This is the most common and generally recommended configuration. You connect to a VPN first, then open Tor Browser:
- Your traffic flow: You → VPN → Tor entry node → Tor middle relay → Tor exit node → Website
- What your ISP sees: VPN traffic only. They cannot see you're using Tor.
- What the VPN sees: You're connecting to Tor (but not what you're browsing on Tor).
- What the Tor entry node sees: VPN server's IP address, NOT your real IP.
- What the website sees: Tor exit node's IP address.
Advantages:
- Hides Tor usage from your ISP - crucial in countries that monitor or block Tor
- Tor entry node doesn't see your real IP - adds protection against compromised entry nodes
- Easy to set up - just connect VPN before opening Tor Browser
Disadvantages:
- VPN provider knows you're using Tor (choose a no-log VPN)
- Slower than Tor alone (adds one more hop)