How to Open Onion Links: What Works, What Does Not and What Quietly Betrays You
Why you cannot open onion links in Chrome or any ordinary browser
A .onion address is not a domain name in the ordinary sense, and understanding what it is explains why any attempt to open onion links in Chrome, Firefox, Safari or Edge fails at the first step. Ordinary web addresses are resolved through the Domain Name System. The .onion suffix is a special-use top-level domain, formally reserved so that it never exists in DNS. There is no server anywhere on the internet that a resolver could return for an onion address, because onion services do not have IP addresses that clients connect to directly. The address is a public key, and reaching the service means using that key to build a rendezvous through the Tor network, a procedure only Tor software knows how to perform. So when Chrome is asked to open an onion address, it sends a DNS query for a name that cannot resolve, receives an error, and displays a page saying the site cannot be reached. Some browsers recognise the suffix and refuse to query at all, which is better, since it avoids leaking to your DNS resolver the fact that you tried to reach that onion address. A scenario: a reader pastes an onion address into Chrome, gets a connection error, searches for a fix, and finds a dozen pages promising to open the link in any browser. Every one of those pages is describing a proxy.
What happens when you open onion links online through a web proxy
The services that let you open onion links online, historically known by the name Tor2web and now scattered across many domains, all work the same way, and the mechanics are what make them dangerous. You visit the proxy's clearnet site and give it an onion address,. The proxy's server, which runs a Tor client, fetches the onion page on your behalf and returns the content to your ordinary browser over an ordinary connection. In reality you have opened a page on the proxy's server, which has opened the onion site. Every protection Tor provides to the user is absent in this arrangement. - The onion service sees the proxy, not you, but the proxy sees everything: your real IP address, the onion address you requested, every page you read, and anything you type, including passwords. - Your network, your ISP and anyone observing your connection see you visiting the proxy's domain,. - The content you receive is whatever the proxy chooses to send. A proxy can alter pages, inject scripts, replace addresses, insert advertisements or serve a phishing copy, and you have no way to tell. - Your ordinary browser, with its fingerprint, cookies and logged-in sessions, is the one rendering the page, so every tracking mechanism the Tor Browser was built to defeat is fully active. A scenario: a reader logs into an onion forum through a proxy. The proxy operator now holds their IP address, username, password and reading history. The reader believes they used Tor.
Why visit onion sites without tor is a request that cannot be safely satisfied
People who want to visit onion sites without tor usually have a practical reason: Tor Browser is not installed, is blocked on their network, is slow, or seems like too much for a quick look. Each reason has a real answer, and none of the answers is a proxy. If Tor Browser is not installed, installing it takes a few minutes and is the whole solution. If Tor is blocked on your network, the Tor Project provides bridges, unlisted entry points with pluggable transports that disguise Tor traffic as something else. Tor Browser's connection settings include a built-in option to request bridges, and the project's documentation explains alternatives. If Tor feels slow, that is the cost of routing through volunteer relays, and a proxy removes the cost by removing the anonymity. If you want a quick look at a page for research, and you genuinely do not care whether the proxy, your ISP and the onion service all know you looked, then a proxy will show you a page. Be honest with yourself about whether that is true, remember that the page may have been altered, and never type anything into it. A scenario: a reader on a network that blocks Tor uses a proxy to read an onion mirror of a news site. The network's logs now show the proxy domain and the onion address they requested. Bridges would have shown the network nothing recognisable at all.
The safe ways to open onion sites on desktop
There are exactly three sound ways to open onion sites on a desktop computer, and they share one property: a genuine Tor client on your own machine handles the connection. 1. Tor Browser. Tor Browser also responds to Onion-Location headers, offering to switch to a site's onion version when you visit its clearnet address, which is the safest way to obtain an address at all. This is the right answer for almost everyone. 2. Tails. A live operating system, endorsed by the Tor Project, that boots from a USB stick, routes all traffic through Tor and leaves nothing on the computer. This is the right answer for anyone whose situation is sensitive enough that the whole machine, not just the browser, needs to be isolated. 3. Whonix or a similar Tor-gateway setup. Two virtual machines, one acting as a Tor gateway and one as a workstation whose only network path is through the gateway, so that even a compromised application cannot bypass Tor. What is not on the list: configuring Chrome or Firefox to use a Tor proxy on your machine. The Tor Project is explicit that Tor Browser is not merely Firefox plus Tor; it is modified in dozens of ways to avoid identifying its user, and a stock browser pointed at a local Tor proxy has none of them. A scenario: a reader with Tor Browser installed clicks an onion link in an ordinary browser by mistake. It fails. They paste the address into Tor Browser, and it opens.
How to open onion links on Android and iPhone
Mobile is where the proxy temptation is strongest, and the correct way to open onion links on Android and iPhone differs between the two platforms in a way worth knowing. On Android, the answer is Tor Browser for Android, published by the Tor Project and available from Google Play, from F-Droid via the Guardian Project's repository, and as a direct download from the Tor Project's site. The current Tor Browser for Android includes its own Tor client, so the separate Orbot app is no longer required for browsing, though it remains useful for routing other apps. On iOS, the situation is different because Apple requires all browsers to use its WebKit engine, so a true Tor Browser cannot exist on the platform. The Tor Project's documentation points to Onion Browser, an open-source project by Mike Tigas, as the recommended option, while noting the limitations imposed by the platform: the browser cannot offer the same fingerprinting protections as Tor Browser, and some leaks that Tor Browser prevents are not fully preventable on iOS. On either platform, the same rules apply: get the app from the Tor Project's site, the platform's official store or a repository the project names, never from a link in a directory or list, and never use a proxy site in Safari or Chrome as a substitute. A scenario: an iPhone user wants to read an onion mirror. They install the app the Tor Project's documentation names, open the address, and read. Anything more sensitive waits for a desktop.
Recognising an open onion link proxy when you did not ask for one
Proxies do not only appear when you search for them. A great many pages that offer to open onion link entries for you are proxies in disguise, and recognising the pattern prevents accidental use. The address bar gives it away. If you are reading what appears to be an onion site and the address bar of your ordinary browser shows a clearnet domain with the onion address embedded in it, either as a subdomain or a path, you are on a proxy. A genuine onion service can only be displayed in a browser whose address bar shows the 56-character address ending in .onion,. Directory links are frequently proxied. Many list and directory sites link their entries not to the onion address directly but through a proxy domain, so that visitors using ordinary browsers see a page and the directory can claim its links work. Search results for onion addresses are often proxy copies, since ordinary search engines index proxy pages rather than onion services. Every such result is a proxied copy, possibly altered,. The rule is mechanical: if the address bar does not end in .onion, you are not on an onion service. A scenario: a reader clicks a link on a directory and sees a familiar-looking page. The address bar shows a clearnet domain. They close it, copy the onion address from the link text, and open it in Tor Browser. The genuine page differs from the proxy's version in several small ways.
The one-line answer was the whole answer
Opening onion links requires a Tor client on your own device, which in practice means Tor Browser on desktop and Android, Onion Browser on iOS with its platform limitations understood, and Tails or Whonix for people who need the whole machine isolated. Ordinary browsers cannot resolve .onion because the suffix is reserved out of DNS and the address is a key rather than a name, and no setting changes that. Proxies that open onion pages in Chrome or online work by having their server fetch the page for you, which hands the proxy your address, your reading and anything you type, shows your network exactly what you did, and lets the proxy alter what you see. The Tor Project warns against them for good reason, and bridges solve the blocked-network case they are most often used for. The mechanical test is the address bar: if it does not end in .onion, you are not on an onion service, whatever the page looks like. One step to take today: if Tor Browser is not on your computer or phone, install it from the Tor Project's site or the platform's official store, open the Tor Project's own onion service from within it, and bookmark it. The next time an onion link appears in front of you in an ordinary browser, you will have somewhere to paste it that actually works and actually protects you.
Frequently asked questions
can i open onion links in chrome?
No. The .onion suffix is reserved outside DNS and an onion address is a cryptographic key rather than a name, so Chrome cannot resolve it and no setting changes that. Pages claiming to open onion links in any browser are web proxies that fetch the page for you and remove all of Tor's protections.
are onion to web proxies safe to use?
No. The proxy sees your real IP address, the onion address you requested, everything you read and anything you type, including passwords, and can alter the page you receive. Your network also sees the request. The Tor Project has said these proxies do not provide anonymity.
how do i open onion links if tor is blocked on my network?
Use bridges, which are unlisted Tor entry points with pluggable transports that disguise Tor traffic. Tor Browser's connection settings include a built-in option to request them, and the Tor Project's documentation describes alternatives. A proxy in this situation exposes exactly what the blocking network wanted to see.
how do i open onion links on iphone?
The Tor Project's documentation points to Onion Browser, an open-source app that connects through a genuine Tor connection. Because Apple requires all iOS browsers to use WebKit, it cannot offer all of Tor Browser's protections, so it is weaker than the desktop or Android versions for sensitive use.
how can i tell if a page is a real onion site or a proxy?
Look at the address bar. A genuine onion service is only displayed when the address bar shows the 56-character address ending in .onion, which only Tor-capable browsers can do. A clearnet domain with an onion address embedded in it means you are on a proxy.