mirror of
https://github.com/privacyguides/privacyguides.org
synced 2024-11-28 22:13:43 +01:00
7f09bd69a9
Co-authored-by: Jonah Aragon <github@aragon.science> Co-authored-by: matchboxbananasynergy <107055883+matchboxbananasynergy@users.noreply.github.com> Signed-off-by: Daniel Gray <dng@disroot.org>
125 lines
9.5 KiB
Markdown
125 lines
9.5 KiB
Markdown
---
|
|
title: "Tor Network"
|
|
icon: simple/torproject
|
|
---
|
|
|
|
{ align=right }
|
|
|
|
The **Tor** network is a group of volunteer-operated servers that allows you to connect for free and improve your privacy and security on the Internet. Individuals and organizations can also share information over the Tor network with ".onion hidden services" without compromising their privacy. Because Tor traffic is difficult to block and trace, Tor is an effective censorship circumvention tool.
|
|
|
|
[:octicons-home-16:](https://www.torproject.org){ .card-link title=Homepage }
|
|
[:simple-torbrowser:](http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion){ .card-link title="Onion Service" }
|
|
[:octicons-info-16:](https://tb-manual.torproject.org/){ .card-link title=Documentation}
|
|
[:octicons-code-16:](https://gitweb.torproject.org/tor.git){ .card-link title="Source Code" }
|
|
[:octicons-heart-16:](https://donate.torproject.org/){ .card-link title=Contribute }
|
|
|
|
Tor works by routing your internet traffic through those volunteer-operated servers, instead of making a direct connection to the site you're trying to visit. This obfuscates where the traffic is coming from, and no server in the connection path is able to see the full path of where the traffic is coming from and going to, meaning even the servers you are using to connect cannot break your anonymity.
|
|
|
|
<figure markdown>
|
|
|
|
|
|
<figcaption>Tor circuit pathway - Nodes in the path can only see the servers they are directly connected to, for example the "Entry" node shown can see your IP address, and the address of the "Middle" node, but has no way to see which website you are visiting.</figcaption>
|
|
</figure>
|
|
|
|
- [More information about how Tor works :material-arrow-right-drop-circle:](basics/tor-overview.md)
|
|
|
|
## Connecting to Tor
|
|
|
|
There are a variety of ways to connect to the Tor network from your device, the most commonly used being the **Tor Browser**, a fork of Firefox designed for anonymous browsing for desktop computers and Android. In addition to the apps listed below, there are also operating systems designed specifically to connect to the Tor network such as [Whonix](linux-desktop.md/#whonix) on [Qubes OS](qubes.md), which provide even greater security and protections than the standard Tor Browser.
|
|
|
|
### Tor Browser
|
|
|
|
!!! recommendation
|
|
|
|
{ align=right }
|
|
|
|
**Tor Browser** is the choice if you need anonymity, as it provides you with access to the Tor network and bridges, and it includes default settings and extensions that are automatically configured by the default security levels: *Standard*, *Safer* and *Safest*.
|
|
|
|
[:octicons-home-16: Homepage](https://www.torproject.org){ .md-button .md-button--primary }
|
|
[:simple-torbrowser:](http://2gzyxa5ihm7nsggfxnu52rck2vv4rvmdlkiu3zzui5du4xyclen53wid.onion){ .card-link title="Onion Service" }
|
|
[:octicons-info-16:](https://tb-manual.torproject.org/){ .card-link title=Documentation }
|
|
[:octicons-code-16:](https://gitweb.torproject.org/tor-browser.git/){ .card-link title="Source Code" }
|
|
[:octicons-heart-16:](https://donate.torproject.org/){ .card-link title=Contribute }
|
|
|
|
??? downloads
|
|
|
|
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=org.torproject.torbrowser)
|
|
- [:simple-android: Android](https://www.torproject.org/download/#android)
|
|
- [:simple-windows11: Windows](https://www.torproject.org/download/)
|
|
- [:simple-apple: macOS](https://www.torproject.org/download/)
|
|
- [:simple-linux: Linux](https://www.torproject.org/download/)
|
|
- [:simple-freebsd: FreeBSD](https://www.freshports.org/security/tor)
|
|
- [:simple-openbsd: OpenBSD](https://openports.se/net/tor)
|
|
- [:simple-netbsd: NetBSD](https://pkgsrc.se/net/tor)
|
|
|
|
!!! danger
|
|
|
|
You should **never** install any additional extensions on Tor Browser, including the ones we suggest for Firefox. Nor should you manually enable HTTPS-only mode or edit `about:config` settings. Browser extensions and non-standard settings make you stand out from others on the Tor network, thus making your browser easier to [fingerprint](https://support.torproject.org/glossary/browser-fingerprinting).
|
|
|
|
The Tor Browser is designed to prevent fingerprinting, or identifying you based on your browser configuration. Therefore, it is imperative that you do **not** modify the browser beyond the default [security levels](https://tb-manual.torproject.org/security-settings/).
|
|
|
|
### Orbot
|
|
|
|
!!! recommendation
|
|
|
|
{ align=right }
|
|
|
|
**Orbot** is a free Tor VPN for smartphones which routes traffic from any app on your device through the Tor network.
|
|
|
|
[:octicons-home-16: Homepage](https://orbot.app/){ .md-button .md-button--primary }
|
|
[:octicons-eye-16:](https://orbot.app/privacy-policy){ .card-link title="Privacy Policy" }
|
|
[:octicons-info-16:](https://orbot.app/faqs){ .card-link title=Documentation}
|
|
[:octicons-code-16:](https://orbot.app/code){ .card-link title="Source Code" }
|
|
[:octicons-heart-16:](https://orbot.app/donate){ .card-link title=Contribute }
|
|
|
|
??? downloads
|
|
|
|
- [:simple-googleplay: Google Play](https://play.google.com/store/apps/details?id=org.torproject.android)
|
|
- [:simple-appstore: App Store](https://apps.apple.com/us/app/orbot/id1609461599)
|
|
- [:simple-github: GitHub](https://github.com/guardianproject/orbot/releases)
|
|
|
|
For resistance against traffic analysis attacks, consider enabling *Isolate Destination Address* in :material-menu: → **Settings** → **Connectivity**. This will use a completely different Tor Circuit (different middle relay and exit nodes) for every domain you connect to.
|
|
|
|
!!! tip "Tips for Android"
|
|
|
|
Orbot can proxy individual apps if they support SOCKS or HTTP proxying. It can also proxy all your network connections using [VpnService](https://developer.android.com/reference/android/net/VpnService) and can be used with the VPN killswitch in :gear: **Settings** → **Network & internet** → **VPN** → :gear: → **Block connections without VPN**.
|
|
|
|
Orbot is often outdated on the Guardian Project's [F-Droid repository](https://guardianproject.info/fdroid) and [Google Play](https://play.google.com/store/apps/details?id=org.torproject.android), so consider downloading directly from the [GitHub repository](https://github.com/guardianproject/orbot/releases) instead.
|
|
|
|
All versions are signed using the same signature so they should be compatible with each other.
|
|
|
|
## Relays and Bridges
|
|
|
|
### Snowflake
|
|
|
|
!!! recommendation
|
|
|
|
{ align=right }
|
|
{ align=right }
|
|
|
|
**Snowflake** allows you to donate bandwidth to the Tor Project by operating a "Snowflake proxy" within your browser.
|
|
|
|
People who are censored can use Snowflake proxies to connect to the Tor network. Snowflake is a great way to contribute to the network even if you don't have the technical know-how to run a Tor relay or bridge.
|
|
|
|
[:octicons-home-16: Homepage](https://snowflake.torproject.org/){ .md-button .md-button--primary }
|
|
[:octicons-info-16:](https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/wikis/Technical%20Overview){ .card-link title=Documentation}
|
|
[:octicons-code-16:](https://gitweb.torproject.org/pluggable-transports/snowflake.git/){ .card-link title="Source Code" }
|
|
[:octicons-heart-16:](https://donate.torproject.org/){ .card-link title=Contribute }
|
|
|
|
??? downloads
|
|
|
|
- [:simple-firefoxbrowser: Firefox](https://addons.mozilla.org/en-US/firefox/addon/torproject-snowflake/)
|
|
- [:simple-googlechrome: Chrome](https://chrome.google.com/webstore/detail/snowflake/mafpmfcccpbjnhfhjnllmmalhifmlcie)
|
|
- [:octicons-browser-16: Web](https://snowflake.torproject.org/embed "Leave this page open to be a Snowflake proxy")
|
|
|
|
??? tip "Embedded Snowflake"
|
|
|
|
You can enable Snowflake in your browser by clicking the switch below and ==leaving this page open==. You can also install Snowflake as a browser extension to have it always run while your browser is open, however adding third-party extensions can increase your attack surface.
|
|
|
|
<center><iframe src="https://snowflake.torproject.org/embed.html" width="320" height="240" frameborder="0" scrolling="no"></iframe></center>
|
|
<small>If the embed does not appear for you, ensure you are not blocking the third-party frame from `torproject.org`. Alternatively, visit [this page](https://snowflake.torproject.org/embed.html).</small>
|
|
|
|
Snowflake does not increase your privacy in any way, nor is it used to connect to the Tor network within your personal browser. However, if your internet connection is uncensored, you should consider running it to help people in censored networks achieve better privacy themselves. There is no need to worry about which websites people are accessing through your proxy—their visible browsing IP address will match their Tor exit node, not yours.
|
|
|
|
Running a Snowflake proxy is low-risk, even moreso than running a Tor relay or bridge which are already not particularly risky endeavours. However, it does still proxy traffic through your network which can be impactful in some ways, especially if your network is bandwidth-limited. Make sure you understand [how Snowflake works](https://gitlab.torproject.org/tpo/anti-censorship/pluggable-transports/snowflake/-/wikis/home) before deciding whether to run a proxy.
|