What Does “Onion Sites” Mean? Address, Network and Identity
“Onion sites” usually means websites offered as Tor onion services at .onion addresses. The word comes from onion routing’s layered design. The address describes how a service is identified and reached; it does not classify its content as criminal, certify the operator or promise that the site is safe.

A service label, not a category of content
An onion site can publish news, accept messages or host a discussion, just as an ordinary website can. The distinguishing feature is its onion-service connection and address. A page’s purpose and legal status cannot be read from the suffix alone.
The informal phrase “hidden service” appears in older documentation and reporting. “Onion service” is the modern terminology. Both can refer to the same general Tor capability, so the difference in vocabulary does not automatically imply two networks.
What the address tells you
| Subject | What it helps establish | What remains unknown |
|---|---|---|
| The .onion ending | A special-use service address associated with Tor | Who operates the destination |
| The modern address string | A service identity derived from cryptographic data | Whether the content is accurate |
| A publisher’s advertised address | A claim that can be checked against its official channels | The safety of every linked external service |
The onion metaphor describes routing
Onion routing distributes knowledge across a connection rather than asking one intermediary to know everything. The layered metaphor is useful at that level. It becomes misleading when turned into a claim that the internet has numbered floors or that longer addresses lead to deeper content.
An onion service and a public website reached through Tor also have different connection paths. An onion-service connection does not require an ordinary exit relay to fetch the page from the public web. That difference matters more than whether the page uses a dark visual theme.
A copied logo does not copy the address identity
Imagine two pages showing the same organization’s branding at different onion addresses. Both can look polished. Only comparison with the organization’s own published address establishes which destination it actually advertises.
Do not shorten the verification to checking the first few characters or a screenshot. Preserve and compare the complete address through an established publisher source.
An unavailable address is an ambiguous result
A failed connection can reflect an unavailable service, a typing error, a local connection problem or outdated information. It does not independently prove a police seizure or an attempted attack. Avoid supplying credentials to a replacement address merely because someone claims the old one is down.
A useful first question is whether you actually need that particular service. For understanding the concept, official technical documentation is enough. For reaching a publisher, its own established address information is a better starting point than a chain of reposted lists.
Questions people ask
Sources
Further reading
Glossary
Terms in this guide
Continue learning