PRIMER · ONION ADDRESSING
What Is an Onion Link, and How to Open One
First time reaching Torzon? Start here. An onion link is a web address that only resolves inside the Tor network. It ends in .onion, and the long block of letters and digits before that suffix is not decoration. It is math, and it is the reason a fake link cannot quietly stand in for the real one.
Published 2026-08-17 · Updated 2026-08-19
What is a .onion address, exactly?
A current onion address is 56 characters followed by .onion. Those characters are an encoding of the site public key. When you open the address, Tor uses it to confirm you reached the exact server that holds the matching private key, with no certificate authority sitting in the middle. The address and the identity are one and the same.
That is why the meaning of an onion link is literal: the string is the site. Change one character and you are talking to a different server, which on Torzon usually means a clone built to phish you.
How does onion addressing actually work?
The address is not assigned by a registrar and cannot be bought from one. It falls out of the site own cryptographic key. Here is the path from a keypair to the string you paste.
Where the address comes from
Because the string is derived from the key, no one can mint a valid address for a key they do not hold. A scammer can register a similar clearnet domain in seconds, but they cannot forge an onion that both looks right and answers with the matching key.
Why one changed character breaks it
The address is the fingerprint of a specific key. Flip a character and it points at a different key, which nobody may even control. There is no autocorrect and no near-miss. This is exactly why you copy addresses rather than type them.
How is this different from a normal web address?
A clearnet address like a .com is looked up through DNS and vouched for by a certificate authority you have to trust. An onion address skips both. There is no DNS lookup that a network can tamper with and no authority to compromise; the address itself carries the proof of identity. The trade is reach: a .onion only works inside Tor, and a normal browser cannot open it at all.
How do you open an onion link?
- Install the Tor Browser from its official project. An ordinary browser cannot open .onion at all.
- Copy the full address from a source you trust. Never retype it by hand.
- Paste it into the Tor Browser address bar and load it.
- For Torzon, match the string against the signed mirror list and the PGP fingerprint first.
- Only then log in. If the address fails the signed record, close the tab and start over.
Why do darknet markets use onion links and PGP together?
An onion link proves you reached a specific server. It does not prove that server is the market you meant to visit. That second job belongs to PGP. The market signs its mirror list with a key, you check the signature, and the two together close the gap. This is why a darknet marketplace publishes a fingerprint right next to its addresses. Either one alone leaves a door open.
Honest limit: we can explain the mechanism, not guarantee your setup. Tor can be misconfigured, malware can hijack a clipboard, and a stale bookmark can point at a dead or hostile host. Verify the string every single time, even when it feels familiar.
Put it to use
Now that the string makes sense, pull a live one and check it. Read how to access Torzon, run a link through the validator, or learn what PGP adds.