Complete Onion Sites List: How to Find Verified .onion Addresses Safely

An onion sites list is a curated collection of .onion addresses, typically organized by category: forums, markets, news outlets, privacy tools, and communication platforms. These lists exist in several forms: static HTML pages hosted on clearnet mirrors, GitHub repositories maintained by volunteers, wiki-style directories that anyone can edit, and Tor-based directories that live entirely on the hidden network.

The purpose is practical. Onion addresses are long, randomly generated strings of characters that are impossible to memorize or guess. A list saves you from typing them by hand or searching blindly. However, lists are also a vector for phishing. A clone of a popular forum might appear on multiple lists under a slightly different address, and users who do not verify the PGP signature or check the official announcement channel will connect to the fake site instead.

Onion directories take several forms, each with different trust models and update frequencies.

• Static clearnet mirrors: HTML pages hosted on regular websites, often maintained by security researchers or privacy advocates. These are easy to access but can go stale quickly and may be taken offline by hosting providers.
• GitHub repositories: Public code repositories that list onion addresses with descriptions. GitHub is searchable and versioned, so you can see when entries were added or removed. However, GitHub is also a target for impersonation and typosquatting.
• Wiki-style directories: Editable pages where the community adds and removes entries. The hidden wiki is the most well-known example. These are decentralized but vulnerable to vandalism and spam.
• Tor-based directories: Onion sites that function as directories themselves, accessible only over Tor. These have no clearnet presence and are harder to censor, but also harder to verify initially.

No single list is authoritative. The best practice is to cross-reference multiple sources and verify each address through official channels before connecting.

Verification is the step that separates safe browsing from phishing. A real onion site operator will publish their address in a way that is difficult to forge.

1. Check the official announcement channel: forums and projects typically announce their onion address on their clearnet site, in a PGP-signed message, or in a pinned post on a trusted social media account.
2. Look for a PGP signature: if the operator has published a public key, verify that the onion address announcement is signed with that key. This proves the announcement came from the operator, not an attacker.
3. Cross-reference multiple lists: if an address appears on three independent lists with the same description, it is more likely to be real than if it appears on only one.
4. Check the domain structure: legitimate onion sites often have v3 addresses (56 characters long) rather than v2 addresses (16 characters), which are deprecated. A v3 address is harder to forge because it is derived from the site's public key.
5. Visit the Useful Resources page on this site: it links to PGP-signed announcements and official directories maintained by the Tor Project and other trusted sources.

If you cannot verify an address through any of these methods, do not connect to it.

Phishing on Tor operates differently from phishing on the clearnet, but the goal is the same: steal credentials or malware.

According to Tor Project documentation on onion service security, attackers register multiple v3 addresses and host clones of popular sites on each one, then seed these fake addresses into lists, forums, and search results. A user who does not verify the address will connect to the clone, log in with their username and password, and the attacker captures both. The clone site often looks identical to the real one, down to the CSS and layout.

This matters because a compromised account on a forum or market can lead to identity theft, financial loss, or law-enforcement attention if the account was used for illegal activity. A clone of a privacy tool might inject malware or a keylogger into the software you download.

Another common attack is the typo domain: an attacker registers an address that is one or two characters different from the real one and relies on users making a typo when entering the address manually. This is why copy-pasting from a verified source is safer than typing by hand.

Using a list responsibly means treating it as a starting point, not a guarantee of safety.

• Always verify the address before connecting, using the steps outlined above.
• Use Tor Browser, not a generic Tor client or a VPN plus Tor. Tor Browser is maintained by the Tor Project and includes protections against fingerprinting and malware.
• Keep Tor Browser updated. Security patches are released regularly, and running an old version leaves you vulnerable to known exploits.
• Disable JavaScript in Tor Browser settings if you are visiting an unfamiliar site. JavaScript can be used to deanonymize you or detect that you are using Tor.
• Do not maximize your browser window. A full-screen window can be used to fingerprint you based on screen resolution.
• Use a separate Tails or Whonix virtual machine if you are accessing sensitive accounts or handling sensitive data. These operating systems are designed for high-security use cases and route all traffic through Tor by default.
• If a site asks you to download software, verify the checksum or PGP signature of the download before running it. A clone site might distribute malware instead of the real software.

The best onion sites list reddit discussions are often outdated or contain misinformation, but they can point you toward more reliable sources. Reddit threads about onion sites tend to attract both genuine users and people spreading phishing links, so treat them as a starting point only.

GitHub repositories labeled as onion site lists or darknet directories are more reliable because they are version-controlled and the repository owner is identifiable. However, GitHub repositories can also be forked and modified by attackers, so verify the repository owner and check the commit history.

The most trustworthy sources are those maintained by the Tor Project itself, security researchers with a public reputation, and the official announcements from the projects you are trying to reach. The Useful Resources page on this site curates links to PGP-signed directories and official onion addresses.

When evaluating any list, ask yourself: who maintains it, how often is it updated, and how do they verify new entries. A list that has not been updated in six months is likely to contain dead links and outdated information.

An onion sites list is more than a convenience. It is a security tool that helps you avoid phishing, malware, and law-enforcement honeypots.

Law enforcement agencies sometimes operate fake onion sites designed to identify and prosecute users. A list maintained by a trusted community is less likely to include these honeypots than a random search result. Similarly, a list that is actively maintained and curated removes dead links and known phishing clones, reducing your exposure to malware.

Understanding how lists work also teaches you to think critically about trust on the internet. You learn to verify sources, check signatures, and cross-reference information rather than trusting a single authority. These skills apply to clearnet browsing as well.

Start by visiting the Useful Resources page on this site to find verified directories and PGP-signed announcements. Bookmark those sources and return to them whenever you need to find a new onion site. Over time, you will develop a sense of which sources are reliable and which are not. That judgment is more valuable than any single list.