Dark Web Directory 2026

Dark Web Directory 2026: Quick-Access Index

We present a filterable directory of legitimate .onion services for 2026, focusing on public-interest applications. This directory excludes marketplaces, stolen-data sites, and illegal-content directories, ensuring users can navigate safely. Each entry includes the name, category, purpose, official source, v3 onion address, source-confirmed date, and status, such as active or unavailable.

This table allows for quick access to important services. Always verify the .onion addresses, especially for document submissions, against the organisation's official clearnet page to ensure authenticity^[4]. Remember, only current 56-character v3 addresses are supported, as legacy addresses have been disabled since October 2021^[3].

Dark Web Glossary: Terms You Need to Know

Understanding the terminology related to the dark web is crucial for navigating this unique online environment.

Dark Web refers to the part of the internet that is not indexed by standard search engines and requires specific software, such as Tor, to access. The Deep Web encompasses all parts of the internet not indexed by search engines, including databases and private sites, while the Clearnet describes the surface web that is accessible without special tools.

Tor is a privacy-focused network that allows users to browse the internet anonymously. An onion service is a type of website that uses the .onion domain and can only be accessed through the Tor network, ensuring anonymity for both users and service providers^[1]. A .onion address is the unique identifier for these services, with current v3 addresses consisting of 56 characters before the .onion suffix, a change implemented after the discontinuation of v2 addresses in October 2021^[3].

A mirror is a duplicate of a website hosted on different servers, often used to maintain accessibility if the original site goes down. An index is a list of services available on the dark web, while a directory is a curated collection of these services, distinguishing itself from search engines like Ahmia that index onion services but do not curate them. An individual onion service represents a single website or application, whereas a directory encompasses multiple services in one location.

Here’s a compact term-to-example table to illustrate some key concepts:

This glossary should help you familiarise yourself with essential terms and improve your navigation experience in the dark web environment.

Dark Web Search Engines and Onion Directories

Navigating the dark web requires effective tools to locate legitimate .onion services. Two prominent discovery tools are Ahmia and the DuckDuckGo onion service. Ahmia is a non-commercial search engine that indexes publicly accessible onion services. As of September 25, 2026, it reported approximately 1,715,358 searches per month and does not track user activity, making it a privacy-respecting choice for users^[5]. However, Ahmia does not index all onion services, particularly those that are private or recently launched. The DuckDuckGo onion service offers similar anonymity features but may also have limitations in indexing certain types of content.

Curated directories differ significantly from crawlers. Curated directories, like those found in SecureDrop, list vetted services that meet specific security standards, while crawlers index a broader range of sites without such scrutiny. This distinction is crucial, as some services may not appear in directories due to their private, invite-only nature, or if they have been recently launched. It's important to be cautious with any directory that claims to list all onion services, as many may contain outdated or misleading information.

The Hidden Wiki is a well-known but untrusted directory label used by multiple unrelated sites. It does not serve as a single authoritative source, and users should be wary of relying on it for navigation. The content on various Hidden Wiki mirrors can be inconsistent, and they may contain links to malicious sites. Therefore, we advise verifying any service found through such directories against more reliable sources to ensure safety and credibility.

News, Journalism, and Whistleblowing Onion Services

Various onion services operated by established newsrooms and press-freedom organisations allow for secure communication and information sharing. Notable examples include ProPublica, which maintains an onion service for whistleblowers, and verified SecureDrop instances that facilitate anonymous document submissions. SecureDrop is an open-source system for accepting documents from anonymous sources, ensuring that users can submit sensitive information without revealing their identities^[6].

A newsroom mirror refers to a duplicate of a media outlet's website hosted as an onion service, providing a secure way for users to access news content. For example, ProPublica's onion service allows users to read articles and submit tips anonymously. An anonymous submission system, such as SecureDrop, enables individuals to send documents or messages securely, protecting their identity from potential exposure. Source protection is a critical aspect of journalism, ensuring that whistleblowers can share information without fear of reprisal.

When accessing these services, it's essential to distinguish between sites intended for reading and submission systems. Submission systems, like those found on SecureDrop, should only be accessed through links provided on the organisation's official clearnet website to avoid phishing attempts. SecureDrop advises users to compare the onion address in its directory with that published on the organisation's clearnet page, explicitly stating not to submit documents if the addresses do not match^[4].

We list a few verified onion services that cater to journalism and whistleblowing:

• ProPublica: Provides a secure platform for whistleblowers to submit tips anonymously.
• CIA Onion Service: Offers access to official CIA resources while maintaining user anonymity^[7].
• Various SecureDrop Instances: Active media organisations using SecureDrop for anonymous submissions.

These services are crucial for ensuring that journalists can receive information and reports while protecting the identities of those who provide them. Always ensure that you are using the correct onion addresses, particularly when submitting sensitive documents, to maintain security and anonymity.

Privacy, Email, and Communication Services

In the realm of the dark web, privacy, email, and communication services play a critical role in maintaining anonymity and security. We categorise these services into four main functions: private search, encrypted email, anonymous file sharing, and censorship-resistant communication. When selecting services, it is essential to confirm their legitimacy by ensuring their onion addresses are verifiable through an official clearnet domain or maintained documentation.

For private searching, Ahmia stands out as a non-commercial search engine that indexes publicly accessible onion services. As of September 25, 2026, it reported approximately 1,715,358 searches per month and does not track user activity, making it a solid choice for privacy-conscious users^[5]. Its genuine onion address can be confirmed on its official clearnet site^[10].

In the realm of encrypted email, Proton offers services through its onion site, allowing users to create accounts and access Proton Mail, Proton Calendar, and Proton Drive securely over Tor^[8]. This service is particularly useful for individuals looking to maintain their privacy while communicating or sharing files.

For anonymous file sharing, SecureDrop is an open-source system designed for accepting documents from anonymous sources. It maintains a directory of active media instances that comply with reasonable security standards before being included^[6]. Users should verify the onion address listed in SecureDrop's directory against the address on the organisation's clearnet page to avoid potential phishing attempts^[4].

Censorship-resistant communication is exemplified by the CIA's onion service, which provides access to official resources while ensuring user anonymity^[7]. This service is verified and supports individuals seeking information from government sources without exposing their identities.

It is crucial to note that while an onion address protects the connection route, it does not automatically guarantee the trustworthiness of the operator, message, or download. Users must remain vigilant and conduct thorough checks before engaging with any service, particularly when sharing sensitive information. Always ensure that the onion addresses you are using are current, as only v3 addresses are supported since the discontinuation of legacy v2 addresses in October 2021^[3].

Government, Institutional, Research, and Archive Services

Accessing official resources and archives through the dark web can provide a layer of privacy for users seeking information. We focus on government portals, nonprofit projects, research resources, libraries, and archives, ensuring they are distinctly separated from commercial services. Each entry includes the operating organisation and the official page that confirms its onion address, allowing users to verify the legitimacy of the service.

Notable Services

1. CIA Onion Service: Launched on May 7, 2019, this service provides access to verified CIA resources. Its onion address is ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion, confirming that all available content on CIA.gov is accessible through this service^[7].

2. ProPublica: This journalism platform offers a secure onion service for whistleblowers and anonymous tips. Users can verify its onion address through its clearnet site, ensuring authenticity^[6].

3. SecureDrop: An open-source system designed for secure document submissions from anonymous sources. Its directory lists active media instances, and users are encouraged to verify the onion addresses against the organisations' clearnet pages to prevent phishing attempts^[4].

4. Ahmia: As a non-commercial search engine, Ahmia indexes publicly accessible onion services. It reported about 1,715,358 searches per month as of September 25, 2026, and does not track user activity, making it a reliable resource for finding legitimate onion services^[5].

5. Proton Services: Proton's onion service includes Proton Mail, Proton Calendar, and Proton Drive, allowing users to securely create accounts and access these services over Tor^[8].

Discontinued Services

• Old CIA Mirror: Previously, the CIA had a different onion address for its services, which is now discontinued. Users should verify current addresses before accessing any resources.

When using these services, it is essential to ensure that the onion addresses are up to date and valid. This is particularly important since only v3 onion addresses are supported following the deprecation of v2 addresses in October 2021^[3]. By verifying the information through official channels, we can maintain a secure and informed experience while navigating the dark web.

Find the Right Onion Service by Use Case

Navigating the dark web can be daunting, but identifying the right onion service for your specific needs simplifies the process. Below is a decision table categorising common use cases, suitable onion services, and key limitations for each scenario.

For private searching, Ahmia serves as a reliable option, allowing users to conduct searches without tracking their activity^[5]. However, it may not index all onion services, particularly newly launched or private ones. Newsroom mirrors like ProPublica provide access to articles while protecting user anonymity, although not all content may be available compared to the clearnet.

When wishing to contact a newsroom, SecureDrop is a trusted system for submitting documents anonymously, but it is crucial to verify the onion address listed in its directory against that on the organisation's official website to avoid phishing attempts^[6][4]. Government services, such as the CIA's onion service, offer access to official resources, ensuring that users can obtain information securely^[7].

It is vital to note that this table excludes marketplaces, leak sites, malware services, and illegal video or media directories, which are not legitimate use cases for onion services. By focusing on verified services and understanding their limitations, we can effectively navigate the dark web for our specific needs.

How to Verify an Onion Link Before Opening It

Verifying an onion link before accessing it is crucial for maintaining security and ensuring that you are connecting to a legitimate service. We recommend following this verification checklist:

1. Locate the Address on the Official Domain: Always check the onion address against the official website of the service. This helps confirm authenticity.
2. Confirm the Full v3 Address: Ensure that the address is a current v3 onion address, which consists of 56 characters before the .onion suffix. Legacy v2 addresses are no longer supported since October 2021^[3].
3. Compare Multiple Official References: If the service is listed in directories like SecureDrop or Ahmia, cross-reference the address there to ensure consistency.
4. Check the Publication or Update Date: Look for the last update date on the service’s clearnet page to ensure that the information is current.

Understanding certain terms is also essential for safer navigation.

• Clone: A phishing attempt where a fake site mimics a legitimate onion service to steal information.
• Typo-squatting: This refers to creating a fake onion address that is similar to a legitimate one, often differing by just a character.
• Dead Link: An address that no longer leads to an active service, which can indicate that the service has been discontinued.
• Redirect: A situation where clicking a link leads to a different onion address, which may not be the intended site.
• Mirror: A duplicate of an onion service that may exist to provide redundancy or accessibility, but could also be a phishing attempt.
• Onion-Location Header: A field that some onion services use to provide the correct address when a user attempts to access them.

It is essential to note that a padlock icon, a polished design, a directory listing, or a search-engine result does not guarantee the authenticity of an onion service. Always perform thorough checks before opening any link. This diligence is especially crucial when handling sensitive information or documents.

Common Mistakes and Misconceptions

Treating Every Onion Resource as a Directory

Search engines discover public pages, curated directories select entries, mirrors reproduce another service, and SecureDrop instances accept confidential submissions. Confusing these categories can send readers to a browsing tool when they need an official publication channel. We recommend checking the resource type and intended task before using any listed service.

Assuming Inclusion Means Verification

Some lists publish addresses without identifying the official source, confirmation date, or current operational status. This makes an abandoned link, unofficial mirror, or impersonation appear equivalent to an organisation-confirmed service. We treat entries as verified only when their ownership and provenance are documented; otherwise, they should be labelled unverified.

Measuring Directory Quality by Link Count

Large collections often appear more useful because they include marketplaces, unsafe aggregators, and services with no clear lawful purpose. That approach increases exposure to fraud and makes legitimate research resources harder to identify. We advise choosing directories with a published exclusion policy covering illegal marketplaces, malware services, exploit sales, and similarly unsafe material.

Trusting Familiar Branding or an Identical Layout

A clone can reproduce a recognised name and interface while using an unrelated onion address. A research crawl reported in 2024 identified 13,946 apparent clones associated with 14 sites, indicating that copied branding can operate at substantial scale^[9]. We therefore rely on address provenance rather than appearance, search position, or professional design.

Expecting Every Listed Service to Remain Available

Onion services may be temporarily offline, moved to another address, restricted to authorised users, or permanently discontinued. A directory without separate "confirmed", "unreachable", and "retired" statuses leaves readers unable to distinguish an outage from an obsolete entry. We recommend using the last-confirmed date as context, not as proof that a service is currently reachable.

Opening Onion Links Through an Ordinary Browser

Users sometimes configure a standard browser to use Tor because it appears more convenient than installing Tor Browser. Tor Project strongly discourages this approach because DNS, WebRTC, fonts, plugins, cookies, or cached data may reveal the real IP address or create a distinctive fingerprint^[11]. We advise opening onion services only through Tor Browser obtained from its official source and avoiding browser configurations that bypass its privacy protections.

Conclusions

• We recommend defining your purpose first—private search, news access, confidential submission, or research—then selecting the matching service category.
• Treat every directory entry as a lead, not proof of ownership; confirm provenance through the organisation’s recognised public channels.
• Use Tor Browser in its default privacy configuration, and avoid entering credentials, uploading files, or making payments on uncertain services.
• Prefer directories that clearly separate active, unreachable, retired, and unverified entries while excluding unlawful marketplaces and harmful resources.
• If an address changes unexpectedly, redirects elsewhere, or requests unrelated information, stop and repeat the checks before continuing.

For the next step, use our Tor Link Onion guide to understand address structure and prepare for safer access.