Torzon Onion Mobile Access Bulletins

Orbot and Onion Browser releases, QR bridge bundle re-signs, mobile transport coverage changes, battery profiles and handset OPSEC advisories. Only the mobile connectivity layer is published here - no transaction-side announcements.

MOBILE PINNED

Orbot 17.6 and Onion Browser 3.3 Reach All Three Mirrors

A clean-install mobile sweep completed at 14:32 UTC on 22 June 2026. On a freshly installed Orbot 17.6 (Android) and Onion Browser 3.3 (iOS), both clients reached all three Torzon mirrors on first attempt over the recommended per-region transport: Mirror α via obfs4, Mirror β via snowflake, Mirror γ via meek-azure.

First-attempt connection time on 4G mobile data measured 6-11 seconds for obfs4 and 9-14 seconds for snowflake. Rolling 30-day handset reachability sits at 99.8% aggregated across the three cellular test regions. meek-azure remains more limited on iOS due to Apple networking restrictions.

If your phone fails to reach any mirror after a fresh QR bridge import, fall back to the next transport in the pairing - start obfs4, then snowflake, then meek-azure. The full procedure is in the mobile setup guide.

BRIDGES

QR Bridge Bundles Re-Signed for Offline Phone Import

The PGP-signed obfs4 bridge bundle was regenerated and re-encoded as a scannable QR for transfer from an unfiltered device to a censored handset. The signing key did not change - only the bridge IP set was refreshed. Scan the QR in Orbot's bridge settings, and verify the bundle signature against fingerprint 4B9E 1C7A … as documented on the Mobile Security page before connecting.

SNOWFLAKE

Snowflake on Mobile Data - Battery Profile Published

We measured the battery and data cost of holding a snowflake circuit open on a mid-range Android handset over 4G. Idle WebRTC keepalive drew roughly 9% battery and 14 MB per hour, against about 4% and 6 MB for obfs4. The full per-transport table is now on the features page. The takeaway for low-data plans: stay on obfs4 in per-app mode and only escalate when a block forces it.

iOS

Onion Browser Bridge Entry Re-Verified on iOS 18

Built-in obfs4 and snowflake bridge configuration in Onion Browser 3.x was re-tested on iOS 18 handsets and reaches all three mirrors. meek-azure remains constrained by Apple's networking restrictions, so iPhone users should prefer obfs4 or snowflake. Configuration notes are on the mobile setup guide.

ANDROID

Orbot Per-App Routing Walkthrough Added

A new step-by-step covers routing only Tor Browser for Android through Orbot using per-app VPN mode, leaving the rest of the phone on its normal connection. This is the recommended default on a prepaid or low-data plan because it keeps everything except Tor off the Tor path, saving both battery and cellular data. See step 6 of the mobile setup guide.

PGP

Mobile PGP Verification Apps Documented

OpenKeychain on Android and a files-based verification workflow for iOS are now documented so a phone-only user can confirm the signed mirror manifest without a desktop. The signing key fingerprint remains 4B9E 1C7A F25D 8063 A4E7 9F31 6C28 B5D4 0E71 38FA, unchanged since launch in 2022. Full steps live under Mobile Security.

ADVISORY

Mobile Phishing Advisory - Fake Orbot Builds

Repackaged Orbot APKs distributed outside F-Droid and Google Play were observed shipping hostile bridge defaults that route through attacker-controlled relays. Install Orbot only from F-Droid or Google Play, and Onion Browser only from the App Store. Verification advice is on the Mobile Security page.

PROBES

Mobile Probe Network Expanded to Three Cellular Carriers

Reachability probing now runs from handsets on three heavily filtered mobile carriers - one in East Asia, one in Central Asia, and one in West Asia. The home-page status indicator reflects conditions on cellular data, not just fixed-line networks, so a phone user sees a status that matches what their own carrier is likely doing.

Stay Current

Subscribe via RSS to get mobile bulletins in your reader. No tracking, no account - just the feed.