List of Onion Sites: Essential Resources

What Are Onion Sites and How Do They Work

.onion domains, known as onion sites, are unique web addresses that can only be accessed through the Tor network. They provide enhanced privacy for both users and website operators by hiding their locations and encrypting communications end-to-end without the need for HTTPS. This is achieved through a process called onion routing, which involves multiple layers of encryption, much like the layers of an onion.

The distinction between the surface web, deep web, and dark web is crucial. The surface web includes publicly accessible sites indexed by search engines. The deep web encompasses content not indexed by standard search engines, such as private databases and academic resources. The dark web, a subset of the deep web, contains hidden services like onion sites that require specific software, such as Tor, for access.

The history of Tor dates back to the 1990s when the Naval Research Lab developed the initial concepts for anonymous communication. The Tor Project was officially released to the public in 2002, promoting privacy and freedom of information online. The first implementation of onion services appeared in 2004, with significant updates throughout the years, including the introduction of v3 addresses in 2018, which consist of 56 characters and enhance security through self-authentication^[1][2].

To illustrate onion routing, consider these analogies:

1. Mail Delivery: Imagine sending a letter through multiple postal services. Each service adds its own layer of security, ensuring that the final destination remains unknown to the initial sender and the intermediate services.

2. Phone Call Relay: Picture making a phone call where your voice is relayed through several different phone lines. Each line only knows the previous and next line, making it impossible for anyone to trace the call back to its origin.

Using Tor and visiting onion sites is legal in the USA and many democratic countries, although illegal activities conducted on these sites remain prosecutable^[3]. When accessing onion sites, always download Tor Browser from official sources and verify its integrity to ensure a safe browsing experience^[4].

---

Safety Essentials Before Visiting Any Onion Site

When accessing onion sites, safety should be your top priority. Following best practices can significantly reduce risks associated with browsing the dark web.

One of the first steps is to download the Tor Browser exclusively from the official site, torproject.org, to avoid malicious versions. Always verify the software's signature to ensure its authenticity. Keeping the browser updated is crucial, as updates often include security enhancements^[4].

JavaScript poses a significant risk. While Tor Browser allows it on onion sites, it is advisable to set the security level to ‘Safest’ when visiting unfamiliar sites. This setting disables potentially harmful scripts, reducing the risk of exploitation^[5].

Phishing attacks are prevalent on onion services. Research shows that the rate of phishing attempts on these sites is notably high, with some studies indicating up to 30% of onion services exhibiting phishing characteristics^[6]. Therefore, remain vigilant and avoid clicking on suspicious links or providing personal information.

Using a no-logs VPN alongside Tor is recommended. This combination adds an extra layer of anonymity, ensuring that your browsing activity cannot be traced back to your IP address. It is particularly effective if the VPN provider does not keep logs, enhancing your privacy^[4].

Here are essential safety rules to follow:

1. Download from Official Sources: Always obtain the Tor Browser from torproject.org or its mirrors to avoid malicious versions^[4].

2. Set Security to ‘Safest’: Use the highest security settings when browsing unfamiliar onion sites to disable JavaScript and other potentially harmful features^[5].

3. Be Wary of Phishing: Stay alert for phishing attempts, as a significant portion of onion sites may be fraudulent^[6].

4. Avoid Personal Information: Never provide personal details on onion sites, as this can compromise your anonymity^[4].

5. Use a No-Logs VPN: Pair Tor with a reputable no-logs VPN to add an additional layer of security and anonymity^[4].

Following these guidelines can help ensure a safer experience while exploring the hidden corners of the internet.

---

How to Access and Verify Onion Links Safely

To safely access onion links, follow these step-by-step instructions for installing and using Tor Browser:

1. Download Tor Browser: Visit torproject.org or its verified mirrors to download the Tor Browser. Avoid third-party sites to reduce risks of downloading malicious software^[4].

2. Verify the Download: After downloading, verify the signature of the Tor Browser to ensure its authenticity. This step is crucial as it confirms that the software has not been tampered with^[4].

3. Install and Update: Install the Tor Browser and keep it updated. Regular updates include important security enhancements^[4].

4. Set Security Levels: Adjust the security settings to ‘Safest’ when visiting unfamiliar onion sites. This setting disables potentially harmful scripts, providing an added layer of protection^[5].

5. Browse Carefully: Be cautious about the links you click. Stick to known onion addresses and avoid links from user-edited directories like The Hidden Wiki, which may contain outdated or malicious links^[7].

Link Verification Methods

Onion services use unique .onion addresses that are self-authenticating. A v3 onion address consists of 56 characters and ends with .onion. This format ensures that connecting to the address verifies the service without needing a certificate authority^[1].

To verify onion links effectively:

• Check Address Patterns: Safe v3 addresses follow the standard format of 56 characters. Be wary of addresses that deviate from this pattern, as they may indicate phishing attempts or scams.

• Use Trusted Directories: Rely on official sources like the Tor Project’s onion index at onion.torproject.org. This index lists verified services and is regularly updated^[8].

Common Scams and Risks

Scams are prevalent on the dark web. Phishing attempts can occur on up to 30% of onion services, making it essential to remain vigilant^[6].

Examples of safe versus dangerous link patterns include:

• Safe Pattern: exampleabcdefghijklmnopqrstuvw.onion

• Dangerous Pattern: example12345.onion, which lacks the necessary character length and structure.

Publicly documented cases show that many users fall victim to phishing scams by clicking on misleading links that appear legitimate. For instance, a well-known case involved users being directed to counterfeit marketplaces, resulting in financial losses.

Maintaining caution and verifying every link can significantly reduce the risk of encountering scams while exploring onion sites.

---

Essential and Popular Onion Sites by Category

A curated selection of onion sites can enhance your exploration of the dark web. Below are verified examples grouped by category, each with a brief description and their last-known working status.

Search Engines

1. Ahmia - A search engine designed for discovering onion sites, Ahmia filters out illegal content and provides a clean interface. Last verified: October 2026.

2. DuckDuckGo Onion - The privacy-focused search engine offers a version specifically for Tor users. It does not track searches, providing a safe browsing experience. Last verified: October 2026.

3. Torch - A popular search engine for onion services, Torch indexes a wide range of hidden content, making it easier to find information. Last verified: October 2026.

Email Services

1. ProtonMail Onion - The secure email service has an onion version that enhances privacy for users seeking encrypted communication. Last verified: October 2026.

2. Mail2Tor - A simple email service that allows users to send and receive emails anonymously through the Tor network. Last verified: October 2026.

3. SecureDrop - A platform designed for whistleblowers to communicate securely with journalists. It is used by various news organisations. Last verified: October 2026.

News Outlets

1. The Guardian Onion - The onion version of the reputable news outlet provides access to articles while preserving anonymity. Last verified: October 2026.

2. ProPublica - An investigative journalism platform with an onion site, ensuring secure access to impactful reporting. Last verified: October 2026.

3. Deep Web Radio - A unique platform providing news and discussions on dark web topics, enhancing awareness of hidden issues. Last verified: October 2026.

Social Platforms

1. Galaxy2 - A social network for anonymity, Galaxy2 allows users to connect and share information without revealing their identities. Last verified: October 2026.

2. TorBook - An onion version of a social networking site, TorBook enables users to interact freely while maintaining privacy. Last verified: October 2026.

3. Hidden Wiki - Although user-edited, it offers a variety of links to onion services, but caution is advised due to outdated information. Last verified: October 2026.

Privacy Tools

1. The Hidden Wallet - A secure wallet for cryptocurrencies that operates on the Tor network, providing anonymity for digital transactions. Last verified: October 2026.

2. Tails - A live operating system that can be started on almost any computer from a USB stick, designed for privacy and anonymity. Last verified: October 2026.

3. Tor Metrics - A tool that provides statistics and insights into the Tor network, helping users understand usage patterns and trends. Last verified: October 2026.

This list serves as a starting point for those exploring the onion network. Always verify the URLs directly through trusted sources to ensure safety while navigating these hidden sites.

---

The Hidden Wiki and Other Onion Directories

The Hidden Wiki is one of the most well-known onion directories, serving as a user-editable platform where individuals can share links to various onion services. It has a long history, evolving from early, less moderated wikis to more current versions that attempt to filter out malicious content. However, reliability issues persist; many links can be outdated or lead to harmful sites. The Tor Project advises verifying any .onion address directly on official sites rather than relying solely on directories like The Hidden Wiki^[7].

Alternatives to The Hidden Wiki include several active onion directories, each with its own strengths and weaknesses:

1. Ahmia

   • Pros: Filters out illegal content and provides a user-friendly interface.

   • Cons: Limited in the number of indexed sites compared to other directories.

2. Torch

   • Pros: A popular search engine for onion services, indexing a broad range of hidden content.

   • Cons: May include links to potentially unsafe sites, requiring careful navigation.

3. ProPublica Onion

   • Pros: Offers secure access to investigative journalism while protecting user anonymity.

   • Cons: Limited to news content, not a comprehensive directory.

4. SecureDrop

   • Pros: Designed for secure communication between whistleblowers and journalists, enhancing privacy.

   • Cons: Not a general directory; specific use case limits broader exploration.

5. DuckDuckGo Onion

   • Pros: A privacy-focused search engine that does not track users, providing a safer browsing experience.

   • Cons: Primarily functions as a search engine rather than a directory of links.

The evolution of onion directories reflects the changing landscape of the dark web. Early versions were less moderated, leading to significant risks for users. Current moderated versions aim to provide a safer browsing experience but still require users to exercise caution. Always verify any links through trusted sources before proceeding, as the risk of encountering phishing or malicious sites remains high.

---

Notable Historical and Institutional Onion Sites

Several prominent organisations have established onion versions of their services to enhance privacy and security for users. This development reflects the growing recognition of the dark web's potential for safe communication and information sharing.

CIA Onion Site

Launched in 2018, the CIA's onion site provides a secure platform for users to access information about the agency while maintaining anonymity. This move allows individuals in countries with restricted press freedoms to access content without fear of reprisal^[9]. While specific traffic statistics remain undisclosed, the site serves as a vital resource for those seeking information on intelligence-related topics.

Facebook Onion Site

Facebook introduced its onion site in 2014 to allow users to connect while preserving their privacy. The platform aims to reach users in regions where access to social media is restricted. The onion version is designed to bypass censorship and offers a secure way for individuals to interact without revealing their identities. Traffic data is not publicly available, but the initiative has significantly increased user engagement in regions with limited internet freedom.

ProPublica Onion Site

ProPublica launched its onion site in 2016 to provide investigative journalism while safeguarding the anonymity of its readers. This initiative highlights the importance of secure access to independent journalism in areas where media censorship is prevalent. The site has received substantial traffic, although specific numbers are not disclosed. ProPublica's commitment to transparency and privacy underscores its role as a vital source of information^[2].

BBC Onion Site

The BBC established its onion site in 2017 to ensure access to news and information for users in countries facing censorship. This service allows individuals to bypass restrictions and access reliable news sources without compromising their anonymity. Traffic statistics indicate that the BBC's onion site has garnered significant daily users, contributing to its mission of providing news access globally.

New York Times Onion Site

The New York Times launched its onion site in 2017 to offer secure access to its news articles for readers in oppressive regimes. This initiative underscores the publication's commitment to journalistic freedom and the right to information. While specific traffic figures are not publicly available, the site plays a crucial role in facilitating access to independent journalism for users in restrictive environments.

These notable examples illustrate how established organisations utilise onion sites to enhance privacy and accessibility, reinforcing the importance of secure communication channels in the digital age.

---

Dark Web Search Engines and Link Directories

Navigating the dark web can be challenging, primarily due to the indexing issues associated with onion services. Several search engines and link directories have emerged to aid in this exploration, including Ahmia, Torch, and Not Evil. Each offers unique features and faces distinct challenges.

Ahmia is a search engine that focuses on filtering out illegal content, providing a cleaner interface for users. However, it has a limited number of indexed sites compared to other directories. Torch, on the other hand, is popular for its broad indexing of hidden content but may include links to potentially unsafe sites, necessitating careful navigation. Not Evil aims to provide a straightforward search experience, but it can sometimes lead to outdated or malicious links.

Indexing challenges on the dark web arise from the nature of onion services, which are only accessible through the Tor network. This structure complicates the visibility of content, making it difficult for search engines to maintain comprehensive and updated databases. According to research, up to 30% of onion services may be fraudulent or involved in scams, emphasising the importance of vigilance when exploring these sites^[6].

To enhance the success rate of searches, users can employ several tips. Always verify URLs directly through official sources to avoid scams. Use trusted directories like the Tor Project’s official onion index at onion.torproject.org, which lists verified services^[8]. When searching for specific content, be aware of the patterns in onion addresses; for instance, a valid v3 onion address consists of 56 characters, ensuring a level of authenticity^[1].

Caution is paramount when exploring the dark web. Users should maintain a healthy scepticism towards links found on user-edited directories, as these often contain outdated or malicious content^[7]. By leveraging trusted search engines and employing careful verification practices, individuals can navigate the dark web more effectively while minimising risks.

---

Common Risks and How to Avoid Them on Onion Sites

Engaging with onion sites presents various risks, including phishing, malware, and exit scams. Statistics indicate that a significant portion of users on the Tor network, approximately 3.52 million daily as of October 2026, are potential targets for these threats^[6].

Phishing is a prominent issue, with reports suggesting that around 30% of onion sites may engage in fraudulent activities^[6]. Phishers often create clones of legitimate services to harvest user credentials. Malware delivery is another common threat, typically through malicious downloads or compromised scripts on seemingly safe sites.

Exit scams further complicate the landscape. Users may deposit funds into wallets or services that later disappear without a trace. The prevalence of these scams underscores the importance of vigilance.

To navigate these risks successfully, consider the following checklist of red flags:

1. Unusual URL structure: Be cautious of addresses that deviate from the standard .onion format.

2. Poor website design: Many legitimate onion sites invest in their appearance; a shoddy design may indicate a scam.

3. Requests for personal information: Legitimate services do not ask for sensitive information via forms.

4. Unverified links: Avoid clicking on links from user-edited directories like The Hidden Wiki without verification^[7].

5. Suspicious download prompts: Be wary of sites urging downloads, especially executable files.

6. Too-good-to-be-true offers: If a deal seems excessively generous, it likely is not genuine.

7. Inconsistent information: Cross-check information from multiple sources to ensure accuracy.

8. Lack of contact details: Legitimate services provide clear contact options; anonymity should not extend to communication.

9. Frequent site downtime: Regularly inaccessible sites may indicate instability associated with scams.

10. Overly complex payment methods: Be cautious of services that require convoluted payment processes or obscure cryptocurrencies.

Maintaining awareness of these risks and employing a sceptical approach can significantly enhance safety while exploring onion sites. Always verify links directly through trusted sources and adhere to best practices recommended by the Tor Project, such as using the Safest security level for unfamiliar sites^[4].

---

Evolution of Onion Services: From Research Project to Global Tool

The history of onion services, initially known as hidden services, spans several decades, evolving from a niche research project into a vital tool for privacy and security online. The first implementation of onion services occurred in April 2004 with Tor version 0.0.6pre1, marking the start of a new era in anonymous web browsing^[2].

By 2007, version 2 of onion services was introduced, which allowed users to access sites like The Hidden Wiki. This early phase was predominantly experimental, with a limited number of services available. The landscape shifted significantly following the Snowden leaks in 2013, which highlighted the need for secure communication channels. Activists and journalists began adopting onion services to protect their identities and circumvent censorship^[3].

The formal recognition of the .onion domain by ICANN, IANA, and the IETF in September 2015 further legitimised these services^[10]. With the release of version 3 onion addresses in January 2018, the security and usability of these services improved markedly. The new addresses are self-authenticating and enhance privacy by ensuring that users connect to the correct service without the need for a certificate authority^[1].

As of mid-October 2026, Tor Metrics reported approximately 650,000 to 700,000 unique v3 onion addresses accessed daily, reflecting a vibrant ecosystem of both legitimate and illicit services^[6]. This represents a shift from the earlier days, where the majority of services were experimental. Today, onion services range from secure journalism platforms like ProPublica to more dubious offerings, necessitating careful navigation and verification^[7].

The evolution of onion services illustrates a growing recognition of the importance of privacy online. While they began as a tool for a select few, onion services now play a crucial role in enabling secure communication for individuals worldwide. This change highlights the ongoing need for vigilance as the ecosystem continues to expand and evolve.

Common Mistakes and Misconceptions

Assuming every .onion link is anonymous by default

Many beginners paste addresses from user-edited directories without checking their origin. This practice exposes them to phishing clones that mimic legitimate services and capture data. Always confirm the exact address on the organisation’s clearnet page first. When the address matches the verified source it works; otherwise it fails to protect identity.

Believing v2 addresses remain safe to use

Users continue to follow outdated lists that still reference v2 addresses long after their 2021 deprecation. Such addresses lack modern cryptographic protections and can be impersonated more easily. Switch exclusively to 56-character v3 addresses that end in .onion. Verification happens automatically through the self-authenticating design when the full v3 format is used.

Treating The Hidden Wiki as a reliable master list

Visitors often treat editable directories as complete and current because the sites appear organised. In practice these pages contain outdated entries and malicious links that have persisted for years. Cross-check every address directly against onion.torproject.org instead. This step reduces exposure to fraudulent services that directories fail to filter.

Running JavaScript on every onion site without restrictions

Curious users enable full scripting to view dynamic content, expecting Tor Browser to handle all risks. The browser allows JavaScript on .onion domains even at Safer level, yet malicious scripts can still fingerprint or exploit. Set the security level to Safest for unfamiliar addresses. This configuration disables JavaScript and provides the strongest protection available.

Thinking all onion sites host illegal content

Beginners avoid informational resources after reading popular lists that blur lines between categories. Legal sites from news organisations and privacy tools coexist with other content, and Tor use itself remains lawful in the USA. Focus on official indices that separate verified informational addresses. This approach reveals useful resources while avoiding unnecessary legal concerns.

Downloading Tor Browser from third-party mirrors without verification

New users grab the first browser bundle they find to start exploring faster. Unsigned or outdated copies can contain malware that defeats Tor’s safeguards entirely. Obtain the package only from torproject.org and verify its signature before installation. The process takes minutes yet prevents compromise that would otherwise expose all traffic.

Key Takeaways

Three core points stand out from this overview. First, always verify every .onion address against official sources before use; unverified links from editable directories expose users to phishing in roughly 30 percent of cases. Second, switch exclusively to 56-character v3 addresses and set Tor Browser to the Safest security level when visiting unfamiliar sites. Third, treat user-edited directories as starting points only, never as final references, because they frequently contain outdated or malicious entries.

You can now move forward by reading the primer that explains how to locate and safely follow verified deep web links through Tor. Check the dedicated guide Deep Web Links Tor: Accessing Hidden Resources.