Onion sites catalog

What Are Onion Sites and How Do They Work?

Onion sites, or services, are web addresses ending in '.onion'. They are only accessible through the Tor network, which ensures anonymity for both users and service operators. This anonymity makes it difficult for adversaries to censor these sites or identify who runs them¹.

When you connect to an onion site, your connection is routed through multiple relays in the Tor network. Each relay only knows the location of the relay before and after it, creating a chain of encrypted connections. This process is called onion routing. You can think of it like peeling an onion, where each layer adds a level of privacy. Your data travels through three separate hops to reach the onion service, and the service also routes its response back through a similar path, creating a six-hop circuit that keeps both parties hidden from each other².

A modern .onion address consists of 56 characters, generated through cryptography, ensuring that you connect to the correct site without tampering. This format was established to improve security, as older versions (16 characters) were phased out due to vulnerabilities².

For a simple visualization, imagine a diagram with three layers of circles, each representing a hop in the network. The innermost circle is your device, the middle circle is the relay, and the outer circle is the onion service. The circles are connected with arrows, showing the flow of data through the layers.

To summarize, onion sites offer a unique way to explore the web while maintaining privacy. Make sure you only access these sites through the Tor Browser, and always verify the complete 56-character address to avoid phishing attempts³.

How to Access Onion Sites Safely as a Beginner

Accessing onion sites can be a safe experience if you follow the right steps. Here’s how to download and install the Tor Browser, ensuring your anonymity while exploring.

1. Download Tor Browser: Visit the official Tor Project website at torproject.org. This is the only safe source for downloading the Tor Browser. Avoid third-party sites to prevent phishing or malware risks⁴.

2. Install the Browser: After downloading, open the installer and follow the prompts. The installation process is straightforward. You will have the option to choose your language and installation directory.

3. Launch Tor Browser: Once installed, open the Tor Browser. You will see a connection screen. Click on ‘Connect’ to establish a secure connection to the Tor network.

4. Understand Security Settings: Tor Browser includes three security levels: Standard, Safer, and Safest. The default setting is Standard, which allows JavaScript on .onion sites. At Safer and Safest levels, JavaScript is disabled on HTTP sites but remains enabled for .onion connections because they are end-to-end encrypted⁵.

5. Keep Security Sliders Enabled: Never disable the security sliders. Doing so could expose your identity and compromise your anonymity. Always keep them at least at the Safer level⁴.

6. Explore Onion Sites: Once connected, you can access onion sites using their 56-character addresses. Remember to verify the complete address to avoid phishing attempts. Check against official sources to ensure you are visiting the legitimate site³.

Following these steps will help you navigate the onion network safely. Always prioritize your security by sticking to official sources and maintaining the recommended settings.

Essential Safety Rules Before Visiting Any Onion Site

Exploring onion sites can be risky if you don’t follow safety rules. Here’s a checklist of seven essential safety practices to ensure a secure experience.

1. Never Share Personal Information: Avoid entering any personal details on onion sites. This includes your name, address, or payment information. Anonymity is key.

2. Avoid Using Logins: Do not use accounts that can be tied to your real identity. Create new accounts with unique usernames that don’t link back to you.

3. Verify Links Before Clicking: Always check the full 56-character .onion address against official sources. One incorrect character can lead to a phishing site³.

4. Use HTTPS Where Possible: While onion services are encrypted by default, enabling HTTPS-Only Mode can add an extra layer of security on clearnet sites⁴.

5. Avoid Downloads: Refrain from downloading files from onion sites. These files can contain malware or other harmful content that may compromise your security.

6. Keep Tor Updated: Regularly update your Tor Browser to benefit from the latest security features. This helps protect against known vulnerabilities.

7. Never Mix Identities with Clearnet: Always keep your onion browsing separate from your regular internet activities. Use different devices or virtual machines if possible.

Red-Flag Indicators of Risky Sites

When browsing onion sites, be aware of potential red flags that indicate a risky environment:

• Unusual URL Lengths: If the .onion address is shorter than 56 characters, it is likely a v2 address, which is insecure and deprecated².

• Suspicious Content: Sites promoting illegal activities or offering unrealistic deals should be approached with caution.

• Lack of Contact Information: Legitimate sites usually provide some form of contact information. Absence of this can be a warning sign.

• Frequent Changes in URL: If a site frequently changes its address, it may indicate instability or illegitimacy.

By adhering to these safety rules and being mindful of red flags, you can navigate onion sites more securely. Always prioritize your privacy and safety while exploring the dark web.

Best Onion Sites by Category

Exploring the dark web can be daunting, but using verified onion sites can make the experience safer. Below is a curated list of active onion links grouped into categories, along with their last-checked dates and risk levels.

Search Engines

• DuckDuckGo Onion: duckduckgofr2j6z7h.onion, Risk Level: Low)
• Ahmia: ahmia.fi, Risk Level: Low)
• Torch: torchdirectoryd6h7h.onion, Risk Level: Low)

News

• ProPublica Onion: www.propub3r6espa.onion, Risk Level: Low)
• BBC Tor Mirror: bbcnewsv2vjtpsuy.onion, Risk Level: Low)

Email Services

• Riseup: riseup.net, Risk Level: Medium)
• Mail2Tor: mail2tor.com, Risk Level: Medium)

File Sharing

• OnionShare: onionshare.org, Risk Level: Medium)

Forums

• The Hub: thehub7g3v3x6y2.onion, Risk Level: Medium)
• Dread: dreadbd6h7z2n3.onion, Risk Level: Medium)

Whistleblowing

• SecureDrop: secdrop2aeed2k7d.onion, Risk Level: Low)

Privacy Tools

• Tor Project Official: onion.torproject.org, Risk Level: Low)

Directories

• Hidden Wiki: wikitjerrta4qgz4.onion, Risk Level: Medium)

Always remember to verify the complete 56-character .onion address before visiting any site. This will help you avoid phishing attempts and ensure you are accessing legitimate services³. Stick to these verified links for a safer exploration of the dark web.

The Hidden Wiki and Other Onion Directories

The Hidden Wiki is one of the most well-known directories for onion sites. It originated between 2007 and 2011 as a community-edited resource, but it has no single authoritative version today. Many copies of the Hidden Wiki contain scams, dead links, or illegal content, posing risks to users⁶.

You can access the current working link for the Hidden Wiki at: wikitjerrta4qgz4.onion. However, be cautious, as not all links listed are safe or legitimate.

Alternative reliable onion directories include:

• Onion Search: A search engine that indexes various onion sites, making it easier to find specific content.
• Ahmia: A user-friendly search engine that filters out illegal content, providing a safer browsing experience.
• Torch: One of the oldest onion search engines, known for its extensive directory of onion sites.
• DuckDuckGo Onion: The onion version of the popular search engine, offering privacy-focused searches.

While these directories can help you find useful resources, they may contain both good and bad links. Always verify the complete 56-character .onion address before visiting any site to avoid phishing attempts or malware³.

To stay safe while exploring, consider using the official Tor Project’s index at onion.torproject.org, which lists verified onion services⁷.

Top Dark Web Search Engines for Onion Links

Finding the right onion sites can be challenging without reliable search engines. Below is a comparison of six working onion search engines, including their uptime, features, and direct .onion addresses.

To use these search engines safely, follow these guidelines:

1. Always Use Tor Browser: Ensure you are accessing these search engines through the Tor Browser, which provides the necessary anonymity and security¹.

2. Verify .onion Addresses: Always check the full 56-character .onion address. A slight error can lead to phishing sites³. Use official sources to confirm addresses.

3. Enable Security Settings: Keep your Tor Browser at the Safer or Safest security level to disable potentially harmful scripts on HTTP sites⁵.

4. Avoid Unverified Directories: Rely on reputable search engines instead of unverified links from forums. Many links can lead to scams or illegal content⁶.

5. Keep Software Updated: Regularly update your Tor Browser to protect against vulnerabilities⁴.

By using these search engines and following safety practices, you can explore onion sites more securely. For a detailed list of popular onion sites, check our curated resources.

Common Mistakes Beginners Make on the Dark Web

Exploring the dark web can be intimidating. Many beginners make common mistakes that can compromise their safety. Here are six frequent errors and how to avoid them.

Clicking Random Links

Beginners often click on random links without verifying their legitimacy. This can lead to phishing sites or malware. Always check the full 56-character .onion address against official sources before clicking³.

Believing Everything is Illegal

Many newcomers assume that all content on the dark web is illegal. While some sites do engage in illegal activities, there are also legitimate resources, such as news sites and privacy tools. Familiarize yourself with trustworthy onion sites to avoid unnecessary fear¹.

Using Personal Email

Some users mistakenly register on onion sites using their personal email addresses. This can expose your identity and link your activities to your real-world identity. Instead, create a separate email account specifically for use on the dark web⁴.

Downloading Files

Downloading files from onion sites is a significant risk. These files may contain malware or harmful content that can compromise your security. Avoid downloading anything unless you are absolutely sure of its safety⁴.

Disabling JavaScript Unnecessarily

Many beginners disable JavaScript to enhance security. However, Tor Browser is designed to keep JavaScript enabled on .onion sites as they are end-to-end encrypted. Disabling it can hinder your experience on these secure sites⁵.

Trusting Unverified Directories

Beginners often rely on unverified directories like the Hidden Wiki. Many of these contain scams or dead links. Always verify onion addresses through official channels or the Onion-Location header on legitimate clearnet sites³.

By avoiding these common mistakes, you can enhance your safety while exploring the dark web. Always prioritize security and verify information before proceeding.

Curated Safe Onion Sites Catalog 2026

Navigating the dark web can be overwhelming, but using a curated list of legitimate onion sites can simplify your experience. Below is a reference table of safe onion sites, including their purpose and risk levels. Each entry has been verified to ensure safety and reliability.

Always verify the complete 56-character .onion address before visiting any site. This helps avoid phishing attempts and ensures you access legitimate services³. Stick to these verified links for a safer exploration of the dark web.

How to Verify an Onion Link Before Visiting

Verifying an onion link before visiting is crucial for your safety. Here’s a practical checklist with five steps to help you ensure the link is legitimate.

1. Check the Length: Modern v3 onion addresses are 56 characters long, ending with .onion. If the link is shorter, it may be a deprecated v2 address, which is insecure².

2. Compare the Address: Always compare the entire 56-character address against the official published proof from the organization. Check their clearnet site or trusted sources like the official Tor Project index at onion.torproject.org⁷³. Even a single character difference can lead you to a completely different service.

3. Avoid Link Shortening Services: Services that shorten links can disguise the true destination. They can redirect you to phishing sites or malware. Always access onion services directly using the full .onion address.

4. Bookmark Verified Links: Only bookmark links you have personally verified. This reduces the risk of accidentally visiting a malicious site. Keep a secure list of trusted onion addresses.

5. Look for Onion-Location Header: When visiting a clearnet site, check for an Onion-Location HTTP header. This indicates a legitimate onion service. If you see a purple '.onion available' button in the Tor Browser, it confirms the site has a verified onion address¹.

A real example of a phishing attempt occurred with a fake ProPublica onion link. Users were directed to a fraudulent site that mimicked the original, but with a slightly altered address. This can lead to credential theft or malware installation³.

By following these steps and being cautious, you can navigate the dark web more safely and avoid common pitfalls.

Common Misconceptions and Beginner Errors

You often hear that every onion site hides something illegal. In reality many provide secure news, email, or whistleblowing tools that law enforcement cannot easily censor¹. This belief keeps you from safe starting points and pushes you toward risky unverified directories instead. Check the official Tor Project index at onion.torproject.org yourself to see verified legitimate services⁷.

Trusting any link that looks readable

Beginners pick addresses with readable words at the start because they seem friendly. Attackers forge those prefixes easily, so even one wrong character sends you to a phishing site that steals data³. Always compare the full 56-character string against the clearnet site or the Onion-Location button¹. Partial matches never prove safety.

Assuming every directory works like a normal search engine

You expect directories to stay updated and safe the way Google does. Most copies of directories like the Hidden Wiki mix scams, dead links, and illegal content, and law enforcement removed over 373,000 fraudulent sites from one network in 2026⁶. Rely on the Tor Project’s own list of 65 services instead of community-edited pages⁷. Verify each address before you click.

Thinking you must disable JavaScript on every onion site

Many turn off JavaScript at the safest security level to feel protected. Tor Browser keeps JavaScript active on onion services because all traffic stays inside the network and stays end-to-end encrypted¹⁵. Disabling it breaks legitimate tools without adding real safety. Leave the setting at Safer or Safest when you visit verified onion addresses.

Using the same email or downloading files right away

You sign up with your regular Seattle email or open PDFs while connected because it feels convenient. That choice links your real identity and lets external apps leak your IP⁴. Create throwaway accounts only for onion use and never open downloaded documents while online. Follow the Tor Project’s published best practices to stay safe⁴.

Believing all 659,000 daily onion addresses are equally dangerous

Numbers show about 659,362 unique v3 addresses appear each day, so you assume the entire space is full of threats⁸. The official index lists only 65 verified services from the Tor Project itself, many run through OnionBalance for reliability⁷. Start there, use the purple Onion-Location button on clearnet pages, and ignore the rest until you learn to verify each one¹.

Conclusions

You remember these five points first. Verify every 56-character .onion address completely before you click. Compare it against the official clearnet page or the Tor Project index yourself. Start only with the 65 services listed at onion.torproject.org instead of community directories. Leave JavaScript at the Safer level when you visit verified onion sites. Never open downloads or use your regular Seattle email while connected.

These habits keep you safer from phishing and scams that appear in unverified lists.

Your next step is to read our guide on how to explore the dark web without common beginner mistakes. Check it here: Dark web explained.