When people hear the word Tor, many immediately think of the dark web. In reality, Tor is primarily a privacy tool that helps people browse the internet without easily revealing their identity or location. Millions of users—including journalists, researchers, activists, and everyday internet users—use Tor simply to browse the web more privately.

The technology behind Tor is surprisingly clever. Instead of sending your internet traffic directly to a website, Tor routes it through several computers operated by volunteers around the world. This makes it much more difficult for anyone to trace your online activity back to you.

How a Normal Internet Connection Works

Normally, when you visit a website, your connection is fairly straightforward:

You
   │
   ▼
Your Internet Service Provider (ISP)
   │
   ▼
Website

In this setup:

• Your ISP knows your IP address and which websites you’re visiting.
• The website knows your IP address, your approximate location, and information about your browser and device.
• Advertisers and analytics services may also track your activity across multiple websites.

Although modern websites use HTTPS to encrypt your data, your IP address is still visible to the websites you visit.

How Tor Changes the Route

Tor works differently. Instead of connecting directly to a website, your traffic passes through three different computers, known as relays.

You
   │
   ▼
Entry Relay
   │
   ▼
Middle Relay
   │
   ▼
Exit Relay
   │
   ▼
Website

Each relay is operated by a volunteer somewhere in the world. These volunteers donate their servers to help maintain the Tor network, creating a decentralized system that isn’t controlled by any single company or organization.

The key idea is simple: no single relay knows everything about your connection.

The Three Types of Relays

Entry Relay (Guard Relay)

The first relay is called the Entry Relay, or Guard Relay.

It knows your real IP address because you’re connecting directly to it. However, it doesn’t know which website you’re ultimately visiting because your traffic is encrypted in multiple layers.

Think of it as a courier who picks up a sealed package from your house. The courier knows where you live, but not what’s inside the package or its final destination.

Middle Relay

The middle relay simply passes encrypted data between the entry and exit relays.

It knows which relay sent the traffic and which relay should receive it next, but it doesn’t know who you are or which website you’re visiting.

Its role is similar to a sorting facility in a postal network—it moves packages along without knowing their contents.

Exit Relay

The final relay is called the Exit Relay.

This relay sends your request to the destination website. As a result, the website sees the exit relay’s IP address instead of yours.

For example, if you’re browsing from Indonesia, the website might believe you’re connecting from Germany or Canada because that’s where the exit relay is located.

The exit relay knows which website you’re visiting, but it has no information about your real identity or IP address.

Why Is It Called “Onion Routing”?

Tor’s routing method is known as Onion Routing because your data is protected by multiple layers of encryption, much like the layers of an onion.

Before your data leaves your computer, Tor encrypts it several times. As it passes through each relay, one layer of encryption is removed.

• The entry relay removes the first layer.
• The middle relay removes the second layer.
• The exit relay removes the final layer before sending the request to the website.

Since each relay removes only one layer, no relay ever sees the complete picture.

Why This Improves Privacy

The brilliance of Tor lies in separating information.

Relay	Knows Who You Are	Knows Which Website You Visit
Entry Relay	✅ Yes	❌ No
Middle Relay	❌ No	❌ No
Exit Relay	❌ No	✅ Yes

Because no single relay knows both your identity and your destination, it’s much harder for anyone to track your browsing activity.

Can Volunteer Relays Spy on You?

A common concern is whether relay operators can monitor users.

The answer depends on which relay they’re operating.

• Entry relays can see your IP address but not your destination.
• Middle relays see almost nothing useful.
• Exit relays can see the destination website but not your identity.

If you visit websites using HTTPS (which most modern websites do), the contents of your communication remain encrypted even when leaving the exit relay. This means the exit relay cannot read your passwords, messages, or other encrypted data.

Why Tor Is Slower

One downside of Tor is speed.

Unlike a normal connection, your data has to:

• Travel through three different relays.
• Be encrypted multiple times.
• Potentially cross several countries before reaching the destination.

For example, your connection might travel from Indonesia to Singapore, then Germany, then Canada, before finally reaching a website hosted in the United States.

This extra distance increases latency, making Tor noticeably slower than a regular browser. The trade-off is improved privacy.

More Than Just the Dark Web

While Tor can access “.onion” websites on the dark web, that’s only one part of what it does.

Many users rely on Tor simply to:

• Browse the web more privately.
• Reduce online tracking.
• Protect their identity.
• Bypass internet censorship.
• Access blocked news websites.

Using Tor does not automatically mean someone is visiting the dark web.

Final Thoughts

Tor isn’t a browser built for criminals—it’s a browser built for privacy.

Its unique design uses thousands of volunteer-operated relays to ensure that no single computer knows both who you are and where you’re going. By dividing that knowledge across multiple relays and encrypting your data in layers, Tor makes online tracking significantly more difficult.

While it’s not a guarantee of complete anonymity, Tor remains one of the most effective privacy technologies available today. It demonstrates a powerful principle of cybersecurity: the less any single party knows about you, the better your privacy is protected