Tor and a VPN are both tools that use a combination of proxies and encryption to make it difficult for snoopers to track you. While they share some similarities, the key difference is that Tor is for anonymity, and a VPN is for privacy. The two can be used in tandem to further bolster both privacy and anonymity. This article will cover the best VPNs for the Tor browser and explain how to use a Tor VPN.

We get into a lot of detail below, so if you only have time for a summary, here is our list of the best VPNs for Tor:

  • NordVPN Best VPN for Tor. Fastest VPN on the market. Military-grade encryption, with special Tor over VPN servers. 30-day money-back guarantee.
  • Surfshark Best low cost VPN for Tor. Decent speeds, no connection limits, and impressive unblocking abilities.
  • ExpressVPN Fast veteran provider that accepts Bitcoin and has an onion site. Great for streaming, torrenting, or just general browsing.
  • CyberGhost Excellent security, fast connection speeds, and zero logs. Another good budget VPN for Tor.
  • PrivateVPN Simple to use VPN for Tor. Fast servers, and no logs. Also works well with streaming sites.
  • IPVanish Advanced security, zero logs, and fast. Also popular with Kodi and torrent users.
  • AtlasVPN Servers in over 40 locations. Offers apps for desktop and mobile and unblocks a vast range of streaming services.

How to use Tor with a VPN

We’ll use Tor Browser as an example, though there are several ways to connect to Tor. With the Tor Browser installed:

Here’s how to use a VPN with Tor:

  • Sign up with a VPN. Our top recommendation is NordVPN.
  • Download and install the VPN app.
  • Run the app and select a VPN server.
  • Hit the Connect button and wait for the app to confirm the connection.
  • Open the Tor Browser and surf the web.

This setup sends your internet traffic first through the VPN server, and then through the Tor network. That means your data goes through two phases of encryption before it ever leaves your device: once by Tor and then again by the VPN. Your internet service provider can’t see what’s in the VPN’s encrypted tunnel, and therefore cannot detect that Tor is being used.

Best VPNs for Tor browser and the dark web

We’ve evaluated the best VPNs for Tor-based on the following criteria:

There are no hidden terms—just let customer support within 30 days if you decide NordVPN isn’t right for you and you’ll receive a full refund. Start your NordVPN trial here.

  • Features designed specifically for Tor users
  • No logs policy
  • Strong encryption
  • Anonymous payment methods
  • Fast connection speeds

The best VPNs for Tor – At a glance

We’ve compared the most important features for the top VPNs here. Prefer to read the in-depth reviews? Start with NordVPN – our #1 choice for Tor.

In addition to the above criteria we run a wider program of extensive VPN testing and research. You can read more here on our VPN testing methodology.

1. NordVPN

                    Jan 2023

Works with TorTested Jan 2023

Apps Available:

  • PC
  • Mac
  • IOS
  • Android
  • Linux
  • Background
  • FireTV

Website: www.NordVPN.com

Money-back guarantee: 30 DAYS

NordVPN gives users access to specialized servers pre-configured with Tor over VPN, which means all traffic is first sent through the VPN and then automatically redirected through the Tor network. This is great if you have apps other than an internet browser that you’d like to use with Tor. A double-VPN option is also available, which could be used with the Tor browser for a total of two VPNs and the Tor network, if you can tolerate the speed hit. NordVPN also boasts a strict zero logs policy and 256-bit AES encryption. The company accepts Bitcoin.

Apps are available for Linux, Windows, MacOS, iOS, and Android.

Note that some experts object to Tor over VPN servers because NordVPN could hypothetically see what users are doing with their Tor connection by analyzing traffic before Tor encrypts it. NordVPN says it keeps zero logs, but if this is a concern, we recommend setting up Tor and the VPN independently.

BEST FOR TOR:NordVPN is our first choice. Offers Tor-specific servers, exceptionally high speeds and secure connections. What’s more, it comes with a 30-day money-back guarantee, allowing you to try it risk-free.

Pros:

  • Onion servers
  • No logs
  • Extremely high speeds
  • Advanced security features
  • Accepts bitcoin

Cons:

  • A few servers didn’t work

Our score:

Read our full NordVPN review.

2. Surfshark

Works with TorTested Jan 2023

  • PC
  • Mac
  • IOS
  • Android
  • Linux

Website: www.Surfshark.com

Surfshark has 3,200+ servers in more than 60 countries, so you should be able to get a fast connection regardless of where you are in the world. This VPN has a no-logging policy and secures your traffic with 256-bit AES encryption, a kill switch, and protection against IPv6, DNS, and WebRTC leaks. Making it a solid choice for a Tor browser VPN.

This service also has a couple of more advanced features to keep your online activity hidden. For instance, you can connect to multi-hop servers for even greater anonymity or speed up your other apps by using the split tunneling feature. Surfshark accepts Bitcoin, Ethereum, and Ripple payments, allowing you to sign up almost completely anonymously. Support is available 24/7 over live chat.

Surfshark offers iOS, Android, Linux, MacOS, and Windows apps. It also works with supported routers but must be configured manually.

BEST BUDGET OPTION:Surfshark takes your security seriously, keeps no logs, and comes at a very reasonable price. Better still, it offers a 30-day money-back guarantee.

  • Puts major emphasis on user security and privacy

  • Has no connection limit

  • Great unblocking ability

  • Keeps no logs

  • Good speeds

  • Menus could be better organized

Read our full Surfshark review.

3. ExpressVPN

Website: www.ExpressVPN.com

ExpressVPN recently launched a .onion version of its website for users who want to anonymously make an account. The British Virgin Islands-based company accepts Bitcoin and sticks to a strict no-logs policy. Some non-identifying information is logged such as dates (not times), choice of server location, and total amount of data transferred each day. Cutting-edge encryption is used by default including 256-bit AES encryption, 4,096-bit DHE-RSA keys with perfect forward secrecy, and SHA512 authentication.

ExpressVPN is highly rated, fast, user-friendly and has apps available for Windows, MacOS, Android, iOS, and Linux (command line).

SPEEDY AND SECURE:ExpressVPN is fast and versatile, with strong unblocking ability and a ton of security features. Includes a 30-day money-back guarantee.

  • Fast and reliable

  • Accepts bitcoin

  • Has a .onion site

  • Great security and privacy offering

  • Slightly more expensive

  • Few advanced configuration options

Read our full review of ExpressVPN.

4. CyberGhost

Website: www.Cyberghost.com

Money-back guarantee: 45 DAYS

CyberGhost doesn’t have any Tor-specific features, but it is the only VPN to earn a perfect score in our security and privacy assessment. For this reason, it pairs well with the Tor Browser. CyberGhost assigns each user a unique anonymous ID, and the email address you use to sign up is encrypted. This prevents third parties from connecting a users’ email address to their CyberGhost account. CyberGhost stores no identifying logs.

The company is based in Romania, which has no mandatory data retention laws. Strong encryption, leak protection, a kill switch, and perfect forward secrecy are all included in the apps, even on mobile. Internet connection speeds are plenty fast enough to handle Tor traffic.

Apps are available for Windows, MacOS, Linux, iOS, and Android. You may connect up to seven devices at a time.

FAST SPEEDS:With comprehensive protection and one-click unblocking enabled by default, as well as high download speeds and a low cost, CyberGhost is ideal for those new to VPNs. This comes with a 45 day money-back guarantee.

  • Advanced online security

  • Zero logs

  • Bitcoin accepted

  • Fast

  • No Tor-specific features

  • Could offer more customizable options

Read our full CyberGhost review.

5. PrivateVPN

Website: www.PrivateVPN.com

PrivateVPN’s website has a helpful guide on how to alter the OpenVPN configuration files included in the app so that outgoing internet traffic first passes through the Tor network, and then through the VPN—a setup known as “VPN over Tor”. If you want to use the Tor browser to access sites on the clear web that don’t normally allow Tor connections, your IP address will be that of the VPN server, and the site won’t block you. Note that if you don’t want your ISP to see that you’re using Tor, it’s better to use a standard VPN connection with the Tor browser.

PrivateVPN offers great speeds and advanced security, plus a strict no-logs policy. You can connect 10 devices simultaneously.

UP AND COMER:PrivateVPN is a newer provider that earns its place among the veteran players. It comes with a 30-day money-back guarantee.

  • Zero logs

  • Fast servers

  • Strong encryption

  • Supports Tor-over-VPN

  • Smaller server network

Read our full PrivateVPN review.

6. IPVanish

Website: www.IPVanish.com

IPVanish is a speedy VPNs that doesn’t sacrifice privacy or security. A subscription gets you strong leak protection, unbreakable encryption, and a strict no-logs policy. IPVanish allows any number of simultaneous connections, which is extremely rare for a budget provider. IPVanish apps come with an obfuscation feature that disguises the encrypted VPN tunnel as normal internet traffic. It doesn’t accept bitcoin, though, so if you want to make an anonymous purchase, look elsewhere.

Apps are available for Windows, MacOS, iOS, and Android.

FAST & SECURE:IPVanish offers a great combination of speed and security, plus a 30-day money-back guarantee.

  • Fast speeds

  • Privacy protection is solid

  • No logs

  • Bitcoin not accepted

  • Doesn’t work in China

Read our full IPVanish review.

7. AtlasVPN

  • PC
  • Mac
  • IOS
  • Android
  • Background
  • FireTV

Website: www.atlasvpn.com

AtlasVPN operates 750+ servers in over 40 locations with fast and consistent connections across its network. This is great as Tor can have a negative impact on your speeds. If you stream while using Tor and AtlasVPN, your connection is boosted with the WireGuard protocol. AtlasVPN lets you watch Netflix US, Disney plus, prime Video, and more from anywhere without running into geo-blocks.

AtlasVPN doesn’t record your internet activities and uses AES encryption to secure your connectivity. Split tunneling lets you separate regular traffic from VPN traffic, while its kill switch cuts your connection if your VPN drops. Breach monitoring, ad blocking, and malware protection are also included.

Apps for iOS, Windows, Android, and macOS are available with unlimited device limits. 24/7 support is included; you can try it risk-free for 30 days, but canceling is a little tricky.

EASY-TO-USE APPS:AtlasVPN works with Prime Video, Netflix US, Hulu, and more. It uses WireGuard and includes a 30-day money-back guarantee.

  • Full P2P support

  • Speedy VPN with great streaming ability

  • Lots of powerful security tools

  • Users must email support to cancel

  • Can’t be installed on Linux or routers

Read our full AtlasVPN review.

VPNs that Tor users should avoid

HideMyAss

Due to poor logging policies that have led to the arrest of at least one user in the past and more invasive data retention laws recently passed in the UK, England-based VPN provider HideMyAss should be avoided by anyone who values privacy and anonymity.

PureVPN

A man accused of cyber stalking was recently arrested by the FBI thanks in part to records provided by Hong Kong-based VPN provider PureVPN. The individual used PureVPN in an attempt to hide his identity, but the provider handed over logs that ultimately led to his arrest. PureVPN has since updated its privacy policy to state that it keeps absolutely no logs, but Tor users should probably still steer clear if you’re looking for an extra layer of privacy.

Tor over VPN vs VPN over Tor

Should you use VPN over Tor or Tor over VPN? Both have their advantages when it comes to both security and usability. We’ll outline the advantages and disadvantages here.

Tor over VPN

You can use Tor over VPN simply by connecting to a VPN and accessing the internet through the Tor browser. Your traffic is encrypted by both Tor and the VPN before leaving your device. The traffic flow looks like this:

My device –> Encrypted by VPN and Tor –> VPN server –> Tor Network –> Internet

Pros:

  • ISP cannot see you are using Tor
  • Neither ISP nor VPN can see your traffic*
  • Easy to set up. Just connect to VPN and turn on Tor browser
  • Access to .onion websites
  • Flexibility to use VPN by itself with a normal browser for non-critical tasks
  • Tor entry node cannot see real IP address

Cons:

  • Websites can block traffic from Tor exit nodes
  • VPN can see (and potentially log) your real IP address
  • Exposes traffic to compromised Tor exit nodes

*Note that NordVPN and BolehVPN could hypothetically analyze your traffic before it’s encrypted by the Tor network when using their Tor-over-VPN-enabled servers. The trade off is that all traffic can be routed through Tor without configuring individual apps to be used with Tor.

VPN over Tor

VPN over Tor is more difficult to set up because it requires configuration on the VPN server. As far as we know, only AirVPN offers this capability. The traffic flow looks like this:

My device –> Encrypted by VPN and Tor –> Tor network –> VPN server –> Internet

  • Neither ISP nor VPN can see your traffic

  • Access to websites and apps that normally block traffic from Tor exit nodes

  • VPN cannot see your true IP address

  • Not vulnerable to compromised Tor exit nodes

  • All traffic routed through Tor without individual configuration

  • No packet discrimination by Tor exit nodes

  • ISPs can see you are using Tor

  • Difficult setup, requires VPN provider’s assistance

  • No access to .onion websites

  • Tor entry node sees your real IP address

  • Not application-specific, so unable to run P2P or other programs outside of Tor network without disconnecting from the VPN

See also: Tor vs VPN – What’s the difference?

Methodology: Finding the best VPNs for Tor

If you’re using Tor, it’s a safe bet that you’re interested in privacy. However, this isn’t the only thing to think about when looking for a VPN; you’ll also need one with high speeds, consistent performance, and the ability to fly under the radar. Here are the key features we looked for when creating our list of the best VPNs for Tor:

Looking to find out what other tests we perform? You’re in luck: we have a post that breaks down every step of our VPN testing process.

While most good VPN providers offer a “no logs” policy, VPNs still require a degree of trust that the provider won’t record user traffic or give in to corporations, hackers, and governments that demand user information. Your activity is private, but not necessarily anonymous.

Tor encrypts the user’s traffic and routes it through several nodes run by volunteers, known as the Tor network. Every time a new website request is sent, the route changes, making it next to impossible for anyone to trace the user. Unlike a VPN service, there’s no central authority that controls the traffic flow, so trust is not necessary.

These entry and exit nodes are well documented, however, so both your ISP and the destination server can easily find out if you’re using Tor. Some ISPs, websites, apps, and governments will block traffic to and from Tor entry and exit nodes altogether. In some countries, simply accessing the Tor network will get your name added to an ISP’s naughty list. That means your activity is anonymous, but not entirely private.

VPNs are faster and thus more suitable for streaming video, torrenting, and other download-intensive tasks. Tor is more suitable for anonymous web browsing and accessing .onion websites on the DarkNet.

For extra protection and more flexibility, Tor and a VPN can be combined. Traffic can be encrypted by both and then channeled first through the Tor network and then over a VPN (VPN over Tor) or vice versa (Tor over VPN). We’ll discuss the pros and cons of both configurations further down, but first let’s talk about which VPNs are most suitable for Tor users. Note that while combining Tor with a VPN will improve anonymity and privacy, it will have a heavier impact on connection speed and latency than using either one on its own.

Be wary of free VPNs. They look enticing on the surface, but in reality, they often use substandard encryption, lack security, force users to wait in queues to connect and impose data or bandwidth caps on users. They often have fewer servers and IP addresses, which makes it easier to trace individual users. Many inject advertisements and tracking cookies into users’ browsers, sacrificing their privacy rather than bolstering it.

A standard VPN, by contrast, encrypts your connection once and routes it through a single server. That server location is operated by the VPN company. A benefit of how a VPN functions is that subscribers can pick from a list of server location options in the VPN app. This gives the user control over where they spoof their IP address, which provides the added benefit of being able to access regional internet services.

However, such attacks tend to be costly, targeted, and would require a well-resourced adversary to pull off. Tor’s anonymity and security is more than adequate for the vast majority of users.

Bear in mind, users can also be a threat to their own privacy if they’re not careful. Tor can’t prevent tracking if you log in to a website with your real email address and password, for example.

Disclaimer: We’ve done countless hours of research on this topic but make no claim to be legal experts. Nothing in this post should be taken as legal advice, and we encourage you to do your own due diligence if there’s any doubt about the legality of VPNs (or Tor itself) in your country. 

iOS users only have a third-party option, Onion Browser. It’s an open-source browser endorsed by the Tor Project. However, one must assume that it suffers from the same drawbacks on iOS that have prevented an official Tor Browser on iOS from being released.