So in this video I'm going to show you how to download Tor verify it and make sure that it hasn't been
modified as it got downloaded and then install it on a Windows 10 system.
If you have OS X or Linux then please skip this lecture and I will cover install and Tor on other operating
systems and the next lectures.
So as you can see the normal page is loading for me so I'm going to download it from here.
I have a 64 bit computer and I'm running Microsoft Windows so I'm just going to click on the 64 bit
link for Microsoft Windows and I'm going to save this.
This will automatically save the file right here for me in the downloads.
And as you can see the download is complete now and I can literally just double click it and install
it just like any other program.
But before doing that it's a very good idea to verify that the file we downloaded here did not get modified
as it was being downloaded.
Because when you download something from the internet it passes through a number of nodes in which it
can be modified so it can be modified by your Internet service provider.
It can be modified by your network administrator and it can even be modified by hackers who managed
to intercept the connection.
So in order to verify that this file did not get modified we're going to use a signature provided to
us by the Tor developers.
So as you can see on this page each download has a sig this sig stands for signature.
And this is a file that is unique to this download to the installer.
It was generated by the developers when they packaged the installer and it can be used to verify that
the installer did not get modified since it was packaged by the developers.
So to verify the installer the first step is to download its signature.
So like I said as you can see each file has its own signature.
I downloaded this file right here so I'm going to download this signature in here so I'm going to right
click the signature file and I'm going to click on Steve link us to download it and I'm gonna save it
in my downloads.
Same place that we have in here and I'm just going to click on Save and you can see we have this new
file with a dot a C extension.
This is the signature for this file.
So as you can see in here each download has its own signature.
So the signature is relevant to the file that we just downloaded.
And it can be used to verify the integrity of the file.
So what we're going to do is we're going to use another program called GPO G for when we're going to
use this program to check the signature and make sure that this file right here matches the signature
right here.
And if it does then this means that the file has not been modified.
Cause if this file gets modified then this this signature right here will not match the file.
So the first step now is to download this program that will verify the signature for us which is G P
G 4 win right here.
I'm going to include its download link in the resources.
Right now I'm going to set this to zero.
I don't want to donate and I'm just going to click on Download to download the program.
We're going to save it and we have it right here.
Now we're going to double click this to install it and it's a normal windows installer.
So it's actually very very simple we're just going to click on.
Okay.
Next Next install and it'll install it for us and that's it we're done.
So we're going to finish.
I don't want to reboot.
I'm going to reboot later and that's it.
Now the file is installed and we can actually use it with a graphical user interface that I noticed
is a little bit buggy.
Therefore we're going to use it using the command prompt so I'm going to go to start I'm going to type
CND to open my command prompt they'll just put this here.
So the first thing that we need to do is import the key of detour developers so we can get that from
their page right here.
This is their key and we can actually add it using this command.
So we do GPO G dirty X E.
This is the name of the program that we just installed.
We're giving the key server that it's going to get the key from and we're giving it the developer key
right here.
After the receive keys argument so I'm gonna copy all of this and I'm going to paste it here.
All I have to do is just right click it will automatically paste and I'm going to hit enter.
This could take some time.
So just be patient and give it its time.
You might also have to run this command a number of times until it works.
This is because their servers might be under pressure so you want to be able to get the key.
But as you can see right here I was able to get the key.
So right now we can go ahead and verify the file that we downloaded.
But before I do that I'm going to make sure I have the correct key.
So I'm going to do a GP do that EKG the same command I'm going to say I want to see the fingerprint
of the key that I requested.
So the key that I requested is this key right here.
So I'm going to copy it again and I'm going to paste it
and right here we have the fingerprint of the key.
And what you want to do is compare this fingerprint right here with the fingerprint that you have on
their website which is this one if you have the same fingerprint.
This means that you've downloaded the correct key and it means that we can use this key to verify the
integrity of this installer so the last step now is to actually do that and verify that this installer
is the correct installer.
And again we're going to use the same command.
But first we will need to navigate to where we have the installer.
So as you can see the installer is in users Zaid downloads.
So I need to go to the downloads directory.
So we're going to use the CDE command to change our working directory.
And I want to go to downloads.
Keep in mind it's capital in here.
I'm going to hit enter.
And as you can see now I'm an user as a download and I can do DIY or to list all the files that we have.
And you can see we have the G.P.S. installer we have the Tor Browser installer and the signature.
So all we have to do is use GPO G dot EMC again.
We're going to say that I want to verify and we're going to give it the name of this signature.
So this is the name of the signature file.
You can copy it.
You are.
We also have it in here so you can copy it from here or you can just type the starter with followed
by a tab.
It'll auto complete for us and make sure you complete to the DOT a C to specify the signature file I'm
going to hit enter.
Let's just make this a little bit bigger so we can read it easier.
And as you can see it's telling us that this is a good signature.
So basically it's telling us that the signature right here is the correct signature for this file.
So this means that this file has not been modified since we downloaded it from this page because this
page had the file itself it had the installer itself and it had the signature which we downloaded from
here.
Like I said each signature is unique to each file and we use this signature with the developer key to
sign this file.
And as you can see everything marched.
So this means that this file has not been modified since we downloaded it from the web page.
So we can go ahead now and double click it to install Tor.
So as you can see this step was optional.
You don't have to do it.
But we did it just to make sure that this file has not been modified by anybody.
When we downloaded it from our Web site so the rest of the install is very simple we're going to say
OK I want the language to be English.
I'm going to keep the installation path for the default one I'm going to click on install it will install
it for me just like any other program and were done.
So you can uncheck these if you don't want to on tour or if you don't want to add it to the start menu.
I'm going to keep everything the same.
I'm going to click on finish and this will automatically start the Tor browser for me.
As you can see right here still in me I can click on Kinect to connect to the network.
So we're going to do the and now the browser is going to first connect to the tour network and then
launch the browser for me.
And as you can see the browser is working and I'm not going to use it right now.
I'm not going to show you how to use it.
We'll talk about this in the next lectures.
But right now we have a clean version of the Tor Browser installed on our computer and ready to be used.