- Who makes Tor Browser and where it came from
- How Tor Browser protects you, in plain English
- What the Tor Project says Tor Browser can't do
- Known attacks and what they teach
- Is using Tor Browser legal?
- The catches with Tor Browser
- Fake Tor downloads and copycat scams
- My verdict on Tor Browser
- Frequently asked questions
Yes, Tor Browser is real, free software made by the Tor Project, a US nonprofit, and it's built on Firefox to route your traffic through volunteer-run relays. The catch is that the Tor Project itself says it can't guarantee perfect anonymity, and your own habits, downloads and add-ons can undo its protection.
People type 'is Tor Browser safe' for very different reasons: some want privacy from advertisers, some worry about a hostile network, and some have heard it's a doorway to the dark web. I've read the Tor Project's own pages and the Wikipedia history so I can give you a plain answer about the software, what it protects and where it stops.
Who makes Tor Browser and where it came from
According to the Tor Project's history page, onion routing began in 1995 when David Goldschlag, Michael G. Reed and Paul Syverson at the U.S. Naval Research Lab asked whether internet connections could avoid revealing who is talking to whom. The Tor network's code was released under a free and open software licence in 2002, and the Electronic Frontier Foundation began funding development in 2004.
The Tor Project, Inc. is a 501(c)(3) nonprofit organisation, founded in 2006 to maintain Tor's development. Development of Tor Browser began in 2008, and the Tor Project says the network is run by volunteers. So it isn't an anonymous app from nowhere: it has a named nonprofit, open code and a documented history.
How Tor Browser protects you, in plain English
Instead of connecting you straight to a website, Tor sends your traffic through several relays and wraps it in layers of encryption, so no single relay sees both your identity and your destination. Wikipedia describes three hops: a guard relay, a middle relay and an exit relay. Tor Browser itself is based on a modified Mozilla Firefox ESR, and it offers three security levels called Standard, Safer and Safest.
The practical result is that the sites you visit see an exit relay's address rather than yours, and your internet provider can see that you're using Tor but not what you do on it. That's useful if you're on a network you don't trust or you want less tracking, but it has limits, which come next.
What the Tor Project says Tor Browser can't do
The Tor Project is refreshingly direct here. Its support pages say Tor Browser includes many privacy protections, but it can't guarantee perfect anonymity. They also say Tor only protects applications that are configured to send their traffic through Tor, and that by default it doesn't stop someone watching your connection from learning that you're using Tor.
- Encryption to the website depends on that website, so look for HTTPS; Tor Browser's HTTPS-Only Mode is meant to force HTTPS where a site supports it.
- Plugins can be manipulated into revealing your IP address, and the Tor Project doesn't recommend installing extra add-ons.
- Typing your name, email or address into a web form can identify you, whatever browser you use.
- Opening downloaded documents in other apps can leak information outside Tor.
In other words, the browser can only protect what passes through it. Log in to your personal accounts and the website knows it's you, whatever route your traffic took. If you mainly want to hide your location from a service, you might compare it with a VPN, and my guide to choosing between Surfshark and NordVPN explains how that different tool works.
Known attacks and what they teach
Wikipedia records that Tor can't protect you from an attacker watching both ends of your connection, and that malicious exit relays have captured usernames and passwords when sites didn't use HTTPS. It also describes a 2013 FBI operation that exploited a browser vulnerability that had already been patched, which targeted people who hadn't updated. Wikipedia adds that when Tor users are arrested it's typically due to human error rather than the core technology being broken.
The lesson is simple: keep Tor Browser updated, don't tinker with settings, and don't mix it with habits that name you.
Is using Tor Browser legal?
Wikipedia notes that Tor is used for both legal and illegal purposes, and that the FBI acknowledged in its Silk Road complaint that Tor has known legitimate uses. News organisations also use it to protect whistleblowers. The software is legal to download and use in most places, but a privacy tool doesn't make an illegal act legal. Check the rules where you live, because some countries restrict it.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
The catches with Tor Browser
Safe doesn't mean convenient. Wikipedia notes that websites may block Tor exit relays, and Tor use can trigger anti-abuse defences such as captchas. Banking and shopping sites can be touchy about it too, and that can mean locked accounts if a site thinks your location jumped around.
The Tor Project also warns against torrenting over Tor, saying under no circumstances is it safe to use BitTorrent and Tor together, because torrent apps may ignore proxy settings and expose your real address.
Fake Tor downloads and copycat scams
Because Tor is popular with privacy-minded people, it's a favourite bait for malware. Download Tor Browser only from the Tor Project's official site or an official app store, and type the address yourself rather than clicking an advert. Be wary of 'Tor' apps that ask for payment, promise speed boosts or want unusual permissions, and ignore anyone phoning you to 'fix' your Tor install. If you're tightening up your wider security, my piece on other browser options may help you compare what each does with your data.
| What I checked | What the Tor Project says |
|---|---|
| Who makes it? | Tor Project, Inc., a 501(c)(3) nonprofit founded in 2006 |
| Is the code open? | Yes, released under a free and open software licence |
| Perfect anonymity? | No, it can't guarantee perfect anonymity |
| Torrenting? | Not safe to use BitTorrent and Tor together |
| Add-ons? | Not recommended; plugins can reveal your IP address |
My verdict on Tor Browser
Tor Browser is a trustworthy tool from a transparent nonprofit, and it's safe to use if you understand its limits. It reduces tracking and hides your address from the sites you visit, but it won't make you invisible. Download it from the official source, keep it updated, leave the settings alone and don't log in to accounts that name you if anonymity is the goal.
Frequently asked questions
Who makes Tor Browser?
The Tor Project, Inc., a 501(c)(3) nonprofit organisation founded in 2006. Tor Browser is based on a modified Firefox ESR.
Can Tor Browser make me completely anonymous?
No. The Tor Project says Tor Browser includes many privacy protections but it can't guarantee perfect anonymity.
Is Tor Browser legal?
The software is legal in most places. Wikipedia notes it has both legal and illegal uses, and the FBI has acknowledged Tor has known legitimate uses. Check local rules.
Is it safe to torrent over Tor?
The Tor Project says under no circumstances is it safe to use BitTorrent and Tor together.
Does Tor stop websites seeing what I type?
No. Encryption to the destination depends on that website, so look for HTTPS, and avoid entering identifying details in web forms.
