Tor Browser

Tor Browser is a free and platform-independent application designed to allow users to browser the Web anonymously through the powerful Tor network on the Linux, Microsoft Windows and Mac OS X operating systems, without the need to use any third-party software.

Features at a glance

It is a portable software, allowing users to use directly from a USB flash drive, running a pre-configured web browser to protect their anonymity. The Tor software is the key component of Tor Browser Bundle, protecting users by bouncing their communications around a distributed network of relays, which are run by volunteers all around the world.

Getting started with Tor Browser Bundle

When you open the application for the first time, it will ask if you want to immediately connect to the Tor network and start browsing the Web anonymously, or if you want to tweak your network settings, in case the respective computer its censored, proxied or filtered.

Once you hit the Connect button, the software will connect to the Tor network and in a few seconds it will close the connection dialog and open the actual web browser, which is based on an ESR (Extended Support Release) version of the Mozilla Firefox project.

To verify if your connection is indeed anonymous, you can access the www.whatismyip.com website, wich will display the current IP address you’re using at that moment, as well as the geographical location.

Availability and supported platforms

It is a freely distributed, yet not open source graphical software, a mix between the well known Mozilla Firefox web browser and the Tor application, enabling users to surf the Web anonymously from the comfort of their Linux desktops.

Detailed installation instructions for each of the supported operating systems is provided on the project’s homepage, along with the respective binary packages, supporting the 64-bit and 32-bit hardware platforms and many languages.

Bottom line

Overall, Tor Browser Bundle is a really powerful application for Mozilla Firefox users who don’t want to configure the Tor network separately on their Linux-based operating system. Happy anonymous surfing!

What is new in this release:

• Update Firefox to 52.5.2esr
• Update Tor to 0.3.1.9
• Update HTTPS-Everywhere to 2017.12.6
• Update NoScript to 5.1.8.1

What is new in version 7.0.8 / 7.5 Alpha 6:

• All Platforms:
• Update Torbutton to 1.9.7.9
• Bug 23949: Fix donation banner display
• Update locale list with translated banner
• Translations update

What is new in version 7.0.5 / 7.5 Alpha 4:

• Update Torbutton to 1.9.7.6:
• Bug 22989: Fix dimensions of new windows on macOS
• Translations update
• Update HTTPS-Everywhere to 2017.8.31
• Update NoScript to 5.0.9
• Bug 23166: Add new obfs4 bridge to the built-in ones
• Bug 23258: Fix broken HTTPS-Everywhere on higher security levels
• Bug 21270: NoScript settings break WebExtensions add-ons

What is new in version 7.0.4 / 7.5 Alpha 4:

• All Platforms:
• Update Firefox to 52.3.0esr
• Update Tor to 0.3.0.10
• Update Torbutton to 1.9.7.5
• Bug 21999: Fix display of language prompt in non-en-US locales
• Bug 18913: Don't let about:tor have chrome privileges
• Bug 22535: Search on about:tor discards search query
• Bug 21948: Going back to about:tor page gives "Address isn't valid" error
• Code clean-up
• Translations update
• Update Tor Launcher to 0.2.12.3
• Bug 22592: Default bridge settings are not removed
• Translations update
• Update HTTPS-Everywhere to 5.2.21
• Update NoScript to 5.0.8.1
• Bug 22362: Remove workaround for XSS related browser freezing
• Bug 22067: NoScript Click-to-Play bypass with embedded videos and audio
• Bug 21321: Exempt .onions from HTTP related security warnings
• Bug 22073: Disable GetAddons option on addons page
• Bug 22884: Fix broken about:tor page on higher security levels
• Windows:
• Bug 22829: Remove default obfs4 bridge riemann.
• Bug 21617: Fix single RWX page on Windows (included in 52.3.0esr)
• OS X:
• Bug 22829: Remove default obfs4 bridge riemann.

What is new in version 7.0.2 / 7.5 Alpha 2:

• Update Tor to 0.3.0.9, fixing bug #22753
• Update HTTPS-Everywhere to 5.2.19

What is new in version 7.0.1:

• All Platforms:
• Update Firefox to 52.2.0esr
• Update Tor to 0.3.0.8
• Update Torbutton to 1.9.7.4
• Bug 22542: Security Settings window too small on macOS 10.12
• Update HTTPS-Everywhere to 5.2.18
• Bug 22362: NoScript's XSS filter freezes the browser
• OS X:
• Bug 22558: Don't update OS X 10.7.x and 10.8.x users to Tor Browser 7.0

What is new in version 6.5 / 7.0 Alpha 1:

• Update Firefox to 45.7.0esr
• Tor to 0.2.9.9
• OpenSSL to 1.0.2j
• Update Torbutton to 1.9.6.12
• Bug 16622: Timezone spoofing moved to tor-browser.git
• Bug 17334: Move referrer spoofing for .onion domains into tor-browser.git
• Bug 8725: Block addon resource and url fingerprinting with nsIContentPolicy
• Bug 20701: Allow the directory listing stylesheet in the content policy
• Bug 19837: Whitelist internal URLs that Firefox requires for media
• Bug 19206: Avoid SOCKS auth and NEWNYM collisions when sharing a tor client
• Bug 19273: Improve external app launch handling and associated warnings
• Bug 15852: Remove/synchronize Torbutton SOCKS pref logic
• Bug 19733: GETINFO response parser doesn't handle AF_UNIX entries + IPv6
• Bug 17767: Make "JavaScript disabled" more visible in Security Slider
• Bug 20556: Use pt-BR strings from now on
• Bug 20614: Add links to Tor Browser User Manual
• Bug 20414: Fix non-rendering arrow on OS X
• Bug 20728: Fix bad preferences.xul dimensions
• Bug 19898: Use DuckDuckGo on about:tor
• Bug 21091: Hide the update check menu entry when running under the sandbox
• Bug 19459: Move resizing code to tor-browser.git
• Bug 20264: Change security slider to 3 options
• Bug 20347: Enhance security slider's custom mode
• Bug 20123: Disable remote jar on all security levels
• Bug 20244: Move privacy checkboxes to about:preferences#privacy
• Bug 17546: Add tooltips to explain our privacy checkboxes
• Bug 17904: Allow security settings dialog to resize
• Bug 18093: Remove 'Restore Defaults' button
• Bug 20373: Prevent redundant dialogs opening
• Bug 20318: Remove helpdesk link from about:tor
• Bug 21243: Add links for pt, es, and fr Tor Browser manuals
• Bug 20753: Remove obsolete StartPage locale strings
• Bug 21131: Remove 2016 donation banner
• Bug 18980: Remove obsolete toolbar button code
• Bug 18238: Remove unused Torbutton code and strings
• Bug 20388+20399+20394: Code clean-up
• Translation updates
• Update Tor Launcher to 0.2.10.3
• Bug 19568: Set CurProcD for Thunderbird/Instantbird
• Bug 19432: Remove special handling for Instantbird/Thunderbird
• Translation updates
• Update HTTPS-Everywhere to 5.2.9
• Update NoScript to 2.9.5.3
• Bug 16622: Spoof timezone with Firefox patch
• Bug 17334: Spoof referrer when leaving a .onion domain
• Bug 19273: Write C++ patch for external app launch handling
• Bug 19459: Size new windows to 1000x1000 or nearest 200x100 (Firefox patch)
• Bug 12523: Mark JIT pages as non-writable
• Bug 20123: Always block remote jar files
• Bug 19193: Reduce timing precision for AudioContext, HTMLMediaElement, and MediaStream
• Bug 19164: Remove support for SHA-1 HPKP pins
• Bug 19186: KeyboardEvents are only rounding to 100ms
• Bug 16998: Isolate preconnect requests to URL bar domain
• Bug 19478: Prevent millisecond resolution leaks in File API
• Bug 20471: Allow javascript: links from HTTPS first party pages
• Bug 20244: Move privacy checkboxes to about:preferences#privacy
• Bug 20707: Fix broken preferences tab in non-en-US alpha bundles
• Bug 20709: Fix wrong update URL in alpha bundles
• Bug 19481: Point the update URL to aus1.torproject.org
• Bug 20556: Start using pt-BR instead of pt-PT for Portuguese
• Bug 20442: Backport fix for local path disclosure after drag and drop
• Bug 20160: Backport fix for broken MP3-playback
• Bug 20043: Isolate SharedWorker script requests to first party
• Bug 18923: Add script to run all Tor Browser regression tests
• Bug 20651: DuckDuckGo does not work with JavaScript disabled
• Bug 19336+19835: Enhance about:tbupdate page
• Bug 20399+15852: Code clean-up
• Windows:
• Bug 20981: On Windows, check TZ for timezone first
• Bug 18175: Maximizing window and restarting leads to non-rounded window size
• Bug 13437: Rounded inner window accidentally grows to non-rounded size
• OS X:
• Bug 20590: Badly resized window due to security slider notification bar on OS X
• Bug 20439: Make the build PIE on OSX
• Linux:
• Bug 20691: Updater breaks if unix domain sockets are used
• Bug 15953: Weird resizing dance on Tor Browser startup
• Build system:
• All platforms
• Bug 20927: Upgrade Go to 1.7.4
• Bug 20583: Make the downloads.json file reproducible
• Bug 20133: Don't apply OpenSSL patch anymore
• Bug 19528: Set MOZ_BUILD_DATE based on Firefox version
• Bug 18291: Remove some uses of libfaketime
• Bug 18845: Make zip and tar helpers generate reproducible archives
• OS X
• Bug 20258: Make OS X Tor archive reproducible again
• Bug 20184: Make OS X builds reproducible (use clang for compiling tor)
• Bug 19856: Make OS X builds reproducible (getting libfaketime back)
• Bug 19410: Fix incremental updates by taking signatures into account
• Bug 20210: In dmg2mar, extract old mar file to copy permissions to the new one

What is new in version 6.0.8 / 6.5 Alpha 6:

• All Platforms:
• Update Firefox to 45.6.0esr
• Update Tor to 0.2.8.11
• Update Torbutton to 1.9.5.13
• Bug 20947: Donation banner improvements
• Update HTTPS-Everywhere to 5.2.8
• Bug 20809: Use non-/html search engine URL for DuckDuckGo search plugins
• Bug 20837: Activate iat-mode for certain obfs4 bridges
• Bug 20838: Uncomment NX01 default obfs4 bridge
• Bug 20840: Rotate ports a third time for default obfs4 bridges

What is new in version 6.0.7 / 6.5 Alpha 4:

• Based on Firefox ESR 45.5.1, patches Use-after-free in SVG Animation.

What is new in version 6.0.5:

• All Platforms:
• Update Firefox to 45.4.0esr
• Update Tor to 0.2.8.7
• Update Torbutton to 1.9.5.7
• Bug 18589: Clear site security settings during New Identity
• Bug 19906: "Maximizing Tor Browser" Notification can exist multiple times
• Update HTTPS-Everywhere to 5.2.4
• Bug 20092: Rotate ports for default obfs4 bridges
• Bug 20040: Add update support for unpacked HTTPS Everywhere
• Windows:
• Bug 19725: Remove old updater files left on disk after upgrade to 6.x
• Linux:
• Bug 19725: Remove old updater files left on disk after upgrade to 6.x
• Android:
• Bug 19706: Store browser data in the app home directory
• Build system:
• Upgrade Go to 1.4.3

What is new in version 6.0.4:

• Update Tor to 0.2.8.6
• Update NoScript to 2.9.0.14
• Bug 19890: Disable installation of system addons

What is new in version 6.0.2:

• All Platforms:
• Update Torbutton to 1.9.5.5
• Bug 19417: Clear asmjscache
• Bug 19401: Fix broken PDF download button
• Bug 19411: Don't show update icon if a partial update failed
• Bug 19400: Back out GCC bug workaround to avoid asmjs crash
• Windows:
• Bug 19348: Adapt to more than one build target on Windows (fixes updates)
• Linux:
• Bug 19276: Disable Xrender due to possible performance regressions

What is new in version 6.0.1:

• Update Firefox to 38.8.0esr
• Update Tor Launcher to 0.2.7.9 (Bug 10534: Don't advertise the help desk directly anymore, translation updates)
• Update HTTPS-Everywhere to 5.1.6
• Update NoScript to 2.9.0.11
• Bug 18726: Add new default obfs4 bridge (GreenBelt)

What is new in version 5.5.4 / 6.0 Alpha 4:

• Update Firefox to 38.7.1esr
• Update Torbutton to 1.9.4.5 (Bug 18557: Exempt Graphite from the Security Slider (Firefox disables Graphite by default))
• Bug 18536: Make Mosaddegh and MaBishomarim available on port 80 and 443

What is new in version 5.5.3 / 6.0 Alpha 3:

• All Platforms:
• Update Firefox to 38.7.0esr
• Update OpenSSL to 1.0.1s
• Update NoScript to 2.9.0.4
• Update HTTPS Everywhere to 5.1.4
• Update Torbutton to 1.9.4.4
• Bug 16990: Don't mishandle multiline commands
• Bug 18144: about:tor update arrow position is wrong
• Bug 16725: Allow resizing with non-default homepage
• Translation updates
• Bug 18030: Isolate favicon requests on Page Info dialog
• Bug 18297: Use separate Noto JP,KR,SC,TC fonts
• Bug 18170: Make sure the homepage is shown after an update as well
• Windows:
• Bug 18292: Disable staged updates on Windows

What is new in version 5.5.2 / 6.0 Alpha 2:

• Update Firefox to 38.6.1esr
• Update NoScript to 2.9.0.3

What is new in version 5.5.1 / 6.0 Alpha 1:

• All Platforms:
• Bug 18168: Don't clear an iframe's window.name (fix of #16620)
• Bug 18137: Add two new obfs4 default bridges
• Windows:
• Bug 18169: Whitelist zh-CN UI font
• OS X:
• Bug 18172: Add Emoji support
• Linux:
• Bug 18172: Add Emoji support

What is new in version 5.0.4 / 5.5 Alpha 4:

• All Platforms:
• Update Firefox to 38.4.0esr
• Update NoScript to 2.6.9.39
• Update Torbutton to 1.9.3.5
• Bug 9263: Spoof Referer when leaving a .onion domain
• Bug 16735: about:tor should accommodate different fonts/font sizes
• Bug 16937: Don't translate the homepage/spellchecker dictionary string
• Bug 17164: Don't show text-select cursor on circuit display
• Bug 17351: Remove unused code
• Translation updates
• Bug 16937: Remove the en-US dictionary from non en-US Tor Browser bundles
• Bug 17318: Remove dead ScrambleSuit bridge
• Bug 17473: Update meek-amazon fingerprint
• Bug 16983: Isolate favicon requests caused by the tab list dropdown
• Bug 17102: Don't crash while opening a second Tor Browser
• Windows:
• Bug 16906: Don't depend on Windows crypto DLLs
• Linux:
• Bug 17329: Ensure that non-ASCII characters can be typed (fixup of #5926)

What is new in version 5.0.3 / 5.5 Alpha 3:

• Update Firefox to 38.3.0esr
• Update Torbutton to 1.9.3.4
• Bug 16887: Update intl.accept_languages value
• Bug 15493: Update circuit display on new circuit info
• Bug 16797: brandShorterName is missing from brand.properties
• Bug 14429: Make sure the automatic resizing is disabled
• Translation updates
• Bug 7446: Tor Browser should not "fix up" .onion domains (or any domains)
• Bug 16837: Disable Firefox Hotfix updates
• Bug 16855: Allow blobs to be downloaded on first-party pages (fixes mega.nz)
• Bug 16781: Allow saving pdf files in built-in pdf viewer
• Bug 16842: Restore Media tab on Page information dialog
• Bug 16727: Disable about:healthreport page
• Bug 16783: Normalize NoScript default whitelist
• Bug 16775: Fix preferences dialog with security slider set to "High"
• Bug 13579: Update download progress bar automatically
• Bug 15646: Reduce keyboard layout fingerprinting in KeyboardEvent
• Bug 17046: Event.timeStamp should not reveal startup time
• Bug 16872: Fix warnings when opening about:downloads
• Bug 17097: Fix intermittent crashes when using the print dialog

What is new in version 4.5.1:

• All Platforms:
• Update Firefox to 31.7.0esr
• Update meek to 0.18
• Update Tor Launcher to 0.2.7.5
• Translation updates only
• Update Torbutton to 1.9.2.3
• Bug 15837: Show descriptions if unchecking custom mode
• Bug 15927: Force update of the NoScript UI when changing security level
• Bug 15915: Hide circuit display if it is disabled.
• Translation updates
• Bug 15945: Disable NoScript's ClearClick protection for now
• Bug 15933: Isolate by base (top-level) domain name instead of FQDN
• Bug 15857: Fix file descriptor leak in updater that caused update failures
• Bug 15899: Fix errors with downloading and displaying PDFs
• Windows:
• Bug 15872: Fix meek pluggable transport startup issue with Windows 7
• Build System:
• Bug 15947: Support Ubuntu 14.04 LXC hosts via LXC_EXECUTE=lxc-execute env var
• Bugs 15921+15922: Fix build errors during Mozilla Tryserver builds