Onion sites are websites that only work through the Tor Browser. Instead of a normal https:// address, they use a scrambled .onion address that hides the site’s real server location. This directory lists only well-known, publicly documented onion sites run by established organizations — no marketplaces, forums, or unverified listings. We checked every address below directly against the operating organization’s own website or official help documentation.
Why This Directory Exists
Most “onion links” pages online sit abandoned, copy content from other abandoned pages, or pad their listings with unverified addresses just to look comprehensive. We built this one the opposite way: small, curated, and rechecked against each operator’s own site — so every entry here is something you can actually trust, not just something that was easy to list.
Red flags to watch for: Never enter a password, email address, or payment information on a “mirror” copied from an unfamiliar directory — fake .onion clones of real services are a common phishing tactic. When in doubt, get the address directly from the organization’s own clearnet website, not from a random forum post or link list.
How to Access Onion Sites
- Download the official Tor Browser — never a third-party “Tor browser,” which is a common malware vector.
- Open Tor Browser and wait for it to connect to the network.
- Paste a verified .onion address from the tables below into the address bar.
- Keep the browser’s security level at “Standard” or “Safer” unless you have a specific reason to change it.
Setting Up Tor Browser Correctly
Download Tor Browser only from the official torproject.org — nowhere else. Once installed, leave the window at its default size; resizing it makes your browser fingerprint more unique and easier to track across sites. Keep the built-in security level at “Standard” for everyday browsing, or raise it to “Safer” if you want JavaScript disabled on non-HTTPS sites. If your country blocks Tor, use a bridge (Settings → Connection → Bridges) rather than a random third-party proxy. Update the browser whenever it prompts you — most real-world Tor exploits have targeted outdated software, not the network itself.
Understanding the Deep Web vs the Dark Web
People often use these two terms interchangeably, but they’re not the same thing. The “deep web” is simply any content a search engine doesn’t index — your email inbox, a paywalled article, your bank’s login page. It’s the vast majority of the internet, and you use it every day without thinking twice. The dark web, meaning onion services specifically, is a comparatively tiny, distinct thing that requires special software to reach at all.
Verified Onion Sites Directory
Search Engines
| Name | .onion Address | Notes |
|---|---|---|
| DuckDuckGo | duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion | Privacy-respecting search engine; Tor Browser’s default homepage. |
Email & Privacy Tools
| Name | .onion Address | Notes |
|---|---|---|
| Proton Mail | protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion | Encrypted email; the onion address hides your connection even from Proton’s own servers. |
News & Journalism
| Name | .onion Address | Notes |
|---|---|---|
| BBC News | bbcnewsd73hkzno2ini43t4gblxvycyac5aw4gnv7t2rccijh7745uqd.onion | International edition, useful where bbc.com is blocked or censored. |
| The Guardian | guardian2zotagl6tmjucg3lrhxdk4dw3lhbqnkvvkywawy3oqfoprid.onion | UK newspaper’s onion mirror. |
| ProPublica | p53lf57qovyuvwsc6xnrppyply3vtqm7l6pcobkmyqsiofyeznfu5uqd.onion | Nonprofit investigative journalism newsroom. |
Whistleblowing & Secure Tips
| Name | .onion Address | Notes |
|---|---|---|
| SecureDrop Directory | sdolvtfhatvsysc6l34d65ymdwxcujausv7k5jk4cy5ttzhjoi6fzvyd.onion | Freedom of the Press Foundation-verified list of every newsroom running a SecureDrop tip line (Washington Post, Der Spiegel, Financial Times, and more). |
| The Guardian SecureDrop | xp44cagis447k3lpb4wwhcqukix6cgqokbuys24vmxmbzmaq2gjvc2yd.onion | Submit documents to Guardian journalists anonymously. |
Archives & Research
| Name | .onion Address | Notes |
|---|---|---|
| Internet Archive | archivep75mbjunhxc6x4j5mwjmomyxb573v42baldlqu56ruil2oiad.onion | The Wayback Machine and its full library catalog. |
How to Cross-Reference a .onion Address
Before trusting any onion address — including the ones on this page — it’s worth knowing how to check it yourself. Start with the organization’s own clearnet website; many link their onion mirror directly in the footer or a support article. Then check whether independent sources (tech press coverage from launch, the Tor Project’s own community pages) reference the same address. If a “hidden wiki” style list is the only place an address appears, treat that as a reason for caution rather than proof it’s genuine.
Onion Vanity Addresses Explained
Some organizations use “vanity” onion addresses — ones partially chosen to spell something recognizable, like a brand name, within the otherwise random string of characters. These are generated by computing many key pairs until one happens to produce the desired prefix; it doesn’t mean the organization got special treatment from Tor, and a vanity-looking address by itself doesn’t prove authenticity. A convincing vanity address is exactly what a well-made phishing clone would use too — the format tells you nothing about who’s actually running the site.
Avoiding Scam and Phishing Onion Sites
The most common scam pattern isn’t sophisticated: a page copies a real service’s branding and layout almost exactly, then asks you to “log in to continue” or “verify your account.” A legitimate onion mirror never needs anything beyond what its clearnet counterpart already requires. If a page asks for a password, seed phrase, or payment before showing you any actual content, close it. And never reuse a password across a clearnet account and whatever a directory site sends you to — that’s the single easiest way a fake mirror can do real damage.
Basic Safety Rules for Browsing
- Only use Tor Browser downloaded directly from torproject.org.
- Never enter credentials on a site you reached through an unfamiliar directory.
- Don’t download or open files from onion sites you can’t verify.
- Leave your browser window at its default size and skip extensions.
- Avoid logging into personal, real-name accounts over Tor unless that’s specifically the point (e.g., checking email through a provider’s own onion mirror).
Protecting Your Identity on Tor
Anonymity on Tor is less about the software and more about consistent habits. Reusing a username, writing style, or email address across a pseudonymous identity and your real one is how most de-anonymization actually happens — not a flaw in the network. Keep separate browsing sessions for separate purposes, avoid mixing identities within the same Tor session, and remember that a single slip — one forum post, one reused password — can undo everything else you did correctly.
Frequently Asked Questions
Are onion sites illegal?
No. Running or visiting an onion site is legal in most countries, including the US, UK, and EU. Tor was originally developed by the US Naval Research Laboratory and is used daily by journalists, human rights workers, and privacy-conscious individuals. What’s illegal is illegal everywhere, onion or not — the network itself is neutral.
What’s the difference between the dark web and the deep web?
The “deep web” is simply anything not indexed by search engines, like your email inbox or a paywalled article — the vast majority of the internet. The “dark web” is the much smaller slice that requires special software like Tor to reach. Onion sites are part of the dark web, but that doesn’t make them inherently suspicious.
Do I need a VPN to visit onion sites?
No. Tor already routes your traffic through three encrypted relays. A VPN can help if your network or country blocks Tor outright, but it isn’t required to safely visit the sites listed here.
How do I know an onion address is genuine?
Get it directly from the organization’s own clearnet website, official help documentation, or a verified directory like this one — never from an unfamiliar forum post or a third-party “hidden wiki” list, which are common sources of outdated or spoofed addresses.
Why do onion addresses change or go offline?
An onion address is generated from a cryptographic key, not registered like a domain name. When an operator rotates that key, migrates servers, or shuts a project down, the address goes dark permanently with no forwarding — which is exactly why directories that aren’t regularly rechecked go stale.
Is this the official “Onion Sites” directory?
There’s no single official directory of onion services — no organization controls that role. What we offer instead is a small, honestly-scoped list where every address is checked against its operator’s own source before it’s published, rather than a claim to completeness.
How We Verify These Addresses
Every link on this page was cross-checked directly against the operating organization’s own website or official help documentation — not copied from other “hidden wiki” style directories. Organizations occasionally retire or rotate their onion service, as the New York Times did after eight years of operation. If you find a broken or suspicious link, please get in touch so we can fix it.
Browse by Topic
dark web hidden wiki legal use onion links onion search engines onion sites privacy tor