Downloading software for an older OS comes with risks. To ensure you are getting the "best" and safest download:
Do not log into personal accounts (Facebook, Google) while using Tor, as this links your real identity to the anonymous browsing session.
DuckDuckGo is the default search engine, but you can change this in the settings. Best Practices for Security on Older Android Versions
Upon first launch, the browser will ask you to connect to the Tor network.
F-Droid is a repository of Free and Open Source Software (FOSS) for Android. It often hosts older versions of apps, making it a reliable source for legacy operating systems.
For the ultimate privacy setup, connect to a trustworthy VPN (like Mullvad or ProtonVPN) before opening Tor Browser. This hides your Tor usage even from your ISP, who would normally see that you are connecting to a Tor entry node. In this setup, your ISP sees VPN traffic, the VPN sees Tor traffic, and the Tor network sees anonymous browsing. Android’s "Always-on VPN" feature can enforce this connection order.
The Tor Browser (The Onion Router) protects your identity by bouncing your communications around a distributed network of relays run by volunteers all over the world. It prevents someone watching your internet connection from learning what sites you visit and prevents the sites you visit from learning your physical location. For Android 4.4.2 users, Tor provides: Masks your IP address and browsing habits.
For a device running Android 4.4.2, you must use legacy versions or alternative configurations. Below is a guide on how to safely access the Tor network on older hardware. Recommended Legacy Options for Android 4.4.2