Skip to content
DarkWeb Field Notes

What the original hidden wiki onion site was

The original Hidden Wiki was a MediaWiki-style site hosted as an onion service, organised into categories with short descriptions and links. Anyone could edit it. In the early years of Tor's popularity it functioned as the reference list people passed to each other, and press coverage from the period treated it as the entry point to the dark web. Its content was a mixture from the beginning. Alongside privacy tools, email providers, forums and archives it listed marketplaces and other illegal services under neutral headings, reflecting the wiki's stance of documenting everything rather than curating. That neutrality was part of its appeal to some users and part of the reason it became a liability. Because it was editable and popular, the hidden wiki onion site was also a target. Accounts from the era describe vandalism, deletions, disputes among editors and repeated replacement of entries with phishing addresses. Hosting problems and takedowns interrupted it more than once. Each interruption produced forks, as different people restored their own copy at a new address and claimed continuity. The single page became a family of pages, and the family kept growing.

Three forces multiplied the page. The first was outages: whenever the address went down, users who had saved copies put them back up elsewhere. The second was the migration from 16-character to 56-character onion addresses, which forced every operator to publish a new address and gave every copier an opening to announce theirs as the successor. The third was money. A page that newcomers search for by name attracts traffic, and traffic can be sold through advertising, paid placements or, at the worst end, by redirecting entries to clones. The result is that any given hidden wiki onion url found today is one of many. Some are honest attempts to maintain a useful directory. Some are snapshots frozen years ago. Some are commercial pages wearing the name. Some are bait, with most entries correct and a few high-value ones replaced. A scenario shows how a reader gets caught. They search for the hidden wiki onion link on the clearnet and land on a page that ranks well. It lists an onion address for the wiki. That address loads a page that looks right and links to a popular forum. The forum entry is a clone. Nothing in the chain gave the reader a reason to doubt, because the reader was following names, and names are what got copied.

Telling copies of the hidden wiki apart

You cannot identify the genuine article, because the concept of a genuine article stopped meaning anything once the forks outnumbered the original. What you can do is judge any copy on its own merits, using signals that clones rarely bother to fake. - Maintenance statements: a maintained fork explains who runs it and how entries are checked. Copies and bait pages skip this. - Address formats: retired 16-character addresses anywhere on the page mean it has not been cleaned since the format changed. - Editing behavior: if edit history is visible, recent changes concentrated on services with logins are a warning sign. - Advertising: banners or sponsored entries for markets, or for anything else that profits from traffic, mean the page's editorial choices follow the money. - Warnings: honest maintainers warn readers about clones and tell them to verify addresses through operators. Pages that omit this are either careless or benefiting from the confusion. Even a copy that passes all five checks is still a list of unverifiable addresses. Passing the checks makes it a reasonable place to learn what exists. It does not make it a safe place to get an address.

The Hidden Wiki Onion Page: History, Copies and What Remains

Why the hiddenwiki onion name attracts phishing

Phishing on the Tor network follows a simple economic logic: the attacker needs traffic that will enter credentials, and the cheapest traffic is people who already trust the page they are on. A hiddenwiki onion copy delivers exactly that. Readers arrive expecting a directory, they see one, and they click entries without the suspicion they would apply to a random link. The attack has two forms. In the first, the wiki copy itself is honest but editable, and someone edits entries to point at clones. In the second, the wiki copy is the attacker's, built to look like a familiar directory and seeded with a few poisoned entries among many correct ones. The second is harder to detect because there is no edit history to inspect and no maintainer to blame. Users of some well-known forums have described phishing waves in which dozens of near-identical addresses appeared across wiki copies and directories within days of a genuine address change. The lesson generalises: the more famous a directory's name, the more it is worth an attacker's time to control or imitate. Fame, which once made the Hidden Wiki useful, is now the property that makes any page bearing its name suspect.

Dismissing the genre entirely would throw away something useful. The hidden wiki links, on a reasonably maintained copy, remain a decent map of categories. Reading one tells you that onion versions of newspapers exist, that there are privacy-focused email providers, that communities have formed around specific interests, and roughly what those communities call themselves. That is discovery, and discovery is where lists shine. The mistake is to let discovery slide into trust. The right workflow is short: read the wiki to learn names; close it; find each operator through their clearnet site, their signed announcement or Tor Project documentation; verify the address there with the PGP walkthrough on our Useful Resources page; bookmark it in Tor Browser. Used that way, the wiki's editorial problems stop mattering. A poisoned entry only harms someone who clicks it, and you are treating every entry as a name to look up rather than a link to follow. Historical copies have a second use for researchers: they document what existed at a given time and how the network's shape changed, which is interesting in its own right and harmless because none of the old addresses work.

A routine for any the hidden wiki onion url you encounter

Because the name will keep surfacing in search results and forum threads, a fixed response is worth having. 1. Do not treat any the hidden wiki onion url as authoritative, no matter where you found it. Assume it is one copy among many. 2. Assess the copy with the five signals above before reading the entries. If it fails several, close it. 3. Take names only. Write down which services you want to learn more about. 4. Verify each service through its operator, not through the wiki or any other directory. 5. Bookmark verified addresses and stop revisiting directories for those services. A scenario where the routine pays off: a reader wants to try an onion search engine. A wiki copy lists three, with addresses. Instead of clicking, the reader notes the names, finds that two of them document their onion addresses on clearnet pages they control, verifies those, and ignores the third for which no independent source exists. Ten minutes of work, and every address they now hold has a provenance.

What survives of the legend

The Hidden Wiki mattered because it solved discovery at a time when nothing else did. Its decline into a swarm of copies is not a story about bad actors alone; it is the predictable result of an editable list of unverifiable addresses becoming famous. The structural lesson has outlived the page: addresses must come from operators, and lists can only ever point at names. If you carry one idea away, make it this. The phrase hidden wiki onion no longer identifies a site. It identifies a search intent, and everything that ranks for it is competing for your click. Some competitors are honest, some are lazy, and some are hostile, and they look the same. A step to take today: search for the phrase yourself, open the top result, and run the five-signal assessment without clicking any entry. Count how many signals it passes. Whatever the number, you will have practised the one skill that makes wiki-style pages harmless, which is reading them as documents about their maintainers rather than as directories to follow.

Frequently asked questions

is the hidden wiki still online?

Many pages using the name are online, on both the clearnet and Tor, but none can meaningfully claim to be the original. The site has been forked, copied and cloned through outages and address changes, and the name now describes a category rather than a single page.

what is the real hidden wiki onion link?

There is no reliable way to name one. Any address presented as the real link is a claim by one copy among many. Judge each copy by its maintenance signals, and take addresses for individual services from those services' operators rather than from any wiki.

is the hidden wiki illegal?

Reading a link directory is legal in most countries, as is using Tor. Some entries on wiki copies point to illegal services, and following those may carry legal risk depending on your jurisdiction and what you do. This is a general description, not legal advice.

why does the hidden wiki have so many phishing links?

Because it is editable, famous and visited by people who expect a directory. Attackers either edit entries on honest copies or build their own copies with a few poisoned entries. Forum users have described waves of near-identical clone addresses appearing after genuine address changes.

how should i use a hidden wiki page safely?

Read it to learn which services exist, then close it. Find each operator's address through their clearnet site or PGP-signed announcement, verify it as described on our Useful Resources page, and bookmark it in Tor Browser instead of returning to the wiki.

hidden wiki onionhidden wiki onion sitehiddenwiki onionhidden wiki onion linkhidden wiki onion urlthe hidden wiki onion linkthe hidden wiki onion urlthe hidden wiki links