The Tor Project has made a significant stride in enhancing mobile privacy with the release of its new VPN app for Android. This development allows users to channel their internet traffic through the Tor network, marking the organization’s initial venture into mobile VPN solutions.
First highlighted by security journalist Catalin Cimpanu, the Tor VPN Beta is now accessible on the Google Play Store, though it comes with a clear label indicating its experimental status. The Tor Project has cautioned users against relying on this app for sensitive activities, as it may inadvertently leak identifying information. The primary goal of this beta software is to gather feedback and facilitate further development rather than serve critical privacy needs.
According to metadata from the project’s GitLab repository, the app’s development commenced in January 2022, culminating in over 600 commits. The codebase adheres to the BSD 3-Clause license and remains fully open source, reflecting Tor’s enduring commitment to transparency and the principles of free software.
At its core, Tor VPN is built on Arti, a modern Rust-based implementation of the Tor protocol. This new architecture replaces the older C-based “C-Tor” codebase, enhancing memory safety and modularity. The app empowers Android users to direct internet traffic from individual applications through the Tor network, with each app receiving its own unique Tor circuit and exit IP address. This innovative per-app routing mechanism aims to mitigate correlation attacks and further obscure users’ network activities.
Features of Tor VPN
The Tor VPN app presents a suite of features designed to bolster user privacy:
- IP and Location Obfuscation: Applications and services will only see a Tor exit node, concealing the user’s actual IP address.
- Per-App Routing: Users can select which apps are routed through Tor, creating isolated circuits for enhanced privacy.
- Censorship Resistance: Leveraging Tor’s decentralized routing, the app assists users in accessing content in regions with restrictions.
- Onion Service Support: Similar to the Tor Browser, the VPN facilitates access to .onion domains, promoting anonymous communication and metadata-free services.
Founded in the early 2000s, the Tor Project operates as a nonprofit organization, funded by a combination of public donations and institutional grants. Its flagship product, the Tor Browser, enables anonymous web browsing by routing traffic through a volunteer-run overlay network. With the introduction of Tor VPN Beta, the organization is broadening its focus to encompass device-level privacy on mobile platforms.
Limitations and Warnings
While the Tor VPN Beta presents exciting opportunities for mobile privacy, it is essential to acknowledge its limitations. The app is not yet production-ready, and users are advised to approach it with caution. Documentation and the store listing explicitly state that the app should not be trusted for high-risk or sensitive activities. System-level data on Android devices, such as identifiers, may still expose users, and no VPN, including Tor’s, can guarantee complete anonymity.
Users should also be prepared for potential bugs, crashes, and unrefined features during this beta phase. The app is best suited for testers, developers, and privacy enthusiasts willing to engage with the development team and provide constructive feedback.
If you found this article informative, consider following us on X/Twitter and LinkedIn for more exclusive content.
