Dark Web Guides

How to Access .onion Sites: A Beginner's Guide to Tor

A .onion link does nothing in Chrome — and that is by design. Reaching these addresses takes one free tool, five minutes of setup, and a handful of habits that keep you private and out of trouble. Here is the complete walkthrough, from first download to first search.

By the Onion Search Engine team Updated July 2026 9 min read

Websites ending in .onion are hosted inside the Tor network — a system that anonymises traffic by bouncing it through encrypted relays around the world. Those addresses do not exist in the ordinary internet's address book, which is why pasting one into a regular browser returns an error, and why Google has never indexed a single one of them. To visit a .onion site you need software that speaks Tor's protocol, and for almost everyone that means one thing: Tor Browser.

The good news is that the setup is genuinely simple. The part that deserves attention is not the installation — it is the habits that come after.

Setting up, step by step

  1. Download Tor Browser — from the official site only

    Go to torproject.org and download the version for your system. Tor Browser is free, open source, and available for Windows, macOS, Linux and Android (on iOS, the Tor Project points users to Onion Browser, a third-party app it endorses).

    • Never download Tor from any other website, app store listing you haven't verified, or link sent to you — fake installers are a known attack vector.

  2. Install and connect

    Run the installer and open the browser. On first launch, click Connect. In most countries the standard connection works within seconds; if Tor is blocked where you live, use the built-in bridges option in the connection settings, which disguises Tor traffic.

  3. Choose your security level

    Click the shield icon next to the address bar. Tor Browser offers three levels: Standard, Safer and Safest. Higher levels progressively disable JavaScript and other active content — the main vehicles for browser fingerprinting.

    • For browsing unfamiliar .onion sites, Safer or Safest is the sensible choice. Sites that work without scripts — including script-free search engines — behave identically at every level.

  4. Open your first .onion address

    Paste a verified address into the address bar, exactly as written. Modern v3 addresses are 56 characters long and end in .onion — for example, ours is 37djtvjcpiprohcrlyvlhfil45kdlfizsyvilqskgvdrafn5mocz4cid.onion. Older 16-character (v2) addresses were retired years ago and no longer work anywhere.

  5. Find sites — the right way

    There is no Google for the dark web, so discovery works through two channels: a dark web search engine for keyword searches, and verified directories for known destinations.

    • For searching: use a filtered engine that works without JavaScript, like Onion Search Engine — usable from a normal browser to look around, and from Tor when you want to actually visit results.
    • For known sites (news mirrors, mail providers, official services): a curated directory of verified .onion links beats search, because it protects you from lookalike phishing addresses.

  6. Verify before you trust

    This is the habit that matters most. Because .onion addresses are long and unreadable, phishing clones are the dark web's most common trap: a copied site at an address that differs by a few characters. Before entering any information on a .onion site, confirm its address against an independent, reputable source — the organisation's own clearnet website is ideal.

The habits that keep you safe

Do

  • Keep Tor Browser updated — updates patch real attacks
  • Use Safer or Safest mode on unfamiliar sites
  • Verify .onion addresses through independent sources
  • Use search engines with a no-log policy
  • Close Tor Browser when finished — it forgets everything by design

Don't

  • Enable JavaScript because a site asks you to
  • Log in to personal accounts (email, social) over Tor sessions you want anonymous
  • Download or open files from unverified sites
  • Maximise the browser window — window size is a fingerprinting signal Tor deliberately masks
  • Use "onion proxy" websites that open .onion links in a normal browser — they see all your traffic

Do you need a VPN?

The most-asked question, and the honest answer is: for most people, no. Tor alone already routes your traffic through three encrypted relays; adding a VPN does not meaningfully improve that anonymity, and configured badly it can undermine it. The one scenario where a VPN genuinely helps is hiding the fact that you use Tor from your internet provider — relevant mainly in countries where Tor is blocked or draws unwanted attention. If that is not your situation, Tor Browser by itself, used with the habits above, is the setup the Tor Project itself recommends.

Is all of this legal? In most of the world, yes — Tor is legitimate technology, and simply visiting .onion sites breaks no law. Journalists use it to protect sources, major news organisations run official .onion mirrors, and millions use it for ordinary private browsing. Legality ends where conduct does: buying illegal goods or accessing illegal material is criminal on any network. A small number of countries restrict Tor itself, so if you are somewhere censorship is heavy, know your local situation.

When a .onion site won't load

It will happen often, and it is usually not your fault. Work down this list:

  • Check the address length. 16 characters means an obsolete v2 address — no longer functional anywhere. Current addresses are 56 characters.
  • Assume the site is offline. Hidden services vanish and move constantly; engines that show link status, or a fresh search, will tell you if it has moved.
  • Request a new circuit. From Tor Browser's menu, "New Tor circuit for this site" — occasionally a specific route is the problem.
  • Re-check for typos. One wrong character in 56 is easy — and remember that a "nearly right" address could also be a phishing clone, which is one more reason to copy addresses from verified sources rather than typing them.

Ready to explore? Start with a search engine that respects your setup.
No JavaScript, no logs, no cookies — works even at Tor's Safest level.

Search with Onion Search Engine

Frequently asked questions

Can I open .onion sites in Chrome or Safari?

No. .onion addresses only resolve inside the Tor network, which normal browsers cannot reach. Use Tor Browser — and avoid "proxy" websites that promise to open .onion links in a regular browser, since they route everything you do through an unknown third party.

Is it legal to access .onion sites?

In most countries, yes. Visiting .onion sites is legal in itself; what you do on them is where liability begins. A few countries restrict Tor as such, so check your local situation if in doubt.

Do I need a VPN with Tor?

Usually not. Tor provides strong anonymity on its own. A VPN mainly helps hide your Tor usage from your internet provider, which matters where Tor is blocked or stigmatised.

Why do .onion addresses look like random characters?

Because they are derived from the site's cryptographic key — the address itself proves the site holds the matching key. It is what makes .onion addresses self-authenticating, and also what makes them impossible to remember, which is why verified directories matter.

Why won't a .onion site load?

Most often: it is an obsolete 16-character v2 address, the site is simply offline, or there's a typo. Try a new Tor circuit, and search for the site's current address — hidden services move frequently.

Is Tor Browser free?

Yes — free and open source, funded by the Tor Project. Anyone charging for it, or distributing it outside torproject.org, should not be trusted.

Related guides