If you ask whether Tor is legal, you’ll typically get one of two answers. Either a cheerful “yes, in most countries”, with a list of flags and a green tick beside each one, or a hesitant “it depends”, followed by nothing useful. Neither helps much, because the question is trying to do too many things at once.
When someone asks if Tor is legal, they’re really asking four different questions at the same time.
- Is it legal to have Tor? To download it, install it and keep it on your computer or phone.
- Is it legal to use Tor where I am? To actually connect to the network from my country, my office or my school.
- Is it legal to run part of Tor? To operate a relay, a bridge or an onion service.
- Is what I’m doing over Tor legal? The reading, writing, buying, publishing or downloading that happens once you’re connected.
The answers differ, because they’re set by different rules and change at different speeds. In most countries the first answer has been a definite yes for twenty years. The second can be changed overnight by a court order. The third depends on which part you run and where. And the fourth has very little to do with Tor, because the law generally cares about what you do, not the route you took to do it.
This guide takes each of the four questions in turn, then looks at a fifth that often matters more in everyday life, which is the difference between something being legal and something being allowed. It ends with what responsible use of onion services actually involves.
One thing before we begin. This is general information from people who keep a close watch on Tor, not from lawyers. Laws differ a great deal, and in some countries they change quickly. If you’re in a situation where the answer really matters, talk to a lawyer or a digital rights group in your own country.
Question one: is it legal to have Tor?#
Yes, almost everywhere. Tor is free, open-source software. It grew out of research at the US Naval Research Laboratory, as the Tor Project’s own history page explains, and the Tor Project that develops it today is a nonprofit funded by both government grants and individual donations. It’s used every day by journalists, researchers, human rights workers, companies and ordinary people who just don’t want to be tracked. Newsrooms such as the BBC and services like DuckDuckGo run their own onion sites, as we list in our Official Onion Mirrors Directory. In most of the world, downloading Tor Browser is as legally ordinary as downloading Firefox, which it’s based on. Just make sure you download it from the Tor Project, because fake versions are common.
The exceptions are seldom laws that name Tor. The Tor Project’s own guidance for trainers is careful on this point. Few countries specifically ban privacy tools, but in some, using them can still lead to prosecution under broader laws, or be treated as a sign of anti-government activity. In those places, the danger isn’t a statute saying “Tor is illegal”. It’s that having it can be used against you, alongside everything else.
Question two: is it legal to use Tor where you are?#
This is the question that changes fastest, and it’s where most of the confusion lives, because people mix up two very different things. Tor being blocked is not the same as Tor being illegal.
A block is a technical action. Just as a government might block a website, it can order internet providers to stop connections to the Tor network. That makes Tor harder to reach, but it doesn’t by itself make you a criminal for reaching it anyway. A ban is a legal action that punishes people for using something. Some countries impose a block, some impose both a block and a ban, and others do neither but pass laws about online activity that make using Tor riskier in practice.
| Situation | What it looks like | What it means for you |
|---|---|---|
| No restrictions | Tor works normally, and no law targets it | Using Tor is ordinary and lawful. What you do with it is judged like anything else you do online |
| Blocked, use not punished as such | Direct connections fail, and you need bridges to connect | Getting connected is a technical problem. But the same country often has strict laws about what you read or say |
| Rules on how you hide your address | Laws punish disguising your IP address for a criminal purpose | Lawful use stays lawful, but Tor can make an offence more serious |
| Broad or explicit restrictions | Circumvention tools are restricted, or treated as suspicious in themselves | Using Tor carries real personal risk. Get local advice first |
Three real examples#
Russia shows how fast the situation can change. In December 2021, a district court in Saratov ordered the Tor Project’s website and its public Tor relays blocked, after prosecutors argued that Tor gave access to material on Russia’s federal list of banned “extremist” works. At the time, Russia was Tor’s second-largest user country, with more than 300,000 users a day, and the Tor Project and the Russian digital rights group RosKomSvoboda appealed the decision. For several years after that, Tor in Russia was blocked, but using it wasn’t itself punished. That changed at the edges on September 1, 2025, when new rules came into force. As Meduza and Human Rights Watch reported, knowingly searching for and accessing “extremist” material now brings a fine of 3,000 to 5,000 roubles, using a circumvention tool such as a VPN counts as an aggravating circumstance when committing a crime, and promoting such tools brings heavy fines. Simply running Tor still isn’t a listed offence, but what you read through it can now be punished, and the definition of “extremist” is very wide.
The United Arab Emirates shows a rule based on purpose. Under its cybercrime law, it’s an offence to use a false or third-party IP address in order to commit a crime or avoid being caught. Hiding your address is the issue there, but only when it’s tied to a crime. Lawful use isn’t the target, though using Tor while breaking another law makes things considerably worse.
China shows a block backed by wider rules. The Great Firewall blocks Tor, and Chinese rules require international connections to go through approved channels. Tor use is neither common nor safe there, and anyone thinking of using it should understand the risks first.
The pattern in all three cases is the same. Tor comes under legal pressure mostly because governments fear what people will read or say through it, and that’s also where Tor matters most. The Tor Project builds bridges, Snowflake and its new Tor VPN for Android precisely so that people in those countries can still reach the open internet. Whether to use them is a personal judgement about risk, and nobody outside your own circumstances can make it for you.
Question three: is it legal to run part of Tor?#
Tor works because thousands of volunteers run parts of it. Running one of those parts raises different legal questions from simply using Tor, because you’re now handling other people’s traffic. How much that matters depends entirely on which part you run.
| What you run | What it does | Legal exposure |
|---|---|---|
| Snowflake proxy | Helps censored users connect, from a browser extension or small app | Very low. You never see what they do, and their traffic doesn’t leave the network from your address |
| Bridge | An unlisted entry point for users in censored countries | Low. Traffic passes through you encrypted, deeper into the network |
| Middle or guard relay | Passes encrypted traffic between other relays | Low. Nothing exits to the internet from your address |
| Exit relay | The last hop, where traffic leaves Tor for ordinary websites | Higher. Whatever users do appears to come from your IP address |
| Onion service | Hosts a website or service on an onion address | Like any website host. You’re responsible for what you publish |
Exit relays#
Exit relays are where the legal questions get real. Tor users’ traffic leaves the network from the exit’s IP address, so to the rest of the internet, the exit operator looks like the source of all the traffic passing through it, good or bad.
The Electronic Frontier Foundation’s Legal FAQ for Tor Relay Operators says it believes running a relay, including an exit relay, is legal under US law. It’s just as clear that it can’t promise you’ll never run into problems. The FAQ points out that police sometimes misunderstand how Tor works and attribute exit traffic to the person running the relay, citing a 2016 case in which Seattle police mistakenly raided the home of a privacy activist who ran an exit relay.
Other countries have produced harsher examples. In 2017, Russian mathematics lecturer Dmitry Bogatov was arrested after online posts were traced to an IP address belonging to the Tor exit relay he ran, and he spent several months in detention and under house arrest. Many places, including the EU, have rules that protect internet intermediaries that simply pass traffic along, but how those rules apply to individual volunteers varies.
That’s why the usual advice for exit operators is practical rather than legal. Don’t run an exit from home. Use a hosting provider that knows and accepts what you’re doing. Make it clear to anyone who looks the relay up what it’s for. Register contact details for abuse reports, and answer them. The Tor community’s relay operator guides and its exit guidelines cover all of this, and many operators run exits through established nonprofit groups rather than on their own.
Onion services#
Legally, running an onion service is the same as running an ordinary website. The onion address hides where your server is, but it doesn’t change the legal status of the content. If something you publish would be illegal on a normal website in your country, it’s illegal on an onion address too. To understand how onion services work before setting one up, see What Is an Onion Service?
Question four: is what you’re doing legal?#
This is the question that matters most to the average person, and it rests on a simple principle. The law cares about what you do, not the route you take to do it. Tor is a route. If something is legal on the ordinary internet, doing it over Tor doesn’t make it illegal. Likewise, if something is illegal, doing it over Tor doesn’t make it legal, and in some places, as we’ve seen, it can make things worse.
Where people go wrong is in thinking that because something is reachable it must be allowed, or that because they’re anonymous the rules don’t apply. Neither is true.
| Generally lawful where Tor is | Depends on your country | Illegal almost everywhere |
|---|---|---|
| Reading news, including from outlets blocked where you live | Reading material your government has banned | Material that sexually exploits children, which is a serious crime to access, keep or share |
| Private search, email and messaging | Political speech, criticism of officials, some religious content | Buying drugs, weapons, stolen data or forged documents |
| Downloading free software and updates | Gambling, some kinds of adult content | Hacking into systems or accounts you don’t own |
| Contacting a newsroom through SecureDrop | Circumvention tools themselves, in a few countries | Fraud, extortion and threats |
Anonymous isn’t the same as untouchable#
Tor hides where you’re connecting from. It doesn’t make you invisible, and it doesn’t make illegal activity safe. Police have shut down hosting providers, markets and forums on the onion network many times, from Freedom Hosting in 2013 to a major international operation in 2014 that seized hundreds of onion addresses. In many of the cases that reached court, people were identified through mistakes made outside Tor, such as payments, deliveries, reused usernames or careless messages, rather than through any fault in Tor itself. Anonymity protects your location. It doesn’t protect your choices.
The scam problem is also a legal problem#
There’s a practical overlap here that’s worth spelling out. Most of the “shops” on onion link lists are scams. Anyone who tries to buy from one is likely to lose their money, and has no way to report it without admitting what they were trying to buy. They end up as both an offender and a victim. We explain why these listings are so widespread in Why Most ‘Hidden Wiki’ Lists Are Full of Scams, and it’s one reason our own directory lists no markets or shops at all.
Reading isn’t the same as taking part#
In most democracies, the law treats looking at information very differently from acting on it. Reading a news site that’s blocked in another country, studying how scams work, or researching extremism for a dissertation are legal in most places. But this line isn’t universal. Russia’s 2025 rules now fine people for searching for and accessing material on its “extremist” list, and other governments punish possession of banned books, images or software. If you live somewhere like that, the content itself is the risk, and Tor only changes who can see you reading it.
Legal isn’t the same as allowed#
For most people in most countries, the law will never be the thing that stops them using Tor. Ordinary rules are far more likely to. Something can be completely legal and still break the rules of the place you’re in, and the consequences there are very real, even if they don’t involve a court.
At work. Your employer’s network and devices come with an acceptable use policy, and many of them restrict or ban anonymising tools. That’s usually not about suspicion. Security teams need to see what leaves their network, and Tor traffic is designed to be unreadable. Breaking the policy is a disciplinary matter rather than a criminal one, but it can still cost you your job. If you have a genuine work reason to use Tor, such as research or threat intelligence, get written approval first.
At school or university. Campus networks have their own rules. Some block Tor completely, others are relaxed about it, and a few universities even run Tor relays for research. Check the rules before you connect, especially in student housing, where the network agreement may be strict.
On websites and services. Many sites treat Tor traffic with suspicion, because some of it is abusive. You might face more CAPTCHAs, be asked to verify your account, or be blocked entirely. Banks may flag a login from a Tor exit as unusual, and some services ban anonymising tools in their terms. None of that makes you a lawbreaker, but it can get your account locked. That’s another reason the official onion sites in our directory are useful, since a service that runs its own onion address has decided to welcome Tor users. Some, such as Proton and Riseup, go further and design their services with Tor users in mind.
At the border. Some countries search phones and laptops on entry, and a privacy tool on your device can prompt questions even where it’s legal. Know the rules of the country you’re entering, travel with only what you need, and don’t assume that something legal at home is treated the same way abroad.
On shared computers. A family laptop or shared office computer partly belongs to other people. Installing Tor Browser on it is legal, but whoever owns or manages the device should know. For a private setup that leaves nothing behind on a shared machine, Tails runs from a USB stick instead. See Tails 7.14.
Using onion services responsibly#
Staying within the law is the minimum. Using Tor well asks a little more, because the network is shared, run by volunteers, and judged by how its users behave. Here’s what that looks like day to day.
Remember whose bandwidth you’re using#
Every byte you send over Tor passes through three relays run by volunteers, usually at their own cost. Ordinary browsing, reading and email are exactly what the network is for. Heavy file sharing is not. The Tor Project has long advised against using BitTorrent over Tor, both because it slows the network for everyone and because file-sharing programs often reveal your real address anyway. For large software downloads, many projects run their own onion mirrors to spread the load more fairly. See Open-Source Projects on Onion.
Go to the source#
Use official onion addresses, published by the organisations that run them, and check them before you rely on them. Our guide to verifying an onion address explains how. It protects you from clones, and it sends your traffic to services that have chosen to support Tor users, which encourages more of them to do the same.
Don’t feed the scams#
Link lists that sell placement, and the fake shops they promote, live on clicks and curiosity. Every visit tells the operator the trick still works. If you come across a clone or a fake listing pretending to be a real service, report it to us so we can warn other people, and read Onion Phishing: How Fake Mirrors Clone Real Addresses to see what you’re facing.
Keep your software current#
Most real-world attacks on Tor users have gone after flaws in the browser rather than the network. Keeping Tor Browser up to date is one of the most effective things you can do, and it costs nothing. Our Tor Browser 15.0.24 release notes cover the current version, and Tor Browser Security Levels explains when to turn protections up.
If you run an onion service, make it easy to verify#
Publish your onion address on your ordinary website, add an Onion-Location header so Tor Browser offers the onion version automatically, and announce it publicly whenever the address changes. Every service that does this makes the whole network a little harder to phish.
Give something back#
If Tor is useful to you, there are easy ways to help keep it running. You can run a Snowflake proxy from a browser extension, which helps people in censored countries connect, with very little legal exposure for you. Running a relay, translating Tor’s software, or donating to the Tor Project all help too. The Tor community portal lists the options.
The short version#
- Having Tor is legal almost everywhere.
- Using Tor is legal in most countries. A few block it, and a small number restrict it in law or treat it with suspicion, so check where you are.
- Running part of Tor is legal in many countries, but exit relays draw attention, so follow the operator guidance.
- What you do over Tor is judged by the same laws as anything else you do, and Tor doesn’t change that.
For the rules we follow in our own directory, including why we list no markets, see About thehidden.wiki.
Where to go next#
- Is Tor blocked where you are? Read Bridges, Snowflake and WebTunnel.
- New to onion sites? Start with What Is an Onion Service?
- Installing Tor Browser? Follow How to Download and Install Tor Browser Safely, or on a phone, Using Tor on Android and iPhone.
- Wondering why so many onion links are scams? Read Why Most ‘Hidden Wiki’ Lists Are Full of Scams.
- Looking for lawful, useful onion sites? Browse the Official Onion Mirrors Directory, the Tor Project’s own onion sites and News Onion Sites.
- Want to know who runs this site? See About thehidden.wiki.
Sources#
- Legal FAQ for Tor Relay Operators, Electronic Frontier Foundation, via the Tor Project
- Risks of digital security training, Tor Project community portal
- Tor Project appeals Russian court’s decision to block access to Tor, BleepingComputer
- Russia passes law penalizing online searches for ‘extremist’ content, including via VPNs, Meduza, July 2025
- Russia Clamps Down on Online Searches, Human Rights Watch, July 2025
- Putin signs law introducing fines for searching extremist materials online, OVD-Info, July 2025, including the September 1, 2025 start date
- Russian math teacher arrested over Tor exit node, TechCrunch, April 2017
- BitTorrent over Tor isn’t a good idea, Tor Project blog
- Tor relay operator resources, Tor Project community portal