Skip to content

Tor Changelog

Tor Browser, Tor daemon, and Onion service release summaries. Newest at the top. Each entry links back to the full translation.

Two release channels

  • StableWhat regular users should run, versioned like 16.0 or 15.0.26.
  • AlphaTesting only. It may contain bugs affecting usability, security, and privacy, and is versioned with an a (16.0a10, for example). Do not use it if you need strong anonymity.

Since 16.0a6 (May 2026) the alpha channel has been based on Firefox betas, rebasing in small steps. The beta line it follows became the new Firefox ESR 153 in July, which is why entries from 16.0a9 onward carry esr version numbers again: same line, not a return to the old base. Stable releases almost always carry Firefox or tor daemon security fixes, so install them as they appear. Firefox moved to a two-week release cadence in September 2026 and Tor Browser follows, so stable updates now arrive more often than before.

Tor Browser 16.0.1

2026-11-10 · Upstream announcement

  • StableThe first maintenance release after 16.0, mainly bringing in Firefox security fixes. Desktop moves to a 153.7.0esr base (tor-browser#45439), GeckoView on Android is updated to match, and security fixes are backported from Firefox 160 (tor-browser#45442). Mozilla's ESR 153.7 advisory of 10 November lists 81 CVEs, 51 High, 21 Moderate and 9 Low (see browser security updates). Mozilla does not flag any of them as actively exploited, and the Tor Project's announcement does not mention exploitation either.
  • The bundled tor moves to 0.4.9.16 from 4 November, an emergency release affecting only directory authorities. It deals with the protocol versions newly required in 0.4.9.15 causing older clients to exit outright (details in the tor daemon changelog). On the browser side, the only addition is a regenerated fallback directory list.
  • NoScript moves to 13.6.38.1984 and zlib to 1.4. The Android signing process switches to a newer apksigner (tor-browser-build#41814, tor-browser-build#41912), with no change to the interface or behaviour.
  • The signing subkey for release files remains 022DA248432D2A0E0F54E65E316C1FACD62D07D9, checked against the sha256sums-signed-build.txt.asc for 16.0.1. The new circuit display announced with 16.0 is due to land in Alpha first; as of 11 November the Alpha channel is still on 16.0a14 from 15 October.

Tor Browser 16.0

2026-10-29 · Upstream announcement

  • StableA new major version and the first stable release based on Firefox ESR 153. Desktop moves to 153.6.0esr, with GeckoView on Android updated to match. ESR 153.6 fixed 145 issues on 27 October (see browser security updates), and the bundled tor moves to 0.4.9.15, the security release of 28 October (see the tor daemon changelog). The announcement does not mention active exploitation.
  • As usual when changing base, the Tor Project ran its annual ESR transition audit, reviewing a year of Firefox changes for privacy and security impact and addressing over 270 Bugzilla issues. Among the results, WebGPU is disabled until audited (tor-browser#44763), AI-related settings and features are hidden or turned off, and several features that could aid browser fingerprinting are removed or disabled.
  • The desktop Settings pages are fully reorganised, following Firefox's redesign in June. The old General page is split into Appearance, Downloads, Tabs and browsing, Accessibility and Languages, and the Connection and Security Level pages are rebuilt with the new components. Settings that could compromise privacy or make the browser easier to fingerprint if enabled are either hidden or carry clear warnings. Existing preferences are kept, and the search bar at the top of Settings finds anything that has moved.
  • A new option under Privacy and security replaces every window title with "Tor Browser". Other programs on your computer can read window titles, which show the page you are viewing, without special permissions. The option is off by default because the Tor Project has not finished evaluating its effect on screen readers and other assistive tools, and it invites users to try it and report problems. For fuller protection from other software on the same computer, the announcement recommends Tails.
  • The built-in manual (about:manual) is replaced with content from the new support site, and on desktop it can still be read offline, which helps most when you cannot connect to the Tor network.
  • Several platform changes. Linux gains a stable build for 64-bit ARM (AArch64), such as a Raspberry Pi or an Apple Silicon Mac running Linux, so people who used Alpha for this can switch back to stable. 32-bit x86 Linux loses support along with Firefox; the announcement notes the platform now sees only about 200 update checks a day. Android also drops its 32-bit x86 build (tor-browser-build#41573), while the 32-bit Windows build remains available.
  • On Android, large parts of the interface move to Material Design 3, features such as password management and bookmark import are removed, and NoScript is now always enabled.
  • Two changes concern onion sites. Onion sites using self-signed certificates now show a security exception warning and button (tor-browser#42065), and Location.ancestorOrigins no longer reveals onion origins (tor-browser#44801).
  • NoScript moves to 13.6.37.1984 and the Go toolchain to 1.26.10. The release signing subkey remains 022DA248432D2A0E0F54E65E316C1FACD62D07D9, checked against the 16.0 sha256sums-signed-build.txt.asc.
  • The announcement previews a new circuit display coming to Alpha that can draw multi-path (conflux) circuits, and that will bring a circuit display to Android for the first time.

Tor Browser 15.0.26

2026-10-21 · Upstream announcement

  • StableThis release has a single change: it updates the bundled CA intermediate certificates and other settings dumps (tor-browser#45397), blocking the compromised eMudhra intermediate certificates. Firefox 158.0.1 fixed the same issue (CVE-2026-113470, details in browser security updates). Upstream does not mention exploitation in the wild.
  • Firefox ESR 140 has no matching release, so the Tor Project brought this fix in itself. The ticket marks it as a high-impact security issue and also weighed shipping 16.0 stable straight away instead.
  • The announcement notes that the first time the browser starts after updating, the updated revocation database can take a few minutes to build.
  • Everything else is the same as 15.0.25, and the release files' signing subkey is still 022DA248432D2A0E0F54E65E316C1FACD62D07D9.

Tor Browser 16.0a14 (alpha)

2026-10-15 · Upstream announcement

  • AlphaThe alpha channel is for testing only. Most people should stay on the stable release (15.x).
  • The Firefox base is rebased onto 153.5.0esr (tor-browser#45380) with security fixes backported from Firefox 158 (tor-browser#45382); GeckoView on Android follows. The bundled tor daemon moves to 0.4.9.14 and NoScript to 13.6.36.90201984.
  • The bundled lyrebird moves to 0.9.0 (tor-browser-build#41896), so if you have set a proxy in Tor Browser's connection settings, Snowflake now goes through it (details in the anti-censorship transports changelog). The Go toolchain moves to 1.26.9.
  • Every other item in this release is in the build process, with no interface or behaviour changes. The release files' signing subkey remains 022DA248432D2A0E0F54E65E316C1FACD62D07D9.

Tor Browser 15.0.25

2026-10-12 · Upstream announcement

  • StableThe bundled tor daemon moves to 0.4.9.14, the 7 October security release that fixed three TROVE issues and a conflux bug that crashed relays (details in the tor daemon changelog). Upstream does not mention exploitation in the wild.
  • Security fixes are backported from Firefox 158 (tor-browser#45382), and the Firefox base stays at 140.17.0esr. Firefox ESR 140 has had no new release since 140.17 on 29 September, and Mozilla's 13 October round shipped only 153.5 and 115.43, so every Firefox fix in this release depends on the Tor Project's own backports until 16.0 stable moves to the 153 base.
  • The bundled OpenSSL moves to 3.5.9; the fixes that alpha 16.0a13 brought in first only reach stable with this release. NoScript moves to 13.6.36.1984.
  • The Windows signing problem is resolved. The build now uses a new signing certificate (tor-browser-build#41890), and in our check the 15.0.25 Windows installer is signed with an EV certificate issued by DigiCert to The Tor Project, valid from 30 September 2026 to 1 January 2028. The download page's Windows version has also caught up from 15.0.20 to 15.0.25, so a fresh install no longer runs into the certificate expiry warning.
  • The release files' GPG signing subkey is the same as for 15.0.24, 022DA248432D2A0E0F54E65E316C1FACD62D07D9.

Tor Browser 16.0a13 (alpha)

2026-10-01 · Upstream announcement

  • AlphaThe alpha channel is for testing only. Most people should stay on the stable release (15.x).
  • The Firefox base is rebased onto 153.4.0esr (tor-browser#45359) with security fixes backported from Firefox 157 (tor-browser#45366); GeckoView on Android follows. The bundled tor daemon moves to 0.4.9.13 and NoScript to 13.6.34.90101984.
  • The bundled OpenSSL moves to 3.5.9, covering the 13 issues in OpenSSL's 29 September advisory that affect the 3.5 series (the advisory lists 14; the other affects only 4.0); the one rated High is in DTLS. The stable 15.0.24 changelog has no such item.
  • The fast path that skips proxy resolution is disabled (tor-browser#45333), the Reporting API stays disabled (tor-browser#45080), and Firefox's harmful add-on URL blocking is disabled (tor-browser#44815). The changelog does not give reasons for these.
  • Two items shared with stable 15.0.24: NoScript now accounts for onion aliases when parsing sites (tor-browser#45368), and the CharacterData and Range hooks for content patches (tor-browser#45371).
  • On desktop, the error page for an onion service with a self-signed certificate hides the verifier and related error (tor-browser#45343). A crash when clicking "Learn more…" on the onion site error page is fixed (tor-browser#45346), and the language preference customisation is ported to the new settings design (tor-browser#45360).
  • On Android, bookmark import is disabled until it is stable (tor-browser#45363), and sharing selected text no longer works only once (Bug 40627).
  • Alpha releases are now actually signed with the new GPG subkey (tor-browser-build#41847). The release files' signature checks out as 022DA248432D2A0E0F54E65E316C1FACD62D07D9, the same as stable 15.0.24.
  • The Windows build now uses a new signing certificate (tor-browser-build#41890). The announcement does not say whether the signature warning on Windows installers is resolved.

Tor Browser 15.0.24

2026-09-29 · Upstream announcement

  • StableThe bundled tor daemon moves to 0.4.9.13, the 23 September security release that fixed ten TROVE issues at once. One of them, TROVE-2026-053, could let a malicious onion service or HSDir break first-party isolation (details in the tor daemon changelog). If you use Tor through the browser, installing this release covers it.
  • The Firefox base moves to 140.17.0esr, with security fixes backported from Firefox 157 (tor-browser#45358, tor-browser#45366); GeckoView on Android follows. NoScript moves to 13.6.35.1984.
  • NoScript now accounts for onion aliases when parsing sites (tor-browser#45368). Onion aliases are Tor Browser's built-in memorable .tor.onion names, currently covering news organisations' SecureDrop addresses (of the form *.securedrop.tor.onion), each mapped to the real .onion address. Another fix hooks the CharacterData and Range insertion sinks for content patches (tor-browser#45371).
  • Release files are now signed with a new GPG subkey (tor-browser-build#41847), fingerprint 022DA248432D2A0E0F54E65E316C1FACD62D07D9. If you verify downloads yourself with gpg, an older local keyring does not contain this subkey, so you may need to refresh the Tor Browser developers' key (primary key EF6E286DDA85EA2A4BA7DE684E2C6E8793298290) first.
  • The Windows signing problem is unchanged. The download page still lists 15.0.20 for Windows and relies on automatic updates to bring people to the current version. To install the new release directly, get it from the distribution directory and expect a certificate expiry warning.
  • The 32-bit Linux end-of-life notice is still listed in this release's changelog (tor-browser#44996). That item targets the last 15.0 release, and which release actually closes the series will only be clear once 16.0 stable takes over.

Tor Browser 16.0a12 (alpha)

2026-09-22 · Upstream announcement

  • AlphaThe alpha channel is for testing only; regular users should stay on the stable channel (15.x).
  • Rebased the Firefox base onto 153.3.0esr (tor-browser#45304), with Android GeckoView following, and backported security fixes from Firefox 156 (tor-browser#45299), the same batch as stable 15.0.23.
  • The bundled tor daemon moves to 0.4.9.12 and NoScript to 13.6.33.90101984. tor 0.4.9.13, released the next day, is not included yet (see the tor daemon changelog).
  • On desktop, onion services using self-signed certificates now show a security exception warning with a button to proceed (tor-browser#42065). WebXR is explicitly disabled (tor-browser#45278), and so is the toolbar share button (tor-browser#45133).
  • The build now passes --disable-proxy-direct-failover (tor-browser#45336), removing the fallback that sends traffic directly when the proxy fails.
  • On Android, the "Passwords" UI is gone (tor-browser#44548), search suggestions are disabled entirely (tor-browser#45269), and about:config opens again (tor-browser#45280).
  • The changelog lists an item for signing alpha releases with a new GPG subkey (tor-browser-build#41846), but the 16.0a12 release files are in fact still signed with the old subkey (CAAE408AEBE2288E96FC5D5E157432CF78A65729). The new subkey is first used by stable 15.0.24.
  • The Windows installer signing problem is not resolved yet, as the DigiCert EV certificate is still being renewed. Fresh installs of 16.0a11 or 16.0a12 raise a bad signature warning; upstream suggests installing 16.0a10 and letting automatic updates carry it forward.

Tor Browser 15.0.23

2026-09-15 · Upstream announcement

  • StableBoth headline fixes land on the security level itself: a browser set to Safer could still run WebAssembly. If you rely on the security slider to keep scripts and WebAssembly out, update first.
  • One came in through SharedWorker identity matching (tor-browser#45296), the other through a missing setHTMLUnsafe hook that left behind a permanently WebAssembly-capable child realm (tor-browser#45297). Safer is supposed to switch WebAssembly off, and these two let that switch be bypassed.
  • Upstream marks both with (H1). The same marker appeared on the "script execution in Safest mode via data URI navigation" fix in 15.0.4 — both times the security level itself was what got bypassed.
  • The Firefox base moves to 140.16.0esr with security fixes backported from Firefox 156 (tor-browser#45299, tor-browser#45303), and Android GeckoView follows. NoScript updates to 13.6.33.1984.
  • Windows users have a signing problem to know about. The DigiCert EV certificate used to sign the installers expired on 1 September and has not been reissued yet, so fresh installs of 15.0.21 and 15.0.22 raise a bad signature warning. The download page therefore still lists 15.0.20 for Windows and relies on automatic updates to carry people forward; those are signed with a different key and are unaffected. To install the new version directly, take it from the distribution directory and expect an expired-certificate warning along the way.
  • The 32-bit Linux notice switched to the expired-version message again, with the tracking item calling this the final 15.0 release (tor-browser#44996). The 15.0.21 entry cited that same item, 15.0.22 and 15.0.23 shipped anyway, and which build actually ends the line will only be settled once 16.0 stable takes over.

Tor Browser 15.0.22

2026-09-09 · Upstream announcement

  • StableThe release carries exactly one change: the bundled tor daemon moves to 0.4.9.12, a security release covering seven TROVE identifiers that upstream very strongly recommends installing as soon as possible.
  • Several of the issues fixed in 0.4.9.12 matter from the client side — a hostile directory cache could make the browser believe certain relays were unusable, there was a use-after-free when AutomapHostsOnResolve was set, and consensus diffs had no size cap and could be used to exhaust memory. Each one is covered in the tor daemon changelog.
  • The 15.0.21 entry above cites an upstream tracking item calling it the final 15.0 release. 15.0.22 still shipped on the 15.0.x line, carrying this tor security fix.

Tor Browser 16.0a11 (alpha)

2026-09-02 · Upstream announcement

  • AlphaThe alpha channel is for testing only; regular users should stay on the stable channel (15.x).
  • Rebased the Firefox base onto 153.2.0esr (tor-browser#45254), with Android GeckoView following, and backported security fixes from Firefox 155 (tor-browser#45259).
  • Local Network Access (LNA) restrictions are now always on for Android as defence in depth (tor-browser#44155). Pages can no longer reach local network or loopback addresses directly, which closes one route for probing other devices on the same network.
  • TorConnect redirections now go through the parent process (tor-browser#45264), the same fix that shipped in stable 15.0.21.
  • The build now pulls GCC sources from gcc.gnu.org (tor-browser-build#41860), and Go moves to 1.26.8 in the build toolchain.

Tor Browser 15.0.21

2026-09-01 · Upstream announcement

  • StableA small release focused on Firefox security fixes.
  • Rebased the Firefox base onto 140.15.0esr (tor-browser#45253), with Android GeckoView following, and backported security fixes from Firefox 155 (tor-browser#45259).
  • Fixed about:torconnect not appearing when the browser starts outside private browsing mode (tor-browser#45223). TorConnect redirections now go through the parent process (tor-browser#45264).
  • NoScript updated to 13.6.32.1984, OpenSSL to 3.5.8, and Go to 1.25.14 in the build toolchain.
  • Upstream switched the 32-bit Linux notice to the expired-version message, and the tracking item states this is the final 15.0 release (tor-browser#44996). Per the plan announced with 16.0a9, the 16.0 stable series takes over in September, so anyone on 15.x can start preparing to move.

Tor Browser 16.0a10 (alpha)

2026-08-27 · Upstream announcement

  • AlphaThe alpha channel is for testing only; regular users should stay on the stable channel (15.x).
  • New opt-in "Use generic window titles" setting, under Privacy and security → Advanced settings → Protections from third-party applications. With it enabled, every window title simply reads Tor Browser Alpha. Window titles normally track the page's <title> element, and other applications or the OS can read those changes without special permissions, which makes them a side channel for recording browsing history. The feature has been upstreamed, so vanilla Firefox users can set privacy.exposeContentTitleInWindow and privacy.exposeContentTitleInWindow.pbm to false in about:config. The Tor Project had hoped to enable it by default in 16.0, but held off over possible breakage with accessibility software and non-standard desktop environments.
  • The desktop built-in manual has been replaced with the Tor Project's updated support content, baked into the browser. Open it directly at about:manual, or through the "Learn more" links in the UI.
  • The settings page now uses Mozilla's redesigned about:preferences by default, with Tor Browser's own settings (connection, letterboxing, security level) migrated to the new design language.
  • Rebased the Firefox base onto 153.1.0esr (tor-browser#45205) and backported security fixes from Firefox 154 (tor-browser#45219).
  • Disabled locale-based font rules as defence in depth against fingerprinting (tor-browser#44257).
  • Updated NoScript to 13.6.31.90301984 and OpenSSL to 3.5.8.
  • about:torconnect now reports an error when the tor daemon crashes (tor-browser#43570), and bridge settings update when a connection fails (tor-browser#43939).

Tor Browser 15.0.20

2026-08-18 · Upstream announcement

  • StableA small release focused on Firefox security fixes.
  • Rebased the Firefox base onto 140.14.0esr (tor-browser#45204); desktop and Android GeckoView also moved to 140.14.0esr.
  • Backported security fixes from Firefox 154 (tor-browser#45219).
  • Updated libevent to 2.1.13 in the build toolchain (tor-browser-build#41839).
  • Updated Go to 1.25.13 for Windows, Linux, and Android builds.
  • Updated the torbrowser.gpg keyring with a new subkey and a revised expiration date for the main key (tor-browser-build#41850).

Tor Browser 16.0a9 (alpha)

2026-07-23 · Upstream announcement

  • AlphaThe alpha channel is for testing only; regular users should stay on the stable channel (15.x).
  • Major rebase of the Firefox base onto 153.0esr (up from 140.0esr); Android GeckoView also moved to 153.0esr (tor-browser#45101).
  • The Tor Project announced the alpha channel will now track Firefox beta releases and rebase incrementally, instead of jumping a full year of Firefox versions at once, aiming to ship Tor Browser 16.0 stable a month early in September.
  • NoScript updated to 13.6.30.90201984, Go to 1.26.5, and libevent to 2.1.13 in the build toolchain.
  • Only one tracking-related dependency remains, Mozilla Telemetry (disabled by default).
  • Known issues: Firefox branding still appears in some places, and the Android address bar icon currently always shows "insecure" — tap it to verify the certificate manually.

Tor Browser 15.0.19

2026-07-21 · Upstream announcement

  • StableA small release focused on Firefox security fixes, carrying important security updates from Firefox.
  • Rebased the Firefox base onto 140.13.0esr (tor-browser#45117); desktop and Android GeckoView also moved to 140.13.0esr.
  • Backported security fixes from Firefox 153 (tor-browser#45124).
  • NoScript updated to 13.6.31.1984.
  • Reverted the earlier Funding the Commons implementation changes (tor-browser#44748).

Tor Browser 15.0.18

2026-07-14 · Upstream announcement

  • StableA small release focused on Firefox security fixes.
  • The Firefox base stays at 140.12.0esr; rather than rebasing, later fixes were cherry-picked from the firefox/esr140 branch (tor-browser#45111).
  • NoScript updated to 13.6.30.1984, and Go to 1.25.12 in the build toolchain (Windows, Linux, Android).
  • Build process updated boklm's GPG subkey (tor-browser-build#41821).

Tor Browser 16.0a8 (alpha)

2026-07-02 · Upstream announcement

  • AlphaThe alpha channel is for testing only and may contain usability, security, and privacy bugs; regular users should stay on the stable channel (15.x).
  • Important Firefox security update, rebased onto Firefox 152.0a1 (the previous alpha 16.0a7 was on 151.0a1); Android GeckoView also moved to 152.0a1.
  • tor client updated to 0.4.9.11, NoScript to 13.6.25.90301984, OpenSSL to 3.5.7, and Go to 1.26.4 in the build toolchain.
  • Fixed a cross-site oracle vulnerability by rejecting worklets in Safer Mode; XSLT disabled for the 16.0 series.
  • Desktop: disabled IP Protection and fixed letterboxing background rendering plus several regressions after the Firefox 152 rebase. Android: added frequent regions to Tor connection assist, removed default-browser functionality, and switched omni.ja to xz compression.

Tor Browser 15.0.17

2026-06-28 · Upstream announcement

  • StableA small release focused on a tor security update, with no change to the Firefox base.
  • tor client updated to 0.4.9.11.
  • NoScript updated to 13.6.25.1984.
  • Build process updated boklm's GPG subkey and renewed morgan's signing key (tor-browser-build#41821, #41827).

Tor Browser 15.0.16

2026-06-17 · Upstream announcement

  • StableImportant security update to Firefox.
  • Rebased onto Firefox 140.12.0esr (tor-browser#45046), with security fixes backported from Firefox 152 (tor-browser#45054); Android GeckoView also moved to 140.12.0esr.
  • NoScript updated to 13.6.24.1984, fixing a DocStartInjection regression introduced in 13.6.19.902 (tor-browser#45044); OpenSSL updated to 3.5.7.
  • Removed the tor daemon requirement for signing (tor-browser-build#41802), and updated Go to 1.25.11 in the build toolchain.

Tor Browser 15.0.15

2026-06-03 · Upstream announcement

  • StableImportant security update to the tor daemon, plus fixes for some censorship circumvention problems.
  • tor client updated to 0.4.9.9, NoScript updated to 13.6.20.1984.
  • Moat module now supports multiple configured (front, reflector) domain fronting pairs (tor-browser#42436).
  • Fixed a captcha failure on desktop (tor-browser#44997) and notified Linux i686 users that updates have ended (tor-browser#44886).

Tor Browser 16.0a7 (alpha)

2026-06-03 · dist directory

  • AlphaThe alpha channel is for testing only; regular users should stay on the stable channel (15.x). Binaries are published on dist, but the upstream blog has not posted an announcement yet. Now based on Firefox 151.0a1 (the previous alpha 16.0a6 was on 150.0a1).

Earlier Tor Browser versions

Tor Browser 15.0.14, 15.0.13, 16.0a6 (alpha), 15.0.12, 15.0.11, and earlier entries are currently available only in traditional Chinese. English versions will be added as the community translates them.

Past Tor-related translations also live in Updates, including Cure53 completes Tor VPN code audit.