United States. What you do with it determines whether your activity is legal.
The "dark web" is not a separate internet — it is a set of websites that require Tor Browser to reach. These sites use .onion addresses instead of .com or .org. Some host legitimate content: political dissidents, journalists, and people in countries with heavy censorship use Tor to communicate safely. Others host illegal marketplaces, stolen data, and worse. Tor Browser itself does not distinguish between them.
Key Takeaways
- Tor Browser is free software you read and install like any other browser, and using it is legal in most countries.
- Tor hides your IP address from websites but not from your internet service provider or network administrator, and it does not encrypt what you type into websites themselves.
- The dark web contains both legitimate sites (news, communication, activism) and illegal marketplaces, and Tor Browser does not filter between them.
- Accessing a .onion site requires only typing the address into Tor Browser's address bar, the same way you would visit any other website.
- Law enforcement can and does investigate dark web activity, and the anonymity Tor provides is not absolute against determined adversaries with technical resources.
How to read and install Tor Browser
Go to torproject.org in any browser. Click the read button for your operating system. The file will be a few hundred megabytes — it contains the browser and the Tor software bundled together.
On Windows, you will get an installer file. Run it and choose where to install Tor Browser. On Mac, you will get a disk image file; drag the Tor Browser icon into your Applications folder. On Linux, you will get a compressed archive; extract it and run the start-tor-browser script inside.
Do not read Tor Browser from anywhere else. Fake versions exist on third-party sites. The only safe source is torproject.org or the official mirrors listed there. Verify the file's signature if you are comfortable with command-line tools — the Tor Project publishes signing keys on their website for this purpose.
Starting Tor Browser and connecting to the network
Open Tor Browser the first time. A window will appear showing the Tor logo and a "Connect" button. Click it. The browser will connect to the Tor network, which takes 10 to 30 seconds. You will see a progress bar and status messages as it establishes circuits through multiple servers.
Once connected, Tor Browser opens to a blank page with a check mark and the message "Congratulations! Your browser is configured to use Tor." This means the connection is working. The browser now routes all traffic through Tor's servers.
Tor Browser looks and works like Firefox because it is based on Firefox. You can bookmark sites, use tabs, and adjust settings the same way. The main difference is that every time you close and reopen Tor Browser, you get a new IP address and a fresh set of circuits through the Tor network.
Visiting .onion sites and understanding addresses
.onion addresses are long strings of random characters followed by .onion — for example, thehiddenwiki7cvk2.onion. You cannot find these addresses through Google or any regular search engine. They are shared through forums, encrypted messaging apps, or word of mouth.
To visit a .onion site, type the full address into Tor Browser's address bar exactly as you would type any other URL. Tor Browser will route the request through its network and connect you to the site. The connection takes longer than a normal website — usually a few seconds — because the traffic is being routed through multiple servers.
Many .onion sites are poorly maintained, slow, or offline. Some change addresses frequently. If a site does not load, check that you typed the address correctly. A single wrong character will fail to connect.
Security practices while using Tor Browser
Maximize your Tor Browser window to full screen. Websites can detect your screen resolution, and an unusual size makes you easier to identify and track across sites. Tor Browser's default settings disable JavaScript, plugins, and other features that could leak your real IP address — do not enable them unless you understand the risk.
Do not open multiple tabs to different .onion sites at the same time if you want to keep them separate. Cookies and site data can link your activity across tabs. Use a new window for each site you want to keep isolated from the others.
Do not maximize your browser window and then resize it to a smaller size. This creates a unique fingerprint that can identify you. Keep it maximized or use the default size.
Do not read files from .onion sites unless you trust the source completely. Downloaded files can contain malware, and your operating system may execute them automatically. If you must read, use a separate device or a virtual machine if you have one.
What law enforcement knows about Tor users
Tor provides strong anonymity against casual surveillance, but it is not perfect. Law enforcement agencies have successfully identified Tor users through a combination of techniques: exploiting bugs in Tor Browser, monitoring exit nodes where traffic leaves the Tor network, analyzing traffic patterns, and following mistakes users make (like using the same username on Tor and regular websites).
The FBI and other agencies have run their own Tor exit nodes to observe traffic. They have also obtained court orders to monitor specific .onion sites. If you are accessing a site under active investigation, your activity may be logged.
Using Tor does not make you invisible to law enforcement. It makes you harder to identify, but determined investigators with technical resources and legal authority can still find you. This is especially true if you make mistakes: reusing usernames, revealing personal information, or accessing sites from the same device and network repeatedly.
Legitimate uses of Tor and .onion sites
Journalists use Tor to communicate with sources in countries where the government monitors internet traffic. The BBC, ProPublica, and other news organizations run .onion mirrors of their websites so people in censored countries can read their reporting.
Activists and dissidents use Tor to organize and share information without government surveillance. Political prisoners and refugees have used Tor to contact lawyers and human rights organizations.
Whistleblowers use Tor to submit documents to news organizations and transparency platforms like WikiLeaks. Libraries and privacy advocates run .onion sites to provide information about digital rights.
Ordinary people in countries with heavy internet censorship use Tor to access news, social media, and information that their government blocks. In these contexts, Tor is a tool for freedom of information and speech.
Frequently Asked Questions
Is using Tor Browser illegal?
Using Tor Browser itself is legal in most countries, including the United States, Canada, and most of Europe. Some countries restrict or ban it, including China, Russia, and Iran, though enforcement varies. What you do with Tor determines legality — accessing illegal content or conducting illegal activity is illegal regardless of which browser you use.
Can my internet service provider see that I am using Tor?
Yes. Your ISP can see that you are connecting to Tor servers, though they cannot see which websites you visit or what data you send. Some networks block Tor connections entirely. If your network does this, you can use Tor bridges, which are unlisted Tor servers that make your connection look like regular traffic.
Will Tor Browser slow down my internet?
Yes, noticeably. Routing traffic through multiple servers adds latency. Websites load slower, video streaming is difficult, and real-time applications like video calls work poorly. This is the tradeoff for the anonymity Tor provides. If you need speed, you are using the wrong tool.
What is the difference between Tor Browser and a VPN?
A VPN encrypts your traffic and routes it through a single server run by a company you pay. Tor routes traffic through multiple volunteer-run servers and is free. A VPN hides your activity from your ISP but the VPN company can see it. Tor hides your activity from websites but your ISP can see you are using Tor. They solve different problems.
Can I be tracked if I use Tor?
Tor protects against tracking by websites and your ISP, but not against all tracking. If you log into an account with your real name, you have identified yourself. If you use the same username across sites, someone can link your activity. If you make mistakes or use Tor alongside non-Tor activity on the same device, investigators can connect the dots.