Tor VPN Turns One, With Censorship Circumvention at the Center of Its Roadmap

The beta was soft-launched last autumn as a way to stretch Tor's privacy protections beyond the browser to an entire device. That intended use case became clear almost immediately: people were reaching for it to unblock the internet, and the finding has shaped the project's priorities since.

Tor VPN was never built to win speed tests. It routes traffic through the volunteer-run Tor network rather than a company's own servers, trading raw performance for a different kind of privacy. A hands-on test clocked it at just 3 to 4 Mbps.

Rather than pushing every app through one shared tunnel, the app gives each app its own Tor circuit and exit IP, so activity in one app cannot easily be linked to another. The Tor Project describes this as a form of per-app pseudonymity, an idea taken from the anti-tracking design of Tor Browser. Underneath, the app runs on Arti, Tor's next-generation implementation written in Rust, which the project credits with safer memory handling and a more modern codebase than older C-based tools. A Rust tunnelling layer called Onionmasq captures device traffic and feeds it into the network.

Much of the past year went into hardening rather than new features. The team attributes fewer crashes and better handling of changing network conditions to the Arti foundation, and successive beta releases have steadily reduced bugs. An independent security review also cleared the app's core design: a Cure53 penetration test found no fundamental flaws in how Tor VPN routes traffic or builds its tunnels, leaving lower-level issues to patch.

On circumvention, the project added WebTunnel bridges, which disguise Tor traffic as ordinary encrypted web traffic and make connections harder to detect and block. Engagement has been strongest in heavily censored regions such as Iran and Turkmenistan, a contrast to Tor Browser's more Global North audience. The project also made its builds reproducible and brought the app to F-Droid, so users can verify what they are running and update without relying on Google Play.

The roadmap now builds on the features users rely on most. The Tor Project says it will keep sharpening circumvention in restrictive environments, refine the interface to reduce risky mistakes and port more of Arti's missing performance features, such as congestion control, into the mobile experience. Exit selection, which tripped up testers who needed bridges, is also being reworked.

Tor VPN suits users who want device-wide anonymity that a standard provider cannot match, particularly those living with everyday network restrictions. Those mainly after speed and streaming are likely better served by a conventional mobile VPN app.

The Tor Project stresses that this remains beta software. It explicitly warns that Tor VPN is not yet suitable for high-risk users, and that some Android device identifiers can still leak. The app can be downloaded as an APK, from the Google Play Store, or through F-Droid.

Editor's Summary

The Tor Project's Android-only Tor VPN has completed its first year, with circumvention and stability now driving its roadmap. Independent testing found no fundamental flaws in its routing or tunnel construction, while WebTunnel bridges and per-app circuits address users in heavily censored countries such as Iran and Turkmenistan. The app remains in beta and is not recommended for high-risk users because some Android device identifiers can still leak.