To check a .onion link, find the complete address on the organization’s own official website or another channel you already trust, then compare it character by character before opening it in Tor Browser. Tor can help verify that a connection reaches the onion address you entered; it cannot prove that the address belongs to the organization you meant to reach or that its operator is trustworthy.
What a Tor connection verifies—and what it does not
Onion services are reached through Tor. A current onion address consists of 56 letters and numbers followed by .onion. Even a small transcription error can keep the service from connecting. The Tor Project explains: “Because of the cryptography involved, the .onion URL lets Tor ensure that it is connecting to the right location and that the connection is not being tampered with.” The Tor Project’s onion-services documentation describes what that protection means.
As an Amazon Associate I earn from qualifying purchases.
Here, “the right location” means the service associated with that exact cryptographic address—not necessarily the organization or person you intended to find. The address’s provenance still matters: you need an independent, reliable way to confirm who published it.
How to check an onion link before visiting
- Find the address through a trusted route. Start at the organization’s known official website or another channel you already trust, and look for its onion address there. A search result, directory, forum post, email, or message is not independent confirmation. For example, the CIA publishes information about its Tor portal in its official FAQ. That is an example of checking an organization’s own published reference, not a recommendation to visit unrelated onion sites.
- Compare the complete address. Copy it from the trusted source and check every character, including the full 56-character address and the
.onionending. Do not try lookalike spellings or assume a familiar name on the page proves its identity. The Tor Project explains the address format and onion-service connection indicators in its official documentation. - Get Tor Browser from the Tor Project. The CIA advises obtaining Tor Browser from the Tor Project rather than another internet source. Its FAQ gives this guidance. Avoid unofficial browser bundles or downloads.
- Check what the browser indicator tells you. Tor Browser indicates when a connection uses an onion service. That helps you understand the type of connection, but it is not a reputation check or proof that the operator is who you expect. The Tor Project notes that an onion icon can appear for HTTP onion services and does not, by itself, show that you are on the “right site.” Read the indicator’s limits in the Tor Project’s documentation.
- Check the source of any unexpected message separately. If a link or attachment arrives unsolicited, do not click it or open the file. Contact the sender or organization another way, such as through contact details you already know, or navigate directly to its official website. The FBI’s online safety tips recommend caution with suspicious messages and downloading files only from trusted sources.
Why HTTPS and the lock icon are not proof of identity
HTTPS can encrypt a connection without making the site’s operator legitimate. Phishing pages can use certificates and imitate trusted organizations. The FBI Internet Crime Complaint Center put it plainly: “Do not trust a website just because it has a lock icon or ‘https’ in the browser address bar.” The IC3 warning, dated June 10, 2019, explains why those indicators do not establish that a site is genuine. Check the address against an independent official source instead.
#1 Best Overall
What Tor Browser’s security levels can and cannot do
Tor Browser’s security levels change which browser features are available. The Safer and Safest levels disable some features that could be used in attacks, but sites may work less reliably. Safest disables JavaScript by default. These settings change exposure to some web features; they do not authenticate an onion address or certify a site’s operator. The Tor Project explains the trade-offs in its guide to adjusting Tor Browser security levels.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.When to stop
If you cannot find the exact onion address through an independent, trusted source, treat it as unverified. Do not enter credentials, send money, or download files from it. The cited guidance does not establish that a public directory or third-party scanner can certify an onion service as legitimate, so do not treat a listing or scan result as a substitute for verifying the address’s source.
Quick Recap
Rank #4
Rank #3
- Made in USA - Proudly produced in Ohio by a Veteran-owned business
- Comprehensive Coverage: This BookFactory log book includes essential fields such as post/shift, time of change, date, weather conditions, and a designated space for detailed notes. This ensures that all relevant information is captured and easily accessible.
- Sturdy Cover: The trans-lux cover protects the log book from wear and tear, ensuring its longevity and maintaining the integrity of your recorded data.
- Essential Security Tool: This log book is an indispensable tool for any organization that values security and accountability. It helps to prevent misunderstandings, improve communication, and ensure a smooth transition between shifts.
- Wire-O with Trans-lux cover, 100 Pages, Dimensions 8.5" x 11" - (Security-Pass-Down) Reorder SKU: LOG-100-7CW-PP(Security-Pass-Down)
Rank #2
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
