What Is an Onion Address? Cryptographic Identity Without a Registrar
An onion address identifies a Tor onion service. Modern v3 addresses encode service-identity information derived from cryptographic material, with checksum and version information. They are not ordinary domain registrations. Reaching the address can authenticate the corresponding service identity, but linking it to a real-world organization requires separate evidence.
The address does a technical job
An ordinary domain commonly depends on a registrar and DNS resolution. An onion address uses Tor’s service-addressing model. Its length is a consequence of that model, rather than evidence of a deeper or more restricted internet level.
A service can advertise its address publicly. “Hidden” does not mean the address must remain a secret; it relates to the service’s network properties. Access controls, when present, are a separate part of the application or service configuration.
Verify two different identities
The technical service
Use compatible maintained software and the complete modern address. Do not treat a partial string or a screenshot as equivalent to the actual destination.
The claimed publisher
Compare the address against the organization’s established publication channels. A working onion address can still belong to an impersonator.
The requested action
Even after identifying a publisher, assess downloads, account requests and external links separately. Identity does not guarantee every action is appropriate.
Similar wording does not establish continuity
Suppose a familiar service name appears beside a different address in a forum post. The name can be copied more easily than the original cryptographic identity can be assumed.
Use an independently authenticated update channel instead of accepting a new address merely because the old one stopped responding.
An address does not promise availability
The correct address can be temporarily unreachable. An old address can also be obsolete. Connection failure alone does not identify the cause, and a search result can preserve information after the service changes.
For that reason, record both the address and the official source where you obtained it when verifying a publisher. This gives you something more useful than an anonymous repost if the destination later changes.
Questions people ask
Sources
Further reading
Glossary
Terms in this guide
Continue learning