Orbot: Tor for Android

Review by eFreeware

Orbot is a free app from The Tor Project that routes other apps' internet traffic through the Tor network. It is not a browser or a messaging tool; it sits underneath the apps you already have and changes how their connections leave your phone. If the idea of strangers being unable to see which sites you open appeals to you, this is the tool that does that work on Android.

The reason to consider it is straightforward. Rather than connecting you straight to a site the way an ordinary VPN or proxy does, Orbot encrypts your traffic and sends it through a series of computers in different countries. The developer presents it as the most secure option for browsing on Android, and the pitch rests on that layered path rather than on speed or convenience.

It has been on Google Play since August 2010 and has passed ten million installs, with a 4.0 average from roughly 197,500 ratings. That is a long track record for a privacy tool.

How the Tor routing actually works

The core idea is encryption plus indirection. Your traffic is encrypted, then bounced through several relays around the world before it reaches its destination. Anyone watching your connection sees that you are using Tor, but not which app you opened or which site you visited. That last point is the one the developer emphasizes: the observer learns that Tor is in play and little else.

This defends against traffic analysis, the practice of studying who talks to whom and when, rather than reading content directly. That threat is framed in broad terms, covering personal privacy, confidential business relationships and state security. It is the kind of surveillance that does not need to read your messages to learn something useful about you.

The trade-off is stated plainly by the developer: the process takes a little longer than a direct connection. Multiple relays in different countries add delay that a single-hop VPN does not. The developer argues the wait is worth it for the protection, and that is the central judgment you have to make for yourself. If your priority is a fast, low-latency connection, this design works against you by definition.

The developer also quotes the New York Times to the effect that when a communication arrives via Tor, its origin cannot be known. That is a strong claim, and it is worth reading as the project's own framing of what the network achieves rather than a guarantee about any single session.

Routing other apps through the VPN feature

Orbot is not limited to one browser. Any app on your phone can be routed over Tor using the VPN feature, which is the part that makes it more than a curiosity. Instead of changing your habits, you point the traffic of the apps you already use through the Tor network and let Orbot handle the rest.

That matters because privacy leaks rarely come from a single place. If one app connects directly while another goes through Tor, the direct connection can reveal plenty on its own. Routing everything you care about through the same path is the more coherent approach, and Orbot is built to make that possible across your installed apps.

Because it works at this level, Orbot is best understood as infrastructure rather than an interface you spend time in. You set it up, choose what goes through it, and then get on with using your phone. The app works as a supporting layer that lets other apps reach the internet more securely.

Open source, feedback and the people behind it

Orbot is free software with openly published source code, and the Guardian Project describes itself as a group building secure mobile apps and open code. For a privacy tool this is not a minor detail. Anyone with the skills can inspect how it works, and the community around the project can contribute changes.

The developer actively asks for input, inviting users to report missing features or annoying bugs by email and to get involved through the project's site and code repository. That kind of openness is a reasonable signal for a tool you are trusting with your traffic, though it does not by itself prove anything about the quality of the code.

Tor itself received the Electronic Frontier Foundation's Pioneer Award in 2012, recognition for the network. The developer also points readers toward an introductory guide to security practices, which is a sensible thing to flag: the app is one part of staying anonymous, not the whole of it.

What Orbot asks of you

The app costs nothing, carries no advertising and offers no in-app purchases. The app is free to use. That is unusual for a privacy tool and it removes a common source of hesitation.

What it does ask for is patience. The developer is explicit that routing through multiple computers takes longer than a direct connection, and that delay is the price of the protection on offer. Anyone expecting the responsiveness of an ordinary connection will notice the difference, and no amount of configuration changes the underlying design.

There is also a responsibility that comes with the app. A disclaimer notes that no technology is completely foolproof and that users should follow good security practices for maximum anonymity. Orbot handles the network layer; how you behave on top of it still matters. Treating the app as a complete anonymity solution would be a misreading of what the developer says.

Who gets real value from it

The clearest fit is someone whose threat model includes network-level observation and who is willing to accept slower connections to counter it. Journalists, researchers, activists and people working in sensitive contexts are the obvious audience. Anyone who wants to keep their browsing and app usage from being profiled by whoever runs the network they are on will find the case compelling.

It also suits people who want a single privacy layer across many apps rather than per-app solutions. If you have thought about Tor before but did not want to change how you work on your phone, the VPN feature is the part that removes that obstacle. You keep your apps and route them differently underneath.

Where it fits less well is any situation where latency is the point. Live video, fast-paced online games and anything that depends on immediate responses will feel the cost of the multi-hop path. That is not a flaw in the app so much as a consequence of what it is built to do, and the developer does not pretend otherwise.

What the recent updates show

The most recent release bundles Tor 0.4.9.13 along with security fixes drawn from an independent audit. It also updates the built-in bridges and GeoIP data, and adds translation work including Swahili. For a long-running project, that combination of core engine updates and housekeeping is what steady maintenance looks like.

Several changes touch how the app behaves in practice. Other apps can no longer start Orbot, which tightens control over when it runs. The new setup for Kindness Mode lets it start again on its own when Android shuts it down. Snowflake proxy fixes are included, and UPnP mappings survive restarts, which matters for anyone running a relay or proxy from a home connection.

There are also fixes for custom bridges, including unusual spacing, plus corrections around proxy ports, IPv6 and app routing. Ukraine has been added to the list of exit countries. None of these are headline features, but together they suggest attention to the details that tend to break in real use.

A dependable choice for anonymity-minded Android users

Orbot does one job and does it without charging you, showing ads or selling upgrades. It wraps your other apps in Tor's multi-hop routing, hides what you are doing from anyone watching the network, and leaves the rest of your phone alone. The developer's own framing of the trade-off is honest: you give up speed for a stronger form of privacy.

I would point this at people who already accept that bargain. If you work with sensitive material, travel through networks you do not trust, or simply object to being profiled by your connection, the app is a reasonable place to start. The long release history and the open codebase make it easier to trust than a closed alternative with the same pitch.

If responsiveness matters more than anonymity in your daily use, the delay will wear on you quickly. That is the honest dividing line. For everyone on the other side of it, Orbot is a free, well-established tool that does exactly what it says.

What's new in version 17.9.6-RC-1-tor-0.4.9.13

- Tor 0.4.9.13 - Security fixes from our recent independent audit - Other apps can no longer start Orbot - Redesigned Kindness Mode setup, and it now restarts reliably if Android stops it - Snowflake proxy fixes; UPnP mappings survive restarts - Custom bridge fixes, including unusual spacing - Updated Tor, built-in bridges and GeoIP data - Proxy port, IPv6 and app routing fixes - Ukraine added to exit countries - Translation updates, including new Swahili