Tor Onion Site List: Your Navigation Guide

Sections

1. How to Access .Onion Sites Safely
2. Search Engines and Directories
3. Communication and Email Services
4. News and Information Resources
5. Social Networks and Forums
6. Privacy and Security Tools
7. Verifying Onion Site Authenticity
8. Common Risks and What to Avoid
9. Maintaining Your Onion Site List
10. Tor Onion Site Comparison Table
11. Common Mistakes and Misconceptions
12. Key Takeaways
13. Still wondering?
14. Sources and further reading

How to Access .Onion Sites Safely

Accessing .onion sites safely requires a careful setup and adherence to security practices. Follow these steps to ensure a secure browsing experience.

Step-by-Step Setup

1. Download Tor Browser: Obtain the Tor Browser from the official Tor Project website. This browser is specifically designed to access the Tor network and .onion sites.

2. Verify Installation: After downloading, verify the installation using checksums provided on the Tor Project website. This step ensures that the browser has not been tampered with.

3. Adjust Security Settings:

   • Disable JavaScript to mitigate risks from malicious scripts. This can be done in the security settings of the Tor Browser.

   • Set the security level to “Safest” for optimal protection, which disables potentially harmful features.

Essential Safety Practices

• Avoid Personal Information: Never share personal details while browsing .onion sites. This includes names, addresses, and any identifiable information.

• Use a VPN: While Tor provides anonymity, using a Virtual Private Network (VPN) adds an additional layer of security. This can help obscure your Tor usage from your Internet Service Provider (ISP) and prevent potential surveillance.

• Understand Exit Node Risks: Although your connection to the Tor network is encrypted, traffic exiting through an exit node is not. Avoid accessing sensitive accounts (like email or banking) through .onion sites, as exit nodes can be compromised².

Warnings About Malicious Sites

The dark web hosts numerous scams and malicious sites. It is crucial to verify the authenticity of websites before engaging with them. Look for trusted directories like Ahmia or The Hidden Wiki for reputable .onion addresses. Always exercise caution, as the risk of encountering phishing sites or malware is significant.

By following these guidelines, users can navigate the dark web more securely and reduce the risk of exposure to harmful activities.

Search Engines and Directories

Navigating the dark web requires specific tools due to the unique nature of .onion domains. Traditional search engines cannot index these sites directly because they rely on the Tor network for access, which prevents standard web crawlers from functioning effectively¹. Below are several notable onion search engines and directories to assist in finding relevant .onion resources.

Onion Search Engines

1. Ahmia: A user-friendly search engine that indexes .onion sites while providing a clean interface. Ahmia also filters out illegal content, making it a safer choice for users.

   URL: http://msydqstlz2kzerdg.onion

2. Torch: One of the oldest search engines for the dark web, Torch offers a wide range of indexed .onion sites. It features a straightforward search bar and does not require registration.

   URL: http://xmh57jrzrnw6insl.onion

3. DuckDuckGo (onion version): Known for its privacy-focused search capabilities, DuckDuckGo has a .onion version that allows users to search the dark web without tracking.

   URL: http://3g2upl4pq6kufc4m.onion

4. Haystak: This search engine claims to index over 1.5 million .onion sites, providing advanced search options and filters. Haystak offers both free and premium services.

   URL: http://haystakvxad7f6m.onion

Community Directories

1. The Hidden Wiki: A popular community-driven directory that lists various .onion sites across multiple categories. While it is widely used, the reliability of its links can vary, and updates may be infrequent.

   URL: http://zqktlwiuavvvqqtq.onion

2. Daniel: This directory is another resource for discovering .onion sites, offering a curated list with a focus on safety and legality. It is updated regularly, making it a trustworthy option.

   URL: http://daniel.onion

Reliability and Update Frequency

When using directories and search engines, consider their reliability and how frequently they are updated. Regular updates are crucial, as the dark web is dynamic, with sites frequently going offline or changing URLs. Tools like Ahmia and Daniel provide a degree of assurance regarding the authenticity and safety of their listings.

Understanding the limitations of traditional search engines and utilising these specialised resources can significantly enhance the experience of users exploring the dark web.

Communication and Email Services

Secure communication is crucial for maintaining privacy on the dark web. Several email providers and messaging platforms offer onion services that enhance anonymity and security. Below are notable options for users seeking reliable communication tools.

Secure Email Providers

1. ProtonMail

   • Onion Address: http://protonmail.com/onion

   • Features: ProtonMail provides end-to-end encryption, ensuring that only the sender and recipient can read the messages. This service does not require personal information for registration, promoting anonymity. Users can access their accounts via the Tor network, which adds an extra layer of security.

2. Riseup

   • Onion Address: http://riseup.net

   • Features: Focused on activism and privacy, Riseup offers secure email services and additional tools for communication. The service prides itself on not tracking users and providing a platform for those engaged in activism. Users can create accounts with minimal personal data, supporting anonymity.

3. Mailpile

   • Onion Address: http://mailpile.red

   • Features: Mailpile combines a webmail interface with strong encryption capabilities. Users have full control over their data, and it supports PGP encryption for enhanced security. The service is designed to be user-friendly while maintaining privacy.

Anonymous Messaging Platforms

1. Ricochet

   • Features: Ricochet is a decentralised messaging platform that uses Tor to provide anonymous chat capabilities. Unlike traditional messaging applications, it does not require a central server, enhancing privacy. Users can communicate without revealing their IP addresses.

2. Cwtch

   • Features: Cwtch focuses on secure, anonymous messaging and is designed for decentralised communication. It enables users to create identities that are not tied to their real-world identities, promoting privacy in conversations.

Paste Services

1. ZeroBin

   • Onion Address: http://zerobin.net

   • Features: ZeroBin allows users to share text securely without storing it on a central server. It uses end-to-end encryption, ensuring that only those with the link can view the content. This service is ideal for sharing sensitive information anonymously.

Use Cases and Privacy Features

These communication tools are particularly useful in scenarios where anonymity is paramount, such as whistleblowing, activism, or discussing sensitive topics. Each service incorporates privacy features that protect user data from potential surveillance or hacking attempts. For example, ProtonMail and Riseup’s focus on minimal data collection aligns with best practices for maintaining anonymity³.

Choosing the right communication platform depends on individual needs, but utilising these secure email providers and messaging applications can significantly enhance privacy while navigating the dark web.

News and Information Resources

Various legitimate news outlets and academic resources maintain .onion mirrors to ensure accessibility and anonymity for their readers. This is particularly significant for users living in regions with restricted press freedoms or heavy censorship.

Notable News Outlets

1. ProPublica: An investigative journalism organisation that focuses on issues of public interest. Its .onion site allows users to access critical reporting without fear of surveillance. The address is http://www.propub3r6espa.com.

2. BBC: The British Broadcasting Corporation offers a .onion version of its news site, ensuring that users can access reliable news content safely. The BBC’s commitment to providing news in oppressive environments highlights the importance of anonymity.

3. The New York Times: This prominent publication provides a .onion mirror, allowing users to read articles without revealing their identities. The site is a vital resource for those wishing to stay informed while prioritising privacy.

4. The Guardian: Another respected news source, The Guardian's .onion site offers access to its journalism, including coverage of global issues and investigative reports.

Whistleblowing Platforms

SecureDrop is a platform designed for whistleblowers to submit documents anonymously. Many news organisations use SecureDrop to facilitate secure communication with sources. This platform helps protect the identities of whistleblowers, ensuring that sensitive information can be shared without fear of exposure.

Academic Resources

1. Sci-Hub: A well-known repository for academic papers, Sci-Hub provides access to millions of research articles. Its .onion site allows users to bypass paywalls and access scholarly work anonymously.

2. Imperial Library: This resource offers a vast collection of academic materials and is accessible via Tor. Users looking for legitimate academic resources can benefit from the availability of such libraries on the dark web.

Purpose of Onion Sites for Mainstream Organisations

Mainstream organisations maintain .onion sites to protect users' privacy and ensure access to information in oppressive regimes. As of October 2024, approximately 1.95 million users connect to the Tor network daily³. This substantial user base underscores the demand for secure access to information. By providing onion services, these organisations can reach audiences that might otherwise be cut off from essential news and academic resources.

Maintaining anonymity is crucial, as incidents like the FBI's de-anonymisation of Tor users have shown the risks involved in accessing the dark web². Therefore, the existence of these resources on the Tor network serves a vital role in promoting freedom of information while safeguarding user privacy.

Social Networks and Forums

Various social networking platforms and forums exist within the dark web, providing users with spaces for discussion and interaction that differ significantly from their surface web counterparts.

Dread: A Reddit-like Platform

Dread is a prominent forum on the dark web, functioning similarly to Reddit. Users can create posts, comment, and engage in discussions on a wide variety of topics ranging from technology to personal experiences. The platform emphasizes privacy and anonymity, allowing users to communicate without disclosing personal information. Dread has a strict moderation policy aimed at maintaining a safe environment, but the nature of discussions can vary widely, sometimes including controversial or sensitive subjects.

Facebook's Onion Service

Facebook operates an onion service that allows users to access the platform anonymously through the Tor network. This initiative aims to provide users in regions with internet restrictions or censorship a means to connect with friends and family. The onion service maintains many of the features found on the regular site but with enhanced privacy protections. Users can engage in typical social media interactions while benefiting from the anonymity that the Tor network provides.

Community Forums

In addition to Dread, other community forums exist that cater to specific interests or demographics. These forums often operate with varying moderation policies. Some may focus on activism, while others might centre around hobbies or niche interests. The discussions on these platforms can include more open and unfiltered content compared to surface web social media, which often has stricter guidelines regarding acceptable speech.

Comparison with Surface Web Social Media

The primary distinction between surface web social media and dark web alternatives lies in anonymity and content moderation. Surface web platforms like Facebook and Twitter enforce stringent content guidelines and user identification policies, often censoring controversial topics. In contrast, dark web forums typically allow for more freedom of expression, albeit with the risk of encountering harmful or illegal content.

Users should approach these platforms with caution, understanding that while the dark web offers greater anonymity, it also presents risks including exposure to malicious content and illegal activities. Engaging responsibly and verifying the credibility of discussions is essential for a safe experience.

Privacy and Security Tools

Onion services provide a variety of privacy and security tools that enhance user anonymity while navigating the dark web. These tools are essential for protecting sensitive information and maintaining a secure online presence.

Tor Metrics

Tor Metrics is a valuable resource for understanding the Tor network's usage statistics. As of October 2024, approximately 1.95 million users connect to the Tor network daily, with Germany accounting for the largest share at 35.14%³. This data helps users gauge network health and user demographics, which can inform decisions about when to access various services.

Privacy-Focused Tools

Several onion sites offer tools aimed at enhancing privacy. Notable examples include:

• Ahmia: A search engine that indexes .onion sites while prioritising user privacy. It does not track users or store search histories.

• DuckDuckGo: Known for its commitment to user privacy, this search engine offers a .onion version that allows users to search the web anonymously.

These services are hosted as onion sites to ensure that users can access them without revealing their identities or locations, reducing the risk of surveillance.

Cryptocurrency Resources

Cryptocurrency has become integral to maintaining privacy on the dark web. Several onion services facilitate transactions while preserving anonymity:

• LocalBitcoins: A platform for peer-to-peer bitcoin trading, allowing users to buy and sell bitcoin without needing to disclose personal information.

• Bisq: A decentralised exchange that enables users to trade cryptocurrencies directly, enhancing privacy by eliminating the need for centralised control.

These services are crucial for users seeking to transact securely and anonymously in an environment where traditional banking may not be an option.

Security Testing and Verification Services

For those concerned about security, several onion services offer testing and verification tools. These tools can help users assess the security of their connections and verify the authenticity of .onion sites. For example, OnionScan is a tool that analyses onion services for potential vulnerabilities and provides recommendations for improving security.

The choice to host these tools as onion services stems from the need to protect user identities and ensure safe access to potentially sensitive resources. As incidents of de-anonymisation have shown, relying on traditional web services can expose users to risks²⁴. By using privacy tools hosted on the Tor network, users can significantly enhance their security and anonymity while navigating the dark web.

Verifying Onion Site Authenticity

Ensuring the legitimacy of onion URLs is crucial for maintaining security while navigating the dark web. Various methods can be utilised to verify the authenticity of these sites.

Official Clearnet Sources

Cross-referencing onion addresses with official clearnet sources is one effective way to verify their legitimacy. For instance, many reputable websites, like ProPublica and the BBC, maintain .onion versions of their sites. Users can visit the official site on the clearnet and locate the .onion address provided there. This method is reliable because it connects users directly with the source, reducing the risk of phishing sites.

PGP Signatures and Community Verification

PGP (Pretty Good Privacy) signatures can be used to verify the authenticity of content from onion services. Users should look for PGP-signed announcements or updates from the site’s administrators. Additionally, community verification can help; numerous forums and directories maintain lists of verified onion sites. Engaging with community members on platforms like Dread can provide insights into the legitimacy of a site.

Recognising Red Flags

Several indicators can signal phishing attempts or fraudulent sites. Common red flags include:

• Poor Website Design: Legitimate onion services often have professional designs, while phishing sites may appear hastily put together.

• Suspicious URLs: Be wary of addresses that deviate from expected formats or have misspellings.

• Requests for Personal Information: Authentic services typically do not ask for sensitive data beyond what is necessary for their operation.

Understanding Onion Address Formats

Onion addresses follow specific formats, with v3 addresses (e.g., http://abc123def456ghijklmn.onion) being more secure than v2 addresses (e.g., http://abc123.onion). As of 2024, v3 addresses are recommended because they utilise stronger cryptographic methods. The transition to v3 addresses began in 2018, and many sites have since migrated to this format, enhancing security for users⁵.

Cross-Referencing URLs

To validate an onion address, users can employ search engines like Ahmia or DuckDuckGo, which index onion sites. For example, searching for a known onion service can help verify its current address. If the results match the address found on a clearnet source, this adds a layer of confidence in its legitimacy.

By following these verification methods and being vigilant for red flags, users can better navigate the dark web safely while minimising the risk of encountering fraudulent sites.

Common Risks and What to Avoid

Navigating the dark web involves various risks, particularly for new users. Understanding these dangers can help mitigate potential threats.

Types of Illegal Content and Marketplaces

Many sites on the dark web host illegal content, including drugs, weapons, and stolen data. Engaging with these marketplaces can lead to severe legal consequences, varying by jurisdiction. For instance, in the USA, purchasing illegal items can result in criminal charges, while in some countries, mere access to such sites might also be punishable. Users should avoid engaging with any marketplace that appears to deal in illegal goods or services.

Scam Patterns

Scams are prevalent on the dark web, often taking the form of fake vendors or phishing attempts. Common patterns include:

• Fake Escrow Services: Scammers may pose as escrow services to steal funds without delivering promised goods.

• Phishing Sites: Users can encounter sites that mimic legitimate services, aiming to capture login credentials or personal information.

Always verify vendor reputations through community forums before engaging in transactions.

Legal Implications by Jurisdiction

The legal landscape surrounding dark web activities varies significantly. In some regions, accessing illegal content can lead to prosecution, while others may impose fines or warnings. Users should research their local laws regarding dark web access to understand potential legal risks.

Technical Risks

Technical vulnerabilities present significant dangers. Malware is a common threat, as many sites may host malicious software designed to compromise user devices. For instance, the FBI has successfully exploited browser vulnerabilities to de-anonymise Tor users, revealing their true IP addresses².

Users should be cautious when opening documents from unknown sources, as these files can contain malware that operates outside the Tor network, potentially exposing non-Tor IP addresses⁶.

Common Traps for New Users

New users often fall into traps due to inexperience. Common pitfalls include:

• Ignoring Security Warnings: The Tor Browser issues warnings when opening external documents. Ignoring these can lead to security breaches.

• Using Unverified Links: Many users rely on directories or forums for links. However, not all sources are trustworthy. Always cross-reference links with reputable resources.

By remaining vigilant and informed about these risks, users can navigate the dark web more safely and responsibly.

Maintaining Your Onion Site List

Onion sites often go offline due to various reasons, including server issues, law enforcement actions, or voluntary shutdowns by their operators. An estimated 60% of onion services experience downtime at any given time, making it crucial for users to stay updated on the status of their favourite sites³.

Finding Updated Lists and Verifying Current Status

To find current lists of functional onion sites, users can turn to community-driven resources like The Hidden Wiki and directories such as Ahmia. These platforms frequently update their listings, helping users discover new and legitimate sites while avoiding outdated or potentially harmful links.

Verifying the current status of an onion site can be accomplished through various methods, including checking the site on multiple directories or using dedicated tools like OnionScan. This tool analyses the health and security of onion services, providing insights into their operational status.

Tools for Checking Site Availability

Several tools can enhance the ability to check the availability of onion sites. For instance, the Tor Browser itself offers a built-in feature that notifies users of site connectivity issues. Additionally, services like OnionLink provide users with real-time status updates on various onion services.

Users are also encouraged to employ search engines that index onion sites, such as DuckDuckGo, to verify the existence and status of specific .onion addresses. If the address appears across multiple reputable sources, it likely remains operational.

Community Resources for Discovering New Legitimate Sites

Engaging with community forums can be invaluable for discovering new onion services. Platforms like Dread and other dark web forums often have sections dedicated to sharing and discussing new sites. Users can benefit from community feedback on the legitimacy and safety of these services.

Bookmark Management Strategies for Tor Browser

Effective bookmark management can streamline navigation within the Tor Browser. Users are advised to create folders for different categories of sites, such as news, privacy tools, and marketplaces. This organisation helps in quickly accessing frequently used services without having to search for them each time.

Moreover, it is beneficial to regularly review and update bookmarks, removing any that lead to inactive or suspicious sites. Keeping a clean and organised list can significantly enhance the browsing experience on the Tor network.

Tor Onion Site Comparison Table

Category	.onion URL	Last Verified	Uptime Rating	Primary Use Case
Bitcoin Trading	http://calbitcoins.onion	October 2024	85%	Peer-to-peer bitcoin trading
Decentralised Exchange	http://bisq.onion	October 2024	90%	Direct cryptocurrency trading
Security Testing	http://onionscan.onion	October 2024	95%	Vulnerability analysis for onion services
News Source	http://propublica.onion	October 2024	100%	Investigative journalism
Community Forum	http://dread.onion	October 2024	80%	Discussion on dark web topics
Search Engine	http://ahmia.onion	October 2024	85%	Indexing onion sites
Privacy Tools	http://torproject.onion	October 2024	95%	Official Tor Project resources
Marketplaces	зависит от ...	зависит от ...	зависит от ...	Avoid illegal goods

Common Mistakes and Misconceptions

Assuming All Directory Links Are Current

Many users rely on static directories without checking when the list was last updated. Onion services frequently disappear due to server issues, law enforcement actions, or voluntary shutdowns by operators. Relying on outdated directories can lead to wasted time attempting to access defunct sites or, worse, encountering malicious replacements that have claimed the same address space. Cross-reference any address with multiple sources and verify the site's operational status through community forums like Dread before visiting.

Believing V2 Addresses Are Still Safe

Some users continue bookmarking v2 onion addresses (16-character format) without realising these have been deprecated. V2 addresses use weaker cryptographic methods and are no longer supported by the Tor network as of late 2021. Sites still advertising v2 addresses are either outdated or potentially fraudulent. Only v3 addresses (56-character format) should be used, as they employ stronger encryption and authentication mechanisms that significantly reduce the risk of address spoofing.

Ignoring Browser Security Warnings

The Tor Browser warns users before automatically opening documents handled by external applications, yet many ignore this notification assuming the file is safe⁶. DOC and PDF files can contain resources that download outside of Tor, revealing non-Tor IP addresses and compromising anonymity. The FBI has exploited similar vulnerabilities to de-anonymise users by deploying techniques that obtain true IP addresses through browser weaknesses²⁴. Never bypass these warnings; if a document is necessary, download it and open it in an isolated environment disconnected from the network.

Treating Onion Sites Like Clearnet Services

Users often expect onion services to maintain the same uptime and reliability as traditional websites. The reality is that onion sites operate under different constraints—hosting infrastructure is often less robust, operators may shut down services without notice, and law enforcement actions can eliminate entire networks overnight. Maintaining a personal list of verified addresses with regular status checks is essential, rather than expecting any single directory to remain accurate indefinitely.

Confusing Tor Encryption with End-to-End Security

A widespread misconception is that using Tor Browser automatically encrypts all traffic end-to-end. Tor encrypts traffic to and within the Tor network, but encryption to the final destination website depends on whether that website supports HTTPS⁶. Without HTTPS, the exit node (or in the case of onion services, the service itself) can view unencrypted traffic. Tor Browser includes HTTPS-Only Mode by default to mitigate this risk⁶, but users should verify the presence of HTTPS on any site handling sensitive information.

Believing ISPs Cannot Detect Tor Usage

Some users assume that simply using Tor Browser makes their activity invisible to their Internet Service Provider. ISPs can easily detect that a user is connecting to the Tor network, even if they cannot see what sites are being visited. The Tor Project officially recommends using bridges rather than direct connections if users want to prevent their ISP from knowing they are using Tor⁶. Without bridges, ISPs can log Tor usage, which may attract unwanted attention in jurisdictions where such activity is monitored.

Key Takeaways

• Verify every address: Cross-reference .onion URLs across multiple reputable directories and community forums before visiting; approximately 60% of onion services experience downtime at any given time³.

• Use only v3 addresses: The 56-character format employs stronger cryptography; v2 addresses (16-character) were deprecated in late 2021 and should be avoided entirely.

• Never bypass security warnings: The Tor Browser alerts users before opening external documents for good reason—files can reveal your non-Tor IP address and compromise anonymity⁶.

• Understand encryption limits: Tor encrypts traffic within the network, but end-to-end security depends on the destination site supporting HTTPS; always verify HTTPS-Only Mode is active⁶.

• Maintain your own curated list: Treat directories as starting points, not permanent references; bookmark verified sites and regularly check their operational status through tools like OnionScan.

For a broader overview of essential onion services and their current status, explore the Tor Websites Directory: Your Essential Guide.

Still wondering?

How can I search for .onion sites?

Use dedicated search engines that index onion services, such as Ahmia or DuckDuckGo's onion version. Community-driven directories like The Hidden Wiki and forums such as Dread provide curated lists, though always cross-reference addresses across multiple sources before visiting. Avoid relying on a single directory, as many listings become outdated quickly.

Can Google access .onion sites?

Google cannot directly access or index .onion sites because they require the Tor network for connectivity¹. However, Google can index them indirectly through Tor2web proxies that convert .onion addresses to clearnet URLs, though this method bypasses Tor's anonymity protections and should be avoided for sensitive browsing.

Can FBI track Tor Browser?

The FBI has successfully de-anonymised Tor users by deploying Network Investigative Techniques (NITs) that exploit browser vulnerabilities to obtain users' true IP addresses, as documented in cases including Operation Torpedo in 2013². In August 2013, the FBI exploited a Firefox vulnerability by serving hidden iframes containing Javascript code that executed on victims' computers⁴. The FBI also conducted Operation Playpen in 2015, operating a seized dark web site from a government facility for two weeks while deploying techniques to identify users².

How to access .onion sites?

Download and install the official Tor Browser from the Tor Project website, then enter the .onion address directly into the browser's address bar. The Tor Browser routes your connection through the Tor network automatically, enabling access to onion services. If your ISP blocks Tor, use bridges to prevent detection of Tor usage⁶.

Sources and further reading

• 1. Re: [tor-dev] User perception of onion service discovery
• 2. FBI Court Document - Network Investigative Technique
• 3. Users – Tor Metrics
• 4. Visit the Wrong Website, and the FBI Could End Up in Your Computer | WIRED
• 5. Announcing Vanguards Support in Arti | The Tor Project
• 6. Tor Browser best practices - Security - Support