The name's backstory

Why Are They Called Onion Sites?

A layered encryption metaphor from 1990s naval research, borrowed for a kitchen staple, that stuck for three decades.

Onion sites and 'onion routing' are named after the way Tor encrypts data: in multiple nested layers, each one 'peeled away' by a different relay as the traffic passes through the network, similar to peeling layers off an actual onion. The term originated with U.S. Naval Research Laboratory researchers developing the underlying technique in the 1990s, well before the modern Tor Project or the term 'Tor' itself existed.

Somewhere in the early-to-mid 1990s, researchers at the U.S. Naval Research Laboratory needed a way to describe a new encryption technique they'd developed.

The technique wrapped a message in multiple layers of encryption, each one peeled away by a different relay along its path. Someone reached for the most obvious kitchen metaphor available.

An onion cross-section with each translucent layer labeled as an encryption step
OriginU.S. Naval Research Laboratory, 1990s
Core metaphorNested encryption layers, peeled one at a time
'Tor' itself stands for'The Onion Router'

TL;DR

Quick answer

Onion sites and onion routing are named for how Tor's encryption works: data is wrapped in multiple nested layers, each peeled away by a different relay, mirroring how an onion's layers come off one at a time. The term originated with U.S. Naval Research Laboratory researchers in the 1990s, predating the modern Tor Project.

Last reviewed2026-07-25
Reading time6 min
DifficultyBeginner
EvidenceModerate
Coined byU.S. Naval Research Laboratory researchers
Decade1990s
'Tor' acronym meaning'The Onion Router'
Metaphor logicLayers of encryption, peeled one at a time
Still accurate today?Yes, structurally unchanged

The setup

A metaphor that happens to be mechanically precise

Unlike a lot of technical branding, 'onion routing' isn't just a catchy name loosely inspired by its subject — it's a genuinely accurate description of how the underlying encryption actually works. Data gets wrapped in multiple layers of encryption before it starts its journey, one layer for each relay it will pass through.

As the encrypted data moves through the network, each relay strips away exactly one layer, revealing only the address of the next relay in line — never the full path, never the original sender and final destination together. By the time it reaches its destination, all the layers have been peeled away, the same way an onion loses each papery layer as you work toward its center.

Where the metaphor comes from, precisely

  • Data starts wrapped in several layers of encryption, one per relay in the circuit.
  • Each relay removes exactly one layer, learning only the next hop, never the whole path.
  • The name captures both the process (peeling) and the structure (nested layers) accurately.

The metaphor predates the software it's now associated with by years

Early onion routing research and prototypes trace back to Naval Research Laboratory work in the mid-1990s, with the modern Tor software emerging from that foundation years later.

'Onion routing' as a concept was developed and named by researchers well before the Tor Project existed in its modern form — the term describes the underlying encryption technique itself, not any particular piece of software built on top of it.

It's a reminder that Tor didn't invent the idea it's now most associated with — it's one especially successful implementation of a technique that had already been named and studied for years beforehand.

Layer by layer

Following one piece of data through the process the name describes.

Your device wraps the data in multiple encryption layers

One layer for each relay the data will pass through in its circuit, typically three.

The entry relay strips the outermost layer

Revealing only where to send the data next — the middle relay's address — nothing more.

The middle and exit relays repeat the process

Each one peeling away exactly one more layer, until the final layer is removed at the exit relay, revealing the destination.

Why an onion, and not some other layered object?

Plenty of things have layers — why did this particular vegetable become the lasting metaphor instead of, say, an artichoke or a cake?

There's no definitively documented single reason preserved in the historical record, but onions have a few practical advantages as a metaphor: the layers are uniform and concentric rather than irregular, they're a universally familiar object across cultures, and 'peeling an onion' was already a common enough phrase for describing the process of working through layers that it likely felt like a natural, low-effort fit for researchers naming their technique.

The Tor Project's own logo leans into the metaphor directly

Tor's branding has historically used onion imagery prominently, and the small onion icon became a widely recognized visual shorthand for the whole project among users, well beyond just the technical documentation.

It shows the metaphor wasn't just internal engineering jargon — it became core to how the whole project presents itself publicly, decades after the term was first coined.

A vegetable known for making people cry became the symbol of digital protection

Onions are culturally associated with tears and irritation as much as with cooking. The technology named after them ended up representing something closer to relief and protection for the people who rely on it most — journalists, activists, and others facing real surveillance risk.

The name outlasting its original creators' project

The original onion routing research at the Naval Research Laboratory eventually gave rise to the Tor Project as an independent nonprofit, which continued using both the 'onion' terminology and, ultimately, named the whole software 'Tor' as a direct acronym reference to it.

It's a good illustration of how a well-chosen technical metaphor can outlive the specific institution that coined it, becoming permanently attached to the concept itself.

confirmed

So, why the name?

Because the encryption genuinely works in layers, peeled away one at a time by each relay — a metaphor coined by Naval Research Laboratory researchers in the 1990s that turned out to be both accurate and durable.

A rare case of a technical metaphor being both catchy and mechanically precise, which likely explains why it never got replaced.

Good technical metaphors tend to survive for a reason

Onion routing joins a long tradition of technology named after physical, everyday objects that map surprisingly well onto abstract processes — the resulting familiarity likely helped the concept spread and stick in public understanding far more than a purely technical name ever could have.

The short version

  • The 'onion' name describes Tor's actual encryption process: nested layers, peeled away one at a time.
  • The term originated with U.S. Naval Research Laboratory researchers in the 1990s.
  • 'Tor' itself is an acronym for 'The Onion Router.'
  • The metaphor predates the modern Tor Project and software by years.

Questions people ask

Where to go next

What are dot onion sites, or Tor onion sites?

A closer technical look at the address format this naming applies to.

Why does the dark web exist?

The broader origin story behind the technology this name describes.

What are onion sites or on the dark web?

The core definitional piece behind everything discussed here.

Why are onion sites so slow or not working?

A direct consequence of the very layering this name describes.

Why was the dark web made public?

How this research eventually left the lab and reached the rest of us.

A kitchen metaphor that happened to be exactly right

Most technical names are arbitrary labels. This one's a diagram — you can genuinely picture the whole process just by picturing the vegetable.

You now know

  • The 'onion' name describes Tor's layered encryption process, peeled away one relay at a time.
  • The term originated with U.S. Naval Research Laboratory researchers in the 1990s.
  • 'Tor' is an acronym for 'The Onion Router,' directly referencing the same metaphor.

Safety note

Educational, not operational

This guide is educational. It does not provide instructions for illegal activity, evading law enforcement, buying prohibited goods, or attacking systems. Laws and risks vary by country, so stay within your local rules and avoid interacting with unknown services.

FAQs

Questions people ask

Sources

Further reading

  • Tor Project: HistoryTor Project

Continue learning

Next useful step

Keep going

The next door is usually the interesting one

The answer you came for touches a few neighboring questions. These are the ones most likely to make the picture click.

What you should remember

A kitchen metaphor that happened to be exactly right

  • Most technical names are arbitrary labels. This one's a diagram — you can genuinely picture the whole process just by picturing the vegetable.
  • The 'onion' name describes Tor's layered encryption process, peeled away one relay at a time.
  • The term originated with U.S. Naval Research Laboratory researchers in the 1990s.
  • 'Tor' is an acronym for 'The Onion Router,' directly referencing the same metaphor.

A few useful next steps

Where this question wanders next

The dark web is less a single tunnel than a set of side passages. These are the useful ones from here.

If this made you wonder

onion-routing collection

Follow the causes

1

What Are Onion Sites Used For?

A wider range of purposes than the stereotype suggests — some mundane, some genuinely important, some exactly what you'd expect.

2

What Are .Onion Sites, Or Tor Onion Sites?

'.onion' isn't a normal domain suffix — it's the tell that an address was generated mathematically, not registered.

3

What Are Onion Sites, Or On The Dark Web?

Websites that exist entirely within Tor's own network, reachable only through Tor Browser and a very different kind of address.

4

What Is The Safest Dark Web Site?

Not a hidden forum. Major news organizations run official, verified .onion mirrors, the closest thing to a safe first stop.

5

What Is The Safest Dark Web Site?

Not a hidden forum. Major news organizations run official, verified .onion mirrors, the closest thing to a safe first stop.

Questions people ask first

Choose by the time in your pocket