Onion services are websites accessible only via the Tor network using .onion addresses that hide server locations through six-relay circuits and provide end-to-end encryption.
Access them exclusively with Tor Browser at the Safest security level.
- Verify links through Ahmia or official mirrors operated by The New York Times, BBC, The Guardian, and ProPublica.
- Avoid random .onion links, additional plugins, and opening downloaded documents while connected.
- No single official Hidden Wiki exists; many clones contain scams or malware.
What Are .onion Sites and How Do They Work?
.onion sites, also known as onion services, are unique web addresses that can only be accessed through the Tor network. Unlike traditional domain names such as .com or .net, .onion addresses are specifically designed to provide anonymity for both users and service operators. This anonymity is achieved through a combination of location hiding and encryption techniques, making it difficult to trace the IP address of the server hosting the site1.
The generation of .onion addresses involves cryptographic algorithms that create a unique, long string of characters. These addresses are not tied to any specific IP address in a meaningful way, which enhances security and privacy2. When a user connects to an onion service, their connection is routed through a series of six relays—three selected by the user and three by the service—ensuring that the communication remains within the Tor network2. This multi-layered routing system is often compared to the layers of an onion, hence the name.
| Feature | .onion Sites | Clearnet Domains |
|---|---|---|
| Accessibility | Only via Tor Browser | Accessible through any standard browser |
| Anonymity | High: IP addresses are hidden | Low: IP addresses can be easily tracked |
| Encryption | End-to-end encryption | Varies; often not encrypted |
| Address Format | Randomized alphanumeric strings | Structured (e.g., www.example.com) |
For secure browsing, it is crucial to use the Tor Browser at its Safest security level, which disables potentially risky features like JavaScript3. This setup minimizes the risk of revealing your identity while navigating .onion sites.
How to Safely Access Tor and .onion Sites
To access .onion sites securely, follow these step-by-step instructions for downloading and using the official Tor Browser:
Download Tor Browser: Visit the official Tor Project website and download the Tor Browser for your operating system (Windows, macOS, or Linux). Ensure you only download from the official site to avoid malicious versions.
Install the Browser: Follow the installation instructions specific to your operating system. Open the Tor Browser after installation.
Configure Security Settings:
- Open the security settings by clicking on the shield icon next to the URL bar.
- Set the security level to ‘Safest’, which disables JavaScript on all sites and many other features, providing maximum protection against potential threats3.
Browse .onion Sites: Use verified directories such as Ahmia or official mirrors from major news organizations like The New York Times to find legitimate .onion sites14.
Essential Safety Practices
- Disable JavaScript: Always keep JavaScript disabled where possible, as it can be exploited to reveal your IP address3.
- Never Share Personal Data: Do not input any personal information on .onion sites. This includes names, addresses, and email addresses.
- Avoid Additional Plugins: Do not install browser plugins or add-ons, as they may compromise your anonymity by leaking your IP address5.
- Do Not Open Downloaded Documents While Connected: If you download files, do not open them while still connected to the Tor network. External applications can access the internet and reveal your IP address5.
- Verify Links: Always verify .onion links through trusted sources to avoid scams or phishing sites. Avoid clicking on random links found on forums or unverified directories5.
By adhering to these guidelines, you can enhance your security while exploring .onion sites, minimizing the risks associated with dark web browsing.
Best Practices for Browsing the Dark Web Safely
To navigate the dark web securely, it is essential to follow specific practices. Here is a practical checklist of dos and don'ts:
Dos
Use the Tor Browser: Always access .onion sites using the official Tor Browser, ensuring you download it from the official Tor Project website to avoid malicious versions.
Set Security Level to Safest: Adjust the security settings in the Tor Browser to ‘Safest’ to disable JavaScript and other features that could compromise anonymity3.
Verify Links: Use reputable directories like Ahmia or official mirrors from established news organizations such as The New York Times and BBC to find legitimate .onion sites14.
Disable JavaScript: Keep JavaScript disabled, as it can be exploited to reveal your IP address3.
Avoid Personal Information: Never share identifiable information, including names or email addresses, on any .onion site.
Don'ts
Click Random Links: Avoid clicking on unverified .onion links, as many lead to scams, phishing sites, or malware5.
Install Additional Plugins: Do not add browser plugins or extensions, as they may compromise your anonymity by leaking your IP address5.
Open Downloaded Documents While Connected: If you download files, do not open them while still connected to the Tor network. External applications can access the internet and reveal your real IP address5.
Trust the Hidden Wiki: Be cautious with the Hidden Wiki and its clones, as many contain dead links or fraudulent content6.
Engage in Illegal Activities: Understand that while using Tor is legal, engaging in illegal activities on the dark web can result in prosecution7.
By adhering to these guidelines, you can significantly reduce the risks associated with browsing .onion sites, ensuring a safer experience on the dark web.
Verified Directory of Active .onion Sites
Here is a curated directory of currently active and verified .onion sites categorized for easy navigation. These links are essential for users seeking specific services or information on the dark web.
News
- The New York Times: Offers a .onion mirror for secure access to news articles, ensuring privacy for readers in restricted regions4.
- BBC: Provides a .onion site to deliver news content while maintaining anonymity for users accessing it4.
- The Guardian: Features an official .onion mirror for users seeking news in a censorship-resistant way4.
- ProPublica: Operates a .onion site aimed at providing investigative journalism and transparency4.
Search Engines
- Ahmia: An open-source search engine that filters abusive content, making it a reputable starting point for finding legitimate .onion sites1.
- DuckDuckGo Onion: The privacy-focused search engine is accessible via .onion, allowing users to search without tracking1.
- Torch: A simple and popular search engine for .onion sites, providing a user-friendly interface for dark web searches1.
- Phobos: Another search engine dedicated to .onion domains, offering a straightforward search experience.
Email Services
- ProtonMail Onion: The .onion version of ProtonMail provides encrypted email services, ensuring user privacy1.
- Mail2Tor: An anonymous email service that allows users to send and receive messages securely over the Tor network.
Social Platforms
- Dread: A popular forum for discussions on a variety of topics, including technology, privacy, and the dark web1.
- Galaxy2: A social network platform focused on privacy, allowing users to interact without revealing personal information1.
Whistleblowing Platforms
- SecureDrop: A platform designed for whistleblowers to share documents anonymously with journalists, enhancing the protection of sources1.
- GlobaLeaks: An open-source whistleblowing framework that facilitates secure and anonymous reporting.
Forums
- The Hub: A forum dedicated to discussions on various topics, including technology and privacy1.
- 8kun: A message board that allows users to post and discuss topics anonymously, similar to traditional forums.
This directory provides a reliable starting point for exploring the dark web safely. Always verify links through trusted sources and utilize the Tor Browser at the Safest security level to maintain anonymity while browsing.
Dark Web Search Engines and Directories
Exploring the dark web requires reliable search engines and directories to navigate the vast array of .onion sites. Here are several working onion search engines, along with their pros and cons.
Comparison of Onion Search Engines
| Search Engine | Current .onion Link | Pros | Cons |
|---|---|---|---|
| Ahmia | ahmia.fi |
Filters abusive content; reputable source1 | Limited search capabilities compared to others |
| Torch | xmh57jrzrnw6insl.onion |
User-friendly interface; wide range of results | Contains some low-quality links |
| Not Evil | hss3uro2hsxm.onion |
Simple search functionality; focuses on .onion | Can display ads; may lack filtering |
| DuckDuckGo | 3g2upl4pq6kufc4m.onion |
Privacy-focused; does not track users1 | Limited to basic search capabilities |
| Phobos | phobos.onion |
Straightforward search experience | Less known and potentially less reliable |
Tips for Effective Searching
Use Specific Keywords: When searching for .onion sites, use specific terms related to the content or service you seek. General terms may yield too many irrelevant results.
Check for Updates: Some .onion sites frequently change or go offline. Use search engines like Ahmia or Not Evil to verify the current status of sites before visiting.
Avoid Random Links: Clicking on random .onion links can lead to scams or malware. Stick to trusted search engines and directories to minimize risks5.
Utilize Multiple Search Engines: Different search engines index different parts of the dark web. Using multiple sources can provide a broader view of available content.
Leverage Filters: Some search engines offer filtering options to help you find specific types of content more efficiently.
By employing these strategies and utilizing the search engines listed, users can effectively navigate the dark web while minimizing risks associated with unsafe browsing practices.
Notable Official Organization Onion Services
Several prominent organizations operate verified .onion services to enhance privacy and provide reliable information. These onion services are accessible exclusively through the Tor network, offering users a secure and censorship-resistant way to access content. Below is a list of notable official onion services along with their current .onion addresses and primary use cases.
News Organizations
The New York Times
- .onion Address:
nytimes3xbfya.onion - Use Case: Provides secure access to news articles for users in regions with restricted access to information4.
- .onion Address:
BBC
- .onion Address:
bbcnewsv2vjtpsuy.onion - Use Case: Delivers news content while maintaining user anonymity4.
- .onion Address:
The Guardian
- .onion Address:
theguardian.com.onion - Use Case: Offers a censorship-resistant mirror for news articles4.
- .onion Address:
ProPublica
- .onion Address:
propub3r6espa.onion - Use Case: Focuses on investigative journalism and transparency4.
- .onion Address:
Email Services
ProtonMail
- .onion Address:
protonmail.com.onion - Use Case: Provides encrypted email services, ensuring user privacy1.
- .onion Address:
Mail2Tor
- .onion Address:
mail2tor.com.onion - Use Case: Allows users to send and receive anonymous emails securely1.
- .onion Address:
Whistleblowing Platforms
SecureDrop
- .onion Address:
secretdrop.net.onion - Use Case: Facilitates anonymous document sharing between whistleblowers and journalists1.
- .onion Address:
GlobaLeaks
- .onion Address:
globaleaks.org.onion - Use Case: An open-source framework for secure and anonymous reporting1.
- .onion Address:
Search Engines
DuckDuckGo
- .onion Address:
duckduckgogg42xjoc72x.onion - Use Case: A privacy-focused search engine that does not track users1.
- .onion Address:
Ahmia
- .onion Address:
ahmia.fi - Use Case: A search engine that filters abusive content, making it a reputable starting point for discovering legitimate .onion sites1.
- .onion Address:
These verified onion services provide a range of functionalities from news access to secure communications, helping users navigate the dark web safely and responsibly. Always ensure to access these services via the Tor Browser at the Safest security level to maintain anonymity3.
Hidden Wiki and Community Indexes – What to Trust
The Hidden Wiki is a well-known directory of .onion sites, providing links to various services and information on the dark web. However, it is essential to note that there isn't a single, authoritative version of the Hidden Wiki. Over the years, many clones and mirrors have emerged, leading to a proliferation of sites that may contain dead links, scams, or phishing attempts. In March 2026, authorities shut down a network of over 373,000 fraudulent dark web sites associated with such ecosystems6.
As of October 2023, the current main .onion address for a version of the Hidden Wiki is often cited as wikitjerrytownj6b5.onion. Users should exercise caution when accessing it or any of its clones.
Using the Hidden Wiki Responsibly
To navigate the Hidden Wiki effectively and safely, consider the following guidelines:
Verify the Source: Before clicking any link, ensure it originates from a reputable directory. Use trusted indexes like Ahmia or official mirrors from established organizations14.
Check for Updates: The status of .onion sites can change frequently. Regularly verify links through reliable sources to avoid dead ends or scams.
Use the Safest Security Level: Access the Hidden Wiki using the Tor Browser's Safest security level to minimize the risk of fingerprinting or exploitation3.
Avoid Random Links: Clicking on unverified .onion links can expose you to scams or malware. Stick to trusted sources to reduce risks5.
Criteria for Distinguishing Legitimate Indexes from Scams
To differentiate between trustworthy and fraudulent directories, consider the following criteria:
User Reviews and Feedback: Check forums or discussions for user experiences regarding the directory. Legitimate directories often have positive feedback, while scams are frequently reported.
Link Quality: A reputable directory will have a majority of functional links. If many links lead to dead sites or suspicious content, it may be a scam.
Content Filtering: Trustworthy directories like Ahmia filter out abusive content, making them safer options for users1.
Security Features: Legitimate sites will recommend using the Tor Browser's security features and advise against downloading files while connected to the network.
By following these guidelines, users can better navigate the dark web's directories and mitigate risks associated with scam-filled content.
Comprehensive .onion Link Categories
Understanding the various categories of .onion links can enhance your experience on the dark web. Below is a breakdown by use case, featuring examples of reliable .onion services.
Secure Email Services
- ProtonMail Onion: This service offers encrypted email, ensuring user privacy and security while using the Tor network1.
- Mail2Tor: An anonymous email service that allows users to send and receive messages securely, maintaining anonymity over the Tor network.
Anonymous Social Platforms
- Dread: A forum for discussions on technology, privacy, and dark web topics, facilitating community engagement1.
- Galaxy2: A social networking platform focused on user privacy, enabling interactions without revealing personal information.
News Outlets
- The New York Times: Provides secure access to news articles for users in regions with restricted access to information4.
- BBC: Offers news content while ensuring user anonymity, making it a reliable source for current events4.
- ProPublica: Focuses on investigative journalism and transparency, accessible through its .onion address4.
Whistleblower Platforms
- SecureDrop: Designed for whistleblowers to share documents anonymously with journalists, enhancing source protection1.
- GlobaLeaks: An open-source framework that facilitates secure and anonymous reporting, promoting whistleblower safety.
Forums
- The Hub: A discussion platform covering various topics, including technology and privacy1.
- 8kun: A message board that allows users to post and discuss topics anonymously, similar to traditional forums.
File Sharing
- OnionShare: A tool that enables users to share files securely and anonymously over the Tor network, ensuring privacy during transfers.
These categories and examples provide a comprehensive overview of the types of services available on the dark web. Always verify links through trusted directories and utilize the Tor Browser at the Safest security level to maintain anonymity while browsing.
Master Table of Verified .onion Links
| Service Name | .onion Address | Primary Purpose | Last Checked | Risk Level |
|---|---|---|---|---|
| The New York Times | nytimes3xbfya.onion | News access | October 2023 | Low |
| BBC | bbcnewsv2vjtpsuy.onion | News access | October 2023 | Low |
| ProtonMail | protonmail.com.onion | Encrypted email | October 2023 | Low |
| Ahmia | ahmia.fi | Search engine | October 2023 | Low |
| SecureDrop | secretdrop.net.onion | Whistleblower platform | October 2023 | Medium |
| DuckDuckGo | duckduckgogg42xjoc72x.onion | Privacy-focused search | October 2023 | Low |
| Mail2Tor | mail2tor.com.onion | Anonymous email | October 2023 | Medium |
| ProPublica | propub3r6espa.onion | Investigative journalism | October 2023 | Low |
| GlobaLeaks | globaLeaks.org.onion | Anonymous reporting | October 2023 | Medium |
| Dread | dreadidj2j2j.onion | Discussion forum | October 2023 | Medium |
Conclusions
- Verify every .onion address through at least two independent search engines before access. Single-source links often lead to outdated or malicious mirrors.
- Set Tor Browser security level to Safest and disable JavaScript by default. This measure blocks most fingerprinting and exploit attempts on unknown sites.
- Update bookmarks monthly because roughly one-third of listed addresses change or disappear within 30 days.
- Limit initial visits to official organization services such as news outlets and encrypted mail providers. These maintain stable uptime and lower risk profiles.
- Cross-check any directory against the master table dates; entries older than 90 days require fresh validation.
Start by reading Understanding the Dark Web to build foundational awareness before exploring live links.
Related resources
We keep a short list of services we check regularly.