Tor Browser 13.5a8 is now available from the Tor Browser download page and also from our distribution directory.

This version includes important security updates to Firefox.

We would like to thank the folowing community members for their contributions this release:

• NoisyCoil for their work on tor-browser-build#41137

If you would like to contribute, our contributor guide can be found here.

End of Life for Windows versions ≤ 8.1 and macOS versions ≤ 10.14

Users running Tor Browser on older versions of Windows and macOS will start seeing messages warning them their operating systems will no longer be supported. This is an upstream change we are inheriting from Mozilla. Starting with version 116 Firefox Windows users will require Windows 10 or later while macOS users will require macOS 10.15 or later to continue receiving Tor Browser updates. Users have until October 1st, 2024 to upgrade!

Continued Improvements on Android!

This release has removed the legacy bootstrapping functionality from Tor Browser for Android entirely. This legacy functionality depended on the tor-android-service and tor-onion-proxy-library components. With this functionality gone and replaced with the unified Tor backend living in GeckoView, we will be able to drop these components in the next release, which should result in slightly smaller .apk sizes.

We have made a few UI changes and improvements with this release. The UI which allowed users to fallback to the legacy bootstrapping process has been removed (since the backend is also gone).

Additionally various Android-specific privacy and security bugs have been fixed.

Various User Experience Improvements

On desktop, we have been working on various UI improvements and polish. The about:torconnect (aka Connect Assist) page has been restyled to better fit with Firefox's existing UI. We have also fixed various minor bugs related to letterboxing, the onion-service client-authentication dialgo, and the circuit display.

Send us your feedback

If you find a bug or have a suggestion for how we could improve this release, please let us know.

Full changelog

The full changelog since Tor Browser 13.5a7 is:

• All Platforms
  • Bug tor-browser#42290: "DuckDuckGoOnion" is a weird naming format for onion search engines
  • Bug tor-browser#42549: Remove brand.dtd
  • Bug tor-browser#42560: Rebase Tor Browser alpha onto 115.11.0esr
  • Bug tor-browser#42565: Backport Android and desktop security fixes from Firefox 126
  • Bug tor-browser#42583: Modify moz-support-link
  • Bug tor-browser-build#41137: Build gcc-cross and tor-expert-bundle for linux-aarch64
  • Bug mullvad-browser#241: Move network.proxy.failover_direct=false pref to base-browser
• Windows + macOS + Linux
  • Updated Firefox to 115.11.0esr
  • Bug tor-browser#41621: Tweak about:torconnect styling
  • Bug tor-browser#41930: intl.accept_languages gets into a stuck modifed state
  • Bug tor-browser#42391: IndexDB's private directory not removed on browser shutdown in global private browsing mode
  • Bug tor-browser#42405: Fix betterboxing + findbar horizontal bounce if the scrollbar is not an overlay
  • Bug tor-browser#42541: Circuit Display does not work when using Conjure pluggable transport
  • Bug tor-browser#42542: Quirks when onion authentication prompt is shared between two tabs
  • Bug tor-browser#42557: Fix regression in Onion Services authentication prompt focus
  • Bug tor-browser#42573: Tweak language notification to avoid formatValue
  • Bug tor-browser#42574: Exempt pdf.js from letterboxing
• Windows + macOS
  • Bug tor-browser#41405: Win ≤8.1 and macOS ≤10.14 not supported in ESR 128
  • Bug tor-browser#42347: Add a banner warning users about the upcoming EOL for Win ≤8.1 and macOS ≤10.14
• Linux
  • Bug tor-browser-build#41136: Include *.deb in the list of files to gpg sign
• Android
  • Updated GeckoView to 115.11.0esr
  • Bug tor-browser#42317: Update "Security Settings" menu item
  • Bug tor-browser#42409: TTP-03-011 WP3: Potential DoS due to Deep Link abuse
  • Bug tor-browser#42552: TBA: formatting APIs are en-US only
  • Bug tor-browser#42562: Restrict the accepted languages to the ones whose localization is available
  • Bug tor-browser#42566: Remove 'Enable beta connection features' menu item in stable release channel
  • Bug tor-browser#42567: Remove 'Enable beta connection features' toggle
  • Bug tor-browser#42571: The new bootstrap on Android breaks if the browser goes in background
  • Bug tor-browser#42576: Backport Bug 1885171: use the private keyboard for prompts on Android
  • Bug tor-browser#42578: Reject Android "open in Tor Browser" intent
  • Bug tor-browser#42582: Accepted languages should use id and he on Android
  • Bug tor-browser-build#41143: Enable multi-locales also on GeckoView
• Build System
  • All Platforms
    • Updated Go to 1.21.10
    • Bug tor-browser-build#41001: Create Release Prep MR generating script
    • Bug tor-browser-build#41148: Update projects/browser/Bundle-Data/Docs/Licenses/NoScript.txt
    • Bug rbm#40076: Correctly refresh file when computing input_files_id and a file is set as refresh_input
  • Android
    • Bug tor-browser#42568: Remove legacy tor dependencies from firefox-android