Onion Links Reddit: A Curated List

What Are Onion Links and Why Reddit?

Onion links are website addresses ending in .onion that exist exclusively on the Tor network². Unlike standard .com or .org domains, these addresses consist of 56 characters derived from the service's cryptographic key, making them accessible only through Tor Browser². The .onion domain signals that the site routes traffic through multiple encrypted layers, preventing observers from seeing what you're visiting or who operates the service².

Reddit has become a default discovery point for these addresses because traditional search engines don't index .onion sites³. Subreddits like r/onions and r/Tor function as informal directories where users share links to marketplaces, forums, news mirrors, and file-sharing services that operate outside conventional web infrastructure. The voting system surfaces frequently discussed links, and comment threads often document whether a site is currently reachable or has migrated to a new address.

This crowdsourced approach fills a gap: onion services rarely advertise through standard channels, and many deliberately avoid publicity. A whistleblowing platform might share its .onion address only through activist networks; a privacy-focused email provider might list its onion mirror in a blog post that few people read. Reddit aggregates these scattered references into threads that users can search by service name or category.

The anonymity that makes onion services appealing for privacy-conscious users also attracts threat actors. Phishing sites mimic legitimate services by registering similar-looking .onion addresses⁴, and social engineering convinces users to trust rogue links posted in Reddit threads. We've seen attackers create fake accounts, post malicious addresses, and use upvotes to make them appear credible. The same anonymity that protects a journalist hosting a leak platform protects a scammer running a fake marketplace.

For a detailed explanation of how onion services work and their technical foundations, see our guide Onion Site: What You Need to Know. The rest of this article focuses on which Reddit communities share links, how to verify them before clicking, and what to do when a link won't load.

How to Safely Access Onion Links Shared on Reddit

Accessing .onion addresses from Reddit requires Tor Browser, as these sites are reachable only through the Tor network². We walk through the essential steps and security practices that prevent common mistakes.

Download and configure Tor Browser

Install the official Tor Browser from the Tor Project's website. After installation, open the browser and connect to the Tor network. Before visiting any onion link, adjust the security level by clicking the shield icon in the address bar and selecting 'Safest'. This setting disables JavaScript on all .onion sites, along with certain fonts and media features, reducing the attack surface from malicious scripts⁵. The trade-off is that some sites will display incorrectly or lose functionality, but we prioritize protection over convenience when exploring unfamiliar addresses.

Never click links directly—copy and verify first

When you find an onion link on Reddit, do not click it directly from the browser or Reddit app¹. Right-click (or long-press on mobile) and copy the address. Before pasting it into Tor Browser, verify the address against an official source. Legitimate services often publish PGP-signed announcements listing their current .onion addresses. Check the service's clearnet site (if it has one), look for a /mirrors.txt file at the onion address (which should contain a PGP signature), or cross-reference the address with multiple independent Reddit threads¹⁶.

Check the address format and length

A valid v3 onion address is exactly 56 characters long, followed by .onion⁷. If you see a shorter address (typically 16 characters), it's an obsolete v2 format that the Tor network no longer supports⁷. Attempting to load a v2 address will always fail. Even a single typo in the 56-character string will prevent Tor Browser from connecting, often triggering an 'Invalid Onionsite Address' error (code 0xF6)⁸. We recommend pasting addresses rather than typing them manually to avoid transcription errors.

Use a sandboxed environment for untrusted links

If you cannot verify a Reddit-sourced link through official channels, open it in a fresh Tor Browser session within a virtual machine or sandboxed environment¹. This isolates any potential malware or tracking attempts from your main system. After testing, close the session and discard the virtual machine snapshot. This approach is especially important for links shared in less-moderated subreddits or by accounts with no posting history.

Understand what verification files mean

Many reputable onion services follow the Onion Mirror Guidelines, hosting specific files at their addresses⁶. Navigate to [onion-address]/pgp.txt to retrieve the operator's public PGP key, then check [onion-address]/mirrors.txt for a PGP-signed list of official mirror addresses. A valid signature confirms the operator controls both the key and the address. If these files are missing or the signature doesn't verify, treat the link as untrustworthy. Attackers create convincing impersonation sites that mimic legitimate services but omit these verification mechanisms⁴.

For a broader overview of how onion services function and their technical foundations, see our guide Onion Site: What You Need to Know. The next section examines which Reddit communities actively share onion links and how to assess their reliability.

Curated List of Popular Onion Links from Reddit

We present categories of onion services frequently shared on Reddit, with descriptions of what each type offers. We do not list specific .onion addresses here because the dark web is volatile: services migrate to new addresses, shut down without notice, or become compromised by attackers². Any static list becomes outdated within weeks, and publishing unverified addresses creates more risk than value.

Search Engines and Directories

Reddit users commonly share onion-based search engines that index other .onion sites, functioning as directories for the dark web. These services crawl onion addresses and present search results similar to clearnet engines, helping users discover forums, marketplaces, and information repositories without relying solely on word-of-mouth links. When evaluating a search engine link from Reddit, verify the 56-character address format⁷ and cross-reference it across multiple threads before trusting the results it returns.

For guidance on choosing and using these tools, see our article Tor Search Engine: Finding What You Need.

Forums and Community Platforms

Discussion boards hosted as onion services offer spaces for privacy-focused conversations, technical support, and niche communities. Reddit threads in r/onions and r/Tor frequently link to these forums, where users discuss operational security, share experiences with other onion services, and coordinate on privacy projects. Treat forum links with the same skepticism as any other: copy the address, check for PGP-signed mirror lists at /mirrors.txt⁶, and verify the operator's public key before registering an account or posting content.

News and Whistleblowing Platforms

Major news organizations and transparency projects operate onion mirrors of their clearnet sites, allowing sources in restrictive jurisdictions to submit information anonymously²³. These mirrors are often shared on Reddit when mainstream coverage mentions them, but impersonation attacks are common⁴. Always verify a news outlet's onion address against the official clearnet site's footer or documentation page, where legitimate organizations publish their current .onion addresses alongside PGP signatures.

Educational and Research Resources

Libraries, academic archives, and technical documentation sites sometimes maintain onion versions to bypass censorship or provide anonymous access. Reddit users share these links in threads focused on free information access, but the same verification rules apply: check the address length (56 characters for v3, anything shorter is obsolete⁷), look for PGP-signed announcements, and test the link in a sandboxed environment if you cannot confirm its authenticity¹.

Why Links Fail and What That Means for You

Onion services go offline frequently. A link shared on Reddit yesterday might return an 'Onionsite Not Found' error (code 0xF0) today⁸. This happens because operators take services down for maintenance, migrate to new addresses without updating public announcements, or abandon projects entirely. The Tor network's design prioritizes operator anonymity over uptime guarantees², so you cannot assume a non-loading link is malicious—it might simply be offline.

Before concluding a link is dead, double-check the 56-character address for typos⁷. Even one incorrect character will prevent Tor Browser from connecting. If the address is correct and the site still won't load, search Reddit for recent threads mentioning the service name to see if other users report the same issue or share a new address. Treat any 'updated' address with the same verification steps: copy it, check for PGP signatures, and test in a secure environment.

We stress that no curated list remains current without continuous verification. The addresses shared in Reddit threads today will likely change or disappear within months, requiring you to verify each link independently rather than trusting a static directory.

Identifying and Avoiding Malicious Onion Links

The same anonymity that protects legitimate onion services also shields attackers. Phishing sites register .onion addresses that resemble trusted services, and social engineering campaigns post these malicious links in Reddit threads with fake upvotes to simulate credibility⁴. We outline the red flags that indicate a link is dangerous and the verification steps that reduce risk before you visit any address.

Common Red Flags for Malicious Links

Address similarity to known services. Attackers create addresses that differ by one or two characters from a legitimate site's 56-character string. If you see a link claiming to be a popular marketplace or forum but the address doesn't match what you've verified elsewhere, assume it's a phishing attempt⁴. Copy the address and compare it character-by-character against the official source—do not rely on visual similarity alone.

Missing verification files. Reputable onion services host PGP-signed lists at /mirrors.txt and public keys at /pgp.txt⁶. If you navigate to these paths and find nothing, or if the signature doesn't verify against the operator's known public key, the site is either impersonating a legitimate service or operated by someone unwilling to prove authenticity. Either scenario warrants treating the link as untrusted.

Pressure to act quickly. Reddit posts or onion site landing pages that urge immediate action—'limited-time offer', 'account will be deleted', 'verify your wallet now'—are classic phishing tactics. Legitimate services rarely create artificial urgency, especially through anonymous channels where users expect deliberate, cautious behavior.

Requests for credentials or payment outside the service. If an onion site asks you to send cryptocurrency to an external address before granting access, or demands login credentials via a form that doesn't match the service's documented authentication method, you're likely interacting with a scam. Cross-reference any payment or login instructions with the service's official clearnet documentation or PGP-signed announcements.

Risks Associated with Untrusted Sources

Clicking an unverified link exposes you to several threat categories. Malware-hosting sites exploit Tor Browser vulnerabilities or attempt drive-by downloads; even with JavaScript disabled at the 'Safest' security level⁵, some attack vectors remain. Phishing sites harvest credentials, cryptocurrency addresses, or PGP keys, then use them to impersonate you or drain wallets. Scam marketplaces collect payment without delivering goods, and because transactions occur pseudonymously, recourse is impossible.

Reddit's voting system doesn't guarantee safety. Attackers create aged accounts, purchase upvotes, or coordinate brigades to make malicious links appear community-endorsed. A highly upvoted post in r/onions or r/Tor does not mean the link has been independently verified—it means the post gained visibility, which attackers can engineer.

Verifying Legitimacy Before You Click

Never click directly from Reddit. Copy the .onion address and verify it against an official source before pasting it into Tor Browser¹. Check the service's clearnet site (if it has one) for a published onion address, or search for PGP-signed announcements from the operator. If the service follows Onion Mirror Guidelines, retrieve the public key from /pgp.txt and verify the signature on /mirrors.txt⁶. A valid signature proves the operator controls both the key and the address.

Cross-reference across multiple Reddit threads. Search the service name in r/onions, r/Tor, and related subreddits to see if the same address appears in multiple discussions over time. Check comment threads for users reporting the link as functional or warning it's a phishing site. If only one thread mentions the address, especially from a new or low-karma account, treat it as high-risk.

Test in a sandboxed environment. If you cannot verify a link through official channels, open it in a fresh Tor Browser session within a virtual machine¹. This isolates any malware or tracking attempts from your main system. After testing, close the session and discard the VM snapshot. This approach is essential for links shared in less-moderated subreddits or by accounts with no posting history.

Check the address format. A valid v3 onion address is exactly 56 characters long⁷. Shorter addresses (16 characters) are obsolete v2 format that the Tor network no longer supports⁷. Even one typo in the 56-character string will prevent connection, often triggering an 'Invalid Onionsite Address' error (code 0xF6)⁸. Paste addresses rather than typing them to avoid transcription errors.

Look for consistent community feedback. Legitimate services accumulate discussion history: users report uptime, share experiences, and document address changes when operators migrate. A link with no Reddit comment history, or with only positive comments from accounts created the same day, is suspect. Skepticism protects you more reliably than trust in anonymous forums.

Reddit Communities for Discovering Onion Links

Several subreddits serve as hubs for sharing and discussing .onion addresses, each with distinct rules and moderation standards. We focus on the most active communities and explain how to extract useful links while avoiding the traps that come with crowd-sourced information.

r/onions

This subreddit concentrates on onion services specifically, with users posting new addresses, reporting defunct sites, and asking for recommendations. Moderators enforce rules against illegal content requests, but verification standards vary—upvotes don't confirm a link's legitimacy¹. When you find an address here, copy it rather than clicking directly, then cross-reference it in multiple threads to see if other users report consistent uptime or flag it as a phishing attempt⁴. Posts from accounts created within the past month or with minimal comment history warrant extra skepticism, as attackers register fresh accounts to bypass community trust filters.

r/Tor

Focused on the Tor network's technical aspects, this subreddit discusses onion service operation, anonymity practices, and troubleshooting connection issues. Users share educational resources and mirrors of censored content more often than marketplaces or forums. The community skews toward intermediate and advanced users, so link discussions assume you already understand address verification and PGP signatures⁶. Treat this subreddit as a source for learning which verification techniques other users apply, then implement those techniques yourself rather than trusting shared links without independent confirmation.

r/deepweb

Despite the name, this subreddit covers both deep web (non-indexed clearnet sites) and dark web (onion services). Moderation is less strict than r/onions, resulting in more frequent phishing attempts and outdated links. If you browse here, expect to encounter addresses that return 'Onionsite Not Found' errors (code 0xF0)⁸ or lead to scam sites mimicking legitimate services. Use this community to identify which services are currently discussed, then verify addresses through official sources or PGP-signed mirror lists at /mirrors.txt⁶ before visiting.

Navigating Community Rules

Each subreddit prohibits requesting or sharing links to illegal content, but enforcement varies. Read the pinned rules post before participating, as violating guidelines can result in bans that prevent you from accessing future discussions. When sharing a link yourself, include context: why you're posting it, where you verified it, and what the service does. This transparency helps other users assess risk and signals to moderators that you're contributing responsibly rather than spamming phishing addresses.

Responsible Sharing Practices

If you discover a new onion service and want to share it on Reddit, verify it first. Check that the address is exactly 56 characters⁷, retrieve the PGP public key from /pgp.txt if available⁶, and test the link in a sandboxed environment¹ to confirm it loads without attempting drive-by exploits. Post the address as plain text rather than a clickable hyperlink, forcing other users to copy and verify it themselves¹—this small friction reduces impulsive clicks on unvetted addresses. Describe what the service offers and note any verification steps you completed, so readers can repeat them independently.

Troubleshooting Common Issues with Onion Links

When an onion link from Reddit won't load, the problem usually falls into one of three categories: you've mistyped the address, the service is offline, or your Tor Browser configuration blocks the connection. We walk through the most common failure scenarios and the steps that resolve them, so you can distinguish between a temporary network issue and a dead link you should abandon.

Why Your .onion Site Won't Load

Address typos block connection entirely. A valid v3 onion address is exactly 56 characters long⁷, and even a single incorrect character will prevent Tor Browser from connecting. If you typed the address manually, copy it from the Reddit post instead—transcription errors are the leading cause of 'Invalid Onionsite Address' errors (code 0xF6)⁸. Paste the address into a text editor first to check the character count before entering it into Tor Browser's address bar.

Obsolete v2 addresses no longer work. Older onion addresses shorter than 56 characters used the v2 protocol, which the Tor network stopped supporting⁷. If a Reddit thread from several years ago lists a 16-character address, the service is effectively offline unless the operator migrated to a v3 address. Search the service name in recent r/onions or r/Tor threads to find an updated address, then verify it through the operator's PGP-signed mirror list at /mirrors.txt⁶.

The service itself is down or moved. Onion services disappear frequently—operators shut down without notice, law enforcement seizes infrastructure, or hosting failures take sites offline. Tor Browser displays specific error messages that indicate whether the problem is on your end or the service's⁸. An 'Onionsite Not Found' error (code 0xF0) means Tor successfully queried the network but the service didn't respond, suggesting it's offline or the address changed. Check recent Reddit comments on the link to see if other users report the same issue or share a new address.

Resolving Connectivity Problems

Check your Tor connection first. Open a known-working onion site—such as the Tor Project's own onion service—to confirm Tor Browser can reach the network. If that site loads, the issue is with the specific address you're trying. If no onion sites load, restart Tor Browser and wait for the connection bootstrap to complete. Network congestion or bridge failures can delay initial connection by several minutes.

Adjust your security level temporarily. If you've set Tor Browser's security level to 'Safest', JavaScript is disabled on all .onion sites⁵, which can break services that rely on client-side rendering. Lower the security level to 'Safer' for the session, reload the page, and see if the site appears. If it does, the service requires JavaScript—decide whether the functionality justifies the increased fingerprinting risk, or find an alternative service that works without scripts.

Verify the address against multiple sources. Reddit users sometimes share outdated or mistyped addresses that accumulate upvotes before anyone tests them. Copy the address and search for it in other r/onions threads, then cross-reference it with the service's clearnet site or PGP-signed announcements⁶. If you find conflicting addresses, trust the one with a valid PGP signature over the one with more Reddit upvotes.

Test in a fresh Tor circuit. Tor Browser routes your connection through three relays, and occasionally one relay in the chain blocks onion traffic or experiences high latency. Click the onion icon in the address bar and select 'New Circuit for this Site' to force Tor Browser to build a different path. Reload the page after the new circuit establishes—if the site loads now, the original circuit was the problem, not the address.

Understanding Transient Onion Services

Many onion services linked on Reddit operate intermittently. Small forums and personal sites run on home servers that go offline when the operator's computer shuts down. Marketplaces and whistleblowing platforms move addresses frequently to evade tracking, meaning a link that worked last week may be obsolete today. This transient nature is inherent to the ecosystem²—services prioritize operational security over uptime guarantees.

When a link fails repeatedly across multiple circuits and other users report the same issue in Reddit comments, treat it as dead. Remove it from your bookmarks and search for an updated address or alternative service. Persistence won't revive a service that's permanently offline, and continuing to query a non-existent address wastes time without improving your chances of connection.

If you need reliable access to a specific service, monitor its official clearnet presence or subscribe to its PGP-signed status updates rather than relying solely on Reddit threads. Community-shared links lag behind operator announcements, so verifying addresses through Onion Site: What You Need to Know principles—checking /mirrors.txt and /canary.txt files⁶—gives you the most current information and reduces time spent troubleshooting links that were already replaced.

Common Mistakes and Misconceptions

Trusting unverified links directly from Reddit

Users often assume that a highly upvoted or recently posted onion link on Reddit is inherently safe or legitimate. This overlooks the fact that malicious actors can manipulate upvotes or create convincing fake accounts⁴. Clicking an unverified link directly exposes your Tor Browser session to potential exploits, as the site could host malware or attempt to de-anonymize you. We advise always copying the address, verifying it against official sources (like PGP-signed announcements), and then pasting it into Tor Browser¹.

Neglecting to verify the 56-character address

A common mistake is assuming that if an onion site fails to load, the service must be down. Often, the issue is a simple typo in the 56-character v3 .onion address⁷. Unlike clearnet URLs, an incorrect character in an onion address will not redirect you to a similar site; it will simply prevent Tor Browser from connecting, often resulting in an 'Invalid Onionsite Address' error⁸. Always double-check the address for accuracy, ensuring all 56 characters are present and correct, and avoid manually typing addresses whenever possible⁷.

Believing 'Safest' security settings guarantee absolute protection

Tor Browser's 'Safest' security level disables JavaScript on all non-HTTPS and .onion sites, along with certain fonts and media features⁵. While this significantly reduces the attack surface from malicious scripts, it does not guarantee absolute safety or anonymity. Sophisticated attacks can still leverage browser vulnerabilities or social engineering⁴. We recommend understanding that 'Safest' mitigates common risks but does not eliminate all threats, and it often breaks site functionality.

Assuming older v2 addresses are still accessible

Newer users sometimes encounter 16-character .onion addresses in archived Reddit posts and attempt to access them. The Tor network discontinued support for these older v2 onion addresses, rendering any site still using them permanently offline⁷. Attempting to load a v2 address will consistently fail, regardless of your Tor Browser configuration. Always look for the longer, 56-character v3 addresses, and if an older post references a v2 address, assume the service either migrated or is no longer available.

Ignoring Tor Browser's specific error messages

When an onion site doesn't load, Tor Browser provides specific error messages, such as 0xF0 for 'Onionsite Not Found' or 0xF6 for 'Invalid Onionsite Address'⁸. Users frequently overlook these messages, instead assuming a generic connection problem. Understanding the specific error code can guide troubleshooting: 0xF6 indicates an issue with the address itself (e.g., a typo), while 0xF0 suggests the service is unreachable or offline⁸. We advise paying close attention to these indicators to diagnose the problem accurately.

Overlooking the importance of PGP verification for mirrors

Many legitimate onion services maintain official mirror lists signed with a PGP key, typically found at /mirrors.txt⁶. A common oversight is failing to verify these PGP signatures when encountering a new mirror address on Reddit. Attackers can create convincing fake mirrors that mimic official sites but are designed for phishing or surveillance⁴. Always fetch the operator's public PGP key (often at /pgp.txt) and use it to verify the signature on /mirrors.txt before trusting any mirror address⁶.

Key Takeaways

Navigating Reddit for onion links requires a skeptical approach. We've found that many common assumptions about link reliability and safety are often incorrect.

• Verify every link: Never click an onion link directly from Reddit. Copy the 56-character address and verify it against official sources or PGP signatures before pasting it into Tor Browser¹⁶.

• Understand transient nature: Onion services are often temporary. A link shared yesterday might be offline today due to maintenance, migration, or other operational issues².

• Check error messages: Tor Browser's specific error codes (e.g., 0xF0, 0xF6) provide critical clues for troubleshooting connection problems⁸.

• Update your browser: Ensure your Tor Browser is current and correctly configured. Outdated versions or incorrect settings can prevent access to legitimate onion services.

• Ignore v2 addresses: The Tor network no longer supports 16-character v2 onion addresses. Always look for the longer, 56-character v3 format⁷.

For your next step, we recommend reviewing your current setup to ensure optimal security. Learn more about your options by reading our guide on Free Dark Web Browser: Your Options Explained.

Explore More Dark Web Resources

Discover additional guides and insights to enhance your journey.