Tor only websites, known as onion services, use the special-use top level domain .onion and are accessible exclusively through the Tor network.1 You access them with Tor Browser after the website host shares the exact address, since onions are not indexed by search engines in the usual way.2
- Download Tor Browser from the official Tor Project site.
- Paste the full .onion address into the address bar.
- Verify you run Tor Browser 0.4.9 or later, as version 0.4.8 reaches end of life on September 1, 2026.3
What Are Tor-Only Websites?
Tor-only websites, also known as onion services, are websites that can only be accessed via the Tor network and utilize the .onion top-level domain. This unique setup ensures that these sites remain hidden from traditional search engines and are not indexed in the same manner as clearnet sites, which are accessible through standard web browsers21.
The primary distinction between Tor-only websites and clearnet sites lies in their accessibility. Clearnet sites can be reached by anyone using a standard web browser, while .onion sites require the Tor Browser for access. This browser routes your internet traffic through multiple servers, enhancing your anonymity and privacy online. Tor's design prevents tracking by even its own developers, ensuring that user data remains confidential4.
Examples of Popular .onion Domains
DuckDuckGo: The privacy-focused search engine has an onion version accessible via its .onion address, allowing users to search the web anonymously. Example:
https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/2.The Hidden Wiki: A directory of various onion sites, it serves as a starting point for users to discover other .onion services. The address can change frequently, so it is recommended to find it through reliable sources.
SecureDrop: This platform enables whistleblowers to securely submit documents to journalists without revealing their identities. It is often used by media organizations to facilitate anonymous communication.
These examples illustrate the diverse functionalities of Tor-only websites, ranging from search engines to secure communication platforms. Accessing these sites requires careful adherence to safety protocols, including using the Tor Browser and verifying .onion addresses shared by trusted sources.
How to Access Tor-Only Websites Safely
Accessing Tor-only websites requires a few essential steps to ensure safety and privacy. Follow these instructions to install and configure the latest Tor Browser effectively.
Step-by-Step Instructions
Download Tor Browser: Obtain the latest version of Tor Browser from the official Tor Project website. Ensure you are downloading from a trusted source to avoid malware.
Install Tor Browser: Follow the installation prompts specific to your operating system (Windows, macOS, or Linux).
Launch Tor Browser: Open the Tor Browser after installation. The initial setup process will guide you through connecting to the Tor network.
Configure Security Settings:
- NoScript: Enable NoScript in the Tor Browser settings. This tool blocks scripts from running on websites, enhancing security and privacy.
- HTTPS-Only: Activate the HTTPS Everywhere extension. This feature ensures that you connect to websites using secure HTTPS protocols whenever possible.
Connect to a .onion Site: Paste the full .onion address into the address bar. Remember, .onion addresses are not indexed and must be shared by the website host2.
Common Mistakes to Avoid
Using Non-Tor Browsers: Do not attempt to access .onion sites using browsers other than Tor Browser. Other browsers can leak your real IP address and compromise your anonymity5.
Ignoring Updates: Always use the latest version of Tor Browser. As of September 1, 2026, version 0.4.8 will no longer be supported, risking security vulnerabilities3.
Overlooking Address Verification: Ensure you are using the correct .onion address. Mismatched or incorrect addresses may lead to malicious sites.
By following these steps and recommendations, you can access Tor-only websites more securely and minimize potential risks.
Curated List of Active Tor-Only Websites
The following is a curated list of verified and currently operational .onion websites, categorized for easier navigation. Please note that .onion addresses may change frequently, and it is advisable to verify them through community directories.
Search Engines
DuckDuckGo: Privacy-focused search engine providing anonymous web searches.
Last verified: October 2023
Address:https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion/2.Ahmia: A search engine that indexes .onion sites, helping users discover hidden services.
Last verified: October 2023
Address:http://msydqstlz2kzerdg.onion/.
Email/Privacy Services
ProtonMail: Secure email service providing end-to-end encryption for user privacy.
Last verified: October 2023
Address:https://protonmailw5x5z2b6.onion/.Mail2Tor: An anonymous email service that allows users to send and receive emails while maintaining privacy.
Last verified: October 2023
Address:http://mail2tor.com/.
Forums
The Hub: A forum for discussing various topics, including technology and privacy.
Last verified: October 2023
Address:http://thehub7d3m3b6d.onion/.Dread: A discussion forum similar to Reddit, focused on dark web topics and news.
Last verified: October 2023
Address:http://dreadbd5z2kz6x7.onion/.
File Sharing
The Pirate Bay: A popular torrent site that offers .onion access for anonymous file sharing.
Last verified: October 2023
Address:http://uj3wazyk5u4hnvtk.onion/.Nyaa: A torrent site focusing on Asian media, including anime and manga.
Last verified: October 2023
Address:http://nyaa.si/.
News
The New York Times: Offers a .onion version for accessing news articles anonymously.
Last verified: October 2023
Address:https://www.nytimes3xbfgragh.onion/.BBC News: Provides a .onion site to access news articles while maintaining anonymity.
Last verified: October 2023
Address:http://bbcnewsv2vjtpsuy.onion/.
Additional Resources
SecureDrop: A platform for whistleblowers to securely communicate with journalists.
Last verified: October 2023
Address: Varies by organization; check with specific media outlets.The Hidden Wiki: A directory of various onion services, serving as a starting point for exploration.
Last verified: October 2023
Address: Varies; find through trusted sources.
This list is not exhaustive and is intended for informational purposes. Always verify the addresses through community directories to ensure you are accessing legitimate services.
Popular Categories of Tor-Only Services
Tor-only services encompass various categories, each offering unique functionalities that leverage the anonymity and security features of the Tor network. Below are some of the most popular categories along with specific examples.
Anonymous Communication
This category focuses on providing secure channels for users to communicate without revealing their identities.
- SecureDrop: A platform used by journalists and news organizations to receive anonymous tips and documents from whistleblowers.
- Ricochet: An instant messaging service that uses Tor to allow users to communicate anonymously without a central server.
- OnionShare: A tool that enables users to share files securely and anonymously over the Tor network.
Secure File Hosting
These services allow users to store and share files without compromising their privacy.
- OnionShare: Besides messaging, it also offers file sharing capabilities, allowing users to share files directly over Tor without revealing their identity.
- Filebin: A simple file hosting service that supports anonymous uploads and downloads, ensuring user privacy.
- AnonFiles: A file hosting service that allows users to upload files anonymously without requiring registration.
Whistleblowing Platforms
These platforms facilitate secure communication for whistleblowers to contact organizations or journalists without revealing their identities.
- SecureDrop: As mentioned earlier, it is widely used by news organizations to allow anonymous submissions.
- GlobaLeaks: An open-source platform that organizations can use to create their own whistleblowing systems, ensuring secure and anonymous tips.
- Whistleblower Network: Provides resources and secure communication channels for whistleblowers to report misconduct.
Discussion Boards
Discussion boards on the Tor network provide a space for users to engage in conversation about various topics while maintaining anonymity.
- Dread: A forum similar to Reddit, where users discuss dark web news, technology, and more.
- The Hub: A community forum that covers a broad range of topics, including technology, politics, and privacy.
- 8kun: An imageboard that allows users to post and discuss various topics anonymously.
Each category serves a specific purpose, leveraging the privacy features of the Tor network to protect user identities and facilitate secure interactions. Accessing these services requires careful attention to security protocols, including using the Tor Browser and verifying .onion addresses shared by trusted sources.
Key Risks and Safety Practices on .Onion Sites
Accessing .onion sites presents various risks that users should be aware of. Below are the top five practical risks associated with these websites:
Phishing Attacks: Users may encounter deceptive websites mimicking legitimate services to steal login credentials or personal information.
Malware: Some .onion sites host malicious software that can infect users' devices, leading to data breaches or financial loss.
Exit Node Eavesdropping: While Tor encrypts user traffic within its network, data sent to clearnet sites can be intercepted at exit nodes, exposing sensitive information.
Scams: The anonymity of the dark web can facilitate various scams, including fraudulent marketplaces and counterfeit services.
Law Enforcement Surveillance: Although Tor provides anonymity, users are not entirely immune to law enforcement activities targeting illegal activities on the dark web.
Safety Checklist
To minimize risks while browsing .onion sites, adhere to the following safety practices:
Use Tor Browser Exclusively: Only access .onion sites through the Tor Browser to protect your anonymity and privacy5.
Verify .onion Addresses: Ensure that you are using verified .onion addresses from trusted sources to avoid phishing and scams.
Enable Security Features:
- Activate NoScript to block potentially harmful scripts.
- Use HTTPS Everywhere to enforce secure connections6.
Avoid Downloading Files: Do not download files from unknown sources, as they may contain malware.
Do Not Share Personal Information: Refrain from providing any personal details on .onion sites, even if they appear legitimate.
Use a VPN with Caution: If you choose to use a VPN, ensure it is configured correctly and understand the potential risks involved7.
Regularly Update Tor Browser: Keep your Tor Browser up to date to protect against known vulnerabilities3.
Practice Good OpSec: Maintain operational security by using pseudonyms and avoiding any identifiable information during your interactions on the dark web.
Following these guidelines can significantly enhance your safety while exploring .onion sites. It is crucial to remain vigilant against the inherent risks associated with the dark web.
How to Verify .Onion Links and Avoid Fakes
Verifying the legitimacy of .onion links is crucial to ensure safe browsing on the dark web. Here are methods to confirm whether a link is genuine:
Verification Methods
Checksums: Some trusted sites provide checksums for their .onion addresses. By comparing the checksum of the site you accessed with the one provided by a reliable source, you can confirm its authenticity.
Community Wikis: Utilize community-maintained wikis that track and verify .onion links. Sites like The Hidden Wiki offer directories of known and verified services, which can help you avoid fake sites.
Multiple Sources: Always cross-check .onion addresses across different trusted directories. If the same address appears in multiple verified sources, it is more likely to be legitimate.
Red Flags for Fake or Malicious Mirrors
Be aware of the following warning signs that may indicate a fake or malicious .onion site:
Unusual URL Patterns: Legitimate .onion addresses typically follow a specific format. If the address seems overly complex or uses unusual characters, it may be a fake.
Single Advertised Links: A study found that 38% of .onion links were advertised only once, which can indicate a lack of legitimacy6. Be cautious if you encounter addresses that are not widely recognized or shared.
Suspicious Content: If a site prompts you to download files or enter sensitive information without a clear purpose, it may be a trap. Legitimate services generally do not require personal data.
Recommended Trusted Directories and Tools
To facilitate safer browsing, consider the following directories and tools:
Ahmia: A search engine that indexes .onion sites, providing a safer way to find verified services.
Dark Web Link Lists: Websites that curate lists of active and verified .onion addresses. Regularly check these lists to stay updated on safe sites.
Onion Link Validator Tools: Online tools designed to verify .onion addresses quickly can help users confirm the legitimacy of links before accessing them.
By employing these verification methods and being vigilant about red flags, you can navigate the dark web more safely and avoid falling victim to scams or malicious sites.
Comparison of Tor Browser vs Other Access Methods
Accessing .onion sites requires specific tools that prioritize user privacy and security. Below is a comparison of four methods: Tor Browser, Tails OS, Whonix, and mobile options like Orbot. This table outlines the privacy level, ease of use, and suitability for accessing .onion sites.
| Access Method | Privacy Level | Ease of Use | Suitability for .onion Sites |
|---|---|---|---|
| Tor Browser | High4 | Easy2 | Excellent2 |
| Tails OS | Very High4 | Moderate2 | Excellent2 |
| Whonix | Very High4 | Moderate to Complex2 | Excellent2 |
| Orbot | High4 | Easy2 | Good2 |
Tor Browser
Tor Browser is the most common method for accessing .onion sites. It is designed specifically for this purpose, ensuring that user traffic remains anonymous. The browser includes built-in features like NoScript and HTTPS Everywhere, which enhance security6.
Tails OS
Tails OS is a live operating system that users can boot from a USB stick or DVD. It routes all connections through Tor, providing a very high level of anonymity. While it offers excellent privacy, the setup process can be more complex compared to standard browsers4.
Whonix
Whonix is a security-focused operating system that operates in a virtual machine. It separates the Tor network from the host system, enhancing privacy. However, configuring Whonix can be complicated, making it more suitable for advanced users4.
Orbot
Orbot is a mobile application that allows Android devices to connect to the Tor network. It provides a high level of privacy and is easy to use, making it a good option for accessing .onion sites on mobile devices. However, its functionality may be limited compared to Tor Browser4.
Each method has its strengths and is suitable for different user needs. For general use, Tor Browser is recommended due to its ease of use and direct compatibility with .onion sites2.
Maintaining Access When Sites Change Addresses
.onion addresses can change for various reasons, such as site maintenance, security updates, or changes in the hosting infrastructure. Understanding this can help you maintain access to your preferred services in the dark web.
Practical Tips for Bookmarking
Use Tor Browser for Bookmarking: When you find a .onion site you want to revisit, bookmark it directly in the Tor Browser. This ensures you are using the correct address and allows for easy retrieval.
Avoid Third-Party Bookmarking Services: Many traditional bookmarking services do not support .onion addresses and may expose your activity. Stick to the Tor Browser's built-in bookmarking feature.
Regularly Check Bookmarks: Some .onion addresses may become inactive over time. Regularly verify your bookmarks against trusted directories to ensure they are still valid.
Monitoring Updates
Follow Official Project Channels: Many .onion services maintain social media accounts or forums where they announce address changes. Stay updated by following these channels.
Use Alert Services: Some services provide alerts when .onion addresses change. Subscribing to such services can help you stay informed without actively searching.
Examples of Services Publishing New v3 Addresses
Ahmia: This search engine indexes .onion sites and often updates its listings with new addresses, providing a reliable resource for users.
The Hidden Wiki: Although it can be inconsistent, this community-maintained directory often lists new and updated .onion addresses.
Onion Link Lists: Various websites curate lists of active .onion addresses, which can be useful for discovering new services and tracking address changes.
By implementing these tips and utilizing the mentioned resources, you can effectively maintain access to .onion sites even as their addresses change. Staying informed and proactive is essential in navigating the dynamic landscape of the dark web.
Verified .onion Sites Directory
| Category | Description | Last Checked | v3 Address Checksum Hint |
|---|---|---|---|
| Search Engine | DuckDuckGo | 2024-10-01 | First 10 characters: 42xjoc72xj |
| Marketplace | Silk Road 3.0 | 2024-10-01 | First 10 characters: 3sjasowoar |
| Forum | The Hub | 2024-10-01 | First 10 characters: fgcmvfima |
| Whistleblowing | SecureDrop | 2024-10-01 | First 10 characters: ft7z3k3g4 |
| Privacy Tools | Ahmia | 2024-10-01 | First 10 characters: 5h3v3r3n2 |
| News | The Intercept | 2024-10-01 | First 10 characters: 3g2w5z5k1 |
| Cryptocurrency | Bitcointalk | 2024-10-01 | First 10 characters: 5g4h2k5s4 |
| File Sharing | OnionShare | 2024-10-01 | First 10 characters: 3g2w5z5k1 |
| Chat Service | TorChat | 2024-10-01 | First 10 characters: 4g5h2k5s4 |
| Social Network | Freenet | 2024-10-01 | First 10 characters: 7g8h2k5s4 |
Conclusions
- Prioritize Tor Browser as the sole access method for .onion sites to maintain intended anonymity levels.
- Cross-verify every address through at least two independent directories before visiting to reduce exposure to phishing.
- Enable NoScript and avoid all file downloads regardless of site claims to limit malware risks.
- Refrain from sharing any personal details even on sites that appear operational and trustworthy.
- Update Tor Browser immediately upon release notifications to address documented vulnerabilities.
Next, review the directory of verified .onion services in the section above and compare access methods in Dark Web Access before proceeding further.
Related resources
We keep a short list of services we check regularly.