Click the Download link to start the download. Do one of the following: To start the installation immediately, click Open or Run this program from its current location. To copy the download to your computer for installation at a later time, click Save or Save this program to disk.
While you are downloading, we recommend you read therelease notes for Tails4.13.They document all the changes in this new version: new features, problems thatwere solved, and known issues that have already been identified.
or download using BitTorrentBitTorrent
If the download fails, try to download from another mirror.download from another mirror.
For your security, always verify your download.
XWith an unverified download, you might:
Your BitTorrent client will automatically verify your download when it completes.
The verification below is optional for a BitTorrent download.
You have our Tails Verification extension installed.
Since December 2020, you can do the verification directly on the page. You don't need the Tails Verification anymore and can safely remove it.
See our statement about the deprecation of the Tails Verification extension.
You seem to have JavaScript disabled. To verify your download, you can either:
You seem to be using Internet Explorer. To verify your download, please use a different browser.
Verifying $FILENAME…
Verification successful!
Verification failed!
XMost likely, the verification failed because of an error or interruption during the download.
The verification also fails if you try to verify a different download than the latest version (4.13).
Less likely, the verification might have failed because of a malicious download from our download mirrors or due to a network attack in your country or local network.
Downloading again is usually enough to fix this problem.
Verification failed again!
XThe verification might have failed again because of:
Trying from a different place or a different computer might solve any of these issues.
Please try to download again from a different place or a different computer…
Error selecting image.
Make sure that you select a USB image that is readable by your browser.
Make sure that you select an ISO image that is readable by your browser.
Error downloading checksum file from our website.
Make sure that your browser is connected to the Internet.
Error reading image $FILENAME.
Make sure that $FILENAME is readable by your browser.
Skip verification!Skip verification!Skip verification!Skip verification!Skip verification!Skip verification!Skip verification!Skip verification!Skip verification!Skip verification
Upgrade your Tails USB stick and keep your Persistent Storage:
Install a new USB stick:
If you know OpenPGP, you can also verify your download using anOpenPGP signature instead of, or in addition to, our verification in the browser orBitTorrent.
Download theOpenPGP signature for the Tails 4.13 USB imageOpenPGP signature for the Tails 4.13 ISO imageand save it to the same folder whereyou saved the image.
This section provides simplified instructions:
Download the OpenPGP signature for the Tails 4.13 USB imageOpenPGP signature for the Tails 4.13 ISO image and save it to the same folder where you saved the image.
Download the Tails signing key and import it into Gpg4win.
See the Gpg4win documentation on importing keys.
Verify the signature of the image that you downloaded.
See the Gpg4win documentation on verifying signatures.
Verify that the date of the signature is at most five days earlier than the latest version: 2020-11-17.
If the following warning appears:
Then the image is still correct according to the signing key that you downloaded. To remove this warning you need to authenticate the signing key through the OpenPGP Web of Trust.
Download the OpenPGP signature for the Tails 4.13 USB imageOpenPGP signature for the Tails 4.13 ISO image and save it to the same folder where you saved the image.
Download the Tails signing key and import it into GPGTools.
See the GPGTools documentation on importing keys.
Open Finder and navigate to the folder where you saved the image and the signature.
Control-click on the image and choose Services ▸ OpenPGP: Verify Signature of File.
Tails comes with the Tails signing key already imported.
Download the OpenPGP signature for the Tails 4.13 USB imageOpenPGP signature for the Tails 4.13 ISO image and save it to the same folder where you saved the image.
Open the file browser and navigate to the folder where you saved the image and the signature.
Right-click (on Mac, click with two fingers) on the signature and choose Open With Verify Signature.
The verification of the image starts automatically:
After the verification finishes, you should see a notification that the signature is good:
Verify that the date of the signature is at most five days earlier than the latest version: 2020-11-17.
If instead, you see a notification that the signature is valid but untrusted:
Then the image is still correct according to the signing key that you downloaded. To remove this warning you need to authenticate the signing key through the OpenPGP Web of Trust.
Download the OpenPGP signature for the Tails 4.13 USB imageOpenPGP signature for the Tails 4.13 ISO image and save it to the same folder where you saved the image.
Download the Tails signing key and import it into GnuPGP.
To import the Tails signing key into GnuPGP, open a terminal and navigate to the folder where you saved the Tails signing key.
Execute:
gpg --import tails-signing.key
In a terminal, navigate to the folder where you saved the image and the signature.
Execute:
TZ=UTC gpg --no-options --keyid-format long --verify tails-amd64-4.13.img.sig tails-amd64-4.13.img
TZ=UTC gpg --no-options --keyid-format long --verify tails-amd64-4.13.iso.sig tails-amd64-4.13.iso
The output of this command should be the following:
gpg: Signature made 2020-11-16T12:22:17 UTC
gpg: using RSA key 05469FB85EAD6589B43D41D3D21DAD38AF281C0B
gpg: Good signature from 'Tails developers (offline long-term identity key) <tails@boum.org>' [full]
gpg: aka 'Tails developers <tails@boum.org>' [full]
gpg: Signature made 2020-11-16T12:21:58 UTC
gpg: using RSA key 05469FB85EAD6589B43D41D3D21DAD38AF281C0B
gpg: Good signature from 'Tails developers (offline long-term identity key) <tails@boum.org>' [full]
gpg: aka 'Tails developers <tails@boum.org>' [full]
Verify that the date of the signature is at most five days earlier than the latest version: 2020-11-17.
If the output also includes:
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Then the image is still correct according to the signing key that you downloaded. To remove this warning you need to authenticate the signing key through the OpenPGP Web of Trust.
Authenticating our signing key through the OpenPGP Web of Trust isthe only way that you can be protected in case our website iscompromised or if you are a victim of a man-in-the-middle attack.However, it is complicated to do and it might not bepossible for everyone because it relies on trust relationships betweenindividuals.
Read more about authenticating the Tails signing key through the OpenPGP Web of Trust.The verification techniques that we present (verification in the browser,BitTorrent, or OpenPGP verification) all rely on someinformation being securely downloaded using HTTPS from our website:
It is possible that you could download malicious information if ourwebsite is compromised or if you are a victim of a man-in-the-middleattack.
OpenPGP verification is the only technique that protects you ifour website is compromised or if you are a victim of a man-in-the-middleattack. But, for that you need to authenticate the Tails signing keythrough the OpenPGP Web of Trust.
If you are verifying an image from inside Tails, forexample, to do a manual upgrade, then you already have the Tails signing key.You can trust this signing key as much as you already trust yourTails installation since this signing key is included in your Tailsinstallation.
One of the inherent problems of standard HTTPS is that the trust putin a website is defined by certificate authorities: a hierarchical and closedset of companies and governmental institutions approved by your web browser vendor.This model of trust has long been criticized and proved several times to bevulnerable to attacks as explained on our warning page.
We believe that, instead, users should be given the final say when trusting awebsite, and that designation of trust should be done on the basis of humaninteractions.
The OpenPGP Web of Trust is adecentralized trust model based on OpenPGP keys that can help with solvingthis problem. Let's see this with an example:
In this scenario, you found, through Alice and Bob, a path to trust the Tails signing keywithout the need to rely on certificate authorities.
If you are on Debian, Ubuntu, or Linux Mint, you can install thedebian-keyring
package which contains the OpenPGP keys ofall Debian developers. Some Debian developers have certified the Tailssigning key and you can use these certifications to build a trust path.This technique is explained in detail in our instructions oninstalling Tails from Debian, Ubuntu, or Linux Mint using the commandline.
Relying on the Web of Trust requires both caution and intelligent supervisionby the users. The technical details are outside of the scope of this document.
Since the Web of Trust is based on actual human relationships andreal-life interactions, it is best to get in touch with peopleknowledgeable about OpenPGP and build trust relationships in order tofind your own trust path to the Tails signing key.
After you build a trust path, you can certify the Tails signing key bysigning it with your own key to get rid of some warnings during theverification process.