Find Onion Sites: Your Guide to the Dark Web

What Onion Sites Are—and Why They Are Hard to Find#

Onion sites are part of the dark web, accessible only through the Tor network. They differ from the surface web, which consists of indexed and publicly accessible sites, and the deep web, which includes unindexed content like private databases. Onion services are not indexed by ordinary search engines due to their unique domain structure and the privacy protocols they employ. Google only indexes pages that can be publicly accessed, meaning that onion-only pages remain largely invisible to traditional search engines (6).

Recognising a valid onion address is crucial. A current v3 onion address consists of 56 characters followed by ‘.onion’. This format encodes the service's identity public key, which helps authenticate the service and ensures end-to-end encryption (7) (3). However, a plausible format does not guarantee legitimacy. Many imitation sites may mimic valid addresses, leading users to potentially harmful or fraudulent services.

The challenge of finding legitimate onion sites is compounded by the fact that about 90% of onion-address lookups are invalid, and over 90% of attempted connections to onion services fail (8). One incorrect character in a 56-character address makes the site unreachable, and services may also disappear temporarily or permanently (4). Therefore, verifying addresses through trusted sources is essential before engaging with any onion service.

Before You Search: Set Up Tor Safely#

To access onion sites securely, start by downloading the Tor Browser exclusively from the Tor Project's official website. After installation, ensure your operating system and browser are up to date. This helps protect against known vulnerabilities.

Tor Browser offers three security levels: Standard, Safer, and Safest. The Standard level provides the usual browsing experience but may allow some scripts. The Safer level disables certain scripts and features, enhancing privacy. The Safest level blocks all scripts and requires user interaction for media playback, offering maximum protection against potential threats.

A common misconception is that using a VPN with Tor is necessary for anonymity. While a VPN can provide additional privacy, it is not required to use Tor effectively. In fact, the Tor Project advises caution when combining Tor with a VPN, as improper configuration can compromise anonymity and reduce Tor's built-in protections (9).

Remember, running the Tor Browser only protects traffic generated through it. Other browsers or applications must be configured separately or they will connect outside of Tor, exposing your identity (10). Additionally, be cautious with downloaded files, as some formats may attempt to connect to the internet, revealing your non-Tor connection (11).

Setting up Tor correctly enables safer exploration of onion sites, but it requires careful attention to detail and understanding of its features.

5 Ways to Find Onion Sites, Ranked by Reliability#

Finding legitimate onion sites requires a cautious approach. We ranked discovery methods by their reliability, from most to least reliable.

Official clearnet pages are the most reliable source. They often include verified onion addresses, such as those from government agencies. For example, the CIA lists its onion address on its public website, ensuring authenticity (2). This method is best for users seeking trustworthy services directly.

Next are publisher-maintained link lists. These are curated by reputable organisations or individuals who regularly update their links. A legitimate use case is finding news outlets that operate onion services. However, users should cross-check these links with the organisation's official website for accuracy (5).

Reputable repositories follow closely. They compile various onion addresses, often categorised by service type. While useful, these repositories can become outdated, so verifying links independently is crucial. Users should check the last updated date for reliability.

Moderated directories offer a mixed reliability. They allow user submissions but maintain some level of oversight. For instance, a user might find a directory listing for a privacy-focused forum. However, the potential for outdated or misleading information exists, requiring extra caution (12).

Onion search engines are the least reliable method. These tools index onion sites but often struggle with accuracy. A significant portion of searches may yield invalid results, as studies show that over 90% of onion-address lookups can fail (8). Users should be prepared to verify any address found through these engines independently.

Links copied from forums, social posts, or random aggregators require independent verification. These sources often lack credibility and can lead to imitation sites that mimic legitimate addresses. Cross-referencing with established directories or official websites is essential to avoid scams and ensure safety.

Onion Search Engines and Directories Compared#

Different search engines and directories serve as gateways to onion sites, each with distinct features and limitations. Understanding these can help users navigate the dark web more effectively.

Ahmia is a non-commercial search engine that reports significant usage, filtering out child sexual abuse material (12). However, it only indexes publicly accessible onion services. Torch provides minimal filtering, making it a broad resource but often results in many invalid links (8).

Haystak offers a subscription model for advanced searches but may not be suitable for casual users. OnionLand Search relies on user submissions, which can lead to outdated content and inaccuracies. Curated mainstream lists provide a higher level of trust but vary based on the curator's diligence.

Users must approach these resources with caution. Not every indexed result is safe, and verification is essential before engaging with any service.

Legitimate Onion Sites by Use Case#

Identifying legitimate onion sites can enhance your experience on the dark web. We have organised some confirmed examples based on their use cases: news, privacy-focused search, whistleblowing, communication, and public-interest services.

For news, the BBC operates an onion site, providing access to content in regions with restricted internet. The New York Times also maintains an onion address, allowing readers to access their journalism while safeguarding their identities. These services offer reliable news but may have limited interactivity compared to their clearnet counterparts.

In the realm of privacy-focused search, DuckDuckGo offers an onion version, prioritising user anonymity. Ahmia, a non-commercial search engine, reports approximately 1,715,358 searches monthly, filtering out harmful content (12). Both options aim to protect user privacy, yet their search results may vary in relevance.

Whistleblowing platforms, such as SecureDrop, facilitate anonymous communication between sources and journalists. Users should compare SecureDrop's onion address with the organisation's public page to ensure accuracy (5). This service is critical for those wishing to report sensitive information safely.

For secure communication, Facebook has an onion site, enabling users to connect while maintaining privacy. It's essential to verify the address as it is prone to imitation.

Public-interest services like ProPublica also operate on the dark web, providing investigative journalism to those who may not access it otherwise. Their commitment to transparency can be beneficial, but users should confirm the onion address through official channels.

Legitimate onion sites are vital for safe exploration of the dark web, but users must remain vigilant. Always verify addresses against official sources to avoid potential scams or impersonations.

How to Verify an Onion Address Before Opening It#

Verifying an onion address is crucial to ensure safety and authenticity. Follow a repeatable workflow to confirm an address before accessing it.

First, find the onion address on the publisher's official clearnet site. This is the most reliable source for verification. Compare the entire 56-character string before ‘.onion’. Each character matters; one mistake can render the site unreachable (4).

Next, check a second authoritative source. This could be another official page or a trusted directory that lists onion services. Using multiple sources reduces the risk of falling for imitation sites. Keep in mind that HTTPS, a polished design, directory placement, and a familiar brand name do not independently prove authenticity.

Bookmark the verified address locally for future reference. This practice helps avoid searching for the address again, which could lead to incorrect or unsafe sites.

The importance of this process is underscored by the fact that around 90% of onion-address lookups are invalid, and many services may disappear unexpectedly (8). Verifying through trusted sources is essential to safely navigate the dark web.

In summary, always cross-check onion addresses with official sources and maintain a careful approach to ensure a secure experience.

How to Spot Scams, Clones, and Dangerous Listings#

Identifying scams and dangerous listings is crucial when exploring the dark web. Certain warning signs can alert users to potential risks.

Look for addresses that closely resemble legitimate onion sites. Scammers often create look-alike domains to deceive users. For example, a slight variation in spelling or additional characters can indicate a clone. Additionally, be wary of urgent payment requests, especially those demanding cryptocurrency deposits. Legitimate services typically offer multiple payment options and do not pressure users into immediate transactions.

Unexpected downloads should raise red flags. If a site prompts you to download files without clear justification, avoid it. Similarly, requests for recovery phrases or personal information are concerning. No credible service should ask for sensitive data without proper context.

Another warning sign is claims that a directory has verified every listing. These assertions can be misleading. Always verify addresses independently, as many directories may contain outdated or inaccurate information.

Before proceeding with any onion site, use this checklist:

• Check for look-alike addresses.
• Avoid sites that demand urgent payments.
• Refrain from downloading unexpected files.
• Do not provide recovery phrases or personal data.
• Verify claims of listing verification.

Never submit credentials or personal information when the source's authenticity is uncertain. This cautious approach helps prevent falling victim to scams or malicious sites while exploring the dark web.

Why an Onion Link Does Not Work#

Several common issues can prevent an onion link from working. The service might be offline temporarily or permanently. Operators may take down services for maintenance or other reasons. Additionally, if the address is obsolete or mistyped, it will not connect. Even a single incorrect character in a 56-character onion address makes the site unreachable (4).

Another possibility is that the Tor Browser is outdated. Using an outdated version can lead to connectivity issues. Ensuring your Tor Browser is current is crucial for accessing onion services smoothly.

It's also important to note that older v2 onion addresses are unsupported since 2021 (3). Users should only seek out current v3 addresses, which contain a public key for authentication and encryption (7).

In some cases, the site may have moved to a new v3 address. Regularly checking official sources for updated links is advisable. Relying on outdated directories or links can lead to frustration.

Local filtering may also play a role. If you're in a region with strict internet controls, using a Tor bridge might be necessary to bypass these restrictions.

Repeatedly trying to access a non-functional onion site does not confirm its legitimacy. Instead, it can waste time and lead to misinformation. Returning to the publisher's official source to verify the current address is the best practice. This ensures that you are using a legitimate link and reduces the risk of encountering scams or imitation sites.

Dark-Web Safety Claims: Myth vs. Fact#

Not all claims about dark-web safety hold true. For example, many believe that using Tor makes every onion site safe. This is misleading. While Tor encrypts traffic and provides anonymity, it does not guarantee that all onion services are secure. Users may still encounter phishing attempts or malware on these sites (11).

A VPN is not mandatory for accessing the dark web. Although some users prefer to combine a VPN with Tor, the Tor Project advises caution. A poorly configured VPN can reduce anonymity or interfere with Tor's protections (9). Therefore, using a VPN should be a well-informed choice rather than a default requirement.

Onion services are not inherently illegal. The U.S. Department of Justice states that Tor itself is legal, but activities conducted through Tor remain subject to the same laws as those on the clearnet (13). This means that while some onion sites may engage in illegal activities, many legitimate services exist as well.

Search engines indexing onion sites do not imply endorsement. Google only indexes pages accessible to its bots, which typically excludes onion-only pages (6). Therefore, finding an onion address through a search engine does not guarantee the site's legitimacy or safety.

Users must also consider endpoint risks. While Tor protects traffic, it does not shield users from risks like document metadata leaks or unintentional disclosure of personal information (11). Verifying the authenticity of onion addresses is crucial to avoid scams or malicious sites.

In summary, understanding these distinctions can help users navigate the dark web more safely. Always approach onion services with caution and verify addresses through reliable sources.

Which Discovery Method Fits Your Needs#

The best choice depends on what the reader needs to find.

If You Want Filtered Discovery, Choose Ahmia

Choose Ahmia because it removes child sexual abuse material from results (12). Its coverage includes only publicly accessible onion services, so specialist destinations may remain absent.

If You Need Broader Coverage, Choose Torch

Choose Torch when broad coverage matters more than tidy results. Its minimal filtering expands discovery, but it also returns many invalid links (8). Treat each listing like an unverified noticeboard advert requiring further checks.

If You Need Advanced Searches, Consider Haystak

Consider Haystak when advanced search controls justify paying for access. Its subscription model suits repeated research better than occasional browsing or a first visit.

If You Prefer Human Selection, Use Curated Lists

Choose curated mainstream lists when editorial judgement matters more than sheer volume. Manual selection can improve trust, but reliability still depends on the curator’s diligence.

If You Know the Publisher, Use Its Official Page

Choose the publisher’s clearnet page when seeking one recognised onion service. This route provides stronger confirmation than search engines, user submissions, or third-party directories. Before opening anything, ensure the complete address matches the publisher’s own listing.

Final Verdict: What to Choose#

Ahmia is our practical default for general discovery.

Choose the publisher’s official page when the reader already knows the intended service. Use curated lists when seeking lawful resources within a defined category. Torch suits broader research, but demands more manual screening and patience.

Before opening any listing, ensure its purpose matches the reader’s legal needs. Our guide to legit onion sites helps narrow the search towards credible resources.

Avoid anonymous link dumps, unsolicited recommendations, and directories claiming universal verification. Skip payment-first listings, suspicious marketplaces, and services requesting unnecessary personal details. Discovery tools resemble street maps: they show possible routes, not trustworthy destinations. When uncertainty remains, close the page rather than testing its claims.