How to Verify .onion Links

Last updated: May 2026

Fake phishing sites are common. Always verify .onion links using PGP signatures.

Steps

1. Find the official PGP-signed list of links from a trusted source.
2. Import the public key of the source.
3. Verify the signature of the list.
4. Only use links that pass verification.

Common Phishing Tactics

• Fake URLs that look similar to the real one
• Fake PGP keys impersonating vendors
• Fake support staff asking for your private key