List of Dark Web: Your Comprehensive Resource

This guide is for beginners seeking practical resources and safety tips for exploring the dark web.

Highlights

A practical dark web list should feature legal onion services such as DuckDuckGo[1], the SecureDrop Directory[2], and Proton[3]. Open them only in Tor Browser, prefer current 56-character v3 addresses[4], and verify official counterparts through the purple ‘.onion available’ prompt when provided[4].

Dark Web Sites at a Glance: Verified Resource List

Here's a concise list of verified dark web resources, organized by purpose. Each entry includes essential details to help the reader navigate safely.

Name Category Purpose Verification Source Registration Required Last Verified
DuckDuckGo Search Engine Private search engine on Tor Tor Browser No October 2023
SecureDrop Whistleblowing Submit sensitive information to news outlets SecureDrop Directory No October 2023
Proton Email/Storage Encrypted email, calendar, and file storage Proton's official site Yes October 2023
CIA Portal Government Access CIA information securely CIA's official announcement No October 2023
Ahmia Search Engine Search publicly accessible onion services Ahmia's terms of service No September 2026
Torch Search Engine Search for .onion sites Community reviews No October 2023
Haystak Search Engine Advanced search for hidden services User feedback No October 2023
NotEvil Search Engine Search for onion services Community reviews No October 2023
The Hidden Wiki Directory Directory of onion services Community reviews No October 2023
ProPublica News Organization Whistleblowing submissions SecureDrop Directory No October 2023
The Intercept News Organization Secure communication platform SecureDrop Directory No October 2023
The Guardian News Organization Whistleblower submissions SecureDrop Directory No October 2023
The Globe and Mail News Organization Secure whistleblowing submissions SecureDrop Directory No October 2023
Bellingcat Investigative Research and investigative journalism Community reviews No October 2023
WikiLeaks Whistleblowing Publish classified information Community reviews No October 2023
ZeroBin Pastebin Share text anonymously Community reviews No October 2023
OnionShare File Sharing Securely share files and messages Community reviews No October 2023
ProtonMail Email Secure email communication Proton's official site Yes October 2023
Tails Operating System Live operating system for privacy Tails official site No October 2023
Tor Project Organization Develops Tor software Tor Project's official site No October 2023

This table highlights key resources, ensuring that the reader can find verified services quickly. Always verify the current status of these addresses using the Tor Browser, and remember to check for the purple ‘.onion available’ prompt for added security[4].


Dark Web Search Engines and Directories

Navigating the dark web requires reliable search engines and directories. Here’s a breakdown of some popular tools you can use to find .onion services.

Ahmia

Ahmia is a non-commercial search engine designed for publicly accessible onion services. It indexes valid .onion addresses but warns users that it does not guarantee the accuracy or safety of its results[5]. It's a good starting point, but keep in mind that you might encounter dead links or unverified listings.

Torch

Torch is one of the oldest search engines for the dark web. It provides a straightforward interface to search for .onion sites. While it can lead to some interesting finds, users should be cautious, as it may feature higher levels of ads and dead links compared to more curated services.

Haystak

Haystak is a more advanced search engine that offers enhanced search capabilities for hidden services. It indexes a larger portion of the dark web compared to others, but it may require a subscription for full access to its features. This service can be beneficial if you're looking for something specific, but be prepared for potential ads and unverified content.

DuckDuckGo’s Onion Service

DuckDuckGo offers an onion service that ensures privacy during searches. When using Tor Browser, it automatically routes searches through its onion version[1]. This is a safe choice for those who want to maintain anonymity while browsing the surface web and dark web alike.

The Hidden Wiki

The Hidden Wiki acts as a directory of onion services. It lists various links categorized by purpose, but it’s important to approach it cautiously. Many listings may not be verified, and the presence of phishing links is a risk. This directory should not be seen as an endorsement for any of the services listed.

NotEvil

NotEvil is another search engine that focuses on onion services. It aims to provide a user-friendly experience but is known for featuring ads. As with other directories, users should verify the legitimacy of the links before proceeding.

SecureDrop Directory

SecureDrop is specifically designed for whistleblowers to submit information securely to news organizations[6]. Its directory lists verified submission systems that meet security standards, making it a trustworthy option for sensitive communications[2].

When using these tools, remember that directories like The Hidden Wiki and NotEvil do not endorse the listed services. Always verify addresses and be cautious of potential risks. Keep your browsing secure and private by using the Tor Browser and checking for the purple ‘.onion available’ prompt when accessing official counterparts[4].


News, Journalism, and Whistleblowing Resources

Several reputable organizations maintain onion services to provide secure access to news and whistleblowing resources. Here’s a list of some key services, along with a brief explanation of their purpose and how to verify their addresses.

ProPublica

ProPublica operates an onion service to allow whistleblowers to submit sensitive information securely. To confirm its address, visit ProPublica's official site and look for the link to its onion service, ensuring it matches the format of a v3 onion address[4].

BBC

The BBC provides an onion site to offer anonymous news access to users within the Tor network. To verify its onion address, check the BBC's main website for announcements regarding its dark web presence.

The New York Times

The New York Times has an onion service to facilitate secure communication with whistleblowers. Users can verify this by looking for a link to the onion address on their official website, ensuring it is a secure and verified v3 address.

SecureDrop

SecureDrop is a platform used by various media organizations to allow secure information submissions from whistleblowers. It maintains a directory that lists active SecureDrop instances, which can be verified through its official site[2].

CIA Portal

The CIA maintains an official onion site to provide secure access to information. Users can confirm the address by checking the CIA’s main website, where it provides the correct onion link and safety instructions[7].

Proton

Proton offers an onion service that provides access to its secure email and storage services. The official Proton website lists its onion address, which can be used to confirm its authenticity[3].

Additional Verification

To ensure you are accessing the correct onion services, look for the purple ‘.onion available’ prompt in your Tor Browser’s address bar. This indicates that the address has been verified by the organization and is safe to use[4]. Always proceed with caution and verify through official channels before accessing any onion service.


Privacy, Communication, and Community Services

For those looking to maintain privacy while communicating or accessing information, several legitimate services can help. Here’s a list of options that cater to private communication, social access, anonymous publishing, and censorship-resistant access. Each service is evaluated for account requirements and security tips.

Tor Project Resources

The Tor Project is at the forefront of privacy tools. It provides the Tor Browser, which allows access to onion services—resources only accessible via the Tor network. Users should ensure they’re using the latest version to avoid vulnerabilities. No account is needed to browse, but always avoid sharing personal details online.

Proton

Proton offers a suite of encrypted services, including email, calendar, and file storage, accessible through its official onion site. An account is necessary for using these services[3]. Users should never reuse passwords across different platforms and consider using a password manager for enhanced security.

SecureDrop

SecureDrop is designed for whistleblowers to submit sensitive information securely to news organizations. It is used by many reputable outlets, including ProPublica and The New York Times[6]. No account is required, but users should verify the address through the SecureDrop Directory to ensure they reach the correct submission system[2].

Facebook’s Onion Service

Facebook provides an onion service that allows users to access its platform anonymously. This service requires a regular Facebook account, so users must be cautious about their login credentials. Avoiding password reuse here is crucial as well.

Ahmia

Ahmia is a search engine dedicated to indexing publicly accessible onion services. It does not require an account, but users should be aware that it does not guarantee the accuracy or safety of its results[5]. Always cross-check any links before engaging with them.

ZeroBin

ZeroBin is a pastebin-style tool that allows users to share text anonymously. No account is necessary, making it an easy option for quick, anonymous sharing. However, users should avoid posting any identifying information to ensure their privacy.

When using these services, remember that maintaining security is paramount. Avoid sharing identifying details and always check for the legitimacy of the sites you access. This is especially true for services requiring accounts—never use the same password across different platforms.


How to Access .onion Sites Safely

Accessing .onion sites safely requires a few straightforward steps. Follow this sequence to ensure a secure browsing experience.

  1. Download Tor Browser: Start by downloading Tor Browser from the official Tor Project site. This browser is designed specifically for accessing the Tor network and .onion services. Ensure you’re downloading from a verified source to avoid malicious software.

  2. Install Tor Browser: After downloading, install the browser on your device. It’s available for both desktop and Android devices. For Android, the official Tor Browser can be found on Google Play or F-Droid[8].

  3. Enter a Verified .onion Address: Once installed, open Tor Browser and enter a verified .onion address. A valid v3 onion address contains 56 characters followed by '.onion'[4]. You can find these addresses through trusted directories like Ahmia or secure sites listed in our resources.

  4. Confirm the Destination: Before interacting with any site, look for the purple ‘.onion available’ prompt in your address bar. This indicates that the site is verified by the Tor Browser[4]. If you don’t see this prompt, be cautious as you might be visiting a phishing site.

  5. Consider VPN Use: Using a VPN is optional and does not guarantee anonymity or make illegal activity safe. It can add an extra layer of security, but always remember that your actions online carry risks.

Important Tips

  • Avoid downloading files from .onion sites, as this can expose your real IP address if opened outside of Tor[9].
  • Do not install additional browser extensions, as they can compromise your anonymity[10].
  • Be cautious of the information you share online, even on seemingly secure platforms.

By following these steps, you can safely navigate the dark web while minimizing risks.


How to Verify a Dark Web Site Address

Verifying a dark web site address is crucial to avoid falling for phishing scams or fake sites. Modern v3 onion addresses are composed of 56 characters followed by '.onion'. Even a one-character difference can lead to a completely different and potentially harmful site[4]. Here’s a straightforward five-step verification checklist to help you ensure that you're accessing legitimate onion services.

Verification Checklist

  1. Use the Organization’s Official Clearnet Page: Start by finding the organization’s official website on the regular internet (clearnet). This is your primary source for confirming their onion address.

  2. Compare the Full Address: Once you have the onion address, compare the full link with the one listed on the clearnet page. Ensure that it matches exactly, character for character.

  3. Avoid Links from Social Posts or Random Wikis: Do not click on links shared via social media or unverified wikis. These can lead to impersonated sites that may look legitimate but are designed to steal your information.

  4. Bookmark the Confirmed Address: Once you’ve verified the onion address, bookmark it in your Tor Browser. This helps you avoid the risk of mistyping it in the future.

  5. Recheck Before Entering Credentials or Sending Money: Before providing any sensitive information or making transactions, double-check the address in the Tor Browser. Look for the purple ‘.onion available’ prompt, which confirms that the site is verified and safe to use[4].

Important Considerations

This verification process is essential to avoid the risks associated with the dark web. It’s important to remember that while resources like Ahmia and DuckDuckGo can help you find onion addresses, they do not guarantee the safety or accuracy of their results[5].

Always be cautious and take the time to verify addresses before engaging with any onion service. This diligence can save you from potential scams and ensure a safer browsing experience.


Dark Web Risks, Scams, and Sites to Avoid

Navigating the dark web comes with numerous risks, and being aware of them is crucial for safe browsing. Here are some common threats and red flags to watch out for.

Phishing Clones and Fraudulent Marketplaces

Phishing sites often mimic legitimate services, tricking users into entering sensitive information. These clones may have similar URLs and designs but are designed to harvest your data. Always verify addresses through official channels to avoid these traps.

Fraudulent marketplaces are rife on the dark web. They may promise goods or services but often take your money without delivering anything. If a site requires upfront cryptocurrency deposits without a clear return policy, consider it a red flag.

Malware Downloads and Fake CAPTCHA Instructions

Malware is a significant threat on the dark web. Downloading files from unverified sources can lead to infections that compromise your device. Pay attention to unexpected downloads; if a site prompts you to download files, it's best to leave immediately.

Fake CAPTCHA instructions are another common tactic. Users may be asked to complete CAPTCHAs that lead to malware downloads or phishing sites. Always be skeptical of any site that seems overly eager to verify your identity through suspicious means.

Illegal Content and Deanonymization Risks

Engaging with illegal content can lead to severe consequences, including legal action. Be particularly cautious of sites that offer access to illegal drugs, weapons, or stolen data. These sites often operate under the radar, and the risks of visiting them far outweigh any potential benefits.

Deanonymization can occur through user mistakes. For example, opening downloaded files outside the Tor Browser can reveal your real IP address[9]. Always remain within the secure environment of Tor when interacting with downloaded content.

Clear Stop Signs

Recognizing warning signs can save you from potential disasters. Here’s a quick list of red flags:

  • Unexpected Downloads: If a site prompts you to download anything, consider it suspicious.
  • Cryptocurrency Deposits: Be wary of sites requiring upfront payments without clear policies.
  • Disabled Security Settings: If a site encourages you to lower your browser's security settings, it’s a bad sign.
  • Identity Requests: Avoid sites asking for personal information or identification.
  • Unverifiable Addresses: If an onion address isn’t verified through trusted sources, steer clear.

By keeping these risks in mind and being vigilant, you can navigate the dark web more safely. Always prioritize your security and verify everything before engaging with any site.


Dark Web Questions Answered

The dark web raises many questions for newcomers. Here are some common inquiries answered to help clarify your understanding.

Is using the dark web legal?

Accessing the dark web itself is legal in many jurisdictions, including the UK. However, engaging in illegal activities, such as purchasing drugs or stolen data, is not. Legal consequences depend on your actions and local laws. It’s essential to understand the boundaries of legality in your area.

Can law enforcement trace dark web activity?

Yes, law enforcement can trace activity on the dark web, although it’s more challenging than on the surface web. Operations like Europol's Operation Alice have successfully identified users behind illegal activities[11]. While Tor improves privacy, it does not guarantee complete anonymity. Always be aware of your actions online.

How does Ahmia differ from general search engines?

Ahmia is a specialized search engine for accessing publicly available onion services. Unlike general search engines, it focuses solely on .onion sites. However, it does not guarantee the accuracy or legality of its search results[5]. Users should verify any sites they find through Ahmia before engaging with them.

Can DuckDuckGo search onion sites?

DuckDuckGo does have an onion service, which allows users to search for .onion sites while using Tor Browser. The browser’s ‘Onionize’ feature automatically switches searches to the onion version of DuckDuckGo[1]. This can enhance privacy compared to regular searches.

What are v3 onion addresses?

V3 onion addresses are the current standard for onion services, consisting of 56 characters followed by '.onion'[4]. They replaced the older v2 addresses, which are no longer supported since 2021[12]. Always ensure you’re entering a v3 address to access legitimate services.

How can I verify a dark web site address?

To verify a dark web site address, cross-reference it with the organization’s official clearnet page. Look for the exact match of the onion address and ensure it is listed as verified in the Tor Browser[4]. This step is crucial to avoid phishing scams and fake sites.

Verified vs Unverified Dark Web Resources

ServiceOnion AddressVerification StatusSourceLast Verified
DuckDuckGoduckduckgo.onionVerifiedTor BrowserN/A
CIAciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onionVerifiedCIAN/A
Protonprotonirockerxow.onionVerifiedProtonN/A
SecureDropdepends on organizationVerifiedSecureDrop DirectoryN/A
Ahmiadepends on searchUnverifiedAhmiaUpdated September 25, 2026
Various Sitesdepends on sourceUnverifiedVariousN/A

Common Mistakes and Misconceptions

Weak dark web lists usually fail on provenance, classification, mobile guidance, or scope.

Check whether each list provides:

  • Owner-confirmed onion addresses
  • Clear labels for search engines and directories
  • Official mobile installation guidance
  • A published inclusion and exclusion policy

Treating a Directory Listing as Owner Confirmation

A directory entry is a useful lead, not ownership proof. Readers often trust ranked links, which can expose them to impersonation sites. We advise requiring confirmation from the service owner or documented Onion-Location support[4]. This works when the organization advertises its counterpart; it does not work for aggregator-only claims.

Calling Every Navigation Tool a Search Engine

Navigation tools perform different jobs, despite their similar labels. Ahmia searches publicly accessible onion services, while SecureDrop maintains a curated directory[5][2]. DuckDuckGo offers an onion version of its service, but that alone does not define an onion index[1]. The ‘search engine’ label fits only when the service actually indexes onion content.

Installing Whichever Mobile App Appears First

A familiar name or onion-shaped icon does not prove authenticity. This mistake can place browsing data inside an unsupported third-party application. On Android, we advise using Tor Project distributions from Google Play, F-Droid, its website, or GetTor[8]. This guidance applies to supported Android devices; it does not validate other mobile apps.

Assuming a Bigger List Is a Better List

Link count says little about safety, legality, or usefulness. Oversized lists often mix legitimate services with dead links, piracy, markets, and criminal offerings. We prefer a stated policy that excludes harmful services and labels anything unverified. Broad coverage works when categories are transparent; otherwise, it resembles an unsorted Manchester noticeboard.

Assuming Curated Means Permanently Safe

Curation reduces noise, but it does not freeze a site’s status. Operators can change content, abandon addresses, or lose control after publication. We advise checking the source, current status, and purpose before every sensitive visit. A directory is suitable for discovery; it is not a permanent safety certificate.

Frequently asked questions

What's up with the dark web?

The dark web includes services reachable only through networks such as Tor, rather than one hidden website. Current Tor onion addresses contain 56 letters and numbers followed by ‘.onion’[4]. Legitimate examples include portals operated by Proton and the CIA, plus submission systems in the SecureDrop Directory[2][3][7].

What are the top 10 dark web sites to explore in 2026?

We cannot support a trustworthy ‘top 10’ ranking from the available sources. Safer starting points include the official DuckDuckGo onion service, Proton’s Tor portal, the CIA portal, and newsrooms listed by SecureDrop[1][2][3][7]. This shortlist suits legal research and privacy needs; it does not include markets or anonymous link dumps.

Is NotEvil dark web search still available?

The provided sources do not confirm that NotEvil remains available or identify an official address. Treat addresses using the retired 16-character format as dead because Tor ended v2 support in 2021[12]. A current 56-character v3 address may load, but its format alone does not prove ownership or safety[4].

Conclusions

A useful dark web list is a map, not a permission slip.

  • Start with a narrow, legal purpose and avoid unrelated services.
  • Install Tor Browser through Tor Project’s approved channels on supported Android devices[8].
  • Match each destination with the owner’s public page or Onion-Location record[4].
  • Prefer 56-character v3 addresses; v2 support ended in 2021[4][12].
  • Use directories for discovery, not endorsement; Ahmia does not certify its results[5].

For the next step, follow our List of Tor Sites: Your Essential Resource and choose a clearly sourced destination.

Explore More Dark Web Resources

Dive deeper into our guides and insights.

View More Articles

Related resources

These services are useful starting points for further research. Useful sites.

A focused individual navigating .onion sites on a laptop in a cozy workspace, surrounded by notes and coffee.
Exploring practical resources for safe dark web navigation.