When it comes to protecting your privacy online, VPNs are the most commonly-used weapon. According to an August 27, 2018 report by GO-Globe.com nearly 25% of Internet users had used a VPN at least once in the preceding 30 days. Given Statista.com’s count of almost 4 billion Internet users in 2018, we’re talking about over 400 million people using VPNs.

In 2020, more people than ever are using the internet, and with the nasty COVID-19 forcing many to work from home, a VPN is an important tool in your privacy-protection arsenal.

But VPNs aren’t the only weapon regular people are using in this fight. Tor, the anonymity network originally developed by the United States Naval Research Lab, has a big audience too. Exact numbers are difficult to come by (it is an anonymous network after all), but the Tor Project’s Tor Metrics page consistently shows around 2 million users per day.

Tor and VPNs have complementary strengths and weaknesses. Privacy advocates have long considered and disagreed about, the benefits of using Tor and a VPN together.

In this article, we’ll take a quick look at how Tor and VPNs work. We’ll also take a quick look at the controversy over using the two together and exactly how that should be done. And we’ll wrap it up with a guide to installing and using our recommended configuration.

Tor, which stands for “The Onion Router,” is a free and open source network designed to provide anonymity for its users. Data passes between your computer and the Internet through a series of thousands of volunteer-run Relays (servers) that hide the user’s identity and location from anyone monitoring Internet traffic.

Tor protects its user’s privacy, but some websites block connections from any Relays known to be part of the Tor network. Governments and other global adversaries may be able to monitor the known entrances (Guard Relays) and exits (Exit Relays) of the Tor network to attempt to de-anonymize users.

A VPN (Virtual Private Network) is a service that provides an encrypted connection from your computer to servers in the VPN network. The VPN server then connects to the target website and relays data between your computer and the target. As far as the target site can tell, it is communicating with the VPN server and not with your computer.

Because many VPNs have servers located in dozens of countries throughout the world, you can use a VPN to appear to be located in another country, and access sites that are not available in your actual location.

Similar to Tor, there are sites that block VPN access.

While both Tor and VPNs help to protect your privacy online, the differences in the way they function give them different strengths and weaknesses. Understanding these differences will help when we get to the discussion of whether and how to use Tor and a VPN together.

Let’s start by looking at Tor’s strengths and weaknesses.

Tor is good at providing anonymity without the need to trust anyone. No Relay in the network knows the complete path between your computer and the target website. This prevents individual Relays in the network from breaking your anonymity.

The biggest privacy weakness of Tor is that it is possible to monitor your computer and try to correlate the timing of traffic between your computer and Exit Relays. Statistical analysis could then possibly identify you.

Another weakness is that most Exit Relays are at known IP addresses. This allows websites to block access from those addresses.

A different kind of Tor weakness is that your ISP can see that you are using Tor. Governments and intelligence services likely consider the use of Tor to be suspicious.

Finally, because Tor requires multiple levels of encryption, and hops between at least three computers scattered around the world, it is slow. That is, browsing using Tor is much slower than connecting directly to the target website.

VPNs are good at protecting your privacy without having a major impact on your browsing speed. The best ones use military-grade encryption while only reducing your browsing speed by 10% or less. They also incorporate a kill switch or other techniques to ensure that your data is not exposed if the VPN connection fails for some reason.

When you use a VPN, your ISP and anyone else snooping on your connection can see that you are connected to the VPN. But they can’t see the data passing through the VPN or what you are connected to. So you are safe from everyone, except your VPN provider.

The biggest weakness with a VPN is that the VPN provider can see where you go and what you do online. After all, it is their software that encrypts your connection and routes it to the destination. While a VPN can see this information if they wish, a good VPN will normally keep track of as little of this information as possible.

Exactly what information a VPN needs to log and how long it needs to keep it to function properly is an open question. But the best privacy-oriented VPNs will log as little information as possible for as short a time as practical.

In particular, they will keep no connection logs. Connection logs don’t include information on which sites you visit, but they still contain enough information that they can be used to identify you.

But any VPN has the potential to record this information and can be forced to do so by the authorities in the country where the VPN service is physically located.

As someone once put it, “no VPN provider is going to go to prison to protect a $20/month subscriber.”

You can minimize this risk but not eliminate it. VPNs are based in many different countries around the world. Using a VPN that is based in a country with strong privacy protections can reduce the risk that a VPN would be required to turn over logs with your data.

As we just discussed, Tor and VPNs both have their own strengths and weaknesses. It seems that using them together might be a way to leverage their strengths and minimize their weaknesses. Even so, some influential privacy experts have argued against doing so.

We think it does make sense to use Tor and a VPN together, but it makes sense to spend a few minutes looking at the arguments for and against doing so. Then you can decide if you agree with our proposed solution or not.

One big argument against using Tor and a VPN together is that it slows you down. Browsing with a good VPN will likely be around 10% slower than not using a VPN. Browsing with Tor will be significantly slower than not using Tor. A VPN together with Tor will be slower yet.

The other drawbacks vary depending on how you set things up. You can take the Tor over VPN approach, or the VPN over Tor approach. The developers of the Tails Operating System (which uses Tor by default) are opposed to using a VPN with Tails except in very specific circumstances.

Likewise, the Tor Project team advises setting up something called a Tor Bridge as an anonymous entry point into the Tor network.

In both these cases, the idea is that a VPN is not a true anonymous service since the VPN provider does have identifying information about you. In other words, you need to be able to trust your VPN.

The arguments for using Tor and a VPN together look at the ways that using both together can address some of the weaknesses of each. For example, Tor alone could be vulnerable to attacks on its Exit Relays, while a VPN alone is vulnerable to men with guns showing up at its offices and demanding information.

To get more specific about the arguments for (and against) using Tor and a VPN together, we need to look at the two ways of doing so: Tor over VPN, and VPN over Tor.

In the Tor over VPN approach, you start your VPN before you connect your browser to the Tor network. For simplicity, we will assume that you are using the Tor Browser (the browser) for the most secure connection to Tor and that you want to visit the xyz.com website.

Data passing from xyz.com to your browser follow the reverse route.

One last thing to consider. VPN providers have strong incentives to protect your privacy. ISPs have much less incentive and are easily subject to government pressure to record your activities and turn over records about you. In the United States, ISPs can legally gather and sell information about your online activities without your consent.

The Tor over VPN approach relies less on the trustworthiness of your ISP and more on that of your VPN provider.

In a VPN over Tor setup, the VPN encrypts each connection in the Tor network. On the positive side, in this approach, your data is still protected by the VPN’s encryption when it leaves the Tor Exit Relay. Drawbacks to this approach include:

While VPN over Tor does have some benefits, we think that Tor over VPN is the better approach. If nothing else, choosing this approach leaves you more dependent on the trustworthiness of your ISP than Tor over VPN.

We think that the Tor over VPN approach offers a better privacy solution for most users with normal needs. If you are a spy, or otherwise at really high risk of really painful consequences, there are stronger solutions such as Qubes. But for most normal folks, a Tor over VPN solution looks good. The following video offers a nice summary of the pros and cons.

This solution is also surprisingly easy to set up. Just keep reading...

Setting up a Tor over VPN configuration is pretty simple, and it isn’t dependent on your choice of operating system or anything like that.

Follow these instructions to set up and use Tor over VPN:

It is important to remember that you must launch the VPN before you launch the Tor Browser if you want to get the benefits of this approach.

While there remains some controversy about it, we believe that there are clear benefits to using both Tor and a VPN together.

In this article, we’ve looked at each of these tools and the ways they help you preserve your privacy online. We also looked at the two ways they can be used together and arguments for and against each. We wrapped up with a quick guide on how to boost your online privacy by setting up the Tor over VPN approach on your own system.

We hope you found this guide useful and if you are currently looking for a VPN provider, we recently compared two of the leading services which can be found here:

Disclosure: Blokt strives to provide transparent, honest reviews, and opinions. The writer of this article is a user of the product(s) or service(s) mentioned in this article and was not influenced by the respective owners.

We rarely run ads, but sometimes earn a small commission when you purchase a product or service via a link on our site. Thank you kindly for your support.

Read more or donate here.

Tor or VPN – Which is Best for Security, Privacy & Anonymity? [2020] was originally found on Cryptocurrency News | Tech, Privacy, Bitcoin & Blockchain | Blokt.

Similar to Notcoin - TapSwap on Solana Airdrops In 2024

origin »

210 +