The 12 Best Legitimate .onion Sites to Know in 2026

When the dark web comes up, mainstream media almost always focus on shady marketplaces and illegal activity. This fixation leaves an entire half of the .onion ecosystem in the shadows: the side made up of perfectly legitimate sites run by major international media outlets, encrypted email services, public institutions, and world-renowned open-source projects. This article presents an in-depth selection of the twelve best legitimate .onion sites to know in 2026, with a detailed description, history, concrete value, and limitations for each service.

This selection is deliberately narrower than our overview of thirty unusual sites in order to go deeper on each service. It targets users who want to build their own .onion toolkit: one or two news services, an email service, a messaging service, a search engine, and a secure sharing tool. The goal is to give you the knowledge to navigate the legitimate dark web ecosystem confidently, without falling into the traps set by fraudulent imitations.

How we selected these sites

To be included in this selection, a site had to meet four criteria. First, it had to be officially operated by an identifiable organization, with a .onion address published on its authentic clearnet source. Second, it had to offer concrete added value compared to simply browsing on the clearnet (censorship circumvention, enhanced anonymity, specific features). Third, it had to be legally usable without raising any legal questions. Fourth, it had to be stable and active, with a sustained presence of at least several years. The exact .onion addresses are available in our OnionDir directory, where they are regularly verified.

1. BBC News

The BBC, the British public broadcaster and one of the most-read media outlets in the world, launched an official .onion version of its international news site in October 2019. The initiative responds to a pragmatic reality: the BBC has been blocked by China's Great Firewall for more than twenty years, filtered in Iran since the 2009 protests, and periodically restricted in Russia, Vietnam, and Uzbekistan. Rather than let its articles circulate via unofficial mirrors that could be manipulated, the BBC made an authentic source available via Tor.

The content of the .onion version is identical to that of the clearnet site: full articles in multiple languages (English, Arabic, Persian, Russian, Chinese, Portuguese, Spanish, French, and others), real-time updates, and videos (at quality adapted to Tor's limited bandwidth). The BBC states that it disables its analytics tracking on the .onion version, further strengthening reading privacy. For users in authoritarian countries, it is a vital breach in the censorship architecture. For Western readers, it is an ad-free, tracking-free news source.

2. The New York Times

Launched in October 2017 and initially led by Runa Sandvik (a former Tor Project contributor), the New York Times .onion service is one of the most polished among major commercial media outlets. It offers exactly the same content as nytimes.com, including paywalled articles for subscribers, interactive visualizations, and podcasts. The initiative carried particular symbolic weight: the Times, whose business model depends on paid subscriptions and targeted advertising, was willing to offer a version accessible without tracking and without connection identification.

Access to paywalled articles requires a standard subscription (around $17 per month in 2026). A subscription obviously ties you to a payment identity, which breaks full anonymity, but your ISP cannot tell you are visiting the NYT — only the paper knows, via your account. For readers who simply want to stay informed without being subjected to nytimes.com's extremely dense advertising tracking, the .onion version is an interesting alternative. Free articles (including the first ten per month) remain accessible without an account.

3. ProPublica

ProPublica is the pioneering newsroom when it comes to a Tor presence: in January 2016, it became the first major media outlet to launch an official .onion version of its site, well ahead of the New York Times, BBC, and everyone else. The initiative, led by Mike Tigas (security developer and open-source contributor), served as a model for the entire global journalism ecosystem.

Founded in 2008 in New York, ProPublica is a non-profit independent investigative newsroom funded by donations and foundations. It has won multiple Pulitzer Prizes for its investigations into finance, public health, inequality, and national security. Content accessible on the .onion version includes all published articles, the public databases maintained by the newsroom (tax data, hospital data, voter rolls), interactive visualizations, and newsletters. ProPublica also uses SecureDrop to receive confidential documents from its sources.

4. Deutsche Welle

Deutsche Welle (DW) is Germany's international public broadcaster, the German equivalent of France 24 or Voice of America. Founded in 1953 and based in Bonn, DW publishes in around thirty languages, including Chinese, Persian, Arabic, Russian, Turkish, Bengali, and several African languages. Many of these editions are specifically designed for audiences in countries where press freedom is restricted.

The Deutsche Welle .onion version, launched in 2019, provides access to all of these language editions. For a Persian reader in Iran, for a Russian dissident in Moscow, for a Uyghur in Xinjiang, visiting DW.de on the clearnet can trigger automatic state surveillance alerts; going through the .onion makes the visit undetectable. DW's editorial commitment is reinforced by German public funding, which gives it stability and independence less subject to commercial pressures than its private counterparts. The English section of DW is active and offers coverage complementary to other English-language media.

5. ProtonMail

ProtonMail (now Proton, a global company) is one of the most widely used encrypted email services in the world, with tens of millions of users. Founded in 2014 by Andy Yen and a few fellow scientists at CERN in Geneva, the service offers end-to-end encryption by default between Proton users, with infrastructure based in Switzerland benefiting from robust legal privacy protections.

ProtonMail's official .onion address, active since January 2017, lets you check your mailbox without revealing your IP address or ISP to Proton itself. It is one of the rare cases in which a commercial company voluntarily forgoes data it could collect. For journalists, activists, whistleblowers, and privacy-conscious citizens, this is a particularly well-rounded combination: end-to-end encryption for content, Tor anonymity for connection metadata. A free Proton account is sufficient to benefit from these protections, with paid plans for more storage space.

6. Riseup

Riseup is a activist technology collective founded in 1999–2000 in Seattle by alter-globalization activists. For more than twenty years, it has provided infrastructure services — email, mailing lists, VPN, collaborative pads — to progressive social movements around the world. Its .onion access allows activists, trade unionists, environmental campaigners, and human rights defenders to communicate without ISPs, employers, or governments being able to intercept their metadata.

Riseup email accounts are obtained by invitation, to limit abuse and keep the service focused on its activist mission. This filtering system is a constraint for those who do not know anyone in the Riseup network, but it preserves the quality and ethical consistency of the service. The collective has resisted multiple access demands from US federal agencies, particularly in the post-9/11 context, and regularly publishes warrant canaries attesting that no secret demand has been honored. For journalists covering sensitive topics or activists in conflict situations, Riseup is a historical reference.

7. DuckDuckGo

DuckDuckGo is the search engine that made privacy its commercial argument, founded in 2008 by Gabriel Weinberg in Pennsylvania. Its .onion version, active since 2010, is one of the oldest .onion services still operational. Unlike Google, which frequently blocks connections from Tor exit nodes and imposes aggressive CAPTCHAs, DuckDuckGo on Tor works perfectly, with the same search results as on the clearnet.

The integration is so seamless that Tor Browser has used DuckDuckGo as its default search engine for several years. The service keeps no user logs, transmits no personal identifiers to ad networks, and does not profile its users. Behind the scenes it relies on results indexed by Bing (Microsoft), which it filters and reformats, but its privacy commitments are verified and respected. For ordinary web searches from Tor, DuckDuckGo offers the best trade-off between result quality, privacy, and compatibility with Tor Browser.

8. Ahmia

Where DuckDuckGo indexes the clearnet, Ahmia specifically indexes .onion services on the Tor network. Created in 2014 by Finnish researcher Juha Nurmi at the University of Tampere, Ahmia is today the most ethically responsible .onion search engine. It practices active filtering of manifestly illegal content: child sexual abuse material, terrorist propaganda, and other clearly reprehensible material are excluded from its index. A publicly maintained blacklist allows the community to contribute to this moderation.

Ahmia's index covers approximately 20,000 to 30,000 active .onion services, indexed by automated crawlers that follow links from known directories. Ahmia is also accessible on the clearnet (ahmia.fi), making it a practical bridge between the two worlds: researchers, journalists, and curious users can explore the Tor ecosystem without necessarily launching Tor Browser. For any serious exploration of the legitimate dark web, Ahmia should be one of your first tools.

9. SecureDrop

SecureDrop is not a .onion site in the traditional sense, but an open-source platform that allows anonymous sources to send sensitive documents to newsrooms via dedicated .onion instances. Originally designed by Aaron Swartz and Kevin Poulsen in 2013 under the name DeadDrop, the project was taken over by the Freedom of the Press Foundation after Aaron Swartz's death. More than eighty major newsrooms worldwide now use SecureDrop: the New York Times, Washington Post, The Guardian, ProPublica, The Intercept, Forbes, Le Monde, Mediapart, CBC, The Globe and Mail, and others.

The architecture is rigorous: two isolated machines in the newsroom, physical authentication airlocks, multi-layer end-to-end encryption. Several major leaks of the past decade have passed through SecureDrop: documents linked to the Panama Papers, Paradise Papers, and various government investigations. For a whistleblower who wants to pass documents to a journalist without revealing their identity, SecureDrop is the reference solution. Each major media outlet has its own instance, with detailed instructions on its clearnet site for contacting the newsroom via Tor.

10. OnionShare

OnionShare is an open-source piece of software created in 2014 by Micah Lee, security engineer at The Intercept. The concept has an elegant simplicity: you launch OnionShare on your computer, drop a file into the interface, and within seconds a unique .onion address is generated. The recipient uses that address in Tor Browser and downloads the file directly from your computer. No third-party server, no cloud, no intermediary. As soon as the transfer is complete, you close OnionShare and the address disappears forever.

The service extends this concept to three complementary uses: hosting temporary static websites (a website accessible for the duration of a meeting), ephemeral encrypted chat rooms, and receiving files (recipients send you documents via a .onion address you generated). OnionShare is particularly used by journalists to receive documents from sources, by lawyers to exchange case files with clients, and by activists to distribute evidence without a central server that can be seized. The software is free, open source, cross-platform (Windows, macOS, Linux), and developed by an international team.

11. Facebook on Tor

Facebook's official .onion address is probably the most counter-intuitive entry in this selection: a company whose business model depends on massive personal data collection agrees to be accessible via an anonymization network. Launched in October 2014 with the original address facebookcorewwwi.onion (v2), migrated to v3 in 2021, it was the first major commercial service in the world to adopt Tor.

The logic is clear despite the apparent paradox. In countries that block Facebook (China, Iran, North Korea, Cuba, and partially Russia), Tor becomes the access channel. Human rights activists, foreign journalists, and persecuted minorities depend on it to communicate with the outside world. Obviously, you still have to log in with a real Facebook account, so the platform continues to collect your usual data; Tor only masks your IP address and ISP. The initiative created a historic precedent and demonstrated that a .onion site can operate at industrial scale with more than two billion users.

12. Tor Project

To close this selection, the official Tor Project website itself, accessible via its own .onion address. There is an elegant philosophical consistency here: the organization that develops the Tor network is itself part of that ecosystem by maintaining a .onion version of its site. You can download Tor Browser there, read the official documentation, access the project's technical blog, make donations, and obtain bridges to circumvent censorship.

The history of the Tor Project is one of the great contemporary paradoxes. The "onion routing" technology was invented in the 1990s by three researchers at the US Naval Research Laboratory. The code was open-sourced in 2004, and the organization was founded in 2006 by Roger Dingledine and Nick Mathewson. Based in Seattle, it employs around sixty people and coordinates thousands of volunteers who operate relays. It is funded by philanthropic foundations (Ford, Open Society), individual donations, and — paradoxically — US government grants via the Open Technology Fund. The same network today serves dissidents circumventing their own governments' censorship and journalists protecting their sources around the world.

General security tips

Even for the legitimate services presented in this selection, a few basic precautions apply. Always verify .onion addresses from multiple sources before connecting for the first time: fraudulent imitations (phishing .onion) of major legitimate services exist and can look visually very similar to the real addresses. Our OnionDir directory maintains manually verified addresses, but you can also cross-check against official publications from the services on their verified social accounts or in their press releases.

Use an up-to-date Tor Browser, downloaded only from torproject.org. Security vulnerabilities regularly exploit outdated browsers. Do not mix identities: if you use nominal accounts (Facebook, NYT, Proton), maintain a clear separation between your Tor session and your clearnet use, ideally by using different browsing profiles. For sensitive uses (investigative journalism, activism, whistleblowing), consider using Tails OS, which leaves no trace on your computer and automatically routes all traffic through Tor.

Going further

This selection is a deliberately focused entry point into a much larger ecosystem. To continue exploring, see our top 30 unusual and legitimate .onion sites, which presents around thirty surprising services, including continuous radio streams, anonymous chess games, digital libraries, public institutions like the CIA, and many other curiosities.

To learn how to install Tor Browser and access it safely, our complete dark web access guide walks through every step. For the technical workings of .onion addresses, our article on what a .onion link is explores the anatomy and cryptography of these addresses. To debunk common misconceptions, our pillar article on 50 debunked myths sorts fact from fiction. For more unusual questions, see our unusual dark web FAQ.

Prefer to explore by theme? Our directory categories allow focused navigation: international media with .onion versions of the press, privacy tools including SecureDrop and OnionShare, encrypted email and messaging, specialized search engines, community forums, and our Miscellaneous and Unusual sections for curiosities.

FAQ on the best .onion sites