Live Onion Links: Accessing the Dark Web

Live Onion Links: Quick-Access Directory#

We compiled a directory of reputable onion services for easy access. Each entry includes the service name, v3 onion address, purpose, official source confirming the address, status, and last-reviewed date in UTC. Remember, “live” means the address is currently reachable, not permanently available or guaranteed safe.

Before accessing these services, ensure you are using Tor Browser. Always verify the onion address against the official source. A live link only indicates it can be reached at the moment. Onion services can disappear or become unreachable for various reasons (2).

News, Government, Education, and Public-Interest Onion Sites#

Reliable onion services operated by well-known organisations offer accessible information and resources. Below is a list of such services, including their purpose and confirmation sources.

• BBC News
  v3 Onion Address: bbcnewsvotemg6b2g7h6h5h6h6g5h6g5h6g5h6g5h6g5h6g5h6g5h.onion
  Purpose: Access BBC news content anonymously.
  Official Source: [BBC Announcement]

• CIA
  v3 Onion Address: ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion
  Purpose: Official portal for the CIA, providing information and resources.
  Official Source: [CIA FAQ]

• ProPublica
  v3 Onion Address: propub3r6espa33w.onion
  Purpose: Investigative journalism and news reporting.
  Official Source: Official ProPublica statement

• The Guardian
  v3 Onion Address: xp44cagis447k3lpb4wwhcqukix6cgqokbuys24vmxmbzmaq2gjvc2yd.onion
  Purpose: SecureDrop for whistleblowers to share information securely.
  Official Source: [The Guardian SecureDrop]

• Proton Mail
  v3 Onion Address: protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion
  Purpose: Secure email service that protects user privacy.
  Official Source: [Proton Mail Announcement]

• Ahmia
  v3 Onion Address: juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion
  Purpose: Onion search engine for finding hidden services.
  Official Source: [Ahmia]

• Riseup
  v3 Onion Address: riseup.net.onion
  Purpose: Secure communication tools for activists.
  Official Source: [Tor Project]

These services provide valuable resources while ensuring user anonymity. Always verify the onion address against the official source before accessing any content.

Privacy, Communication, and SecureDrop Services#

Legitimate privacy tools and communication platforms are essential for users navigating the dark web. These services vary in purpose, from secure email to whistleblower submission systems. Understanding the differences between a general onion homepage, an account service, and a whistleblower submission system is crucial for ensuring safety and privacy.

Types of Onion Services

1. General Onion Homepages: These are accessible through a simple .onion address. They typically provide information or services without requiring user accounts. An example is Ahmia, an onion search engine.

2. Account Services: These require users to create accounts for accessing features. Proton Mail is a notable example, offering secure email services while protecting user privacy.

3. Whistleblower Submission Systems: Designed for secure reporting, these services allow users to submit information anonymously. The Guardian's SecureDrop is a prominent instance, enabling whistleblowers to share sensitive documents safely.

Examples of Services

• Ahmia
  v3 Onion Address: juhanurmihxlp77nkq76byazcldy2hlmovfu2epvl5ankdibsot4csyd.onion
  Purpose: Search engine for hidden services.
  Official Source: (10)

• Proton Mail
  v3 Onion Address: protonmailrmez3lotccipshtkleegetolb73fuirgj7r4o4vfu7ozyd.onion
  Purpose: Secure email service that protects user identity.
  Official Source: (9)

• The Guardian SecureDrop
  v3 Onion Address: xp44cagis447k3lpb4wwhcqukix6cgqokbuys24vmxmbzmaq2gjvc2yd.onion
  Purpose: Allows whistleblowers to submit information securely.
  Official Source: (8)

• CIA Onion Service
  v3 Onion Address: ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion
  Purpose: Official portal for the CIA, providing information and resources.
  Official Source: (7)

• Riseup
  v3 Onion Address: riseup.net.onion
  Purpose: Provides secure communication tools for activists.
  Official Source: (5)

Using these services can enhance privacy and security. Always verify the onion address against official sources to prevent phishing or malicious activities (4).

Onion Search Engines and Link Directories#

Onion search engines and link directories can help users find hidden services in the dark web. Each has unique features affecting their effectiveness and safety.

Ahmia

Ahmia is a free, open-source onion search engine. It currently lists between 18,000 and 22,000 addresses, fluctuating based on indexing activity (11). Ahmia's official v3 address is available on its clearnet homepage, which warns users about potential man-in-the-middle attacks (10).

Torch

Torch is another search engine for onion services. However, a 2025 study highlighted that many links claiming to be Torch were actually malicious clones (11). Therefore, caution is essential when using this search engine. It’s advisable to verify the exact onion address from trusted sources.

Not Evil

Not Evil is a search engine focusing on onion services. It offers a straightforward interface and lists various .onion sites. However, like other directories, users should validate the addresses independently to ensure safety.

Comparison Summary

Inclusion in a search index does not guarantee safety. Always verify onion addresses through credible sources before accessing any service. If unsure, seek the service's official clearnet page for the correct .onion address. Remember, a live link only indicates it is reachable at that moment; services can become unavailable or change addresses (2).

How to Open a .onion Link with Tor Browser#

Accessing .onion links requires the Tor Browser. Follow these steps to ensure safe navigation.

1. Download Tor Browser: Obtain Tor Browser from the official Tor Project website. This is crucial for security (7).

2. Verify the Source: Always check that the download is from torproject.org. Verify the accompanying OpenPGP signature to confirm the installer’s integrity (12).

3. Connect to the Tor Network: Launch Tor Browser and connect to the Tor network. This step is necessary to access .onion services, which are not reachable through standard browsers (1).

4. Paste the Complete Address: Copy the full .onion address into the Tor Browser's address bar. Ensure the address is correct, as even a single mistyped character can prevent access (2).

5. Inspect Warnings Before Proceeding: Pay attention to any security warnings displayed by the browser. These warnings help identify potential risks associated with the site you are about to visit (5).

Ordinary browsers cannot resolve .onion domains. Users should never attempt to replace .onion with a standard top-level domain (TLD) like .com or .org, as this will lead to connection failures. Tor Browser is available for both desktop and Android devices, ensuring accessibility across platforms.

How to Verify an Onion Address Before You Trust It#

Verifying an onion address is essential to ensure safety. The process involves a hierarchy of checks, starting with official sources.

First, always check the organisation’s official website or documentation. For example, the CIA’s onion service is confirmed on their clearnet page. Their v3 address is ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion (7).

Next, look for signed announcements or established repositories. These can provide additional verification of the onion address. For instance, the Tor Project lists its own v3 addresses, such as the one for their official site (6).

Directories should only be used as discovery tools. While services like Ahmia provide a list of onion addresses, they do not guarantee safety or legitimacy (10).

Be aware that current v3 onion hostnames contain 56 characters before the “.onion” suffix. This format alone does not prove ownership. Even a minor mistake in the address can prevent access (3) (2).

Verification Checklist

Before trusting an onion address, consider the following six-point checklist:

1. Exact Character Comparison: Ensure the address matches the official source without any discrepancies.
2. Provenance: Confirm the address is listed on an official website or document.
3. Unexpected Redirects: Be cautious of any redirects that lead to unfamiliar sites or addresses.
4. Impersonation: Watch for lookalike domains that may mimic legitimate services.
5. Login Requests: Never provide personal information or login details unless you are sure of the site’s legitimacy.
6. Cryptocurrency Demands: Be wary of any requests for cryptocurrency payments, especially from unknown sources.

By following these steps, users can help protect themselves from phishing and other malicious activities. Always treat the dark web with caution, and verify onion addresses thoroughly before proceeding.

Safety Checklist Before Visiting Onion Services#

Navigating onion services requires careful planning and precautions. Here’s a checklist to help ensure a safer experience before accessing these hidden sites.

Safety Checks

1. Use an Updated Tor Browser: Always download Tor Browser from the official website. This ensures you have the latest security features (7).

2. Keep Default Security Settings: Maintain the default security boundaries within the Tor Browser. Adjusting these settings can expose you to risks.

3. Avoid Downloading Executables and Documents: Do not download files unless absolutely necessary. Opening these files can leak your non-Tor IP address and compromise your anonymity (13).

4. Do Not Reuse Personal Credentials: Never use your usual login information on onion services. This can lead to identity exposure.

5. Understand Browser Isolation vs. Anonymity: Logging into an account can still reveal your identity, regardless of browser isolation. Remain cautious even when using Tor.

6. Verify Onion Addresses: Always check that the .onion address matches the official source. Discrepancies can indicate phishing attempts (4).

7. Be Cautious with Live Links: A ‘live’ link only confirms it is reachable at that moment. Onion services can disappear or change addresses unexpectedly (2).

8. Avoid Marketplaces and Illegal Content Hubs: This directory excludes marketplaces, illegal-content hubs, and unverifiable mirrors. Engaging with these can lead to legal issues.

9. Check for Official Announcements: Look for signed statements or documentation confirming the onion address. This adds an extra layer of verification.

10. Stay Informed About Risks: Regularly review updates on potential threats and scams in the dark web community to stay aware of new dangers.

Following this checklist can significantly reduce risks while exploring onion services. Always prioritise your safety and privacy.

What “Live,” “Verified,” and “Safe” Really Mean#

Navigating the dark web requires understanding the terminology used to describe onion services. Just because an onion service is reachable does not guarantee its legitimacy.

A ‘live’ link indicates that the service is accessible at that moment. However, onion services can disappear temporarily or permanently, and a single mistyped character in a 56-character address can prevent access (2). Therefore, a live link is not synonymous with safety.

The term ‘verified’ suggests that the address has been confirmed by its operator. This means the operator has publicly acknowledged ownership of the onion address. However, this does not imply that the service is safe to use. The Tor Project explicitly states that it cannot certify the content of .onion services, and users should not equate verification with safety (5).

The label ‘safe’ is misleading. It is essential to differentiate between three distinct categories:

1. Reachable at Last Check: This means the service was accessible when last tested, but it could change at any moment.

2. Address Confirmed by Operator: This indicates that the operator has verified the address, but it does not ensure the service is secure or legitimate.

3. Established Operator: This refers to services run by recognised entities that have a track record of reliability, such as the CIA or well-known media organisations.

Onion services provide encrypted connections through the Tor network, ensuring some level of privacy. Still, the authenticity of the service depends on obtaining the correct address from a trustworthy source. Always verify the onion address against official documentation to mitigate risks associated with phishing or malicious activities (4).

Dead Links, Mirrors, Phishing, and Connection Errors#

Several factors can cause failures when accessing .onion services. Temporary downtime is common; services can go offline for maintenance or due to technical issues. Address rotation is another reason; some services frequently change their .onion addresses. Users must note that copied v2 addresses are obsolete; since 2021, only v3 addresses with 56 characters are supported (3). Network blocking can also prevent access; local ISPs may restrict Tor traffic, leading to connection errors. Finally, typing errors are a frequent cause of failure, as even one incorrect character in a 56-character address can stop the connection (2).

To troubleshoot these issues, follow this order of checks:

1. Recheck the Address: Ensure that the .onion address is exactly 56 characters and correctly typed.
2. Consult the Official Page: Look for the operator’s official clearnet page to confirm the current .onion address.
3. Retry Later: If the service is down, waiting and trying again later may resolve the issue.
4. Update Tor Browser: Ensure you are using the latest version of Tor Browser, as updates can fix bugs and improve connectivity (14).
5. Use Bridges: If Tor is blocked, consider using bridges to access the network (2).

Reporting a dead or suspicious entry is crucial for maintaining directory integrity. When submitting a report, include the date and any relevant details about the issue. This helps keep the directory updated and safe for others. Be vigilant about phishing attempts; if an address seems unfamiliar or differs from the official source, do not proceed. Always compare the onion address against verified sources before accessing any service (4).

Common Mistakes and Misconceptions#

Treating a directory entry as proof

A directory entry is not provenance. Readers often trust listed addresses without checking ownership or the entry’s last-reviewed date. We advise comparing the directory entry with the organisation’s own landing page before sharing information (4).

Reading the onion icon as approval

The onion icon is not approval. It confirms an onion-service connection, but says nothing about ownership, reputation, or content risk (1) (5). We assess reachability, authenticity, operator reputation, and content separately before proceeding.

Trusting a familiar service name

Brand names do not identify services. Readers may search by name because exact onion addresses are difficult to recognise. Most links claiming to be Torch were malicious or scam clones, so verify the exact address instead (11).

Accepting short addresses as valid alternatives

Short addresses are not convenient aliases. Old v2 hostnames contain 16 characters and have been unsupported since 2021, while current v3 hostnames contain 56 (3). Reject obsolete links and obtain the current address from the operator’s published materials.

Assuming larger indexes are more reliable

Index size does not prove accuracy. Ahmia’s published count moved between 18,000 and 22,000 within one week in April 2025 (11). We use indexes for discovery, then require operator evidence and a visible review date.

Replacing a failed link with any mirror

A failed page does not prove fraud. Onion services may disappear temporarily, while one mistyped character can also prevent access (2). Recopy the operator-published address, confirm Tor works elsewhere, then retry later before seeking alternatives.

Key Takeaways#

Live directories are starting points, not trust signals.

• We recommend defining the service needed before searching for an address.
• Confirm ownership through operator-controlled materials before entering credentials or sharing sensitive information (4).
• Treat availability as temporary; it proves neither identity nor trustworthy content (2) (5).
• Keep network privacy separate from account anonymity, reputation, and legal risk.
• Before replacing a failed address, recheck its source and avoid unconfirmed mirrors.

The next step is learning a repeatable process to access an onion page safely.