OnionShare Guide - Secure File Sharing over Tor

OnionShare works by starting a temporary web server on your local machine and making it accessible as a Tor hidden service (.onion address). When you want to share a file, OnionShare generates a unique .onion URL that the recipient opens in Tor Browser. The file transfers directly from your computer to theirs - no intermediary server, no cloud storage, no account required.

This architecture means the file never leaves your control until the recipient downloads it. There is no upload step, no storage on someone else's server, and no metadata logged by a third party. Once you close OnionShare, the hidden service disappears and the .onion address becomes permanently unreachable.

OnionShare supports four modes: sharing files (send), receiving files (receive), hosting a static website, and running an anonymous chat room. Each mode creates a separate .onion address with its own access controls and security settings.

OnionShare is available for Windows, macOS, and Linux. Download it from the official website at onionshare.org or install it via your Linux distribution's package manager. On Ubuntu and Debian, use sudo apt install onionshare. The Flatpak version is also available for sandboxed installations.

To share files, open OnionShare and drag files or folders into the sharing window. Click Start Sharing to generate the .onion address. Send this address to your recipient through a secure channel - ideally an encrypted messenger like Signal or Briar. The recipient opens the link in Tor Browser and downloads the files directly from your machine.

For receiving files, switch to Receive mode. OnionShare generates an .onion URL with an upload form. Share this URL with people who need to send you files. Uploads go directly to a folder on your computer. This is particularly useful for journalists running anonymous tip lines or whistleblower drop boxes.

Always enable the private key option in OnionShare settings. This generates a random key that must be included with the .onion URL - anyone who intercepts just the .onion address without the key cannot access your share. This protects against .onion address enumeration attacks.

For sensitive transfers, enable the option to stop sharing after the first download. This ensures that even if the link is compromised after the transfer, no one else can download the file. For ongoing file drops, you can configure persistent .onion addresses that survive across sessions.

Remember that OnionShare protects the transfer, but not the file contents. If you are sharing sensitive documents, encrypt them with PGP or a tool like age before sharing. This adds a second layer of protection in case the recipient's device is compromised. Use VPN plus Tor for additional network-level protection.

OnionShare is ideal for one-time transfers, but if you need a persistent anonymous file sharing service or website, AnubizHost provides dedicated Tor hosting on offshore servers in Iceland, Romania, and Finland. Host your .onion site with guaranteed uptime, NVMe SSD storage, and full root access.

Deploy an OnionShare server, a Tor hidden service, or any privacy-focused application on our infrastructure. Pay with Monero, Bitcoin, or other cryptocurrencies. We require no KYC, no ID verification, and no personal information. Your hosting account is as anonymous as you choose to make it.

Whether you need a secure document drop for journalism, a private collaboration space, or a censorship-resistant website, AnubizHost gives you the infrastructure without the identity paper trail. Explore our Tor hosting plans and deploy in minutes.