Why does Facebook have an .onion address?

Facebook's .onion address was created specifically to allow users in countries that block Facebook.com to access the platform while hiding their Facebook usage from their ISP. Facebook announced the .onion address in 2014. The technical benefit: Facebook's clearnet domain may be blocked by ISP at the DNS or IP level in some countries. A .onion address is not subject to the same blocking mechanisms. Facebook sees the connection as coming from a Tor exit IP, not the user's real IP. This provides IP privacy from Facebook itself and censorship circumvention for blocked users.

Are these legitimate .onion services different from dark web markets?

Yes, fundamentally different. The services in this guide (ProtonMail, BBC, NYT, DuckDuckGo) are legitimate businesses and organizations that added .onion access as an additional access method. They operate with the same accountability, ownership, and policies as their clearnet presence. Dark web markets are anonymous operations with no clearnet presence, no legal accountability, and often dealing in illegal goods. The distinction is about the nature and accountability of the service, not the .onion technology which is available to any type of service.

Do these services log connections made via their .onion address?

Most legitimate services with .onion addresses log connections but the logs show Tor exit IPs rather than user real IPs. For ProtonMail: they state they receive the last IP that accessed an account in their privacy policy. Via .onion: that IP is a Tor exit node IP, not your real IP. For NYT and BBC: their server logs show Tor exit IPs for .onion connections. The services still log for analytics and security purposes - the .onion routing means the logs do not identify your real IP or geographic location. Check each service's privacy policy for specifics on what they log.

Can I use my regular ProtonMail account via the .onion address?

Yes. ProtonMail's .onion address is a mirror of their main service. Log in with your existing credentials. Your account is the same account regardless of whether you access it via proton.me or the .onion address. All your emails, contacts, and settings are the same. The benefit of using the .onion address: ProtonMail's access log for your account shows a Tor exit IP for those sessions, not your real IP. This is useful if you want specific sessions to be IP-anonymous (logging in while traveling, logging in from a network that might be monitored).

Are the .onion addresses for these services permanent?

.onion v3 addresses are cryptographic and tied to the service's key pair. Once a service publishes a v3 .onion address, it is permanent as long as they keep the private key. Some services updated from v2 to v3 addresses (v2 addresses were deprecated in 2021). Check the service's official website for any address updates. Subscribe to the service's official communication channels (blog, Twitter/X) to receive notifications of .onion address changes.

Privacy-Friendly Services With .onion Addresses in 2026

A growing ecosystem of legitimate privacy-focused services operates .onion mirrors to provide access for users in censored regions and users who want to avoid exposing their browsing to ISPs. These are not dark web marketplaces - they are reputable services (email providers, news organizations, search engines, messaging platforms) that have added .onion support to their existing clearnet presence. Using these services via .onion rather than their clearnet domains provides a meaningful privacy benefit: your ISP cannot see that you accessed ProtonMail or the BBC, and the service cannot log your real IP address. This guide surveys legitimate privacy-friendly services with verified .onion addresses.

Need this done for your project?

We implement, you ship. Async, documented, done in days.

Start a Brief

Email Services With .onion Access

ProtonMail operates a verified .onion address: proton.me is also accessible as an .onion (the current address is published on proton.me's transparency page). Using ProtonMail's .onion address prevents ProtonMail from logging your real IP in account access logs (they see only the Tor exit IP). Tutanota is a German-based encrypted email provider that has supported Tor access. For emails accessible via .onion, ProtonMail provides additional security for users in Iran, Russia, and China where ProtonMail's clearnet domain has been blocked. Cock.li (a free email provider known for privacy), Riseup.net (activist-oriented email), and Disroot.org (privacy-focused services collective) also maintain .onion or Tor-friendly access. Always verify current .onion addresses from the service's official clearnet website before use - .onion addresses published in forums or directories may be outdated or malicious phishing copies.

News Organizations With .onion Mirrors

Major journalism organizations operate .onion versions of their websites, specifically to provide access to readers in countries that block their content. The New York Times operates an .onion mirror (https://www.nytimesn7cgmftshazwhfgzm37qxb44r64ytbb2dj3x62d2lljsciiyd.onion) - verified by the NYT's own announcement. The BBC operates a .onion mirror for access in countries that block BBC content (confirmed on bbc.com/news). Deutsche Welle (DW) operates .onion access for readers in censored regions. The Guardian and other major publications have experimented with .onion mirrors. The Intercept, focusing on investigative journalism, supports Tor access. These organizations operate .onion mirrors specifically for readers in Russia, Iran, China, and other countries where their clearnet domains are blocked. They are legitimate organizations - not dark web sites - providing censorship circumvention for their journalism.

Social Networks and Communications With Tor Support

Facebook operates the most prominent corporate .onion address (facebookwkhpilnemxj7asber7cybce7vkqn2yfmfn.onion) - the first valid .onion address for a major social network. Facebook's .onion address allows users in countries that block Facebook to access the platform without revealing to their ISP that they are accessing Facebook. Facebook logs that you connected from a Tor exit IP rather than your real IP. Twitter (X) has operated .onion mirrors during periods of heavy blocking in specific countries. Signal messenger itself does not operate as an .onion service, but its traffic can be routed through Tor if Orbot is configured with VPN mode on Android. Keybase (identity verification service for cryptography) maintained a .onion address. Briar is a peer-to-peer messaging application built natively on Tor - all communication routes through Tor by design, with no servers involved.

Privacy Tools and Security Resources on .onion

The Tor Project's own website (torproject.org) operates an .onion mirror for users in countries that block the Tor Project's website (preventing users from downloading Tor Browser). The EFF (Electronic Frontier Foundation) has operated Tor-accessible resources. DuckDuckGo (https://duckduckgogg42xjoc72x3sjasowoarfbgcmvfimaftt6twagswzczad.onion) provides private clearnet search via Tor, hiding your search queries from ISPs. Keybase's .onion address provides identity verification accessible from Tor. The Whonix Project (Tor-based operating system) maintains documentation accessible via .onion. SecureDrop instances (used by over 50 news organizations for whistleblower submissions) are specifically .onion-only - they have no clearnet addresses by design. These are verified, legitimate resources - using them via Tor provides privacy without the risks associated with unverified dark web content.

Verification and Safety for Legitimate .onion Services

Phishing .onion sites impersonate legitimate services. A convincing fake ProtonMail .onion can steal credentials submitted to it. Safety practices: (1) obtain .onion addresses only from the service's own clearnet website (navigate to proton.me, find the .onion address in their official documentation), (2) bookmark verified .onion addresses in Tor Browser's bookmark manager - never type them from memory or copy from unverified sources, (3) verify HTTPS certificates when available (legitimate services operating .onion may not have .onion TLS certificates, but clearnet-accessible .onion addresses may redirect with HTTPS), (4) use Tor Browser's built-in HTTPS-Only mode to prevent submission of data to non-HTTPS sites, (5) verify the .onion address against multiple independent sources before using it for sensitive authentication.

Related Services

Offshore VPS from $17.90/mo Dedicated Servers DevOps Services

Why Anubiz Host

100% async — no calls, no meetings

Delivered in days, not weeks

Full documentation included

Production-grade from day one

Security-first approach

Post-delivery support included

Bulletproof Hosting Providers

DMCA-Ignored Servers

Offshore VPS Hosting

Anonymous Hosting Solutions

Ready to get started?

Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.

Start a Brief Tor Hosting Basic - $25.74/mo