Learn Dark Web

Tor Education

How to Download Tor Browser Safely

Downloading Tor Browser is easy. Downloading the genuine Tor Browser is the part that matters — because fake copies exist, they are distributed through search ads and third-party sites, and a fake browser can steal everything you type into it. This guide gives you the one safe path, and how to prove the file you got is genuine.

By Abdul Hannan · Published 14 November 2026 · Updated 14 November 2026

One rule. Download Tor Browser only from torproject.org. Never from a search ad, never from a third-party download site, never from a link someone sends you, and never pay anyone for it. Tor Browser is free.

Step 1: Go to the official download page

Open your ordinary browser and type the address yourself — do not click a link in a search result if you can avoid it, because search ads have been used to promote fake Tor Browser downloads. The address is:

https://www.torproject.org/download/

Check the address bar carefully: the domain is torproject.org, the connection is HTTPS, and the page offers Tor Browser alongside the Tor Project's other apps. If anything looks different — a similar but different domain, a download button that appears before the page finishes loading, a demand for payment — stop and check the address again.

Step 2: Choose the right file for your system

The download page offers Tor Browser for Windows, macOS, Linux and Android. Pick the one for your system. On Windows you will get a portable executable; on macOS a disk image; on Linux a compressed archive. The exact file names change with each release, so do not look for a specific version number — the download page always offers the current stable release.

On Android, the download page links to the official app store listing. On iOS, the Tor Project recommends Onion Browser, a separate app, because the platform does not allow a full Tor Browser build. In the store, check the developer name before installing: it should be the Tor Project for Tor Browser, or the Onion Browser developer named on the Tor Project's own pages.

Step 3: Download the signature file too

Every file on the Tor Project's download page is accompanied by a signature file with the same name plus the extension .asc. These are OpenPGP signatures: they let you verify that the file you downloaded is exactly the file the Tor Project intended you to get.

Download the .asc file next to the installer — right-click the "signature" link and save it in the same folder as the installer. You need both files: the installer and its matching .asc signature.

Step 4: Verify the signature

Verification takes a few minutes and it is the step that proves the download is genuine. You need GnuPG installed: on Windows that means Gpg4win, on macOS GPGTools, and on most Linux distributions GnuPG is already installed. The Tor Project's own support page gives the full instructions; here is the summary.

Import the Tor Browser Developers key

The Tor Browser team signs releases with the Tor Browser Developers signing key, fingerprint ending 4E2C6E8793298290. Import it with: 

gpg --auto-key-locate nodefault,wkd --locate-keys torbrowser@torproject.org

GnuPG should report that it imported the key "Tor Browser Developers (signing key)". If you get an error, stop — do not continue until the key is imported. The Tor Project's support page gives a workaround using the public key file if the automatic fetch fails.

Save the key to a keyring file

gpg --output ./tor.keyring --export 0xEF6E286DDA85EA2A4BA7DE684E2C6E8793298290

Verify the download

Then verify the installer against its .asc file. Replace the example names below with the exact names of the files you downloaded: 

gpgv --keyring ./tor.keyring Downloads/tor-browser-windows-x86_64-portable-13.0.1.exe.asc Downloads/tor-browser-windows-x86_64-portable-13.0.1.exe

The result should contain the line "Good signature from Tor Browser Developers (signing key)". A good signature means the file is exactly what the Tor Project signed.

If verification fails, do not install the file. Delete it, download it again from torproject.org, and verify again. A failed signature means the file cannot be trusted — it may have been tampered with in transit, corrupted in download, or it may be a fake. Never install a Tor Browser download that has not verified.

Note that the signature is dated the moment the package was signed, so the date in the output will change with every release. That is normal: as long as the signature verifies, the date does not matter.

Step 5: Install and open

Once the signature is verified, install Tor Browser as usual and open it. It will connect to the Tor network automatically, which can take a few moments on first run. When the connection is ready, you will see the Tor Browser start page.

For the first few minutes, browse a normal site to check that everything works. Then read our guide to what Tor Browser is and is not before you change any settings — the protections are in the defaults, and the most common mistake new users make is changing them.

What to avoid

  • Search ads. Fake Tor Browser downloads have been promoted through ads. Type the address yourself, or use a bookmark to torproject.org.
  • Third-party download sites. No other website is an authorised source. "Tor Browser Pro", "Tor Browser Plus", and similar names are not the Tor Project's software.
  • Paying for it. Tor Browser is free. Any site charging for a download is a scam.
  • Skipping verification. On desktop, verification is the only proof the file is genuine. It takes minutes and it is worth doing every time.
  • Modified versions. Do not install a copy that someone else has modified or pre-configured, however convenient it looks. The official download is the only trustworthy one.

If torproject.org is blocked where you live

In countries where the Tor Project's website is blocked, the project provides alternative download routes, including sending download links by email. The details are on the Tor Project's own support pages — do not trust a mirror offered by a stranger, however helpful it looks. If you are in a country where Tor is restricted, check the local law before downloading it at all.

Sources

The signing key fingerprint, the GnuPG commands, and the expected "Good signature" output are taken from the Tor Project's own support page linked above. Last checked: 14 November 2026.

Frequently asked questions

Where is the only safe place to download Tor Browser?

torproject.org — the Tor Project's own download page. Never download Tor Browser from a third-party site, a search ad, or a link someone sends you. The official download page is torproject.org/download, and the official app stores linked from it are the only other safe source.

How do I know my Tor Browser download is genuine?

Verify its .asc signature. Every file on the Tor Project download page has a matching .asc signature file. Using GnuPG, you import the Tor Browser Developers signing key and check the signature — a genuine file reports a good signature from that key. If verification fails, do not install the file.

Is Tor Browser free?

Yes. Tor Browser is free and open-source software published by the Tor Project, a non-profit. Never pay anyone for it. Any site charging for a Tor Browser download is a scam.

Can I download Tor Browser on Android or iOS?

On Android, Tor Browser is available from the official app store linked on torproject.org. On iOS, the Tor Project recommends Onion Browser, a separate app, because the platform does not allow a full Tor Browser build. Always check the developer name in the store before installing.

What if my country blocks torproject.org?

The Tor Project provides alternative download routes, including email delivery of download links. Those routes are documented on the Tor Project's own support pages, and the address to write to is given there. Never trust a third-party mirror offered by a stranger.