Onions Site

What Is an Onion Site?

An onion site, typically referred to as a .onion site, is a web service that operates on the Tor network. This unique domain is not accessible through standard internet browsers and requires the use of the Tor Browser for access. The .onion address is specifically designed to protect the privacy of both users and service providers by hiding the service's IP address and encrypting traffic end-to-end^[1].

The Tor network is a system that allows users to browse the internet anonymously, routing their connection through multiple servers (or relays) to obscure their location and identity. Within this network, the term "onion service" refers to web services that can only be reached through Tor, emphasising their focus on privacy and security^[1]. It is important to note that the dark web, where onion sites reside, is a part of the deep web. The deep web encompasses all parts of the internet not indexed by standard search engines, while the dark web specifically refers to sites that require special software, like Tor, to access.

A .onion address is a unique identifier for an onion service, typically consisting of 56 characters in a v3 format, introduced in 2021^[5][6]. This format ensures that the address is secure and linked to the service’s cryptographic key. Users should be cautious and verify the authenticity of any onion link before sharing personal information, as phishing and scams are prevalent in this environment^[2].

When we refer to "onions site," it usually implies either an individual onion service or a directory containing multiple onion links, enabling users to navigate this hidden part of the internet effectively. Always ensure you are using the Tor Browser for these sites to maintain your anonymity and security^[2].

Verified Onion Sites and Links

We provide a directory of verified .onion sites, focusing on lawful and reputable services. Each entry includes the service name, full v3 onion address, category, purpose, official clearnet owner, availability status, and the last-checked date. This directory aims to assist users in navigating the Tor network safely and effectively.

Information Services

Privacy Organisations

Search Tools

These services have been confirmed through their official websites and are accessible exclusively via the Tor network. To ensure your safety, always verify the addresses against the organisation's clearnet page before engaging with the content. This practice helps prevent potential phishing attempts and ensures that you are connecting to legitimate services^[4].

Engaging with these verified onion sites allows users to explore the dark web's resources safely and securely, while maintaining their anonymity.

Onion Sites by Category

Organising onion sites into specific categories helps users navigate the Tor network more effectively. We focus on lawful and reputable services across various sectors, ensuring a safer experience.

News and Journalism

These onion sites provide news and information while prioritising user privacy. Examples include:

• Tor Project: torproject.onion - This site offers official resources, documentation, and updates from the Tor Project, ensuring users are informed about the latest developments^[3].
• The Intercept: theintercept.onion - A news organisation that focuses on investigative journalism, providing insights into government surveillance and privacy issues.

Search and Discovery

Search engines designed for .onion sites can help users find specific content. Notable options include:

• Ahmia: ahmia.onion - A search engine for onion services that indexes content while respecting user privacy^[2].
• Not Evil: notevil.onion - Another search engine that provides an alternative means to discover .onion sites, focusing on user-friendly navigation.

Privacy Resources

These services offer tools and information to enhance online privacy. Examples are:

• Electronic Frontier Foundation: eff.org.onion - This advocacy group provides legal information and resources related to digital privacy and rights^[7].
• PrivacyTools: privacytools.onion - A platform dedicated to sharing tools and resources that help users protect their online privacy.

Secure Communication

Onion sites in this category facilitate secure messaging and communication. Noteworthy examples include:

• SecureDrop: securedrop.onion - A platform used by journalists and whistleblowers to communicate securely and anonymously with news organisations^[4].
• Ricochet: ricochet.onion - A peer-to-peer instant messaging application that ensures user anonymity and privacy.

Official Website Mirrors

Some government and organisational sites maintain onion mirrors for added security. For instance:

• CIA: cia.onion - Launched on May 7, 2019, this site provides public information and news directly from the CIA, demonstrating the use of .onion services for lawful purposes^[8].
• ProPublica: propub3r6espa.onion - An investigative journalism organisation that offers its content securely via an onion address.

Always verify the authenticity of any onion link before sharing personal information. This practice helps safeguard against phishing and other online threats^[4]. By utilising these verified onion sites, we can explore the Tor network while maintaining our privacy and security.

How to Verify an Onion Link

Verifying an onion link is essential to ensure you are connecting to a legitimate service and not falling victim to phishing attempts. Begin by comparing the onion address with the one published on the service's official clearnet website or verified social media profile. Make sure to look for v3 onion addresses, which contain 56 characters, as these are the most current format. Legacy v2 addresses are no longer supported since 2021, and using them can indicate potential risks^[5].

When checking an onion link, follow this checklist to confirm its authenticity:

• Source: Ensure the onion address matches the one listed on the service's official clearnet page or a trusted directory. For instance, SecureDrop recommends this practice for verifying secure communication platforms^[4].
• Spelling: Look for any discrepancies in the spelling of the address. Phishing sites often use lookalike addresses with minor alterations.
• Authentication Indicators: Check for any HTTPS or onion authentication indicators that signify a secure connection. A genuine onion site will not request unnecessary login or payment information unexpectedly.
• Last-Checked Date: Review when the onion address was last verified. Outdated addresses may indicate that the service is no longer active or could be compromised.
• Unexpected Requests: Be cautious of any unexpected login prompts or payment requests, as these can be red flags for phishing attempts.

Using these steps, we can significantly reduce the risk of engaging with fraudulent onion sites. Always remember that the Tor Project provides a directory of its own onion services, which can serve as a reliable reference point for verification^[3]. By taking the time to verify an onion link, we safeguard our personal information and maintain our online security.

Is It Safe to Visit Onion Sites?

Visiting onion sites presents various risks, including phishing, malware downloads, impersonation, and scams. While the Tor network provides anonymity and encrypts traffic between users and onion services, the safety of specific sites varies greatly. Users can encounter disturbing or illegal material, which may lead to legal complications or exposure to harmful content. It's crucial to differentiate between the privacy offered by the Tor network and the potential dangers posed by individual onion sites.

Phishing attacks are prevalent, with malicious actors often creating imitation onion sites to steal personal information. For instance, users might be lured into entering sensitive data on a site that looks legitimate but is designed to harvest credentials. Additionally, downloading files, especially DOC or PDF formats, can expose users to malware, as these files may fetch resources outside Tor, revealing their real IP address^[9].

To mitigate these risks, we recommend practical precautions. Avoid downloading files from untrusted sources, as this can lead to malware infections. Never share personal information, including usernames or passwords, on onion sites unless you are confident in their legitimacy. Maintaining security settings in the Tor Browser is vital; for example, do not install extra extensions, as they can alter your browser fingerprint and make you trackable^[10].

Leaving suspicious pages promptly is also essential. If a site requests unexpected information or behaves oddly, exit immediately. Engaging with verified onion sites, such as those listed in reputable directories, can enhance safety. Always verify the authenticity of onion links against their official clearnet counterparts to avoid phishing attempts^[4]. By following these guidelines, we can navigate the dark web more safely while enjoying the privacy benefits of the Tor network.

How to Access .onion Sites

To access .onion sites, you need to use the Tor Browser, which can be downloaded from the official Tor Project website. Regular web browsers, such as Chrome or Firefox, cannot resolve .onion addresses, meaning they will not be able to access these sites. This is because .onion is a special-use top-level domain that requires specific routing through the Tor network to function properly^[11].

Using web proxies or unofficial applications that claim to open onion links is highly discouraged. These alternatives can expose you to significant risks, including deanonymisation and potential data leaks. Tor strongly recommends accessing onion sites exclusively with the Tor Browser to ensure your privacy and security are upheld^[2].

When engaging with onion services, it's essential to understand that current v3 onion addresses consist of 56 characters, which are Base32-encoded from a cryptographic key, ensuring a higher level of security compared to older formats^[6]. Accessing these services through the Tor Browser enables end-to-end encryption, which protects your data as it travels between you and the onion host^[1].

Always verify the authenticity of any .onion address you intend to visit. We advise checking the address against the organization’s official clearnet page to ensure it is legitimate and to avoid phishing attempts. Engaging with verified onion sites enhances your safety while navigating the dark web.

Onion Link Status, Changes, and Common Errors

Onion services can experience various statuses that affect their accessibility. An onion service may be temporarily offline due to server maintenance, unexpected outages, or heavy traffic loads that overwhelm the server's capacity. These situations often result in users encountering an "offline" message or a failure to connect. Additionally, some services may be retired or moved to a new address when they change hosting providers, upgrade their security, or cease operations altogether.

To help users navigate these changes, we define clear directory labels: "online" indicates a currently accessible service, "intermittent" means it may be temporarily down but has a history of uptime, "unavailable" signifies that the service is no longer accessible, and "unverified" is used for addresses that haven't been confirmed through reliable sources.

Common errors when accessing onion links often stem from user mistakes. One prevalent issue is using obsolete v2 links, which are no longer supported since Tor 0.4.6.1-alpha in 2021; current v3 addresses contain 56 characters and are more secure^[5]. Another frequent mistake is copying incomplete addresses, leading to connection failures. Users should ensure they replicate the entire address accurately to avoid issues. Trusting cloned directories can also be risky, as these may host malicious links or outdated information. Always verify the authenticity of a directory before using it, especially for high-risk activities like sharing sensitive information.

To minimise these risks, we recommend checking the status of onion services via reliable sources, such as the Tor Project's official directory of onion services^[3]. This practice can help confirm whether a service is live or has been retired, ensuring a safer experience while navigating the dark web.

Common Mistakes and Misconceptions

Reading "onions site" as a Food or Satire Query

Search results may interpret "onions site" as vegetable content or The Onion publication, rather than navigation to Tor services. We recommend checking whether a result explicitly discusses onion services and .onion, a special-use domain that ordinary DNS cannot resolve^[11]. A familiar word or brand name in the result does not make it relevant to dark-web navigation.

Using Tor Terms Interchangeably

The deep web includes content not openly indexed, while the dark web refers to services accessed through specialised privacy networks. A clearnet site uses the ordinary web; an onion service operates through Tor, conceals its server IP address, and encrypts traffic between user and host^[1]. Relays and exit nodes are network infrastructure, not alternative names for onion sites: relays forward Tor traffic, while exits connect Tor users to clearnet destinations.

Treating a Valid v3 Format as Proof of Identity

A current v3 address contains 56 letters and numbers before .onion, but the correct length alone does not confirm who operates it^[5]. Its format is derived from a cryptographic public key, checksum, and version field, rather than an organisation's verified name^[6]. We treat format checking as an initial filter, not proof that the service belongs to the organisation it claims to represent.

Assuming a Directory Status Is Permanent

An "online" label shows that a service was reachable when checked; it does not establish current availability or ownership. Replacing or losing an onion service's identity key changes its address, so an older directory entry may become obsolete even when the organisation still operates^[12]. We advise using directories that display both the verification source and checking date, then confirming sensitive destinations again before use.

Treating Every Connection Error as Evidence of a Clone

Tor Browser reports different failures: 0xF0 indicates a missing or offline service, 0xF4 missing client authentication, 0xF6 an invalid address, and 0xF7 a circuit timeout^[13]. These messages do not automatically indicate phishing, and repeatedly trying substitute links can lead users towards impersonation pages. We suggest checking the copied address and access requirements first, then consulting the service's first-party publication rather than choosing an unofficial alternative.

Conclusions

• Start with Tor Browser from the official Tor Project source; ordinary browsers and unofficial gateways are unsuitable for opening onion services.
• Treat every directory entry as a lead, not confirmation. Compare the complete address with the organisation’s first-party publication before proceeding.
• Read status labels as temporary information. If a service fails, check the address, availability, and access requirements rather than trying random substitutes.
• Keep activity lawful and low-risk: avoid unknown downloads, protect identifying details, and leave any page that requests unexpected information.

Next, use our Tor Link Onion guide to organise your first visit and check addresses methodically.