List of Onion Links: Finding and Verifying .onion Addresses

Onion links are .onion addresses that route traffic through multiple Tor relays, encrypting data at each layer. Each .onion domain is derived from a cryptographic key pair generated by the hidden service operator. When you visit a .onion address, your connection is anonymized because Tor conceals both your IP address and the server's location. The address itself—typically a long string of characters followed by .onion—is generated from the service's public key. Version 3 addresses (v3) are 56 characters long and use stronger cryptography than older v2 addresses. The Tor network maintains these addresses in a distributed directory, allowing users to connect without exposing their identity or location to the service operator or network observers.

Legitimate onion links are typically discovered through official project documentation, PGP-signed announcements, or established community resources. Many organizations publish their .onion mirrors on their clearnet websites, often in a security or privacy section. Tor project directories and maintained lists aggregate verified addresses by category—news, communication, information archives, and forums. When searching for onion links, cross-reference multiple sources to confirm authenticity. Official Tor project documentation and security advisories are reliable starting points. Community forums and Reddit discussions sometimes share links, but always verify these against official sources. Never rely on a single source or unverified list. Check for PGP signatures on announcements and compare addresses across multiple trusted references before accessing a new .onion site.

Phishing clones are fraudulent .onion sites designed to mimic legitimate services and steal credentials or personal information. Genuine mirrors are official copies of clearnet websites hosted on .onion addresses. To verify authenticity: check the official clearnet website for a link to the .onion mirror, confirm the address matches exactly (phishing clones use similar but slightly altered addresses), and look for PGP signatures or security notices on the site. Legitimate organizations publish their .onion addresses prominently and update them regularly. Examine the site's SSL certificate information and security headers. If a site requests unusual personal information or asks you to log in immediately, verify the address again. Compare the .onion address character-by-character with the official source. Bookmark verified addresses to avoid typos that could lead to clones. Be cautious of addresses shared in unverified forums or private messages.

Onion links are typically organized into categories based on their function: news and journalism outlets, privacy-focused communication platforms, information archives and libraries, community forums and discussion boards, and technical resources. News organizations maintain .onion mirrors to ensure journalists and readers in censored regions can access reporting. Communication platforms offer encrypted messaging and email services. Archives preserve historical documents, research, and information resistant to censorship. Forums facilitate discussion on privacy, technology, and security topics. Technical resources include documentation for Tor, cryptography, and operational security. Each category serves different user needs. Some links point to services that operate exclusively on Tor, while others are mirrors of clearnet sites. Understanding the category helps users identify which addresses are relevant to their needs and assess the legitimacy of a site based on its stated purpose.

PGP signatures provide cryptographic proof that an onion address announcement comes from the legitimate service operator. When an organization publishes a new .onion address or updates an existing one, they sign the announcement with their private key. You can verify the signature using their public key, which is published on their official clearnet website or in established key directories. To verify: obtain the organization's public key from their official source, download the signed announcement, and use a PGP tool to check the signature. If the signature is valid, the announcement has not been tampered with and originates from the key holder. Invalid or missing signatures indicate the announcement may be fraudulent. Many legitimate organizations publish PGP fingerprints on their clearnet sites for this purpose. Keeping a local copy of trusted public keys reduces the risk of downloading a compromised key. This verification method is more reliable than visual inspection alone and protects against sophisticated phishing attempts.

Users often compromise their anonymity through preventable errors when accessing onion sites. Maximizing the Tor browser window can reveal your screen resolution to websites, enabling fingerprinting. Disabling JavaScript in the browser settings prevents many tracking scripts. Avoid opening multiple tabs to different .onion sites simultaneously, as this increases the attack surface. Never copy and paste .onion addresses into search engines or clearnet browsers. Disable plugins and extensions that may bypass Tor. Do not enable plugins like Flash or Java, which can leak your real IP address. Avoid logging into personal accounts on .onion sites unless necessary. Do not resize or customize the browser window excessively. Keep the Tor browser updated to receive security patches. Do not assume that accessing a .onion site makes all your activity anonymous—your behavior and typing patterns can still be tracked by the site operator. Use additional operational security measures like VPNs only if you understand the implications, as they can sometimes reduce anonymity.

Tor, VPN, and I2P are three distinct technologies for anonymity and privacy, each with different strengths. Tor routes traffic through multiple relays operated by volunteers, providing strong anonymity but slower speeds. The Tor network is specifically designed for accessing .onion sites and is the only way to reach them directly. VPNs encrypt traffic through a single provider's server, offering privacy from your ISP but not anonymity from the VPN provider. VPNs are faster than Tor but do not access .onion addresses natively. I2P is a decentralized network similar to Tor but optimized for internal communication and file sharing rather than general web browsing. I2P uses smaller networks and different routing protocols. For accessing onion links, Tor is the appropriate choice because .onion addresses are designed for the Tor network. Using a VPN with Tor can sometimes reduce anonymity rather than enhance it. I2P cannot access .onion sites. Each technology serves different purposes; choose based on your specific needs and threat model.