Tails 7.13 is out with Tor Browser 15.0.23, Tor 0.4.9.12, and a simplified shutdown process that removes unnecessary confirmation prompts.

This is the second release since Tails moved to a two-week cadence, which means the cadence is holding rather than being an announcement.

Why shutdown speed is a security feature here

On an ordinary system, shaving seconds off shutdown is a convenience. On Tails it is part of the threat model.

Tails is amnesic: it runs from removable media and deliberately forgets everything on shutdown. Part of that is wiping memory, because RAM retains its contents briefly after power is removed, and a cold boot attack exploits exactly that window by cutting power and immediately reading what remains.

The relevant scenario is not gradual. It is someone needing the machine to forget, now, because the situation changed. Any confirmation dialog standing between the user and a completed wipe is time the memory contents still exist.

Removing prompts from that path is the right call for this distribution specifically, and would be questionable on a normal desktop where an accidental shutdown loses work.

Tor Browser and Tor

Both updated. This is the reason the fortnightly cadence exists.

Tor Browser inherits Firefox’s security releases, and a browser vulnerability in a distribution built around anonymity is the most consequential kind. Tails users cannot patch in place the way a normal installation can, because the system is a fixed image, so the gap between an upstream fix and a new image is genuine exposure.

Halving that window was the point of the cadence change, and shipping two releases in a fortnight demonstrates it working.

Verify the download

Every time, without exception.

gpg --verify tails-amd64-7.13.img.sig tails-amd64-7.13.img

A compromised Tails image is the worst case for anyone whose threat model justifies using Tails at all. The in-system updater handles most upgrades, and the cases where it cannot are covered in the installation documentation.

What Tails is and is not

Worth restating for anyone considering it.

It is a tool for a specific threat model: someone who needs to use a computer without leaving traces on it, and whose network activity needs to be unattributable. Journalists, activists, people in hostile environments.

It is not a general privacy upgrade. Booting Tails and then signing into accounts tied to your real identity defeats nearly all of it, because Tor protects the transport and not the fact that you just authenticated as yourself. The most common way people fail with Tails is using it correctly at the network layer and incorrectly at the identity layer.