In order to verify the signature you will need to type a few commands in the Terminal (under 'Applications'). If you are using macOS, you can install GPGTools. In order to verify the signature you will need to type a few commands in windows command-line, cmd.exe. If you run Windows, download Gpg4win and run its installer. Installing GnuPGįirst of all you need to have GnuPG installed before you can verify signatures. Therefore every time a new file is uploaded a new signature is generated with a different date.Īs long as you have verified the signature you should not worry that the reported date may vary.

Please notice that a signature is dated the moment the package has been signed.

We now show how you can verify the downloaded file's digital signature on different operating systems. These are example file names and will not exactly match the file names that you download.

This will vary by web browser, but generally you can download this file by right-clicking the 'signature' link and selecting the 'save file as' option.įor example, torbrowser-install-win64-9.0_en-US.exe is accompanied by torbrowser-install-win64-9.0_. They allow you to verify the file you've downloaded is exactly the one that we intended you to get. Digital signature is a process ensuring that a certain package was generated by its developers and has not been tampered with.īelow we explain why it is important and how to verify that the Tor Browser you download is the one we have created and has not been modified by some attacker.Įach file on our download page is accompanied by a file labelled 'signature' with the same name as the package and the extension '.asc'.

Using tor browser to download files