Tor Links in 2026: How to Find and Verify Onion Addresses

A Tor link, or onion address, is a special URL that ends in .onion and routes traffic through the Tor network's encrypted relays. These addresses are generated by Tor hidden services, which allow websites and services to operate without revealing their physical location or the operator's identity. Unlike regular websites, onion sites are not indexed by search engines and cannot be accessed through a standard browser.

Tor links serve different purposes. Some host forums and communities, others provide news and information unavailable in certain countries, and still others operate as marketplaces or services. The technical design of onion addresses makes them resistant to censorship and surveillance, which is why journalists, activists, and ordinary people in repressive regions rely on them. Understanding how these links work is the first step toward using them safely.

Every onion address is derived from a cryptographic key pair. The Tor daemon running on a hidden service generates a public key, hashes it, and encodes the result as a .onion domain. This means the address itself is proof that the service controls the corresponding private key. If you visit the same onion address twice and it behaves consistently, you can be reasonably confident you are talking to the same service.

Verification happens through PGP signatures. Legitimate services publish their onion address alongside a PGP-signed message from an official account or key. If you download the service's public key from multiple independent sources and verify the signature, you can confirm authenticity. Many forums and marketplaces have historically published their addresses on Reddit, Twitter, or their own clearnet mirrors, signed with a key that has been known for years. Phishing clones cannot forge these signatures without stealing the private key, which is extremely difficult if the operator practices good key hygiene.

Several directories and search engines index onion sites. The Hidden Wiki is one of the oldest curated lists, maintained by volunteers and accessible only over Tor. It categorizes links by topic and includes brief descriptions. Other directories exist on GitHub, where developers and researchers publish lists of verified onion addresses for news outlets, libraries, and privacy tools.

When searching for Tor links, avoid relying on a single source. Cross-reference multiple directories and look for links that appear consistently across different lists. If a service is genuinely popular, you will find it mentioned in multiple places. Services that appear only on one obscure list or in a Discord channel are higher risk. The best tor links reddit communities often discuss which directories are trustworthy, though Reddit discussions themselves can contain misinformation. Always verify through independent sources before trusting a link with sensitive activity.

Phishing clones are fake onion sites designed to look identical to legitimate ones. An attacker registers a new onion address, copies the layout and content of a popular forum or marketplace, and waits for users to mistype the address or click a malicious link. When you log in with your credentials, the clone captures them. This attack has been documented repeatedly in law-enforcement press releases and security-vendor incident reports on onion service compromises.

The reason clones are so effective is that onion addresses are long, random strings that are difficult to remember and easy to mistype. A user intending to visit a forum might accidentally visit a clone and not notice the difference until they have already entered their username and password. Some clones are so convincing that even experienced users have fallen for them. To protect yourself, always verify the onion address through multiple independent sources before logging in. Bookmark the correct address in Tor Browser and use the bookmark every time. Never click a link to an onion site from an untrusted source.

Before visiting any Tor link, ensure you are using the official Tor Browser, not a modified or third-party version. Download it directly from the Tor Project website over HTTPS, verify the signature, and keep it updated. Tor Browser includes security patches and protections that other browsers lack.

When accessing Tor links, follow these practices:

1. Disable JavaScript in Tor Browser settings to prevent certain types of attacks.
2. Set your browser window to a standard size to avoid fingerprinting.
3. Never maximize the window or change the zoom level.
4. Do not open multiple tabs to different onion sites simultaneously.
5. Use a separate Tor Browser profile for each high-risk activity.
6. Never enable plugins or extensions unless absolutely necessary.
7. Assume that any Tor link could be a phishing clone and verify the address before entering credentials.

These steps reduce the attack surface and make it harder for adversaries to correlate your activity or compromise your machine through a malicious onion site.

Different users seek Tor links for different reasons. Journalists and researchers use onion mirrors of news organizations and academic databases to access information without revealing their location. Activists use Tor links to forums and communication platforms to organize and share information in countries where these activities are monitored. Ordinary users access Tor links to libraries, archives, and privacy-focused services that are censored in their region.

Tor links for books include digital libraries and archives that operate on onion addresses to preserve access to knowledge. These services are typically run by volunteers and funded by donations. Similarly, tor links github repositories host lists of verified onion addresses, tools for Tor users, and documentation on how to set up hidden services. Some developers publish their projects exclusively on Tor to avoid takedown requests. When looking for specific types of Tor links, start with the Hidden Wiki or a GitHub repository in that category, then cross-reference with community discussions on forums and Discord channels dedicated to Tor users.

Onion sites go offline for many reasons. A service might be temporarily down for maintenance, the operator might have abandoned it, or law enforcement might have seized the server. When a link stops working, do not assume it is gone forever. Check multiple sources to see if the address has changed or if the service has moved to a new onion domain.

If a popular service disappears, look for official announcements on the service's clearnet mirror, social media accounts, or PGP-signed statements from the operator. Legitimate services publish their new addresses through these channels to prevent users from being redirected to clones. If you cannot find an official announcement, assume the service is either offline or compromised. Do not visit a replacement link unless you can verify it through multiple independent sources. The tor links directory you are reading now should be updated regularly with working addresses, but the responsibility for verification ultimately rests with you.

The core principle of safe Tor browsing is verification. Every time you plan to visit an onion address, ask yourself: where did I get this link, and have I confirmed it through at least two independent sources? If the answer is no, do not proceed. Spend five minutes cross-referencing the address in the Hidden Wiki, a GitHub repository, and a community discussion. If the link appears consistently across all three, it is likely legitimate.

Start by bookmarking the official Tor Project website and the Useful Resources page of this site. Use these as your entry points to Tor links directories. When you find a service you want to use regularly, verify its address through PGP signature if the operator publishes one. Save the correct address in a secure location and use it every time. This simple discipline will protect you from the vast majority of phishing attacks and malicious clones. Your next action is to download Tor Browser from the official source, verify its signature, and familiarize yourself with the security settings before visiting any onion site.