Vehicle　platoon,　a　novel　vehicle　driving　paradigm　that　organizes　a　group　of　vehicles　in　the　nose-to-tail　structure,　has　been　considered　as　a　potential　solution　to　reduce　traffic　congestion　and　increase　travel　comfort.　In　such　a　platoon　system,　head　vehicles＇　performances　are　usually　evaluated　by　user　vehicles＇　feedbacks.　Selection　of　an　appropriate　and　reliable　head　vehicle　while　not　disclosing　user　vehicles＇　privacy　has　become　an　interesting　problem.　In　this　article,　we　present　a　trust-based　and　privacy-preserving　platoon　recommendation　scheme,　called　TPPR,　to　enable　potential　user　vehicles　to　avoid　selecting　the　malicious　head　vehicles.　The　basic　concept　of　TPPR　is　that　each　user　vehicle　holds　a　trust　value,　and　the　reputation　score　of　the　head　vehicle　is　calculated　via　a　truth　discovery　process.　To　preserve　vehicles＇　privacy,　pseudonyms　and　Paillier　cryptosystem　are　applied.　In　addition,　novel　authentication　protocols　are　designed　to　ensure　that　only　the　valid　vehicles　(i.e.,　the　vehicles　holding　the　truthful　trust　values　and　joining　the　vehicle　platoon)　can　pass　the　authentication.　A　comprehensive　security　analysis　is　conducted　to　prove　that　the　proposed　TPPR　scheme　is　secure　against　several　sophisticated　attacks　in　vehicular　ad　hoc　networks.　Moreover,　extensive　simulations　are　conducted　to　demonstrate　the　correctness　and　effectiveness　of　the　proposed　scheme.