Oniondir
Oniondir is a directory of .onion sites, providing users with categorized links to access hidden services on the Tor network safely.
Written: · 17 min
An onion directory is a hand-curated static list of .onion links, unlike search engines that crawl and verify live sites. Current addresses use the v3 format of exactly 56 characters from a-z and 2-7 followed by .onion. All 16-character v2 addresses stopped working in 2021.
Use directories only with these checks:
Each entry shows a "last verified" month and year.
Compare the full 56-character address against the organization's clearnet HTTPS site.
Avoid entries without timestamps, shorteners, or deposit demands.
Start from the Tor Project's official index at onion.torproject.org, which listed 65 services as of October 13, 2026. (1) (2) (3) (4) (2) (3) (4)
What Is an Onion Directory?
An onion directory is a curated list of .onion links, providing access to hidden services on the Tor network. Unlike surface web directories, which rely on central registrars, onion directories are hand-edited collections. They are static and do not crawl the network for live sites, making them distinct from onion search engines like Ahmia (2).
These directories typically feature services that use v3 .onion addresses, which are 56 characters long and consist of a mix of letters and numbers, followed by the .onion suffix (2). The transition from the older v2 addresses, which were retired in 2021 due to security vulnerabilities, means that only v3 links are currently valid (3). This change has made it essential for users to ensure they are accessing the correct formats.
Examples of popular onion directories include The Hidden Wiki and various community-driven lists. These resources can provide valuable links, but they often contain outdated or dead addresses due to the rapid changes in the availability of onion services (5). A responsible directory will indicate when an entry was last verified, helping users avoid outdated links (4).
Directories exist because there is no central authority on the Tor network to verify .onion addresses. This lack of regulation makes phishing attempts and scams more prevalent, as malicious actors can create lookalike sites to deceive users (3). Therefore, it is crucial to verify onion links carefully. Users should compare the full .onion address character-by-character against an official clearnet publication or PGP-signed list (3).
For reliable access, starting with the Tor Project's official index at onion.torproject.org is recommended. As of October 13, 2026, this index listed 65 individual onion services, providing a trustworthy foundation for exploring the dark web (1).
How Onion Directories Work
Onion directories function by curating and listing .onion links, which provide access to hidden services on the Tor network. They differ from onion search engines, which crawl the network for live sites and check their status. Directories like the Hidden Wiki are typically hand-edited and static, meaning they do not update dynamically (2).
The current standard for .onion addresses is the v3 format, consisting of 56 characters made up of letters a-z and numbers 2-7, followed by the .onion suffix. This format is a base32 encoding of a 32-byte ed25519 public key, along with a checksum and version number (2). The previous v2 addresses, which were 16 characters long, were retired in 2021 due to security vulnerabilities, making them obsolete (3). Users should only interact with v3 addresses to ensure security and functionality.
Onion directories can be maintained through various methods: manual curation, community contributions, or automated systems. Manual directories often involve individuals or small groups updating links, while community-curated directories rely on user input to keep listings current. Automated directories may use scripts to verify and update links but can still suffer from outdated information (5). A responsible directory lists a "last verified" date for each entry, which helps users identify potentially dead links (4).
Typical categories found in onion directories include search engines, marketplaces, forums, and wikis. This structure allows users to navigate the vast array of services available on the dark web more effectively. However, due to the high volatility of onion services, users should remain cautious, as many directories accumulate defunct addresses and scams (5).
To mitigate risks, it is advisable to verify any onion link against the operator's official clearnet website or a PGP-signed list. This ensures that users are accessing legitimate services and not falling victim to phishing attempts or honeypots (3).
Popular Onion Directories in 2025
Several onion directories have gained popularity due to their curated lists of .onion links. These directories provide users with access to hidden services on the Tor network while aiming to minimize risks associated with phishing and scams.
Notable Directories
The Hidden Wiki: A long-standing directory known for its extensive collection of .onion links, including forums and marketplaces. It requires careful verification due to the presence of outdated entries (5).
DarkDir: A curated directory that emphasizes security. It includes a "last verified" date for each entry, helping users avoid obsolete links (4).
OnionLinkHub: A community-driven platform that allows users to submit and review .onion links. This directory prioritizes active links and user feedback in maintaining its listings (6).
Torch: A search engine that indexes .onion sites. It features a user-friendly interface and allows users to search for specific services. Torch-related indexes can be valuable for finding current resources (2).
Ahmia: Although primarily a search engine, Ahmia also provides a curated list of verified onion links. It focuses on legitimate services and offers a safer browsing experience (2).
Dark.fail: This curated verification service emphasizes PGP-signed listings. It minimizes phishing risks by providing unclickable links and focusing on verified entries (6).
Example Links
The Hidden Wiki: [hiddenwiki.onion]
DarkDir: [darkdir.onion]
OnionLinkHub: [onionlinkhub.onion]
Torch: [torch.onion]
Ahmia: [ahmia.onion]
Dark.fail: [dark.fail.onion]
Current Status
As of 2025, many directories still struggle with outdated links. A responsible directory will indicate when an entry was last verified, which is crucial for users seeking reliable information (4). Always verify .onion addresses carefully by comparing them against official clearnet sites or PGP-signed lists (3).
Using well-maintained directories can help navigate the dark web safely. However, users should remain cautious of potential scams and ensure they are accessing legitimate services.
Safe Navigation Practices on Onion Directories
Using onion directories safely requires a structured approach. Follow these step-by-step recommendations to navigate the Tor network securely.
Step 1: Use the Tor Browser
Always access onion directories using the Tor Browser. This browser anonymizes your internet connection and provides a secure environment for browsing .onion sites. Ensure you have the latest version installed to benefit from security updates.
Step 2: Verify .onion Links
Before clicking on any .onion link, verify its authenticity. Compare the full 56-character address against the official clearnet publication of the service or a PGP-signed list. Do not trust links from chat, forums, or unsolicited messages, as they may lead to phishing attempts (3).
Step 3: Avoid Direct Clicks from Untrusted Sources
Refrain from clicking on links shared in unverified directories or through social media. Instead, manually type the .onion address or use bookmarks for verified links. This practice reduces the risk of accessing malicious sites that may look legitimate.
Step 4: Use Bookmarks
Bookmark verified .onion links for frequent access. This prevents the need to search for links each time, reducing the chances of encountering outdated or fraudulent sites. Ensure that bookmarks are updated regularly based on the latest verification information.
Step 5: Look for Red Flags
Be aware of common red flags in onion directories. Avoid sites that demand deposits before providing content, offer unrealistically attractive deals, or use dynamic redirects that obscure the full .onion address. These practices are often associated with scams (7).
Step 6: Follow Tor Project Guidelines
Adhere to the safety guidelines provided by the Tor Project. These guidelines emphasize the importance of using verified onion addresses and being cautious of potential risks associated with the dark web. The official index at onion.torproject.org is a reliable starting point, listing verified services (1).
By following these practices, you can enhance your safety while navigating onion directories. Always prioritize verification and caution to minimize risks associated with the dark web.
Risks and Threats When Using Onion Directories
Engaging with onion directories carries several risks. Users should be aware of these threats to navigate the dark web safely.
Malware Distribution
Many onion sites are known for distributing malware. Cybersecurity reports indicate that a significant number of .onion sites host malicious content, leading to infections when users download files or click on links. For example, a study found that nearly 20% of analyzed onion sites were identified as malicious (5).
Phishing Attempts
Phishing is rampant in the dark web. Lookalike sites often mimic legitimate services to steal user credentials. The lack of a central authority for .onion addresses allows these phishing clones to proliferate. This tactic is especially effective due to the anonymity provided by the Tor network (3).
Law Enforcement Honeypots
Some onion sites serve as honeypots for law enforcement. These sites are designed to capture data from users who visit them. Engaging with such sites may lead to surveillance or legal consequences. Users should remain skeptical and verify the legitimacy of services before interaction.
Exit Node Vulnerabilities
While the Tor network provides anonymity, exit nodes can expose users to risks. If a user accesses a non-encrypted site after using Tor, exit nodes may monitor traffic. This vulnerability emphasizes the importance of using services that maintain encryption throughout (3).
Doxxing Risks
Doxxing can occur if a user inadvertently reveals personal information while using onion directories. This risk is heightened when interacting with unverified services. Users should be cautious about sharing any identifiable information, as it can lead to exposure outside the Tor network.
Real-World Examples
The prevalence of malicious sites is documented in various cybersecurity reports. For instance, a report highlighted that over 1,000 malicious .onion sites were identified in a single analysis (5). This statistic underscores the importance of skepticism when using onion directories.
To mitigate these risks, users should rely on curated directories with verification timestamps, compare .onion addresses against official sources, and avoid links from untrusted sources. Following these guidelines can help reduce exposure to threats while navigating the dark web.
How to Verify Onion Links and Directories
Verifying the legitimacy of onion links and directories is crucial for safe browsing on the Tor network. Several methods can help ensure you access genuine services and avoid scams.
Verification Methods
PGP Signatures: The safest way to confirm a .onion address is through PGP signatures. Compare the address with the operator's official clearnet publication or a PGP-signed list. This step ensures you are accessing legitimate sites and not phishing attempts (3).
Community Consensus: Engage with forums and communities focused on the dark web. User feedback can provide insights into the reliability of specific directories. Look for discussions about the legitimacy of links or directories (3).
Uptime Monitors: Services that track and report the uptime of onion sites can help identify active links. This information is valuable in determining whether a directory is up-to-date. However, it should be used in conjunction with other verification methods.
Cross-Referencing Multiple Directories: Consult various onion directories to verify the same .onion address. If multiple reliable sources list the same address, it is more likely to be legitimate. Avoid relying solely on one directory, as many accumulate outdated links (5).
Practical Checklist for Verification
Check PGP Signatures: Ensure the .onion address is signed and compare it against official sources.
Look for "Last Verified" Dates: A responsible directory will indicate when an entry was last checked (4).
Cross-Reference: Compare the address across multiple directories before accessing.
Avoid Unsolicited Links: Never click links shared in forums or chat without verification (3).
Be Cautious of Red Flags: Watch for sites asking for deposits, offering unrealistic deals, or using URL shorteners (7).
Warning About Fake Directories
Fake directories and cloned sites are prevalent on the dark web. Phishing clones mimic legitimate services to steal user credentials. The absence of a central authority for .onion addresses increases this risk (3). Always verify addresses and be skeptical of sites that appear too good to be true.
By following these verification steps, you can navigate onion directories more safely and minimize the risks associated with the dark web.
Common Scams and Red Flags in Onion Directories
Onion directories can expose users to various scams. Understanding prevalent scam types and recognizing red flags is essential for safe navigation.
Common Scam Types
Fake Markets: Many onion sites impersonate legitimate marketplaces. These sites often require deposits before providing access to promised goods or services, leading to financial loss.
Phishing Clones: Lookalike sites are rampant on the Tor network. These phishing clones mimic trusted services to steal login credentials or personal information. The decentralized nature of .onion addresses makes this scam particularly effective (3).
Ransomware Links: Some directories may link to sites that deploy ransomware. Users who download files from these sites may find their data encrypted and held for ransom.
Visual and Textual Red Flags
Identifying potential scams involves looking for specific signs:
Demands for Deposits: Be wary of sites asking for upfront payments before delivering content or services. Legitimate services typically do not require deposits (7).
Unrealistically Attractive Offers: Offers that seem too good to be true often are. Scammers exploit this to lure users into traps.
Links from Unverified Directories: If a directory lacks a verification timestamp, it may be outdated or unreliable (4). Always prioritize directories that indicate when entries were last verified.
Dynamic Redirects or Shorteners: Links that obscure the full .onion address can indicate malicious intent. These methods are often used to hide phishing sites from users (7).
Documented Cases
Security blogs document numerous cases of scams in onion directories. For example, a study noted that many users fell victim to phishing attempts due to misleading directory listings (8). Furthermore, a significant number of .onion sites analyzed were flagged as malicious, emphasizing the need for caution (5).
By being aware of these common scams and recognizing red flags, you can enhance your safety while exploring onion directories. Always verify links and avoid engaging with suspicious sites to minimize risks.
Onion Directory vs Search Engines: Key Differences
Onion directories and search engines serve distinct purposes for navigating the dark web. Understanding their differences can enhance safe browsing practices.
Onion directories, such as the Hidden Wiki, provide curated lists of .onion links. These lists are typically hand-edited and may become outdated quickly, accumulating defunct addresses and scams (2). A responsible directory will display a 'last verified' date for each entry, indicating the currency of the information (4). However, many directories lack this feature, making them high-risk sources (5).
Conversely, onion search engines like Torch and Ahmia crawl the dark web, re-checking the liveness of sites and applying filters to improve search results. These engines can be more reliable for discovering active .onion addresses, as they provide real-time data instead of static lists. However, their effectiveness can vary based on the search engine's algorithms and the nature of the indexed content.
Using onion directories is beneficial when seeking specific, well-known resources or when the user wants to browse a curated selection. However, this method is riskier due to the potential for outdated or malicious links. Users should verify any found links against trusted sources to minimize phishing risks (3).
In contrast, search engines are preferable for broader searches and discovering new content. They can reduce the likelihood of encountering dead links and scams, but users should remain cautious. The decentralized nature of .onion addresses means that phishing clones are prevalent, making it essential to verify addresses through official channels (3).
In summary, use onion directories for curated resources and verified links, and rely on search engines for active content discovery. Always prioritize safety by verifying .onion addresses before accessing them, regardless of the method used for discovery.
Essential Security Tools and Habits for Dark Web Browsing
To navigate onion directories safely, users should employ specific security tools and adopt daily habits that minimize risks.
Recommended Security Tools
Tor Browser: Always use the latest version of the Tor Browser. It is specifically designed for accessing .onion sites, providing anonymity and security features.
NoScript: This browser extension blocks scripts by default. It helps prevent malicious scripts from executing on .onion sites, reducing exposure to malware.
HTTPS Everywhere: This tool automatically uses HTTPS connections whenever possible, securing communications and protecting against eavesdropping.
VPN Considerations: Using a VPN can add an extra layer of anonymity. Choose a reputable VPN that does not log user activity and is compatible with Tor.
Daily Security Habits
Verify Links: Always verify .onion addresses against official sources. Use PGP signatures to confirm authenticity (3).
Engage with Trusted Directories: Rely on curated directories that indicate when entries were last verified (4). Avoid using outdated or unverified sources.
Stay Informed: Regularly check for updates on known phishing sites and scams within the dark web community. Awareness helps in identifying threats.
Limit Personal Information: Refrain from sharing identifiable information while browsing. This practice reduces the risk of doxxing or other privacy breaches.
Security Checklist for Directory Users
Use the latest Tor Browser version.
Install NoScript and HTTPS Everywhere.
Confirm .onion addresses using PGP signatures.
Check "last verified" dates on directories.
Avoid links from unverified sources.
Monitor for phishing red flags, such as demands for deposits or unrealistic offers (7).
Use a reputable VPN for additional anonymity.
By implementing these tools and habits, users can enhance their security while exploring onion directories, reducing the likelihood of encountering scams or malicious content.
Onion Directory Comparison and Skeptic's Checklist
| Directory Name | Trust Signals | Update Frequency | Verification Methods | Risk Indicators |
|---|---|---|---|---|
| Tor Project Index | Official source, 65 services listed | Updated regularly | PGP signatures, last verified dates | Low risk if verified |
| Hidden Wiki | Curated but often outdated | Varies, high risk | No verification timestamps | High risk of scams |
| Dark.fail | PGP-signed listings, community feedback | Regularly updated | Cross-referencing, community consensus | Moderate risk, safer than others |
| Ahmia | Search engine with live checks | Continuous, real-time data | Crawls and verifies links | Lower risk, but still verify |
Common questions
- What is an onion directory?
An onion directory is a curated or static list of .onion links. These lists are typically hand-edited like Hidden Wiki-style pages. They differ from onion search engines such as Ahmia that crawl sites and re-check liveness. You should check for a last verified month and year on each entry.
- How do onion directories work?
Onion directories collect and display .onion addresses for users to browse. In the v3 protocol a service publishes a signed descriptor to rotating hidden service directories chosen daily by a shared random value. This uses blinded keys so HSDirs cannot learn the real onion address. Directories themselves do not verify liveness continuously unlike search engines.
- Where can I find a list with V3 onion addresses?
The Tor Project's official onion index at onion.torproject.org listed 65 individual onion services as of October 13 2026. Popular curated onion directories in 2025-2026 recommend starting with official project publications on clearnet sites. You should look for entries marked as verified provisional or retired with last-checked dates. All 16-character v2 onion addresses were retired network-wide in 2021.
- Are onion directories safe to use?
Onion directories carry risks because they accumulate defunct addresses and scam pages. This occurs due to the volatility of onion services and lack of continuous verification. Curated verification services like Dark.fail use PGP-signed unclickable listings. No directory eliminates all threats so you must verify each link yourself.
- What are the risks of using onion link directories?
The absence of a central registrar for .onion addresses makes lookalike phishing clones the most common trap. General-purpose directories repeatedly accumulate defunct addresses and scam pages. V2 addresses became dead after 2021 so any encountered are fake. You face higher risk when a directory lacks last verified timestamps.
- How to verify onion links safely?
Compare the full 56-character address character-by-character against the operator's official clearnet publication. The safest way is from the organization's own clearnet HTTPS website via the Onion-Location header. You should never trust addresses from chat forums or unsolicited messages. Onion services are self-authenticating so connecting verifies the private key holder.
- What are common scams on the dark web directories?
Common red flags include demands for deposits before content and unrealistically attractive offers. Links from unverified directories only or those using dynamic redirects also signal danger. Phishing clones mimic trusted services to steal credentials. You should avoid any directory without a last verified date.
Conclusions
You should remember these points before exploring any onion directory.
Directories often contain outdated links and scam entries; always check the last verified date on each listing.
V2 addresses became invalid after 2021; any 16-character .onion link you see is fake.
Compare the full 56-character address character by character against the service operator’s official clearnet page.
Prefer directories that show verification timestamps and avoid those without them.
Use search engines for active links rather than static lists when possible.
Next, read the step-by-step instructions in Accessing Onion Web Addresses: A Step-by-Step Guide before you open your first link.
Footnotes
[1] Tor Project’s Official Onion Sites
[2] Onion Address Explained: How .onion Links Really Work
[3] Onion Links Directory: Verified Legitimate .onion Sites
[4] Onion Links: Verified .onion Directory Guide (2026)
[5] Which onion directories and dark‑web search engines are safest
[6] Which Dark Web Directories Are Most Reliable