Using Orbot on Android to protect IP address instead of VPN

You are correct that Orbot mitigates the risk of the intermediate servers snooping on your browsing activity. It is also free, while most trustworthy VPNs cost money. However, Orbot is also much slower and often blocked. I also struggle to think of a threat model where you are concerned about a VPN provider snooping on you, but are not concerned about browser fingerprinting and your traffic being correlated using your IP address. Yes, Tor does mitigate this by blending you into a crowd (much like VPNs) but as soon as you long into an account (which you almost certainly will since all your traffic is being routed through Tor, as opposed to just your activity within the Tor Browser) that account is tied to that IP and browser fingerprint and your traffic can be correlated by an adversary with the resources for it.

Basically, I would only go for it if either (a) you really don’t care about the loss of convenience of Orbot compared to VPNs, (b) there are no VPN providers you trust, or (C) you can’t afford a good VPN provider (though there are a few free and trustworthy providers to consider, like ProtonVPN’s free tier).

1 Like