Privacy Guides

PSA: The Tor Browser Security Level slider cannot be relied upon without a full browser restart (per an anonymous community report and confirmed by Privacy Guides staff) - Make sure you are aware of this if you rely on this feature for your safety.

https://www.privacyguides.org/articles/2025/05/02/tor-security-slider-flaw/

#TorBrowser #Security #MullvadBrowser #Privacy #PrivacyGuides #Article

A Flaw With the Security Level Slider in Tor Browser

PSA: The security level slider in Tor Browser (and Mullvad Browser) does not fully apply until restarting the browser. This presents a high risk to people who switch from Standard to Safer security during a browsing session in order to protect themselves from browser exploits.

May 2 at 11:24amWeb
Show threadPrivacy GuidesMay 3

Following the publication of this article, the Tor Project emailed us the following statement.

[1]: https://gitlab.torproject.org/tpo/applications/wiki/-/wikis/
[2]: https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/42572

Home · Wiki · The Tor Project / Applications / Wiki · GitLab

Welcome to The Tor Project's Gitlab

GitLab
Show threadJesusMay 3
@privacyguides Can you confirm if this an issue with turning the “java.script enabled” to false through about:config?
Show threadЯƎB00TMay 4
@privacyguides On occasion I have noticed that restarting tor browser via the 'New identity' button is not enough to avoid this issue. Only closing tor browser followed by opening it again avoids the issue.