- v2 (deprecated) - 16 characters. Used RSA-1024 keys. Vulnerable to attacks. No longer supported since October 2021.
- v3 (current) - 56 characters. Uses ED25519 keys. Stronger cryptography, better authentication, improved privacy.
If you see a 16-character .onion address, it no longer works. All legitimate onion services now use v3.