Comparison · Privacy tools
VPN vs Tor vs private browsing: what each hides and from whom
Last updated 25 October 2026 · 3 sources listed · Reading time about 3 minutes
Short answer
Private browsing only stops your own device from saving history. A VPN shifts trust from your network provider to the VPN operator and hides your address from sites, but does not make you anonymous. Tor routes traffic through multiple volunteer relays to separate who you are from what you read, at the cost of speed. Each addresses a different adversary.
Who this is for: A privacy-minded person confused by overlapping marketing claims and wanting to know which tool addresses which kind of exposure.
What to evaluate
Who you are hiding from
Hiding from a shared-computer user, a local network, a website, an advertiser or a state-level observer calls for different tools.
How to check: Write down the specific party you want to limit before choosing.
Where trust is placed
Every tool moves trust to someone: the VPN company, the relay network or only your own device.
How to check: Identify who can see your traffic or metadata under each option.
Fingerprinting and account sign-ins
Signing in to accounts or using a distinctive browser setup reveals identity regardless of address hiding.
How to check: Consider whether you will log in to personal accounts while using the tool.
Speed and usability
A privacy tool that is impractically slow tends to be abandoned or bypassed.
How to check: Test streaming, calls and ordinary browsing under realistic conditions.
Legal and service restrictions
Some networks, workplaces, countries and services restrict or block specific tools.
How to check: Check workplace policy and local rules before use, particularly when travelling.
Comparison
| Tool | Protects against | Does not protect against |
|---|---|---|
| Private browsing mode | Local history, cookies and form data remaining on the device | Network observers, websites identifying you, your employer or provider |
| Consumer VPN | Local network snooping on public Wi-Fi and exposing your address to sites | The VPN operator seeing traffic metadata, account-based tracking, malware |
| Tor Browser | Linking your address to the sites you visit and reducing browser fingerprinting | Slow performance, exit relay observation of unencrypted traffic, user mistakes |
| Encrypted DNS | Local observers seeing which names you look up | The destination address still being visible to network providers |
| HTTPS everywhere on sites | Content being read in transit between you and the site | Metadata such as which site you contacted |
Decision worksheet
Rate up to three options against this guide’s own criteria. It runs in your browser and saves only on this device. It is a thinking aid, not a recommendation.
1. Have you checked each criterion?
0 of 5 criteria checked.
2. Compare options (0 = fails or unknown, 3 = meets it well)
| Criterion | |||
|---|---|---|---|
| Who you are hiding from | |||
| Where trust is placed | |||
| Fingerprinting and account sign-ins | |||
| Speed and usability | |||
| Legal and service restrictions | |||
| Total (max 15) | 0 | 0 | 0 |
Questions to ask before you commit
- What exactly is my threat: a nosy network, advertisers, an account holder or something more serious?
- Which party can see my traffic after I enable this tool?
- Does the VPN operator publish independent audits of its no-logging claims?
- Is the service jurisdiction relevant to data requests it may receive?
- Will I sign in to personal accounts that tie activity back to me?
- Does my workplace or local law restrict this tool?
- How does the tool behave when its connection drops, and does it block traffic or leak it?
Typical trade-offs
Trusting a VPN operator versus trusting your internet provider
- Upside
- A VPN can reduce exposure on untrusted networks and hide your address from sites.
- Downside
- You simply move trust to a company whose claims you cannot fully verify.
Tor for stronger separation versus ordinary browsing speed
- Upside
- Tor gives much stronger unlinkability between you and your destination.
- Downside
- Slower, some sites block it, and behaviour mistakes can undermine it.
Convenience features versus minimalism
- Upside
- Extra features like ad blocking and kill switches add useful protections.
- Downside
- More complexity and more components to trust.
Common mistakes
- Believing a VPN makes you anonymous. It does not stop account-based tracking or browser fingerprinting.
- Using private browsing mode as a privacy shield from your employer or network. It only affects local storage.
- Selecting a VPN on marketing claims and speed tests alone. Look for independent audits and clear ownership.
- Logging in to personal accounts during an anonymity session with Tor, which links activity to you.
- Installing browser extensions that claim to provide a VPN but act as simple proxies with unclear data handling.
Related questions
Does a VPN make me anonymous online?
No. It hides your network address from sites and shields traffic on the local network, but the VPN operator can see where your traffic goes, and sites can still identify you through logins, cookies and browser characteristics. Think of it as changing who can observe you rather than removing observation. It is helpful on untrusted networks and for limited address privacy, not a guarantee of anonymity.
Is private browsing mode useful at all?
Yes for a narrow purpose: it avoids leaving history, cookies and form entries on a shared device and gives you a fresh session without being signed in to existing accounts. It does not hide activity from websites, internet providers, employers or schools. It also does not defend against malware or tracking that uses your address. Use it for convenience on shared machines, not as a privacy solution.
When is Tor appropriate?
When you need to separate your identity and location from the sites you read, for example journalists, researchers or people in restrictive environments. It is built for that purpose and has stronger design properties than a consumer VPN, but it is slower and needs disciplined use: avoid signing in to personal accounts, do not install extra extensions and keep the software updated. Check legal and workplace constraints before using it.
Can I combine these tools?
You can, but combinations can add complexity without clear benefit and sometimes harm. Using a VPN before Tor, for example, changes trust assumptions and is only worthwhile for specific reasons. Start from your threat description, apply the simplest tool that addresses it and avoid stacking measures you do not understand. Official guidance from Tor Project documentation and national cyber agencies explains scenarios and limits clearly.
Sources and further reading
These pages were reachable when we last checked. They informed definitions and rules referred to above; they do not endorse this guide. Where rules differ by country, check the authority for your location.
- Virtual Private Networks (mobile device guidance) — National Cyber Security Centre (UK), retrieved 27 October 2026
- Tor Project Support — The Tor Project, retrieved 27 October 2026
- Secure Our World — Cybersecurity and Infrastructure Security Agency, retrieved 27 October 2026
Related guides
How to choose · Privacy tools
How to choose a password manager
Choose a password manager on its security design, recovery model and everyday usability. Look for zero-knowledge encryption, strong account protection, independent security assessments, secure sharing, a clear recovery path and good browser and phone integration. A tool nobody uses because it is awkward gives less protection than a simpler one adopted consistently.
Suitability · Privacy tools
Do you actually need a consumer VPN?
A consumer VPN helps in specific situations: untrusted public networks, hiding your address from sites, accessing a work network or choosing a different apparent location where legal. It does little against phishing, malware or account tracking. For many people, device updates, strong unique passwords, second-factor sign-in and HTTPS provide more protection than a VPN subscription.
Alternatives · Privacy tools
Privacy-focused browser vs hardening your existing browser
You can reduce tracking either by adopting a browser with protective defaults or by tightening settings and adding a small set of vetted extensions in your current one. Switching offers stronger out-of-the-box protection; hardening keeps familiarity and compatibility. Whatever you pick, keep it updated, limit extensions, separate profiles for sensitive activity and understand that logins still identify you.
Requirements · Business operations
What you need to open a business bank account
Banks typically need proof of the business's legal existence, identification and address for owners and controllers, a description of activity and expected transactions, and tax registration details. Requirements vary by country, structure and risk level. Gather formation documents, ownership information and a clear business explanation in advance, and ask the bank for its exact checklist.
Comparison · Business operations
Payment gateway versus merchant account: what each does and when you need both
A merchant account is the arrangement that lets you receive card funds into a bank account; a payment gateway is the software link that securely passes card details from checkout to the processor. Bundled providers hide the split, while unbundled setups give you more control and more paperwork. The right structure depends on volume, technical ability and how much you want to negotiate separately.
Comparison · Endpoint protection
Antivirus vs EDR vs XDR: what each actually does
Traditional antivirus mainly blocks known malicious files and some suspicious behaviour. Endpoint detection and response records what happens on devices so analysts can investigate and contain intrusions. Extended detection and response correlates that endpoint data with identity, email, network and cloud signals. Each adds visibility and also adds work, so match the category to the people who will operate it.
Cost factors · Endpoint protection
What drives the cost of endpoint protection
Endpoint protection cost depends on device count, which capability tier you license, data retention, any managed monitoring, and the staff time required to run it. Quotes that look similar can hide different definitions of a device, different support levels and add-on modules. Compare total operating effort, not only the licence line.