Tor Configuration
Your Bitcoin node talks to the world in two ways: it connects to other Bitcoin nodes to stay synchronized, and it serves your wallet's queries. Both of these connections have privacy implicationsβand Tor can help with both.
Why Tor Matters for Nodesβ
Your IP Address is Your Identityβ
When your node connects to other Bitcoin nodes, those nodes see your IP address. Your IP address isn't anonymousβit's tied to your identity through your Internet Service Provider's records. With minimal effort, someone can:
- Determine your approximate geographic location
- Identify that you're running a Bitcoin node
- Potentially correlate your node with other online activity
Why does this matter? If attackers know you're running a Bitcoin node, they might assume you hold significant Bitcoin. If you're running a Lightning node, your channel capacity is publicly visibleβgiving observers a floor estimate of your holdings. This makes you a potential target for physical attacks.
Running your node over Tor hides your IP address from the Bitcoin network. Other nodes see a Tor exit address, not your home connection.
Two Types of Tor Connectionsβ
Tor serves two distinct purposes for your node:
TOR USE CASES
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
1. NODE-TO-NODE (Privacy)
Your Node βββΊ Tor Network βββΊ Other Bitcoin Nodes
Hides your IP from the Bitcoin network.
Other nodes can't see where you're located.
2. WALLET-TO-NODE (Remote Access)
Your Wallet βββΊ Tor Network βββΊ Your Node's Onion Address
Enables access from anywhere in the world.
No port forwarding or VPN needed.
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
Connection 1: Node to Bitcoin Networkβ
This is about privacy. By routing your node's connections through Tor, you prevent other Bitcoin nodes from learning your real IP address.
What It Protects Againstβ
- Network observers learning you run a Bitcoin node
- Geographic identification of your node
- Correlation of your node with other internet activity
- ISP logging of your Bitcoin network connections
Configurationβ
Most node software can be configured to connect to peers exclusively over Tor. In Parmanode, Tor support is built into the menusβenable it from the appropriate option.
Bitcoin Core's relevant settings:
proxy=127.0.0.1:9050
listen=1
bind=127.0.0.1
onlynet=onion
These settings tell Bitcoin Core to route all connections through Tor and only connect to other Tor-enabled nodes.
Connection 2: Your Wallet to Your Nodeβ
This is about remote access. When you're home, your wallet connects to your node over your local networkβcompletely private, no Tor needed. But what happens when you're away from home?
Your node has an internal IP address (like 192.168.1.100) that only exists on your home network. When you're at a coffee shop or traveling, that address doesn't workβyou're on a different network.
The Problem with Traditional Solutionsβ
Port forwarding exposes your node to the entire internet. Anyone can attempt to connect, and your home IP address is visible.
VPN to home works but requires setup and monthly costs.
Tor hidden service solves this elegantly. Your node publishes an onion address that's accessible from anywhere in the world, through the Tor network, without exposing your home IP.
How It Worksβ
Your node creates a Tor hidden serviceβan .onion address that routes through the Tor network to reach your node. Your wallet connects to this onion address from anywhere:
Remote Access via Tor
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
You (traveling) Home Network
β β
β ββββββββ΄βββββββ
β β Your Node β
β β (electrum β
βΌ β server) β
βββββββββββββ ββββββββ²ββββββββ
β Wallet β β
β (phone or β β
β laptop) β β
βββββββ¬ββββββ Tor Hidden Service
β abc123xyz.onion
β β²
ββββββββΊ Tor Network ββββββββ
βββββββββββββββββββββββββββββββββββββββββββββββββββββββββββββ
The connection is encrypted, your home IP is never exposed, and no port forwarding is required.
Setting Up Torβ
With Parmanodeβ
Parmanode can install and configure Tor for you. From the Other Install menu, look for Tor-related options. Once installed, Parmanode will display your onion addresses for both Bitcoin Core and your Electrum server.
Tor Connection Detailsβ
Your Electrum server (Fulcrum or electrs) will have its own onion address, shown in its status menu:
TOR: abc123...xyz.onion:50001
Enter this address in your wallet's server settings to connect from anywhere.
Sharing Your Nodeβ
One benefit of Tor access: you can share your node with friends and family. Give them your Electrum server's onion address, and they can connect their wallets to your node from anywhere in the world.
A word of caution: Each connected wallet adds load to your node. A Raspberry Pi can handle a few simultaneous connections, but don't share your address publicly unless you have robust hardware.
Privacy Tradeoffsβ
Running over Tor adds latency. Connections are slower because traffic routes through multiple relays. For most node operations, this is acceptable. For time-sensitive applications (like running a routing Lightning node), the latency might matter.
You can also run in "hybrid" modeβconnecting to both Tor and clearnet peers. This improves connectivity but reduces privacy, as clearnet connections expose your IP.
Key Takeawaysβ
- Node-to-network Tor hides your IP from other Bitcoin nodes (privacy)
- Wallet-to-node Tor enables remote access without port forwarding (convenience)
- Your node's onion address lets you connect from anywhere in the world
- Parmanode can install and configure Tor for you
- Share with cautionβtoo many connections can overload small hardware
Next Stepsβ
β Next: Connect Sparrow Wallet β Link your wallet
β Back: Electrum Server β Understanding the indexer
β Start: Parmanode Setup β Full installation guide