Is it legal to run a Tor exit node?

Is running a Tor exit node legal in the United States?

Yes, in EFF's view: it believes running a Tor relay, exits included, is legal under US law. Its Legal FAQ for Tor relay operators, last reviewed in March 2023, rests on two federal rules.

• DMCA section 512(a) covers "transitory digital network communications". A provider is shielded from copyright claims when someone else starts the transmission and nothing in it is selected or changed.
• Section 230 (47 U.S.C. § 230) protects online intermediaries from many civil claims over other people's speech. Some criminal and intellectual property claims are excluded.

A Tor exit forwards traffic it did not start, to places it did not choose, without changing it: the case these safe harbors describe.

EFF adds a warning. Monitoring or logging users' traffic can break US wiretap laws, so do not inspect what your exit carries.

Is it legal to run a Tor exit node in Europe and elsewhere?

In most of Europe, yes: the law shields carriers of traffic they do not start or change. The Tor Project's exit guidelines cite Article 4 of the EU Digital Services Act (Regulation 2022/2065), the "mere conduit" rule. For Germany they add § 7 of the DDG, the national digital services law.

The guidelines state that most Western countries have similar exemptions for communication providers. The rules still differ from one country to the next. The Tor Project asks operators to document their own country's rules, and points to local digital rights groups for legal help.

Has anyone been arrested or raided for running a Tor exit?

A few operators have been searched or arrested by mistake, but EFF knows of no one convicted for running a relay. Police sometimes treat the exit's IP address as the person behind the traffic:

• Seattle, 2016: police searched the home of a privacy activist who ran a Tor exit relay, according to EFF.
• Russia: Dmitry Bogatov, a math instructor and Tor relay operator, was wrongly arrested and later cleared, according to EFF.
• Germany, 2024: on 16 August, police searched the registered address of Artikel 5 e.V., a non-profit that runs exits. It was a board member's home, and the group's second search after one in 2017, per its post to the tor-relays list.

The legal risk of a Tor exit is mostly practical: complaints, blocked IP addresses and, rarely, a mistaken search. That is why EFF and the Tor Project both say not to run an exit from home.

What protects a Tor exit operator?

Distance from your home, clear labels and no logs protect an exit operator best. EFF and the Tor Project give the same advice:

• Run it in a datacenter, not at home. Use an IP address that your own traffic never uses.
• Keep nothing personal on the exit. EFF advises against storing sensitive data on the machine.
• Label the IP. A reverse DNS name with "tor-exit" and a notice page on port 80 tell anyone who checks what the address is.
• Keep no traffic logs. The Tor Project asks operators not to look at or change traffic, and to keep SafeLogging on.
• Answer complaints calmly. ExoneraTor shows that the IP was a Tor exit at a given time. The Tor Project offers reply templates.
• Know who can help. EFF cannot represent every operator, but it helps operators find lawyers, in the US and abroad. The Tor Project also suggests forming a relay association.

The page on how to run a Tor exit relay on a dedicated server puts these steps into practice.

Which law applies to a Tor exit on an offshore dedicated server?

Three laws apply, each to a different part: your own country's, the datacenter's and the host's.

• Your country's law applies to you, wherever the server is.
• The datacenter's country governs the hardware and the network that carry your exit's traffic.
• The host's law decides how notices sent to the host are handled. Ironatoll is run by DomaineGoat LLC, a company registered in Panama, and answers only to Panamanian law. Each server’s datacenter, for its part, is bound by the law of the country it stands in.

For copyright: DMCA ignored: no DMCA notice, and no other foreign copyright notice, leads to any action on our side. Panamanian law and the orders of Panamanian courts are the only authority we answer to. According to Ironatoll's check of 30 October 2026, 4 of 34 dedicated-server hosts allow Tor exit relays, and 4 say they ignore DMCA notices. See which hosting providers allow Tor exit nodes and which country is best for an offshore dedicated server.

An offshore server does not take you out of your own country's law. The general rules are on whether it is legal to rent an offshore dedicated server. For the price of each plan, see how much an Ironatoll dedicated server costs.

What should I do if police contact me about my exit?

Stay calm, explain what Tor is, and talk to a lawyer before you answer questions. EFF's FAQ says US operators may ask for a lawyer and decline questions until they have talked to one. If you do answer, do not lie. EFF also suggests explaining that a well-run relay holds no useful data about its users.

Point to ExoneraTor for the date in question, and do not hand over logs without legal advice. If someone asks you to tap or backdoor your relay, the Tor Project's expectations are clear. Refuse, fight it with a lawyer, or shut the relay down.

At Ironatoll: No logs: we keep no connection logs, no traffic logs and no IP addresses of visitors or customers, on the website, the dashboard or the servers.

This page sums up public sources; it is not legal advice.