Tor, explained safely (what it really does, and how to use it without fooling yourself)
Tor is the most misunderstood privacy tool there is: some think it makes them invisible, some think it is only for criminals, and both are wrong. This mission gives you the real picture: what onion routing actually does (your traffic is wrapped in three layers of encryption and bounced through three relays, so no single one knows both who you are and what you are looking at), how to install the Tor Browser, and how to prove with your own eyes that your traffic genuinely leaves the Tor network. It is for lawful privacy and getting around censorship, not a route to anything criminal; pair it with your threat model and reach for Tor when your model calls for it, not by default.
- Do Build your personal threat model first. Tor has a real speed and friction cost, so it is worth using when your model calls for it (a source to protect, a censored network, a profile you do not want built) and overkill when it does not. That course tells you which it is for you
- A computer or Android phone for the Tor Browser part. That alone needs no terminal and no prior skill
- For the proof step: a terminal. On Windows that means WSL2 (Linux-on-Windows). If the terminal is new, the Level 0 lessons Install anything from GitHub and Terminal survival kit cover the basics, and Build a hacking lab sets up WSL2 in full. You can read the proof step without doing it and still finish the course
- About 400MB of disk for Tor Browser. The command-line tor daemon is a few megabytes
What Tor is, and when to reach for it
Get the right mental model and the right expectations before you install anything, so you use Tor for what it is good at and do not lean on it for things it was never meant to do.
Tor is free software that makes it hard for anyone watching your connection to see what you are looking at, and hard for the sites you visit to see where you are. The name started as an acronym for 'The Onion Router', and the onion is the whole idea: your traffic is wrapped in several layers of encryption and passed through several different computers, each of which can peel off only one layer. It is run by a non-profit and kept alive by thousands of volunteers around the world who donate the computers, called relays, that your traffic hops through.
It was built for, and is used every day for, lawful things: journalists receiving documents from sources, people in countries that censor the open web reaching news and Wikipedia, researchers and campaigners, and ordinary people who would rather not have every page they read logged and sold. Wikipedia, major newspapers and privacy-respecting search engines all run official Tor versions of their sites precisely so these people can reach them.
Here is the line this mission holds to, stated once and plainly: Tor is for lawful privacy and getting around censorship. It is not a tool for reaching illegal markets or any criminal activity, and you will find no help with that here. Using Tor is legal in most of the world; what you do with any tool is still on you.
When Tor is the right toolwhen you need to break the link between your identity and your activity. A reporter who must not let a source be identified by who they contacted. Someone on a network (a country, a workplace, a campus) that blocks or monitors what you can read. A researcher looking at material they do not want tied to their name or employer. In each case the point is the same: separate the 'who' from the 'what'.
When it is notmost everyday browsing. Tor is slower than a normal connection, some sites break or challenge you constantly, and routing everything through it when you have no reason to can make you stand out rather than blend in. If your actual problem is advertisers profiling you, trackers and a locked-down browser (the Go dark track) do more for less cost. This is exactly the judgement your threat model is for: use Tor when it answers a real risk, not as a default coat of armour.
TipA one-line way to hold it in your head: a VPN moves your trust from your internet provider to one company; Tor spreads your trust across three strangers who each know only a piece, so none of them can put the whole picture together. Step 7 draws out that difference in full.