List of Tor Websites and Onion Addresses

Tor websites are services hosted on the Tor network and identified by .onion addresses rather than standard domain names. They exist to provide privacy-focused alternatives to clearnet services, host content that faces censorship in certain jurisdictions, and enable anonymous communication. Onion sites use Tor's routing protocol to conceal both the user's location and the server's location, making them useful for journalists, activists, whistleblowers, and individuals in countries with heavy internet restrictions. Unlike clearnet sites, onion addresses are cryptographically generated and difficult to predict, which makes them resistant to takedown attempts but also harder to discover. A comprehensive list of Tor websites helps users navigate this ecosystem without relying on word-of-mouth or potentially compromised search results.

Onion addresses are unique identifiers generated from cryptographic keys. Older v2 addresses were 16 characters long and have been deprecated due to security vulnerabilities. Modern v3 addresses are 56 characters long and use stronger elliptic-curve cryptography, making them significantly more resistant to brute-force attacks and impersonation. When you visit a v3 onion address, your Tor browser establishes a multi-hop circuit through the Tor network, with each relay knowing only the previous and next hop. The final relay connects to the onion service without revealing your IP address. V3 addresses are self-authenticating: the address itself contains a hash of the service's public key, so if the address is correct, you can be certain you are connecting to the legitimate service and not an imposter. This cryptographic binding is why verifying the exact onion address is critical before accessing any sensitive service.

Phishing clones are fraudulent copies of legitimate onion sites designed to steal credentials, private keys, or personal information. They often use similar names or slightly altered addresses to deceive users. To distinguish genuine onion mirrors from fakes: verify the address character-by-character against official sources (project websites, PGP-signed announcements, or trusted directories); check for HTTPS certificates and security indicators in your Tor browser; look for official PGP signatures on any announcements or mirrors lists; and cross-reference multiple independent sources before trusting a new address. Legitimate projects publish their onion addresses through their official clearnet sites, social media accounts with verified histories, or PGP-signed documents. If a site asks you to download software, verify the cryptographic signature of the download using the project's public key. Never assume an address is legitimate based on appearance alone, and avoid clicking links from untrusted sources that claim to lead to onion sites.

Onion directories function as searchable catalogues of .onion addresses, similar to search engines or web directories for the clearnet. They aggregate links to news sites, forums, communication platforms, libraries, and other services. Some directories are manually curated by volunteers, while others use automated crawling and indexing. Directories typically display site descriptions, categories, and user ratings. However, directories themselves can be compromised or contain outdated addresses, so cross-referencing multiple sources is important. Official project documentation often lists the correct onion addresses directly, which is more reliable than relying on a single directory. When using a directory, verify any address you find against the official project's website or PGP-signed announcements. Directories also vary in scope: some focus on news and information, others on communication tools, and some attempt to index the entire onion ecosystem. Understanding how a directory is maintained and updated helps you assess its reliability.

Even when using Tor, certain behaviors can leak your identity or compromise your anonymity. Maximizing your browser window can reveal your screen resolution, which combined with other data may be used to fingerprint you. Using the same username across multiple onion sites allows those sites to link your activities. Enabling plugins or extensions in Tor Browser can create attack vectors; the official Tor Browser disables these by default for security. Visiting onion sites while also logged into clearnet accounts (especially email or social media) can create a bridge between your anonymous and identified personas. Torrenting over Tor does not provide anonymity because BitTorrent protocols bypass Tor and leak your real IP address. Disabling JavaScript in Tor Browser is recommended because malicious scripts can potentially deanonymize you. Keeping your Tor Browser and operating system updated is essential, as unpatched vulnerabilities can be exploited. Avoid resizing your browser window, using full-screen mode, or taking screenshots of onion sites, as these actions can expose identifying information.

Tor, VPN, and I2P are three different approaches to privacy, each with distinct trade-offs. Tor routes traffic through multiple volunteer-operated relays, providing strong anonymity but slower speeds; it is designed for anonymity and accessing onion services. A VPN encrypts your traffic and routes it through a single provider's server, offering privacy from your ISP but requiring trust in the VPN provider; VPNs are faster but do not provide the same level of anonymity as Tor. I2P (Invisible Internet Project) is a decentralized network similar to Tor but optimized for internal communication and file-sharing rather than general web browsing; it uses shorter paths and is faster for certain use cases but less suitable for accessing the broader internet. Tor is the only method that allows you to access .onion addresses. Using a VPN with Tor adds a layer of encryption but may reduce anonymity if the VPN provider logs traffic. I2P and Tor can be used together for specific applications, but they serve different purposes. Choose based on your threat model: Tor for maximum anonymity and onion access, VPN for ISP privacy, and I2P for decentralized communication within its network.

1. Visit the official Tor Project website through your clearnet browser and download Tor Browser directly from the official source.
2. Verify the cryptographic signature of the downloaded file using the Tor Project's public key; this ensures the file has not been tampered with.
3. Extract or install Tor Browser according to your operating system's instructions.
4. Launch Tor Browser and allow it to connect to the Tor network; this may take several minutes on first run.
5. Once connected, your Tor Browser window will display a green onion icon.
6. Do not modify Tor Browser settings unless you understand the security implications; default settings are optimized for anonymity.
7. Keep Tor Browser updated by enabling automatic updates or manually checking for new versions regularly.
8. Do not install additional extensions or plugins, as these can compromise anonymity.
9. When visiting onion sites, verify addresses carefully before connecting.
10. Close Tor Browser completely when not in use to prevent accidental clearnet activity over Tor circuits.