What Are Onion List Sites
Onion list sites are directories that catalog .onion addresses—the unique identifiers for services hosted on the Tor network. Unlike regular websites with DNS names, .onion addresses are cryptographic hashes generated by the Tor protocol itself. An onion list site typically contains links to forums, marketplaces, news outlets, and other services, organized by category. These directories exist because .onion addresses are not indexed by search engines and have no central registry. Users rely on word-of-mouth, community wikis, and aggregator sites to discover new services. However, the decentralized nature of Tor means lists can quickly become outdated—services move, shut down, or get replaced by scams within days.
How Onion Addresses Work
When a service runs on Tor, the network generates a .onion address based on the service's public key. This address is long and seemingly random—for example, a 56-character v3 address. The address itself is the service's identity; there is no separate domain registration or DNS lookup. When you connect to a .onion address through Tor Browser, your traffic is routed through multiple Tor relays before reaching the hidden service. The address encodes the service's location in a way that keeps both the user and the service anonymous. This means a .onion address cannot be spoofed or hijacked the way a regular domain can. However, a service operator can abandon an address and create a new one, which is why old onion lists often contain dead links. Scammers sometimes create lookalike addresses with slight variations to trick users into connecting to fake sites.
Finding and Verifying Onion Lists
Start by accessing this site's Verified Market page, which maintains current addresses for established services. Cross-reference any address you find across multiple independent sources before connecting. Look for lists that show when addresses were last confirmed active. Community forums and news sites often discuss which services are legitimate and which are honeypots or scams. Use Tor Browser's built-in security features: check the onion address in the address bar character-by-character before entering sensitive information. If a service requires you to log in, verify the address matches exactly what you found on multiple trusted sources. Bookmark verified addresses in Tor Browser rather than relying on search results or random links. Be skeptical of lists that claim to have 'all' or 'every' onion site—such claims are unrealistic and often indicate the list is outdated or contains spam.
Security and Anonymity Considerations
Using an onion list site does not automatically protect your anonymity. Several mistakes can compromise your security. First, do not use Tor Browser with a VPN unless you understand the trade-offs—some configurations can leak your real IP or reduce anonymity. Second, do not maximize your browser window; fingerprinting tools can identify you based on screen resolution. Third, do not enable plugins or extensions in Tor Browser; they can bypass Tor routing. Fourth, do not assume a .onion address is legitimate just because it appears on a list. Scammers create fake marketplaces and forums that look identical to real ones. Always verify addresses through multiple independent sources. Use Tor Browser's default security settings. If you need additional privacy, consider using Tails or Whonix, which route all traffic through Tor by default. Never mix Tor and non-Tor traffic on the same session—log out of regular accounts before accessing Tor services.
Common Mistakes When Using Onion Lists
New users often make predictable errors. Clicking links from search results or social media without verification is the most common mistake—these links frequently lead to phishing sites or malware. Using the same username across multiple .onion services creates a digital trail that can be linked to your real identity. Downloading files from unverified sources without checking signatures or hashes exposes you to trojans. Assuming an old onion list is still accurate leads to connecting to dead addresses or scam replacements. Trusting a service just because it has a professional-looking website or claims to be 'verified' is dangerous; appearance means nothing on Tor. Enabling JavaScript in Tor Browser increases attack surface. Visiting multiple .onion services in quick succession from the same Tor session can allow correlation attacks. The safest approach is to use a fresh Tor circuit for each service, which you can do by clicking the circuit button in Tor Browser.
Comparing Onion List Types
Onion lists come in several forms, each with different reliability levels. Community wikis are maintained by volunteers and often contain outdated information but represent collective knowledge. Aggregator sites that scrape multiple sources can be faster to update but may include spam or fake entries. News and journalism sites that cover Tor services tend to verify addresses before publishing. Marketplace forums maintain their own internal lists of verified vendors, though these are often restricted to registered users. Decentralized lists stored on blockchain or distributed systems claim to be censorship-resistant but are rarely more current than centralized alternatives. The most reliable approach is to cross-reference multiple list types. If an address appears on a community wiki, a news site, and a marketplace forum, it is more likely to be legitimate than if it appears on only one source. Always prioritize lists that show when addresses were last verified.
Staying Current with Onion Addresses
Onion services change addresses frequently for security reasons or because operators shut down and restart. Subscribe to news feeds or community forums that discuss Tor services to stay informed about address changes. Follow official announcements from services you use regularly—many post migration notices on their old addresses before shutting down. Bookmark this site's Verified Market page and check it periodically for updates. Join communities related to your interests on Tor; members often share current addresses and warn about scams. Keep a private, encrypted note of addresses you use regularly, separate from your browser history. When an address stops working, do not assume the service is gone—check multiple sources to see if it has migrated. Be cautious of 'new' addresses claiming to be replacements for old ones; verify through official channels first. Set a reminder to review your bookmarks monthly and remove dead links.
Frequently asked questions
Are onion list sites legal to use?
Yes. Accessing a directory of .onion addresses is legal in most countries. However, the legality of the services listed depends on their content. Visiting a marketplace or forum itself is not illegal; purchasing illegal goods or services is. Using Tor and accessing .onion sites is protected speech in many jurisdictions, though some countries restrict Tor access.
How do I know if an onion address is real or a scam?
Verify the address across multiple independent sources before connecting. Check community forums and news sites for recent mentions. Use Tor Browser's security features and never enter sensitive information on an unverified site. Scammers create lookalike addresses with slight character differences, so compare addresses character-by-character. If a site asks you to download software or enable plugins, it is likely malicious.
Can I use a VPN with Tor when accessing onion list sites?
Using a VPN with Tor is controversial. VPN-then-Tor can hide your ISP from Tor entry nodes but may reduce anonymity. Tor-then-VPN can hide Tor usage from your ISP but trusts the VPN provider with your traffic. Most security experts recommend using Tor alone or using Tails or Whonix instead of adding a VPN. If you do use both, understand the trade-offs.
Why do onion addresses change so frequently?
Service operators change addresses for security, to escape harassment or law enforcement, or to restart after shutdowns. Some services rotate addresses regularly as a security practice. When an address changes, old lists become outdated. This is why relying on a single old list is unreliable. Check multiple current sources before connecting to any service.
What should I do if an onion address no longer works?
First, check multiple independent sources to see if the service has migrated to a new address. Search community forums and news sites for recent updates. Do not click links from random sources claiming to be the 'new' address. If you cannot verify a new address through official channels, assume the service is offline. Never assume a replacement address is legitimate without verification.
