Onion List — Your Guide to Legitimate Tor & Onion Services

What Is Onion List?

Onion List is an independent educational resource that explains how Tor and onion services work, and documents categories of legitimate organizations — news outlets, privacy tools, digital rights groups — that maintain an onion presence. We do not list, sell, or promote access to marketplaces of any kind.

Why This Guide Exists

Most “dark web guide” content online mixes legitimate privacy tools together with marketplace directories, unverifiable link farms, and vague safety advice. That makes it hard to tell what’s actually trustworthy. This guide separates the two: real organizations you can verify, and the reasoning you need to stay safe, without pointing you toward anything illegal.

News & Journalism Organizations

Several major, well-known news outlets operate an onion version of their site so readers under censorship or surveillance can still reach independent reporting. Look for an announcement on the outlet’s own official “About” or security page rather than trusting a third-party list.

Privacy-Focused Search Engines

Search engines built around not tracking users, like DuckDuckGo, also maintain onion services as an extra layer of protection against traffic analysis for people who reach them through Tor.

Digital Rights & Advocacy Groups

Organizations like the Electronic Frontier Foundation publish safety guidance and, in some cases, run onion services themselves to demonstrate and support the technology they advocate for.

Secure Email & Communication Tools

Privacy-oriented email and messaging providers occasionally offer onion access so that sign-up and login traffic stays inside the Tor network end-to-end. Confirm the address through the provider’s own verified account or website before using it.

VPN Services

Some VPN providers run an onion service for their own site, mainly so privacy-conscious customers can manage their account without leaving the Tor network. A VPN and Tor solve different problems — see our VPN vs. Tor guide for the difference.

Whistleblowing & Source Protection Tools

Systems like SecureDrop let people submit documents to newsrooms anonymously over Tor. Most major newsrooms that accept anonymous tips list their SecureDrop address directly on their official tips or contact page.

Libraries & Knowledge Archives

Some archival and reference projects maintain an onion mirror so their material stays reachable even where the regular internet is filtered. As always, treat the organization’s own website as the source of truth for the current address.

Software & Developer Tools

The Tor Project itself, along with a handful of open-source privacy projects, documents its own onion service directly in its official downloads and documentation.

International & Non-English Resources

Independent media and human rights groups operating in heavily censored regions are some of the most active users of onion services, often publishing in the local language first. These are usually announced through the organization’s own regional site.

Other Legitimate Services

A small number of other categories — whistleblower-friendly file-sharing tools, research archives, and similar projects — round out the legitimate onion ecosystem. The rule stays the same regardless of category: verify through the source, not a list.

Understanding the Deep Web vs. Dark Web

These two terms get used interchangeably, but they aren’t the same thing. The “deep web” is simply anything not indexed by a search engine — your email inbox, a paywalled article, your bank’s login page. The “dark web” is the much smaller subset that requires special software like Tor to reach at all.

How to Access These Services Safely

Getting started is straightforward: download Tor Browser, keep it updated, and treat it like any other privacy tool — useful, but not a magic switch that makes everything you do anonymous.

Setting Up Tor Browser Correctly

Download only from the official Tor Project site, leave the browser window at its default size, and avoid installing extra extensions, which can leak information the browser is otherwise protecting. See our full Tor Browser safety checklist for more.

Where to Find Verified, Official Onion Addresses

The only reliable source for an organization’s current .onion address is the organization itself — its regular website, its official social accounts, or its published security/press page. We intentionally don’t republish raw addresses here.

Red Flags to Watch For

Be skeptical of “verified link list” sites that aggregate onion addresses with no way to confirm who actually controls them, addresses shared only in forum comments, and any site pushing you to act fast before checking a link.

Verifying You Have the Real Address

Because onion addresses are long random strings, a single swapped character sends you to a different — possibly malicious — destination. Always copy the address directly from the source rather than retyping it.

How to Cross-Reference Links

If an organization publishes its onion address in more than one official place (its main site, a verified social account, a press release), check that all of them match exactly before trusting it.

Avoiding Scam and Phishing Clones

Phishing clones of popular onion services are common precisely because addresses are hard to verify by eye. When in doubt, don’t proceed — go back to the organization’s clearnet site and look for the official link again.

How Onion Addresses Are Structured

Modern (v3) onion addresses are 56-character strings generated directly from a cryptographic key pair, which is what makes them provably tied to whoever holds the matching private key.

What Are Vanity Addresses?

Some operators generate many key pairs until they land on an address starting with a recognizable word or prefix — a “vanity” address. It’s cosmetic; it doesn’t make the address any more or less trustworthy on its own.

Is It Safe to Use These Services?

Using Tor and visiting a legitimate organization’s onion service is not inherently risky. The risk comes from what people navigate to next, and from basic operational security mistakes.

Basic Safety Rules for Browsing

Keep Tor Browser updated, avoid logging into accounts tied to your real identity unless necessary, and don’t download or open files while still connected if you can avoid it.

Protecting Your Identity

Small habits matter more than people expect: not resizing the browser window, not mixing Tor and non-Tor browsing in the same session for sensitive tasks, and being deliberate about what you type into any form.

Frequently Asked Questions

Is visiting the dark web illegal? No — using Tor itself is legal in most countries. What you do once you’re there is what matters, the same as on the regular web.

Do I need a VPN with Tor? Not necessarily. They solve different problems — see our VPN vs. Tor article for a full breakdown.

Where do I get real .onion links? Directly from the organization’s own official website — never from an unaffiliated “link list.”

From Our Blog