Tor Browser

Tor Browser is the Tor Project’s browser. Its support pages: “Tor Browser is based on Mozilla Firefox ESR (Extended Support Release) but has been heavily modified for use with the Tor network.” Your traffic goes through three Tor relays, so, as the download page puts it, “Anyone monitoring your connection can only see you using Tor.” The Android version is built from the same code as Firefox for Android, version 140 ESR here, with the Tor Project’s changes and branding. It is free; the app says it “will always be free to use—no donation is required to use this app.”

What it does

• Always private. “By default, Tor Browser does not keep any browsing history. Cookies are only valid for a single session”. Your session is cleared when you close the browser.
• Security levels: Standard, the default, Safer and Safest, which disables JavaScript “by default on all sites”. Changing the level restarts the browser.
• Bridges for networks that block Tor, and Connection Assist, which suggests one, as described in the questions below.
• NoScript is included, and each site is kept separate from the others so they can’t follow you across sites.
• HTTPS-Only mode in every tab.

The Tor Project advises against add-ons: “installing other plugins or add-ons is strongly discouraged because they can harm your privacy, weaken security, and make you easier to track.” It also doesn’t recommend using it together with a VPN unless you know how to set both up.

Defaults worth knowing

From the code of this version:

• The security level is Standard, and Connect automatically is off, so you tap Connect each time.
• The search engine is DuckDuckGo; DuckDuckGo’s onion site and Startpage are among the choices.
• Screenshots are blocked, unless you turn on Allow screenshots.
• Telemetry and crash reporting are switched off.

What it can’t do on Android

The Tor Project lists these known issues: “You can’t see your Tor circuit”, “’New Identity’ feature is not available on Tor Browser for Android”, and you can’t open onion sites that need client authorisation. It also doesn’t connect when moved to an SD card. Video calls in the browser don’t work, because WebRTC is left out of this build. Pages load more slowly than in other browsers, because, in the Tor Project’s words, “your traffic is bouncing through volunteers’ servers in various parts of the world”.

About this file

• This is the Tor Project’s own build of version 15.0.26, released on 21 October 2026 and added the next day to the Guardian Project’s F-Droid repository, where we take it from and which the Tor Project lists as an official source. It is byte for byte the file on the Tor Project’s download server, whose signed checksum list it matches, and it is signed with the Tor Project’s Tor Browser certificate. We host the 64-bit ARM build; the Tor Project also makes builds for 32-bit ARM and x86, which use the same package name.
• 15.0.26 “blocks compromised intermediate eMudhra certificates”; the Tor Project notes that “the updated revocation database can take some minutes to build on first browser startup.” The version before, 15.0.25, updated Tor to 0.4.9.14 and NoScript. The Tor Project says 15.0 “will be the last major release to support x86 for Linux and Android, in addition to Android 5.0, 6.0, and 7.0”; the next version will need a newer Android.
• The 111.1 MB file runs on Android 5.0 and later and declares 31 permissions: internet, notifications, the camera and microphone for sites that ask, storage and media, downloads and the services that keep them running, the list of installed apps, installing downloaded APK files, and biometric authentication, plus a few from Firefox’s code for Google’s push service and install referrer.
• Tor Browser is licensed under the Mozilla Public License 2.0, and Tor under the BSD-3-Clause licence. The Guardian Project flags the app for a non-free component: “In order to support WebAuthn, Firefox includes a proprietary Google library. The Tor Browser build disables WebAuthn via an build setting from upstream, but apparently the proprietary binary still gets included.” “Tor” is a trademark of The Tor Project; this page isn’t affiliated with or endorsed by the Tor Project.
• The app is translated into Brazilian Portuguese.
• The screenshots are the Tor Project’s, from the Guardian Project’s repository.

Flagged by Guardian Project:

• NonFreeComp: Contains non-free components or libraries.

CPU types in this build: arm64-v8a (64-bit ARM, almost every phone since 2017).

Versions currently kept in the Guardian Project repository. We host and check only the newest one.