Stars
-
Route selected traffic through Tor with clear controls.
OnionHop combines Proxy mode and TUN/VPN mode, supports bridges, and provides logs that explain what is happening.
Downloads
-
Latest
-
Core capabilities for restrictive networks
OnionHop is built around predictable behavior: explicit modes, explicit routing, and explicit diagnostics.
Proxy mode
Route proxy-aware apps through a local SOCKS endpoint without requiring administrator rights.
TUN/VPN mode (admin)
Use system-wide routing with sing-box and Wintun for apps that ignore proxy settings.
Split tunneling
Choose which applications use Tor and which stay direct in Hybrid mode.
Smart Connect
Automatically selects the most reliable connection strategy for the current network.
CLI companion
Scriptable command-line workflow for automation, headless systems, and advanced users.
Bridge transports
Use snowflake, obfs4, meek-azure, webtunnel, or custom bridge lines.
Kill switch controls
Optional firewall protection helps prevent leaks in strict TUN configuration.
Logs and diagnostics
Review app and network logs to identify bridge and connectivity issues quickly.
DNS controls
Select DNS providers for routed traffic and enable the optional .onion DNS proxy listener.
Video showcase
Watch a quick walkthrough of OnionHop in action.
Downloads
Release data is loaded from the GitHub API. Switch between GUI and CLI categories to keep file lists focused.
-
-
- GUI setup for normal desktop usage.
- CLI setup for terminal and automation workflows.
- Portable ZIP builds if you do not want installation.
- Use the macOS tab to find Apple Silicon and Intel builds quickly.
Loading release data...
Operational notes
Is Tor legal?
Yes in many places, but no or restricted in some jurisdictions. You are responsible for following local laws.
Do .onion sites work?
Yes. OnionHop has native options for this: use System proxy (SOCKS browser/.onion) and/or enable .onion DNS proxy in Settings (requires Administrator).
Why does TUN/VPN need admin rights?
TUN mode uses the Wintun driver and can apply firewall rules for strict kill switch behavior.