http://dwebkjkovsjobzrb45dz6prnlifnapiyp2dba33vcmcsaikr2re4d5qd.onion/knowledge/how-to-install-the-tor-browser-and-stay-anonymous
Some people prefer the first step because it helps provide a certainty that they’ve downloaded the right version of the browser, as opposed to something that has been modified and which could cause a security risk. However, if you’ve downloaded the file from a trusted source, then you don’t have a problem. If you would like to check the GPG signature, however, keep in mind that the process is easy.