What Are Onion Sites and Why They Matter
Onion sites use the .onion top-level domain and route traffic through multiple Tor relays, encrypting your connection at each hop. Unlike the surface web, onion sites don't rely on traditional DNS or ISP infrastructure. They're used for privacy-focused communication, uncensored information sharing, and services that operate outside conventional legal frameworks. The Tor network itself is maintained by volunteers and the Tor Project, a nonprofit organization. Onion sites can be legitimate—news outlets, libraries, and privacy organizations maintain them—or illegal. The directory you're viewing focuses on verified, active sites across legitimate use cases.
Best Onion Sites by Category
Active onion sites span several categories. Search engines like DuckDuckGo's onion mirror and Ahmia index content across the Tor network. Information archives preserve documents, news, and research without censorship. Privacy-focused email and messaging services operate onion mirrors for users in restricted regions. Forums and discussion boards host communities around technology, security, and activism. Libraries and academic resources provide access to papers and books. Each site in this directory is checked regularly for uptime. Visit the Verified Market page on this site for current .onion addresses. Never bookmark addresses from untrusted sources; onion sites can be impersonated or taken offline without warning.
How to Access Onion Sites on Desktop
Step 1: Download Tor Browser from the official Tor Project website. Verify the GPG signature if you're security-conscious. Step 2: Install and launch Tor Browser. It bundles Firefox with Tor routing and security defaults. Step 3: Wait for the connection to establish—this takes 10-30 seconds. Step 4: Once connected, navigate to an onion address by pasting it into the address bar. The site will load like any other webpage. Step 5: Check the Tor Browser icon in the top-left corner; it should show a green onion icon when connected. For best security, use Tor Browser's default settings. Do not maximize your browser window—this can leak your screen resolution to websites. Do not enable plugins or extensions unless you understand the risks.
Accessing Onion Sites on Android
On Android, use Onion Browser or Orbot with a compatible browser. Onion Browser is a dedicated Tor client that routes traffic through the Tor network. Orbot is a proxy app that can route traffic from other apps through Tor. Step 1: Install Onion Browser from F-Droid or the official source. Step 2: Open the app and tap the connect button. Step 3: Once connected, use the built-in browser to navigate to onion addresses. Alternatively, install Orbot and configure your browser to use it as a proxy. Note that mobile Tor is slower than desktop Tor due to bandwidth constraints. Avoid using onion sites on mobile for sensitive activities if possible. Mobile browsers leak more metadata than desktop Tor Browser, so assume less anonymity.
Security Practices: VPN + Tor and Common Mistakes
Using a VPN before Tor (VPN → Tor) hides your ISP from Tor entry nodes but trusts the VPN provider with metadata. Using Tor before a VPN (Tor → VPN) is generally discouraged because the VPN can see your Tor exit traffic. Neither setup is inherently wrong, but understand the tradeoffs. Common mistakes include: maximizing your browser window, which leaks screen resolution; enabling JavaScript, which can deanonymize you; using the same username across sites, which correlates your identity; downloading files without caution, as they may contain trackers; and visiting onion sites over an unencrypted connection before Tor fully loads. Always assume onion sites can log your behavior. Use strong, unique passwords for each site. Enable HTTPS where available. Do not trust onion sites that ask for personal information.
Risks and What to Avoid
Onion sites host both legitimate and illegal content. Law enforcement monitors illegal marketplaces. Malware and scams are common on unvetted sites. Phishing attacks target Tor users by impersonating legitimate services. Honeypots—fake sites designed to trap users—exist on the Tor network. Avoid: downloading files from untrusted sources, as they may contain malware; clicking links from forums or chat without verifying the source; using the same browser for Tor and clearnet browsing; and assuming anonymity means legal immunity. If you access illegal content, you can still be prosecuted depending on jurisdiction and evidence. Exit nodes can see unencrypted traffic, so use HTTPS. Tor Browser updates regularly; keep it current. Do not use Tor Browser alongside other anonymity tools unless you understand how they interact.
Verifying Onion Site Authenticity
Onion addresses are long, random strings of characters. Legitimate organizations publish their .onion addresses on their official clearnet websites or through trusted channels. Before visiting an onion site, verify its address through multiple sources. Phishing sites often use similar-looking addresses with one or two characters changed. Check the site's security certificate—Tor Browser shows a green lock icon for HTTPS connections. Be skeptical of sites that ask for passwords, payment, or personal information without clear purpose. If a site claims to be a news outlet or library, cross-reference its content with the clearnet version. Use the Verified Market page on this site as a reference point for legitimate addresses. If you find a broken or suspicious link, report it through the site's feedback mechanism.
Frequently asked questions
Are all onion sites illegal?
No. Many onion sites are legitimate—news outlets, privacy organizations, libraries, and communication services use .onion addresses. However, onion sites also host illegal content. Legality depends on the specific site and your jurisdiction. Accessing information is generally legal; purchasing illegal goods or services is not.
Can I be tracked while using Tor?
Tor encrypts your traffic and routes it through multiple relays, making it difficult to trace. However, your behavior can be correlated across sites if you use the same username or provide personal information. Exit nodes can see unencrypted traffic. Law enforcement can monitor illegal activities. Assume you're not completely anonymous unless you take additional precautions.
Why do onion sites go offline?
Onion sites can go offline due to server maintenance, hosting provider shutdowns, law enforcement action, or voluntary closure. Unlike clearnet sites, onion sites have no central registry, so there's no automatic notification when they disappear. This directory checks uptime regularly, but addresses can change without warning.
Is Tor Browser safe to use?
Tor Browser is maintained by the Tor Project and is generally safe. However, safety depends on how you use it. Maximizing the window, enabling plugins, or visiting untrusted sites can compromise anonymity. Keep Tor Browser updated and follow security best practices.
Can I use a VPN with Tor?
Yes, but understand the tradeoffs. VPN before Tor hides your ISP from Tor but trusts the VPN provider. Tor before VPN is less common and can leak your exit traffic to the VPN. Neither setup is inherently wrong; choose based on your threat model and trust assumptions.
