What changed
On 29 October 2026, the Tor Project released Tor Browser 16.0 for desktop and Android, rebasing the stable browser on Firefox ESR 153. The project reports reviewing and addressing more than 270 Bugzilla issues related to changes in upstream Firefox that could affect Tor Browser privacy and security; this is an audit scope, not a claim that 270 vulnerabilities were patched. Stable native AArch64 Linux builds now support ARM machines including Raspberry Pi and Apple Silicon systems running Linux. At the same time, 32-bit x86 Linux builds are discontinued. Desktop Settings were redesigned, a generic-window-title privacy option was added but left disabled by default, and the bundled Tor daemon moved to 0.4.9.15.
Why it matters
Tor Browser is not a cosmetic Firefox fork: upstream browser behaviour can change fingerprintability, proxy routing and other privacy assumptions. The ESR migration and audit matter to people relying on Tor's anonymity guarantees, while AArch64 support changes which Linux devices can run the stable browser. Maintainers of older 32-bit Linux installations need a migration path rather than assuming security updates will continue. The optional generic-title feature also exposes a trade-off between hiding page titles from local software and preserving screen-reader and window-manager compatibility.
A Firefox ESR transition is also a privacy compatibility audit
The project says its annual migration review covered more than 270 Bugzilla issues involving Firefox changes with potential privacy or security consequences. That number measures review scope, not confirmed vulnerabilities or exploitation. Tor Browser 16.0 is the first stable build on Firefox ESR 153, carrying a year's upstream changes into the hardened browser.
Linux ARM64 becomes stable; 32-bit Linux reaches the end
After roughly a year in testing, AArch64 Linux users can use the stable Tor Browser channel on supported devices. Conversely, Tor Browser 16.0 stops producing 32-bit x86 Linux builds, following Firefox. The project reports about 200 daily update checks from 32-bit Linux, down from roughly 4,000 in 2019. Operators should inventory older endpoints and move to 64-bit hardware or operating systems where possible.
Window-title protection is useful but opt-in
A new setting replaces the title of the current webpage in the window chrome with a generic 'Tor Browser' label. Other local applications can normally read those titles, so the feature can reduce incidental disclosure of visited pages. It remains disabled by default while the team evaluates side effects for screen readers, desktop window managers and app switchers. This is not protection against a compromised host.
Settings and Android packaging change
The desktop settings redesign separates Appearance, Downloads, Tabs and browsing, Accessibility and Languages, while rebuilding Tor-specific Connection and Security Level panels. Existing preferences are preserved. On Android, interface components adopt more Material Design 3 patterns and resource compression helps the app remain under Google Play's 100 MB APK limit.