Tor Browser

If you need to read the web without your IP address following you, or reach sites that your network or government blocks, Tor Browser is the most thorough free option on Android, and for anonymity specifically we would point people to it before a VPN. It comes from the Tor Project, the nonprofit that develops Tor itself, it is built on Mozilla’s Firefox codebase, and it carries no ads or subscriptions. What you give up is speed and convenience: pages load noticeably slower, some sites challenge or block Tor visitors, and many of the habits that keep it safe also make it an awkward everyday browser.

With more than 264,000 Play Store ratings averaging 4.5 and over 10 million downloads, it is clearly doing its job for a very large audience. The main complaint, slow page loads, comes from the same design that makes it private. It is a specialist tool, and very good at its specialty.

How it hides where you are

Every page you request through Tor Browser travels through three volunteer-run relays before it reaches the site: an entry relay that knows who you are but not where you are going, a middle relay that knows neither, and an exit relay that knows the destination but not you. Your traffic is wrapped in three layers of encryption, with one layer removed at each hop. In practice, the website sees the exit relay’s address rather than yours, and your mobile carrier or Wi-Fi provider can see that you are connected to Tor but not which sites you visit.

The browser also tackles the less obvious half of tracking: fingerprinting. Ordinary browsers leak a surprising amount of detail, such as screen dimensions, installed fonts, user agent and hardware parameters, and that combination can single out a device even without cookies. Tor Browser standardizes those values so its users look as alike as possible. That is also why the Tor Project discourages customization: the more you change the browser, the more you stand out from everyone else using it.

It also opens .onion addresses, services hosted inside the Tor network that ordinary browsers cannot reach. Several major news organizations run onion versions of their sites for readers in restrictive countries.

Getting connected on restricted networks

On an open connection, getting online is a single tap to connect to the Tor network. Where Tor itself is blocked, the connection settings offer bridges: unlisted entry points, including options such as Snowflake and obfs4, that disguise Tor traffic so it is harder to detect and filter. This is the feature users praise most consistently: they describe reaching blocked sites and getting around local network restrictions without leaving a trail on the device.

Bridges also answer a common question: do you need a VPN alongside Tor? A VPN can hide your Tor use from your internet provider, but it adds another company to trust, and a misconfigured setup can weaken your anonymity. For most people, the built-in bridges are the easier way to make Tor use less conspicuous.

Security levels, and why some sites break

Tor Browser bundles the NoScript extension, and three security levels in settings (Standard, Safer and Safest) control it along with other browser features. The higher levels progressively restrict JavaScript and other active content that could be used to attack the browser or reveal the device behind it. Safest is the most protective setting and also the one that breaks the most: menus that do not open, video that does not play, and forms that will not submit.

Page breakage on Tor comes from two sources, and only one is the browser’s doing. Script blocking is a deliberate trade-off you control. The other source is the sites themselves. Many commercial websites block or challenge traffic from known Tor exit relays to cut down on automated abuse, and that shows up as repeated CAPTCHAs, “access denied” pages, or pages that do not load properly. Trying again later on a fresh connection sometimes helps; with other sites, the block persists.

Sessions that leave nothing behind

The browser clears cookies, cached files and history automatically when a session ends, and a dedicated quit option closes open tabs and wipes cookies and cached data in one step, a feature reviewers often praise. For someone sharing a phone, this matters as much as the network-level protection. The flip side is that every session starts fresh, so you re-enter anything you need each time.

Where it frustrates

Speed is the cost everyone pays. Routing each request through three relays scattered around the world adds latency, and slow page loads are a common frustration in user feedback. Many users accept that as the price of the privacy, but in practice it makes streaming video, large downloads and other high-bandwidth use impractical.

The exit relay is the weak point people tend to overlook. Tor’s encryption protects your traffic inside the network, but the final hop from the exit relay to the website is only as protected as the site’s own connection. On an HTTPS site that last leg is encrypted; on a plain HTTP site, whoever operates the exit relay could in principle read or alter what passes through. Most of the web now uses HTTPS, but it is worth checking the address bar before entering anything sensitive.

Then there is perception. Using Tor is legal in most democratic countries, but some workplaces, schools and ISPs treat Tor connections as unusual, and some governments restrict or ban it. Even lawful browsing can draw attention on networks that monitor for it. Bridges reduce that visibility; they do not remove it.

A smaller request from some reviewers is for a mainstream ad blocker such as uBlock Origin to ship alongside NoScript. The Tor Project’s long-standing position is that extra extensions make a browser easier to fingerprint, which is why adding your own add-ons is discouraged. It is a reasonable design decision, but it does mean ad-heavy sites look busier here than in a browser with blocking switched on.

Habits that keep it working for you

The app protects your network identity; it cannot stop you from identifying yourself. Signing in to your usual email or social account tells that site who you are. Tor Browser is also a browser, not a system-wide tunnel, so other apps keep using your normal connection. A few habits follow:

• Keep Tor sessions separate from accounts tied to your real name unless you deliberately need both.
• Stick to HTTPS sites for anything you type in.
• Use a higher security level for sensitive browsing, and expect more sites to break when you do.
• Keep the app updated, since its releases track Firefox security fixes.

How it compares to alternatives

Private or incognito tabs in Chrome, Firefox and other browsers keep history and cookies off the phone once you close them, much like Tor Browser’s session wipe. They do nothing about your IP address, though: sites and your network still see your real connection.

VPN apps are faster and cover every app on the phone, but they shift trust from your ISP to one company that can see which sites you connect to. They are the better fit for streaming and general privacy on public Wi-Fi; Tor Browser is the better fit when you would rather not trust any single operator.

Orbot, from the Guardian Project, routes other apps through the Tor network. Tor Browser has Tor built in and does not need it, so Orbot is the companion for covering more than browsing.

DuckDuckGo’s browser and similar tracker-blocking browsers reduce advertising surveillance, but on their own they do not hide your IP address from sites or get around network blocks.

What it costs

Nothing. Tor Browser has no ads, no in-app purchases and no premium tier. The Tor Project is a nonprofit funded by donations and grants, and the browser’s source code is public. There is no upsell to watch for, which is uncommon among privacy apps on the Play Store. The real cost is the time and convenience you trade for the protection.

Who it’s not for

If you want a fast daily browser for banking, shopping, streaming and staying signed in, Tor Browser will feel slow and fussy, and logging in tells each site who you are anyway. If you want every app on your phone covered, you need a VPN or Orbot. And if simply being seen using Tor could cause problems at work or school, think through whether bridges are enough before relying on it there.

The verdict

Tor Browser does a difficult job well and charges nothing for it. The speed penalty, the CAPTCHAs and the occasional broken page are real, and they are why this is a tool for specific situations rather than a default browser. For people who need to read freely, keep their browsing unlinked from their identity, or reach a blocked corner of the web, it is the first app we would recommend. Keep a regular browser for everything else.