Whole Antidetect Catalog Donut Browser

Catalogue · Section 01 · Entry

Tor Browser

ACTIVE

Tor Browser is a product site catalogued in section 01 of this register. The reference implementation of fingerprint uniformity: every user is meant to present the same values. At the last field check its address answered, which is the whole of what ACTIVE means for an entry with no repository behind it.

https://www.torproject.org/download/


The fields this state was derived from

FieldValue at this printing
http_status 200
fetched_at 2026-08-14T09:12:00Z
endpoint HEAD https://www.torproject.org/download/
rubric_edition 2nd, in force since 2026-08-14

This entry has no repository, so there is no API field a browser can re-read across origins. Its state comes from the register's own link check, printed above with the instant it was made.

Why it reads ACTIVE

No repository. The link check returned 200 at 2026-08-14T09:12:00Z, and 200–399 is ACTIVE for a non-repository entry.

Shipping. Safe to build on today.

Under the superseded first edition

UNSTATED ACTIVE
No repository. The first edition had no link liveness sweep and therefore no field to read here.

The rubric in force · The superseded first edition · Errata leaf


What Tor Browser actually does

The reference implementation of the uniformity model. Rather than hiding one user among many by randomising, it works to make every user's readings the same, and it accepts real usability costs — fixed window sizes, letterboxing, disabled surfaces — to get there.

What can and cannot be measured about Tor Browser

This entry has no repository, so none of the usual repository fields exist for it — no push date, no release tag, no archive flag, no licence identifier. Its state comes from one measurement only: the register requested the address and recorded what came back. Anything in the range 200 to 399 makes a non-repository entry ACTIVE, and that clause is the one the first edition of the rubric did not have at all, which is why product site entries carried no state under it.

Read that for exactly what it is. It says the thing is reachable. It does not say the page still works correctly, because no HTTP status can carry that. Where a stronger signal exists — a repository, a version, a dated revision — this register prefers it, and where one does not, it prints the weaker signal and names it as weak rather than dressing it up.

Where Tor Browser sits in this catalogue

Tor Browser is filed in section 01, open-source anti-detect browsers & forks, whose scope is this: Browsers whose source you can read: anti-detect Firefox and Chromium forks, hardened builds, and the profile managers built on top of them. An entry sits in exactly one section here. Where a project could defensibly go in two, it is placed where a reader would look for it first rather than where it fits most tidily, and that is an editorial decision rather than a measured one.

Filed beside it in the same section: Brave Browser (ACTIVE), Mullvad Browser (ACTIVE), Tor Browser fingerprinting protections (ACTIVE). Comparing an entry against its own section-mates is more informative than comparing it against the catalogue as a whole, because everything in a section is answering roughly the same question and the differences left over are the ones that matter.

It is published under FLOSS, alongside the rest of the FLOSS entries in this register, and it sits with everything else currently marked ACTIVE. Read those two facets together: a permissively licensed project that stopped shipping is not a safer dependency than a copyleft one that did not, and a filter on one axis alone will tell you the wrong thing.

Substitutes for the same job, with no claim that either is better: Mullvad Browser. The alternative relation is symmetric and carries no ranking, because this register publishes no ranking of any kind. The full Tor Browser comparison table sets all of them side by side on licence, push date, release cadence and state.

What to settle before you adopt Tor Browser

It is listed at its download page and carries no repository fields here, so its state rests on the link check alone. For the surface-by-surface record, read the fingerprinting-protections documentation listed alongside it rather than inferring the behaviour from the binary.


See also

Relation Entry State Last push
alternative to Mullvad Browser ACTIVE 2026-07-23

Full comparison of Tor Browser and its alternatives


Questions readers ask about Tor Browser

Answered from this entry's own fields, at the field check printed above and at no other instant.

Is Tor Browser still maintained?

Tor Browser has no repository, so this register cannot answer that from a commit history. What it can do is request the address and record the result, which is what produced ACTIVE. Shipping. Safe to build on today.

What are the alternatives to Tor Browser?

Mullvad Browser are recorded as substitutes for the same job. The relation carries no ranking — this register publishes none — so read them side by side on the comparison table, which prints licence, last push, release cadence and state for each.

What licence is Tor Browser under?

FLOSS, read from the repository's own licence metadata at the field check rather than from a README badge. Other FLOSS entries are grouped together, and the no-licence-declared group is worth a look before you assume any project here carries a grant.

Why did the state recorded for Tor Browser change?

Because the rules changed, not because the world did. The same field data reads UNSTATED under the superseded first edition and ACTIVE under the edition in force. Both derivations are printed on this page, and the entry appears on this printing's errata leaf with the superseded value struck rather than deleted.


You are reading section 01, which is where the browsers live, so the comparison is direct: Donut Browser is filed here too, under the same rule, with the same fields printed against it. What it does differently is where the spoofing happens — the Wayfern Chromium fork applies fingerprint overrides at engine level over CDP rather than by patching page JavaScript after load, which is the same architectural argument several of its neighbours in this section make and a different implementation of it.

Download Donut Browser

curl -fsSL https://donutbrowser.com/install.sh | sh

macOS (DMG, Homebrew cask donut), Windows (installer and portable), Linux (deb, rpm, AppImage, with APT and RPM repositories at repo.donutbrowser.com), and a Nix flake. Desktop only — there is no mobile build target. Ten shipped languages. Source, AGPL-3.0 · its own entry, judged by the same rubric · the keepers' disclosure.