Sites on Tor - A Comprehensive List

What Are .onion Sites and How Do They Work?

.onion sites are specialized hidden services on the Tor network, designed to provide users with encrypted and anonymous access to content. These sites utilize the unique top-level domain (TLD) .onion and can only be accessed through the Tor Browser, which ensures privacy and security for both users and site operators¹.

The primary distinction between .onion sites and standard domains, such as .com or .net, lies in their accessibility and indexing. Standard domains are indexed by traditional search engines, making them discoverable by anyone using the internet. In contrast, .onion sites are not indexed, meaning they remain hidden from conventional search engines. This lack of visibility is intentional, as it protects user anonymity and the site's content⁶.

To access .onion sites, you must use the Tor Browser. Other browsers do not support the necessary protocols for connecting to these hidden services. The Tor Browser routes your internet traffic through a series of relays, effectively masking your IP address and encrypting your data, which is essential for accessing these hidden resources securely⁷.

A .onion address is typically a 56-character string for the current v3 addresses, which are derived from the service's identity public key and include a checksum for verification³⁸. Older v2 addresses (16 characters) are no longer supported, and attempting to access them will result in errors².

For a practical example, consider testing your Tor Browser connection by visiting DuckDuckGo's .onion site. This verified resource is an excellent starting point for navigating the Tor network and understanding how .onion sites operate².

How to Access .onion Sites Safely in 2026

Accessing .onion sites requires careful preparation to ensure your safety and anonymity. Follow these steps for a secure experience.

Step-by-Step Guide

1. Download Tor Browser
   Download the Tor Browser from the official Tor Project website. Avoid third-party sites to prevent malware.

2. Verify the Signature
   After downloading, verify the signature of the Tor Browser. This step ensures that the software has not been tampered with, enhancing your security.

3. Configure Security Settings
   Open Tor Browser and navigate to security settings. Set the security level to ‘Safest’ mode. This disables potentially risky features like JavaScript and certain plugins that can compromise your anonymity.

4. Access .onion Sites
   Use verified .onion addresses. Ensure the address is a 56-character string for v3 addresses, as older v2 addresses are no longer supported and will result in errors².

Common Pitfalls to Avoid

• Phishing Sites: Be cautious of links shared on forums. Always verify .onion addresses through trusted directories like The Hidden Wiki, Ahmia, or Torch.

• Outdated Links: Links can change frequently. If a .onion address does not load, it may have been taken down.

• Verification of Addresses: Always confirm the expected website name and check for a padlock or onion icon in the URL bar⁵. This helps ensure you are connecting to the correct site.

Enhance Your Anonymity

Disabling JavaScript and plugins is crucial for maximum anonymity. These features can expose your identity or location, undermining the benefits of using Tor. Regularly clear cookies after each session to further protect your privacy.

By following these steps and precautions, you can safely navigate the vast resources available on the Tor network.

Curated List of Active and Verified .onion Sites (2026)

This section provides a curated list of currently active and verified .onion sites, organized by category. Each site listed below serves a unique purpose and is worth visiting for various reasons.

Search Engines

• Ahmia: A search engine specifically for .onion sites, Ahmia allows users to search hidden services while promoting legal content. It also offers a user-friendly interface for navigating the dark web.

• Torch: One of the oldest search engines for .onion sites, Torch indexes a wide variety of hidden services. It is known for its simplicity and effectiveness in finding content within the Tor network.

Directories

• The Hidden Wiki: A well-known directory of .onion sites, The Hidden Wiki provides links categorized by topics such as forums, markets, and educational resources. Users can find numerous hidden services in one place.

News/Media

• ProPublica: This investigative news organization maintains a .onion site to ensure access to its journalism in countries with censorship. ProPublica offers in-depth reporting on various issues, emphasizing transparency and accountability.

• CIA: The Central Intelligence Agency hosts its own .onion site, providing information about its activities and resources. This site is particularly useful for those interested in government transparency and public information.

Communication

• Proton Mail: A secure email service offering end-to-end encryption, Proton Mail's .onion address allows users to access their accounts anonymously. It is ideal for users seeking privacy in their communications.

• Riseup: This organization provides secure email and communication tools for activists and individuals needing privacy. The .onion site offers an additional layer of security when accessing their services.

Privacy Tools

• SecureDrop: A platform for whistleblowers to share information securely with journalists, SecureDrop allows anonymous submissions. Its .onion service enhances the safety of sensitive communications.

Nonprofits

• Tor Project: The Tor Project itself has a .onion site dedicated to providing information about its mission, development, and how to support its work. This site is essential for those interested in the technical aspects of the Tor network and its ongoing projects.

These sites exemplify the diversity and utility of resources available on the Tor network. Always ensure that you are using verified .onion addresses to maintain security and access the intended content.

How .onion Addresses Are Generated and Why They Change

.onion addresses are generated through a cryptographic process that ensures both uniqueness and security. A v3 .onion address consists of a 56-character string derived from the service's identity public key, a version field, and a checksum, all encoded in base32 format³⁸. This method eliminates the need for traditional domain purchases, enabling operators to create secure hidden services easily².

Addresses change for several reasons, including service restarts, security updates, or law enforcement actions targeting specific sites⁹. If a service is restarted or updated, the old address may no longer function, leading to errors such as ‘Onionsite Not Found’². To find updated addresses, users can rely on dark web directories like The Hidden Wiki, Ahmia, or Torch, which frequently list current .onion sites.

The difference between v2 and v3 addresses is significant. Older v2 addresses are only 16 characters long and are no longer supported on the modern Tor network. Attempting to access these older addresses will typically result in an error message². In contrast, v3 addresses provide increased security and are designed to enhance the anonymity of both users and site operators through improved cryptographic hashing methods.

For example, a v2 address might look something like ‘abc1234567890def’, whereas a v3 address would resemble ‘abcdefg1234567890hijklmnopqrstuvwxyz123456’. The transition to v3 addresses signifies a move towards greater security and anonymity within the Tor network, making it essential for users to adapt to these changes and ensure they are accessing the correct, up-to-date addresses.

Dark Web Directories and Search Engines: How to Find New .onion Sites

Dark web directories and search engines are essential tools for discovering new .onion sites on the Tor network. They help users navigate the hidden web and find content that may not be easily accessible through conventional means.

Top Directories

• The Hidden Wiki: This is one of the most well-known directories for .onion sites. It categorizes links into various topics, such as forums, markets, and educational resources. While it offers a comprehensive list, always verify the links, as some may lead to outdated or illegal content.

• OnionDir: A user-friendly directory that focuses on providing a curated list of active .onion sites. It categorizes links by type, making it easy for users to find specific resources.

Leading Search Engines

• Ahmia: A search engine designed for .onion sites, Ahmia allows users to search for hidden services while filtering out illegal content. It presents results in a straightforward manner, making it easy to explore the dark web safely.

• NotEvil: Another popular search engine, NotEvil indexes a wide range of .onion sites. It is known for its user-friendly interface and extensive database, though users should verify the legitimacy of results independently.

Using These Tools

To effectively use these directories and search engines, start by identifying the type of content you wish to explore. For example, if looking for secure communication tools, search for relevant keywords on Ahmia or OnionDir. Always confirm the URL format and verify that it is a v3 .onion address, which is 56 characters long³.

Verifying Legitimacy

When you find a .onion site, check for indicators of legitimacy. Look for a padlock or onion icon in the URL bar, and ensure the address matches the expected site name⁵. Cross-reference the site with multiple directories to confirm its existence and purpose.

Limitations of Dark Web Search Engines

Dark web search engines have notable limitations. They often provide incomplete indexing, meaning not all .onion sites are listed. Additionally, many results may be outdated due to the rapid changes in availability on the dark web. Regularly verify the sites you visit to ensure they are still operational and safe.

By utilizing these directories and search engines wisely, you can uncover a wealth of hidden resources on the Tor network while maintaining your security and anonymity.

Common Myths About .onion Sites and the Tor Network

Many misconceptions exist surrounding .onion sites and the Tor network. Understanding these myths can help users navigate the dark web safely and responsibly.

Myth 1: All .onion Sites Are Illegal

Not all .onion sites engage in illegal activities. While some are associated with criminal enterprises, many legitimate services exist. For instance, ProPublica maintains a .onion site to ensure access to journalism in countries with censorship. Similarly, the CIA has its own .onion address, providing information about its activities and resources⁴. Using Tor for privacy, circumventing censorship, or whistleblowing is legal in many countries, including the United States⁴.

Myth 2: Tor Is 100% Untraceable

Tor provides a high level of anonymity, but it is not entirely untraceable. While Tor's onion services use a rendezvous protocol to protect user identities, vulnerabilities can exist¹⁰. Law enforcement agencies have successfully targeted over 400 .onion addresses in the past, showcasing that certain activities can attract scrutiny⁹. Users should remain vigilant about their online behavior and understand that anonymity is not guaranteed.

Myth 3: The Dark Web Is Only for Criminals

The dark web serves a variety of purposes beyond criminal activity. It offers platforms for activists, journalists, and individuals seeking privacy. Legitimate .onion sites like DuckDuckGo provide anonymous search capabilities, while SecureDrop allows whistleblowers to communicate securely with journalists².

Legal Use Cases and Risks

Using Tor and .onion sites can enhance privacy and protect users from censorship. However, risks include scams and exposure to malware. Users should be cautious when navigating the dark web, verifying the authenticity of sites and avoiding suspicious links. Always use reliable directories like The Hidden Wiki or Ahmia to find vetted resources.

By debunking these myths and understanding the actual landscape of .onion sites, users can better navigate the Tor network, balancing their need for anonymity with the importance of safety and legality.

How to Verify the Legitimacy of a .onion Site

Verifying the legitimacy of a .onion site is crucial for maintaining security and avoiding scams. Here are effective methods to ensure that the site you are visiting is authentic.

Cross-Referencing with Trusted Directories

Use reputable directories such as The Hidden Wiki, Ahmia, or Torch to confirm the existence of a .onion site. These platforms maintain updated lists of verified .onion addresses. For example, if you discover a new site, check its listing in these directories to ensure it has been recognized as legitimate.

Checking for HTTPS

While .onion sites typically do not require HTTPS due to their inherent encryption², if you encounter a v3 .onion address, verify that the connection is secure. Look for the padlock or onion icon in the URL bar, which indicates a secure connection⁵. This is particularly important for sites handling sensitive information.

Official Mirrors

Some legitimate services maintain multiple .onion addresses. Check if the site you are visiting has an official mirror. For instance, news organizations like ProPublica and communication tools like Proton Mail may provide alternative addresses for accessibility. This can serve as an additional verification method.

Red Flags to Watch For

Be cautious of suspicious URLs that deviate from expected patterns, especially those that request personal data or financial information. Legitimate .onion sites typically do not ask for sensitive information. Also, avoid sites that do not encrypt connections, as this can expose you to potential threats.

Checklist Before Accessing a New Site

1. Cross-Check: Look for the site in trusted directories.
2. Verify URL: Ensure it is a v3 .onion address (56 characters).
3. Secure Connection: Look for the padlock or onion icon in the URL bar.
4. Check for Mirrors: Confirm the site has official alternative addresses.
5. Watch for Suspicious Behavior: Avoid sites asking for personal data or displaying unusual URLs.

By following these steps, you can enhance your safety while exploring the dark web and ensure that you are accessing legitimate .onion sites.

Common Mistakes and Misconceptions

Assuming All .onion Sites Are Still Active

Many users rely on outdated lists of .onion addresses, only to encounter ‘Onionsite Not Found’ errors. These addresses change due to service restarts, updates, or takedowns²⁹. Always verify the current status of a site through trusted directories like The Hidden Wiki or Ahmia before attempting access.

Ignoring the Difference Between v2 and v3 Addresses

Attempting to access a v2 .onion address (16 characters) will fail, as the modern Tor network no longer supports them². v3 addresses are 56 characters long and use improved cryptography for better security³. Double-check the address length and version before use.

Trusting Any .onion Site Without Verification

Some users assume a site is legitimate just because it has a .onion address. Scams and phishing sites are common, and many mimic legitimate services. Verify the site’s authenticity by cross-referencing it with trusted directories and checking for secure connection indicators like the onion icon in the URL bar⁵.

Believing HTTPS Is Required for .onion Sites

.onion services provide end-to-end encryption by default, so HTTPS is unnecessary². However, users often waste time looking for ‘https://’ prefixes or distrusting sites without them. Focus instead on confirming the address format and using Tor Browser’s built-in security features.

Overlooking the Need for Regular Updates

Even verified .onion sites can disappear or change addresses due to law enforcement actions or service updates⁹. Relying on a single source for addresses can lead to dead links. Use multiple directories and check for updates frequently to ensure access to active sites.

Confusing .onion Sites with the Entire Dark Web

The dark web includes more than just .onion sites, and not all .onion sites are part of the dark web’s high-risk content⁶. Many serve legal purposes, such as journalism or privacy tools. Avoid assuming all .onion sites are illegal or unsafe—research their purpose before accessing.

Key Takeaways

• Verify before accessing: Always cross-check .onion addresses with trusted directories like Ahmia or The Hidden Wiki to confirm legitimacy and activity.
• Use v3 addresses only: v2 addresses (16 characters) are obsolete; modern Tor supports only 56-character v3 addresses for enhanced security.
• Prioritize security: Look for the onion icon in the URL bar to ensure a secure connection, even though HTTPS is unnecessary for .onion sites.
• Stay updated: .onion sites frequently change or disappear—rely on multiple sources to avoid dead links.
• Legality varies: Tor itself is legal, but engaging in illegal activities remains prohibited; many .onion sites serve legitimate purposes.

Start exploring safely with a vetted list of active sites in Darknet Tor List - Navigating the Network.