Privacy and evidence

What Does “Onion Sites” Mean? Address, Network and Identity

“Onion sites” usually means websites offered as Tor onion services at .onion addresses. The word comes from onion routing’s layered design. The address describes how a service is identified and reached; it does not classify its content as criminal, certify the operator or promise that the site is safe.

A reader and publisher linked through layered relay paths
Last reviewed2026-11-03
Reading time3 min read
DifficultyBeginner
EvidenceModerate

A service label, not a category of content

An onion site can publish news, accept messages or host a discussion, just as an ordinary website can. The distinguishing feature is its onion-service connection and address. A page’s purpose and legal status cannot be read from the suffix alone.

The informal phrase “hidden service” appears in older documentation and reporting. “Onion service” is the modern terminology. Both can refer to the same general Tor capability, so the difference in vocabulary does not automatically imply two networks.

What the address tells you

What the address tells you
SubjectWhat it helps establishWhat remains unknown
The .onion endingA special-use service address associated with TorWho operates the destination
The modern address stringA service identity derived from cryptographic dataWhether the content is accurate
A publisher’s advertised addressA claim that can be checked against its official channelsThe safety of every linked external service

The onion metaphor describes routing

Onion routing distributes knowledge across a connection rather than asking one intermediary to know everything. The layered metaphor is useful at that level. It becomes misleading when turned into a claim that the internet has numbered floors or that longer addresses lead to deeper content.

An onion service and a public website reached through Tor also have different connection paths. An onion-service connection does not require an ordinary exit relay to fetch the page from the public web. That difference matters more than whether the page uses a dark visual theme.

A copied logo does not copy the address identity

Imagine two pages showing the same organization’s branding at different onion addresses. Both can look polished. Only comparison with the organization’s own published address establishes which destination it actually advertises.

Do not shorten the verification to checking the first few characters or a screenshot. Preserve and compare the complete address through an established publisher source.

An unavailable address is an ambiguous result

A failed connection can reflect an unavailable service, a typing error, a local connection problem or outdated information. It does not independently prove a police seizure or an attempted attack. Avoid supplying credentials to a replacement address merely because someone claims the old one is down.

A useful first question is whether you actually need that particular service. For understanding the concept, official technical documentation is enough. For reaching a publisher, its own established address information is a better starting point than a chain of reposted lists.

Questions people ask

Sources

Further reading

Continue learning

Next useful step

Keep going

The next door is usually the interesting one

The answer you came for touches a few neighboring questions. These are the ones most likely to make the picture click.

What you should remember

The useful version

  • “Onion sites” usually means websites offered as Tor onion services at .onion addresses. The word comes from onion routing’s layered design. The address describes how a service is identified and reached; it does not classify its content as criminal, certify the operator or promise that the site is safe.

A few useful next steps

Where this question wanders next

The dark web is less a single tunnel than a set of side passages. These are the useful ones from here.

If this made you wonder

onion sites collection

Build the basics

1

What Are the Uses of Hidden Services on the Tor Network?

The New York Times runs one. So does a whistleblower drop box used by dozens of newsrooms. And, yes, so do some marketplaces you've heard of. Here's the full range.

2

What Is an Onion Address? Cryptographic Identity Without a Registrar

3

What Does the Dark Web Look Like? A Page Is Not a Security Signal

4

What Is the Dark Web, and How Do You Access It?

Somewhere between a rumor and a research paper, the actual dark web is smaller, more accessible, and considerably less mysterious than its reputation suggests — here's the whole picture, definition and access instructions together.

5

What Are Onion Sites, Or On The Dark Web?

Websites that exist entirely within Tor's own network, reachable only through Tor Browser and a very different kind of address.

Questions people ask first

Choose by the time in your pocket