Upgrading workstations from Tails 3 to Tails 4


Before upgrading your Admin Workstation and your Journalist Workstation to Tails 4, you must first ensure that the version of the SecureDrop code on the workstation (which is used for administrative tasks and for configuring the Tails desktop) is at 1.6.0.

If unsure, you can always run the git status command in the ~/Persistent/securedrop directory to determine the current version. If the output is not “HEAD detached at 1.6.0”, you are not ready to proceed with the upgrade to Tails 4, and you must first update the workstation using the procedure described in our upgrade guides.

As a precaution, we recommend backing up your workstations before the upgrade to Tails 4. See our Workstation Backup Guide for more information. We also recommend that you keep a USB drive running Tails 3.16 on hand in case you need to revert.

Once you have created the backups, create a Tails 4 Primary USB which you will use to upgrade your workstations. Follow the instructions on the Tails website to create a fresh Tails drive on a computer running Windows, Mac, or Linux.

Boot the Tails 4 Primary USB on the air-gapped computer you use as the Secure Viewing Station, and follow the instructions for manually upgrading from another Tails to upgrade each workstation USB in turn. This procedure preserves the persistent storage volume of each USB drive you upgrade to Tails 4.

Once the upgrade is completed, shut down the Tails 4 Primary USB and boot into each workstation USB to verify that the upgrades were successful. On the Secure Viewing Station USB, the upgrade process is now complete, and no additional configuration is required.

On the Admin and Journalist Workstation USBs, set an administrator password on the Tails welcome screen, and update the SecureDrop environment using the following commands:

 cd ~/Persistent/securedrop
./securedrop-admin setup
./securedrop-admin tailsconfig

During the ./securedrop-admin setup step, Tails will prompt you if you want to install a set of packages every time you start Tails. These packages are only required for the setup process, so you can safely click Install Only Once.


Until you run these commands, the SecureDrop shortcuts on the Tails desktop will not work, and the graphical updater will no longer report available updates for the SecureDrop code on your workstation.

If you experience difficulties with this upgrade, please do not hesitate to contact us using any of the methods below. If the upgrade failed and you need to restore from a backup, see our guide for restoring workstations. Make sure you restore to a Tails drive using Tails 3.16 before attempting another upgrade to Tails 4.