Three tools show up whenever the question is “how do I access a blocked site” or “how do I hide my IP” — web proxy, VPN, and Tor. Each solves a different scope of problem, each has different setup cost, each has a different threat model. Picking the wrong tool means either paying too much (install + subscription for one blocked page) or getting too little coverage (proxy when the mobile app is what you need). This framework maps the three tools to specific situations.
The core distinction: scope
Every other property flows from scope.
Web proxy: one browser tab. You visit anyproxy.site, paste a URL, browse. Nothing installs. When you close the tab, the tool is gone.
VPN: your whole device. You install an app, grant permission, and every network request from every application (browser, mobile app, background sync, system update) routes through the VPN tunnel.
Tor: one browser tab, but through three relays. You install Tor Browser (or use a Tor-enabled browser), and traffic routes through a chain of three volunteer-run relays chosen from a global pool.
Once you have the scope right, the rest is mostly obvious.
Decision by situation
You need to open one blocked page right now on a school Chromebook
Web proxy. Full stop. Installs are locked on managed Chromebooks — VPN and Tor apps do not install. The Chrome tab you already have open goes to anyproxy.site.
You need to watch Netflix from a different country
VPN. Netflix and every other DRM streaming service refuse proxied playback because DRM checks tamper detection. VPNs preserve the DRM-trusted client environment. Tor is too slow for HD video. Web proxies do not work at all.
You need whatsapp mobile app to work in China
VPN with obfuscation (V2Ray, Shadowsocks, Trojan). Web proxies only handle browser traffic; the WhatsApp app needs full-device routing. Tor is blocked directly in China without bridges. Consumer VPN protocols get fingerprinted by the Great Firewall — obfuscated tunnels survive better.
You need to research something sensitive without linking to your identity
Tor. The three-hop relay chain is designed for anonymity, not speed. A single-hop proxy or VPN leaves the operator (proxy or VPN provider) able to correlate you to your destination. Tor removes that correlation.
You need to unblock YouTube on a work laptop where installs are OK
Either web proxy or VPN. Proxy is faster to set up (10 seconds), lighter, no ongoing subscription. VPN adds whole-device coverage if you need more than one browser tab. For YouTube specifically, both work; the tiebreaker is whether you want other apps covered too.
You need to bypass geo-blocks on a service like ChatGPT
Web proxy for browser use, VPN for the mobile app. ChatGPT is region-blocked by OpenAI at the edge — the block is on their side, not your ISP’s. Any tool that presents a supported-region IP works. Choose by scope: browser tab (proxy) vs mobile app (VPN).
You need Instagram on a phone in Iran
Proxy in mobile browser for casual use, VPN for the app. See proxy-vs-vpn-for-instagram for the specific breakdown.
Head-to-head on the properties that matter
| Property | Web proxy | VPN | Tor |
|---|---|---|---|
| Scope | 1 browser tab | Whole device | 1 browser tab (Tor Browser) |
| Install | None | Required | Tor Browser download |
| Cost | Free (AnyProxy) | $3-15 / month | Free |
| Setup time | 10 seconds | 5-10 minutes | 1-2 minutes |
| Extra latency | 30-50 ms | 20-40 ms | 300-1500 ms |
| DRM streaming | No | Yes | No (too slow) |
| Managed Chromebook | Yes | No | No |
| Anonymity from operator | No | No | Yes (3-hop) |
| Anonymity from destination | IP-only | IP-only | Fingerprint-hardened |
| Blocks by nation-state DPI | Rare (HTTPS blends) | Often (protocol fingerprint) | Requires bridges |
| Mobile app support | No | Yes | Limited |
The threat-model question
Beyond scope, the harder question is: who are you hiding from?
Hiding from your local network (school Wi-Fi, corporate firewall, hotel captive portal): all three tools work. The local network sees an encrypted tunnel to somewhere and cannot read inside. Web proxy is lightest.
Hiding from your ISP or country-level surveillance (Iran, China, Russia): VPN with strong obfuscation or Tor with bridges. Web proxy hides the destination content but the ISP sees you connected to a proxy domain — sometimes enough by itself to be flagged. If the connection existing is a problem, obfuscated tunnels win. If the connection existing is fine but the destinations must be hidden, any of the three works.
Hiding from the destination site itself (evading IP-based tracking, geo-blocks): all three tools substitute an IP. VPN and web proxy expose one alternate IP; Tor exposes a chain of exit relay IPs. Cookies, browser fingerprints, and account logins still identify you regardless of tool — none of the three offers full anonymity from a destination that has ever fingerprinted your browser.
Hiding from the tool provider itself (proxy operator, VPN provider, relay operator): Tor is the only tool designed against this threat. A web proxy operator or VPN provider technically sees your traffic (mitigated by log policies) — Tor’s three-hop design ensures no single relay knows both source and destination.
When each tool is overkill
Web proxy is overkill when: the site is not actually blocked. Test the URL directly first — you may not need a proxy at all.
VPN is overkill when: you need one browser tab and can use a web proxy in the browser you already have open. Installing a VPN for a single YouTube link is 5 minutes of setup for 30 seconds of use.
Tor is overkill when: your threat model is “hide from the school Wi-Fi filter” — the school does not have Tor-breaking capability, and the 300-1500ms latency makes browsing painful for a job the web proxy handles at 50ms.
When each tool is insufficient
Web proxy is insufficient when: the mobile app is what you need (WhatsApp app, Instagram app, TikTok app), DRM streaming is the goal (Netflix, Disney+), or the block includes the proxy domain itself (rare on schools, occasional on corporate networks).
VPN is insufficient when: installs are blocked on the device, the VPN protocol is fingerprinted and dropped by the local DPI, or the anonymity requirement is strong enough that any single-hop tool is a correlation risk.
Tor is insufficient when: speed matters (video, gaming, real-time apps), the destination blocks Tor exit nodes (many banks and financial services do), or you need mobile app coverage on iOS where Tor is more limited.
The 2026 default recommendation
For most users encountering a “blocked site” for the first time, the honest recommendation order is:
- Try the site directly first — you may not have a real block.
- Try public DNS (1.1.1.1). Fixes most school Wi-Fi blocks.
- Try a web proxy (AnyProxy or similar). Fixes DNS, IP, and TLS SNI blocks. Lightest tool.
- Try a VPN if the mobile app is what you need, if DRM streaming is the goal, or if whole-device coverage matters.
- Try Tor if the threat model requires anonymity from single-operator correlation.
Most people who show up looking for a VPN would be better served by a web proxy for their actual use case. Most people who show up looking for a web proxy for DRM streaming need a VPN instead. Match the tool to the scope — the rest of the properties are downstream of that decision.
For specific “proxy vs VPN for X” narrow questions, the /vs/ hub has decision-matrix pages for common scenarios (streaming, school, Iran, ChatGPT, work networks).