Tor: How do I verify a Tor Browser download?

Download both the installer or archive and its matching `.asc` signature from the Tor Project.

Short answer

Download both the installer or archive and its matching .asc signature from the Tor Project. Import the Tor Browser Developers signing key using the Project's current instructions, then verify the signature against the downloaded file. A successful check authenticates the package and detects modification; it does not prove your device itself is free of malware.

Sources

Tor Project: Verify the signature.