Stop Using Tor With VPNs

Technological concepts & claims discussed

• Using Tor with a VPN: The summarized video argues against the common “VPN + Tor” approach, framing it as unnecessary and potentially worse for anonymity.

• Tor basics vs. “Layer 2 / Layer 3”:

  • Layer 1: Connect to the Tor Browser on Windows.
  • Layer 2: Add a VPN first, then connect to the Tor Browser.
  • Layer 3: Continue into dark-web activity through the resulting Tor circuit.

• How Tor improves privacy over VPN chaining:

  • Tor uses three hops/relays with multiple layers of encryption.
  • The speaker compares Tor to chaining multiple VPN servers, but claims Tor is stronger because:
    • Tor relays are decentralized
    • circuits change regularly (new circuits about every 10 minutes)

• Visibility to an ISP:

  • If you use Tor directly, your ISP can see that you’re connecting to Tor.
  • The speaker’s position: this mainly matters for a narrow class of threat models (specifically serious state-level threats).

Threat model / when it “might” matter

The speaker claims only two groups would care about hiding Tor usage from an ISP:

1. People involved in serious illegal activity or major protest, likely to draw intense law enforcement attention (e.g., major international agencies).
2. People in countries where Tor is blocked (example countries mentioned: China or Iran), where Tor requires bridges.

Bridges vs. VPNs in censorship scenarios

• Tor has “obfuscated/anti-censorship bridges” intended to conceal that the traffic is Tor.
• The speaker claims censorship systems (e.g., China’s Great Firewall) can detect VPNs relatively easily.
• The speaker also implies that VPNs may be risky because:
  • VPNs can be government-approved
  • VPNs may involve logging / control (as suggested in the discussion)
• Conclusion presented: if you must use Tor bridges in a censored country, using a VPN may not add much and could introduce additional risk.

Evidence / analysis about real-world arrests

• The speaker argues that arrests in “dark web” cases usually stem from operational security mistakes on the open web, not from ISP-level Tor usage alone.
• Example cited: Silk Road / Dread Pirate Roberts, reportedly caught due to using a personal Gmail account for clear-web activity and making related mistakes that leaked identifying information across contexts.

Why VPN → Tor may increase risk (rather than reduce it)

The speaker asserts that if a capable global adversary is monitoring:

• VPN-to-Tor connections can stand out as unusual.
• They speculate these connections might be prioritized for investigation, since the VPN user may look more “paranoid” or distinct.
• They also suggest VPN providers could be compelled to disclose data:
  • At minimum, the provider knows the user’s real/home IP
  • For providers requiring KYC, they may know email/name/payment details

Specific product / provider commentary

• NordVPN (referenced via a Network Chuck-style approach):

  • Criticized for requiring an email account
  • Criticized for not allowing anonymous payment methods like cash/Monero
  • Criticized for using a proprietary app rather than open configuration (e.g., OpenVPN with explicit settings)

• Mullvad (suggested alternative if someone insists anyway):

  • Claimed to accept Monero and not require email for account creation
  • Mentions the app added “quantum resistant tunnels” (as claimed by the speaker earlier in the year)

Despite these points, the speaker’s overall stance remains: don’t mix VPNs with Tor.

Main recommendations / “guide” takeaways

• Recommendation: Don’t use a VPN with Tor for anonymity.

• Reasoning: Direct Tor use blends your traffic into millions of similar Tor users, while VPN→Tor users are fewer and more distinct, potentially making them easier to target.

• Alternative suggestion: Rather than paying for a VPN “to augment privacy,” consider running your own Tor relay on a low-cost VPS—framed as cost-effective relative to a VPN subscription, and also beneficial to the network.

Main speakers or sources

• Narrator / speaker in the summarized content: The person analyzing and responding to Network Chuck’s video (not named in the provided subtitles).

• Network Chuck: Referenced as the original source of the Tor-related tutorial being discussed.

• Tor developers / official Tor forums / Tor subreddit: Referenced as advisory sources discouraging VPN use with Tor.