How to Use Tor with Terminal on Mac: Two Methods

Run Tor on macOS via the Terminal by installing it with Homebrew and launching the service, or by using the built-in command-line client directly. Both methods allow you to route traffic through the Tor network for anonymity. This guide details how to configure your system for secure browsing from the command line.

Prerequisites and Installation

Before configuring Tor, ensure you have a package manager installed. Most Mac users rely on Homebrew for managing open-source software. If you do not have Homebrew, install it first by running the standard installation script provided on their official website. Once Homebrew is active, you can install the Tor software package. Open your Terminal application and execute the following command to download and install the latest stable version of Tor:

brew install tor

This command fetches the necessary binaries and dependencies. After installation, verify that Tor is available in your path by checking its version:

tor --version

If the command returns a version number, the installation was successful. You are now ready to choose between the two primary methods for using Tor on your Mac. The first method uses Homebrew services for persistent background operation, while the second method uses direct command-line execution for temporary sessions.

Method 1: Using Homebrew Services

The Homebrew service method is ideal if you want Tor to run continuously in the background without keeping a specific Terminal window open. This approach manages the Tor process as a daemon, making it easier to start, stop, and restart from anywhere on your system. First, initialize the Homebrew service for Tor. This creates the necessary configuration files and sets up the launch agent. Run the following command:

brew services start tor

You should see a message confirming that the service has been started. To verify that Tor is actually running and listening on the default SOCKS port (9050), use the lsof command or check the logs. You can view the status of the service at any time with:

brew services list

Look for tor in the list and confirm its status is started. If you need to stop the service, use:

brew services stop tor

With the service running, your system now has a local Tor proxy. Applications configured to use a SOCKS proxy at localhost:9050 will route their traffic through the Tor network. This method is particularly useful for developers who need consistent anonymization across multiple tools. For more information on customizing your terminal environment to manage such services efficiently, see How to Customize Terminal Startup on macOS.

Method 2: Direct Command-Line Execution

If you prefer not to run a background service, or if you only need Tor for a short-lived task, you can invoke the Tor binary directly. This method gives you granular control over the process but requires you to keep the Terminal window open while Tor is active. To start Tor directly, simply type:

tor

This command launches the Tor client and begins connecting to the network. You will see log output in the Terminal indicating connection progress. Wait until you see messages confirming that circuits have been established. Do not close the Terminal window, or the Tor process will terminate. To use this direct instance, point your applications to localhost:9050. Some command-line tools support proxy settings natively. For example, you can set the ALL_PROXY environment variable for a single session:

export ALL_PROXY=socks5://127.0.0.1:9050

After exporting this variable, any subsequent command that respects the proxy setting will route through Tor. Remember to unset the variable when you are done to return to normal network behavior:

unset ALL_PROXY

This approach is lightweight and does not leave residual services running on your system. It is perfect for quick checks or testing configurations. However, be aware that frequent starting and stopping may cause delays due to circuit establishment times.

Configuring Applications

Regardless of the method you choose, most applications require manual configuration to use the Tor proxy. Web browsers like Firefox have dedicated privacy modes, but other tools often need explicit proxy settings. For command-line tools like curl, you can specify the proxy directly in the command:

curl -x socks5h://127.0.0.1:9050 https://check.torproject.org

The -x flag defines the proxy server. The socks5h scheme ensures that DNS resolution also happens through Tor, preventing leaks. This command will display your public IP address; if it matches a Tor exit node, your setup is working correctly. Some applications, such as SSH clients, may require additional flags to handle X11 forwarding or other protocols securely over Tor. If you encounter issues with specific commands, refer to guides on fixing common terminal errors, such as Fixing zsh: command not found: ssh -Y on Mac Terminal, to troubleshoot shell-specific problems.

Troubleshooting Common Issues

Users often face connectivity issues when first setting up Tor. Ensure that no firewall rules are blocking outbound connections on port 9050 or 9051. macOS Firewall may prompt you to allow incoming connections; generally, you can deny these as Tor primarily makes outbound requests. If Tor fails to connect, check the logs for errors related to directory authorities or consensus documents. A slow internet connection can delay circuit building. Be patient during the initial startup phase. Additionally, ensure that your system clock is accurate, as Tor relies on correct timestamps for certificate validation. If you experience "command not found" errors after installation, verify that Homebrew is in your $PATH. You may need to add the Homebrew bin directory to your shell profile. For deeper insights into macOS directory structures and PATH management, consult Understanding lsbin and contents bindirectory in macOS with Oh My ZSH and tmux.

Frequently Asked Questions

Can I use Tor Browser instead of Terminal?

Yes, Tor Browser is designed for graphical web browsing and handles many privacy features automatically. However, Terminal access is necessary for scripting, automation, or non-browser applications that do not support the Tor Browser bundle.

Does Tor encrypt my DNS queries?

Standard HTTP traffic does not encrypt DNS unless you use specific protocols. When using the socks5h proxy scheme, DNS resolution occurs within the Tor network, protecting your queries from local network observers.

Is it safe to run Tor as root?

Running Tor as root is discouraged because it increases the risk of privilege escalation attacks. Always run Tor under a standard user account to limit potential damage if the software is compromised.

How do I check if my IP is leaking?

Visit check.torproject.org using a tool configured to use the Tor proxy. If the page confirms you are using Tor, your IP is not leaking. Tools like curl can automate this check for scripts.

What ports does Tor use by default?

Tor typically uses port 9050 for the SOCKS proxy and port 9051 for the transparent proxy. These ports can be changed in the torrc configuration file if they conflict with other services.