<h1 id="security-level">Security levelconfinement">Security confinement</h1>

<h1 id="confinement">Security confinement</h1>

*Tor Browser* is only allowed to save the downloads and read the files that you
specify in the file chooser of GNOME.

<p>To prevent Tails from running out of memory and crashing, download
very big files to the <emi>Persistent/Tor Browser</em</i> folder.
All tThe files that you download outside of the Persistent Storage are
stored in memory (RAM), which is more limited.</p>

<p>To prevent Tails from running out of memory and crashing, download
very big files to the <i>Persistent</i> folder.
The files that you download outside of the Persistent Storage are
stored in memory (RAM), which is more limited.</p>

<p>In [[Tails 6.14.1|news/version_6.14.1]] (April 2025), we improved the
previous confinement and you can now safely download to and read from any
folder in your <i>Home</i> folder or Persistent Storage.</p>

This confinement relies on 2 security technologies: *[[!debwiki AppArmor]]* and the [XDG Desktop Portals](https://flatpak.github.io/xdg-desktop-portal/) of *Flatpak*.

<p>When opening files from the <i>/usr</i> or <i>/etc</i> folders in Tor
Browser, Tor Browser displays the following error:</p>

<p class="command">Access to the file was denied</p>

To change the security level, click onselect the [[!img security-level.png
link="no" class="symbolic" link="no"]] icon on the right of the address bar
and choose **Settings&hellip;**.

To change the security level, select the [[!img security-level.png
link="no" class="symbolic"]] icon on the right of the address bar
and choose **Settings**.

Click on the padlockSelect the [[!img tor-circuit.png alt="Tor Circuit" class="symbolic"
link="no"]] button in the address bar to show the relays in the Tor circuit that is used to connect to the website in the current tab, its 3 relays, their countries, and IP addresses.

Select the [[!img tor-circuit.png alt="Tor Circuit" class="symbolic"
link="no"]] button in the address bar to show the relays in the Tor circuit
that is used to connect to the website in the current tab.

<h1 id="new-identity"><span class="guilabel"b>New Identity</spanb> feature</h1>

<h1 id="new-identity"><b>New Identity</b> feature</h1>

- Closes all open tabs.

Closes all open tabs.

- Clears the session state including cache, history, and cookies.

Clears the session state including cache, history, and cookies.

- Closes all existing web connections and creates new Tor circuits.

Closes all existing web connections and creates new Tor circuits.

<p>This feature is not enough to strongly [[separate contextual identities|about/warnings/identity#contextual]]
as the Tor circuits used outside of
<i>Tor Browser</i> are not changed.</p>

<p>This feature is not enough to strongly [[separate contextual identities|about/warnings/identity#contextual]]
as the Tor circuits used outside of
<i>Tor Browser</i> are not changed.</p>

*Tor Browser* includes the
*NoScript* extension to:

- Allow you to disable JavaScript completely on some websites only.

Allow you to disable JavaScript completely on some websites only.

[[!img letter-boxing.png link=noclass="screenshot" alt=""]]

[[!img letter-boxing.png class="screenshot" alt=""]]