Official onion addresses: how to open .onion sites

When a site is blocked, the operator has a move available that beats every network trick in our guides: they publish their own Tor onion address. Inside the Tor Browser, that address reaches the site through the Tor network without ever touching a public exit relay - so there is nothing for your network to filter on the way, and nothing for an exit to interfere with [1].

Major operators run official onions for exactly this reason: broadcasters reach readers in censored countries, newsrooms accept documents that way, and platforms keep serving users whose networks block them. The catch is trust: an onion address is a long random string, which makes it a perfect target for counterfeiters. This guide is about getting the official address and keeping it that way.

Why an official onion is the strongest unblock there is

An onion service works differently from every other method on this site: the connection stays inside the Tor network from your Tor Browser to the operator's server, end to end [1].

• Network blocks cannot touch it. Your resolver never resolves a normal domain and no public IP is involved; DNS and IP filtering simply have no target [1].
• The operator authenticates itself. The onion address is the site's cryptographic identity - a correct address lands you with the real operator, not a copycat. This is why onions are safer than "mirror domains" [1].
• No exit relay, fewer captchas. Normal Tor browsing exits through a shared relay that sites often block; onion traffic avoids that stage entirely [1].

Find the official address - the safe pattern

Never take an onion address from a search result, a "onion list" website, or an unsolicited message. Those are the primary delivery mechanism for fake mirrors built to harvest logins. The only trustworthy source is the operator itself [2][7]:

1. Start from the operator's own clearnet site - their announcement, help page, or footer link. The Tor Project publishes its own onion address on its site, for example [2].
2. Use a vetted directory where it exists. For newsrooms running SecureDrop (the document-drop system used by major outlets), the SecureDrop directory is the maintained, verified list [4].
3. Check the announcement, not just the page. Operators like the New York Times publish their onion address together with instructions on their own pages [5]; DuckDuckGo explains its onion service in its help center [3].
4. Open it in the Tor Browser and check the address character by character - onion strings are long, and one wrong character is someone else's site.
5. Bookmark it once verified. From then on, your bookmark is the source of truth - the habit that protects you forever.

Who runs official onion sites

The categories that matter to a blocked reader, with the pages that publish or explain their addresses:

• Broadcasters and news media. International broadcasters and major newspapers run onions to reach readers under censorship - the SecureDrop directory alone lists dozens of newsroom onion addresses [4], and the New York Times documents its tips service on its own pages [5].
• Search engines. DuckDuckGo runs a well-known onion service and documents how to use it [3].
• The infrastructure itself. The Tor Project, SecureDrop, and privacy organizations run onions for their own tools [2][4].
• Platforms and communication services. Large platforms and privacy-focused providers have run onion services; check each operator's own privacy or help pages for the current address - addresses do get rotated, which is one more reason to fetch them from the operator rather than memorize them.

One honest note on availability: onion services depend on the operator keeping them online. If an onion is down, it is often maintenance rather than censorship - check the operator's clearnet announcement before assuming the worst.

The mistakes that cost people their accounts

• Search-engine onion lists. Every list of raw onion strings found via search is unverified by definition. Malicious copies exist precisely because people copy these strings [7].
• Mirrors in disguise. An onion address that differs by a few characters is not a mirror - it is someone else's server. Verify character by character, every first time [1].
• Using onions outside Tor Browser. An onion address only opens in the Tor Browser (or a browser configured for it). Anything else that "opens onions" deserves suspicion.
• Assuming onions solve everything. An onion fixes network blocks for readers who can reach the Tor network at all. If Tor itself is blocked, bridges come first, and zero-install alternatives like archived copies or a translate proxy cover the "cannot install anything" cases.