How to make a .onion site: A step-by-step guide

Table of Contents

Table of Contents

Table of Contents

ShowShow all

Hide

What is a .onion domain?

A .onion domain is the address of a website that can only be accessed through the Tor anonymity browser. Regular browsers won’t be able to navigate the relay of proxy servers that will take users to your website. The Tor browser uses Onion routing to send users’ traffic through encrypted proxy servers and in the process conceals the user’s location and activity from anyone trying to snoop on them.

Ordinary web domains, like .com, .org, or .biz, are issued by the Internet Corporation for Assigned Names and Numbers (ICANN). There are thousands of different domains out there, but not all of them can be used by everyone (like .apple, for example). Users have to submit proposals to ICANN to register a domain and sub-domain (the part before the period). There are usually costs associated with registering and maintaining the domain of your choice.

When you create a .onion site, a domain name will automatically be generated for you. It will be a string of 16 or 56 random lowercase letters and numbers (from 2 to 7) that the Tor browser can use to navigate to your server. Unfortunately, these random strings cannot be any shorter than 16 characters and are often hard to remember, making it difficult for users to memorize your website.

How to create a .onion site

Creating a .onion site requires at least basic knowledge of networking and web hosting — you will have to create a web server and configure the site yourself. Before you start working on your .onion website, make sure your Tor browser is set up and working properly. Here are the steps you’ll need to take to create your own .onion website:

First, create your website on your computer or server. You can use any tool or software you like for making websites. Just make sure it’s ready and working locally before moving on. If you already have an existing web server, Tor’s .onion service can give it a .onion domain if it’s configured correctly.

Note that the powerful anonymity provided by Tor isn’t worth much if your server leaks personal data or information that advanced users could use to identify you. Tor suggests binding your server to localhost, so when you set up your .onion services later, you’ll create a virtual port that visitors can connect through. This way, it won’t reveal your real IP address.

To configure your server, you’ll have to open your “torrc” file, which is a text file you received when you set up your Tor browser. You’ll need to add two pieces of information:

• A folder on your computer where Tor will store the files for your .onion site.
• The address of your web server so Tor knows where to find it.

For more detailed information on how to modify this file to create a .onion server, follow the instructions on the Tor project’s website.

Once your setup is complete, restart your Tor browser to generate a public key, or domain, for your website. Check a file that Tor made in the folder you assigned it earlier. This file has the name of your new .onion site. It looks something like “eqdxk6lyjvo45c3shnrbmwtzf1uia2gp.onion” — and that’s the address people will use to visit your site through the Tor Browser.

After that, it’s up to you to distribute it and get people to visit your site. Just be sure not to share the private key with anyone!

Why would I want a .onion address?

A .onion domain has a few key advantages over an ordinary domain. The main one is that it can only be accessed using a Tor browser. It grants numerous layers of anonymity that are not available on more popular browsers. If you want to ensure near-total anonymity for both you and your visitors, you can’t do much better than a Tor address.

Since .onion domain names are automatically generated, it means that you do not need to register with ICANN to create your own domain. You won’t need to hide your details from “whois” searches, and your ICANN account won’t be vulnerable to malicious takeovers. You will be completely in control of your privacy and your domain.

FAQ

What is the latest VPN protocol?

Although .onion sites have many advantages security-wise, there are also many risks. Here’s a short breakdown:

Advantages for your privacy and security:

Anonymity. Both .onion sites and the Tor network allow users and website owners to protect their identities. This can help protect them from surveillance and avoid censorship.

Encryption. Traffic to and from .onion sites is encrypted multiple times over the Tor network, enhancing privacy and security.

No DNS leaks. Because .onion addresses are resolved within the Tor network, there are no DNS leaks, which can be a privacy concern on the regular internet.

Dangers of the .onion domains:

Content legality. The same features that protect users’ privacy on .onion sites can also make these sites attractive for illegal activity. It’s important to be cautious and aware of the laws in your country when accessing any content on the Dark Web.

Security vulnerabilities. While the Tor network adds a layer of encryption, .onion sites themselves might not always be secure. Vulnerabilities in the site’s code or the Tor browser can still be exploited by cybercriminals.

Scams and malware. The anonymous nature of the Dark Web means it’s also a breeding ground for scams and malware. The scrambled 16-character-long domain names make it easy for malicious users to create a similar domain to trick users looking for legitimate sites. You should be extra cautious and avoid downloading unknown files or sharing personal information.

How do I access .onion websites?

To access .onion websites, you’ll need to use the Tor browser, which is specifically designed to connect to the Tor network and allows for secure and anonymous browsing. First, download and install the Tor Browser from the official Tor Project website. Once installed, open the Tor Browser and type the .onion address of the site you want to visit into the address bar.

Finding genuine and safe .onion websites can be challenging due to the nature of the Tor network. However, there are a few reputable directories and search engines that specialize in indexing .onion sites. You can also use dedicated forums and online communities to find lists of .onion websites, but they might not always be safe. Some organizations like the BBC or privacy-focused services like ProtonMail sometimes provide .onion addresses, allowing users to access their content securely.

Are Tor browsers legal?

Yes, Tor browsers are legal to use in most countries around the world. So far, only countries with strict internet censorship laws, like China, Iran, and North Korea, have attempted to restrict or block access to the Tor network and similar anonymity tools.