A VPN on top of Tor helps
Adding a VPN on top of Tor makes you safer
The two tools solve different problems
- A VPN
- Moves the point where your traffic enters the ordinary internet. Your provider stops seeing destinations and the VPN operator starts. It is a transfer of trust from one company to another, not a removal of trust.
- Tor
- Routes through several relays so no single one knows both origin and destination. Nobody in the path holds the whole picture, which is a different property from moving the picture somewhere else.
Stated that way the stacking question answers itself. Tor already prevents any single party from holding both ends. Putting a VPN in front adds one party who knows exactly who you are and that you are using Tor, which is information that did not previously exist in one place.
Why the advice is everywhere
- It sounds structurally right. Two layers feel better than one, and layering is genuinely good advice in other contexts.
- It is commercially promoted. VPN marketing is one of the largest advertising categories on the internet, and material about anonymity is a natural place to put it.
- It is repeated by people who were told it. Nobody in the chain has to be dishonest for a wrong recommendation to become standard.
The genuine exception
If connecting to Tor at all is a problem where you are, because it is blocked or because the fact of using it draws attention, then hiding that fact has a real purpose. The Tor Project provides bridges for exactly this, which are designed for the job and do not add a commercial party who knows your identity. That is a narrow and specific situation with a purpose built answer, and it is not the reason the advice is usually given.
What to do instead
Tor Browser from the project directly, installer signature checked, security level at Safest. That combination does the job the stacking was imagined to do, and the effort saved is better spent on establishing a fingerprint properly, which prevents a category of loss that a VPN could never touch.