Skip to main content

Why did my antivirus flag Brave?

Brave users can create a new “Private windows with Tor” for enhanced, private browsing. It’s important to note that the binaries for Tor are not bundled with Brave, but they are downloaded on first run. For more information, please see our documentation about what a Private Window with Tor is and how it works.

image.png

If you use Antivirus software (Trend Micro, Norton AntiVirus, Avast, Malwarebytes, etc.), there is a chance that the software may detect and flag Brave as malicious software. Namely, the Tor component - tor-0.3.5.8-win32-brave-1(exact version may vary) - is what the Antivirus software flags. When this happens, it's important to note that it is not a virus, but rather a component that Brave installs upon first launch (tor files are not included in installer).

Why does this file get flagged? 

The exact cause for the file being flagged as malware may vary between different Antivirus software. However, it generally boils down to either the antivirus software seeing "tor" in the file name, or scanning the contents of the tor binary. One of the most common cases of Tor being flagged occurs in public network settings, especially the workplace. Tor provides users a way to hide or obfuscate web usage, which is antithetical to most workplace network settings, as they will likely want to route traffic a specific way, as well as block certain websites from being accessed.

Can I disable or remove the Tor functionality in Brave?

There are several ways in which you can disable Tor in the browser. Once disabled, the binary file that your antivirus software flagged can be deleted.

  • Block tor using Group Policy (Windows)
    The tor feature can be disabled via Group Policy by adjusting the TorDisabled value. Set it's value to 1 in order to disable the feature on machines that run on your network. More information about using Group Policy in Brave.
  • Block tor using DNS 
    Administrators can also block the Tor installation request by blocking tor.bravesoftware.com. With this blocked, the binary cannot be downloaded and the feature will remain disabled.  
  • Turn tor off in Settings 
    Individual users can disable tor functionality by going to Menu --> Settings --> Extensions and toggling the Private Window with Tor option to "off".

torswitch.png

    Comments

    Post a Comment

    Popular posts from this blog

    How do I fix page crashes and other page loading errors?

    Image
    You're getting the "Aw, Snap" error instead of a web page because Brave is having problems loading. Reload the page At the top left in the address bar, click the Reload icon   Further troubleshooting Check your internet connection Make sure your computer is connected to Wi-Fi or a wired network and t ry reloading the tab with the error. Clear your cache Brave might have information stored that's stopping the page from loading. Open the page in an Incognito window: On your computer, open Brave At the top right, click the  Menu icon     Select  New Private Window . In the  Private window,  try opening the page. If it opens, clear your cache and cookies. How to clear your cache and cookies: At the top right, click the  Menu icon    → More  tools →   Clear browsing data .  At the top, select  All time. Select  Cached images and files and Cookies and other site data.  Deselect the other types of data. Click  Clear data . Try reloading the tab with the error.
    Read more