VPN vs Tor vs proxy

All three change the address a website sees. That is where the similarity ends, and treating them as interchangeable is how people end up with the wrong tool for their actual problem.

Proxy

An intermediary that fetches things on your behalf. HTTP proxies handle web requests; SOCKS5 proxies forward arbitrary TCP connections.

• Encryption: none, inherently. The connection to the proxy may be encrypted if it is offered over TLS, and the proxy sees everything either way.
• Scope: whatever you configure to use it. Usually one browser.
• Speed: fastest of the three. Almost no overhead.
• Trust: total, in the proxy operator.
• Use for: changing an apparent address for one application, where privacy from the network is not the goal.

The DNS detail matters here. SOCKS5 can resolve names at the proxy or locally, and a client resolving locally sends every hostname to your normal resolver while the traffic goes through the proxy.

VPN

A tunnel from your device to a server, carrying all traffic.

• Encryption: yes, from device to server.
• Scope: the whole device, when it is an app rather than an extension.
• Speed: ten to thirty percent throughput cost on a nearby server, plus the round trip in latency.
• Trust: total, in one provider. Your network operator loses visibility; the provider gains it.
• Use for: stopping a network operator from seeing your destinations, and changing your apparent country.

Tor

Three relays, layered encryption, and a design intended to remove the need to trust any single party.

Your traffic goes to a guard, then a middle relay, then an exit. The guard knows your address but not your destination. The exit knows the destination but not your address. The circuit changes regularly.

• Encryption: layered, between you and each relay. The exit to the destination leg is protected only by whatever the site itself uses, so HTTPS matters.
• Scope: whatever is configured. Tor Browser handles it properly; other applications frequently leak.
• Speed: slow. Three hops, volunteer capacity, and constant congestion.
• Trust: distributed by design, not eliminated. Correlation of traffic entering and leaving the network is the known limit, documented by the project itself.
• Use for: situations where the identity of your provider being compelled or compromised is the threat.

Side by side

	Proxy	VPN	Tor
Encrypts your traffic	Not inherently	Yes	Yes, in layers
Covers the whole device	No	Yes	No, per application
Single trusted party	Yes	Yes	No, by design
Speed	Fast	Good	Slow
Hides usage from your ISP	No	The destinations, yes	Usage is visible, destinations are not
Cost	Varies	Varies	Free

Choosing

Your network operator should not see your destinations, and you want it to work everywhere on the device. A VPN.

You want one browser to appear elsewhere and do not care about privacy from the network. A proxy, or a VPN browser extension, which is the same thing with a nicer interface.

A powerful adversary must not be able to link you to what you read, and you accept the speed cost. Tor, with Tor Browser rather than a configured application.

Journalism, sources, whistleblowing. Tor, and the Tor Project's own guidance rather than a general article.

Combining them

Tor over VPN — connect to a VPN, then use Tor. Your ISP sees a VPN and not Tor; the guard relay sees the VPN's address rather than yours. It adds the VPN provider as a party who knows you use Tor.

VPN over Tor — much harder to configure, and it defeats most of Tor's anonymity because you are authenticating to a provider from the exit.

The Tor Project's general position is that combining them adds complexity and rarely improves the outcome for ordinary users. Unless you can articulate precisely what the combination protects against, it is not worth it.

What none of them do

None makes you anonymous to a service you are logged into. None removes cookies or browser fingerprinting. None protects a device that is already compromised. And all three move trust rather than removing it — which is the honest framing of the whole category, and why what a provider records, as VPNmine's privacy policy sets out, is the question that survives the choice of tool. Check what any of them actually did with what is my IP rather than assuming.