EXCAVATOR

No JavaScript. No logs. No tracking.

Tor and the Onion Network, explained

What Tor actually does, how .onion sites differ from the web you know, and the handful of habits that keep you private. Ten minutes, start to finish.

Privacy Anonymity Censorship Resistance Open Source

What Tor is

Tor is free, open-source software that lets you use the internet without revealing where you are connecting from.

The name stands for The Onion Router. Your traffic is wrapped in several layers of encryption and passed through three volunteer-run relays; each relay peels off one layer and learns only where the next hop is. No single relay sees both who you are and what you are looking at.

The design came out of the U.S. Naval Research Laboratory in the 1990s. Today the software is developed in the open by the nonprofit Tor Project, and the network is run by thousands of volunteers. Its users include reporters protecting sources, people in countries that filter the internet, security researchers, and anyone who would rather not be profiled.

Privacy

Sites you visit see a Tor relay, not your IP address. Your provider sees that you use Tor, not what you do with it.

Censorship Resistance

Blocked news sites, messaging apps, and social networks stay reachable. Bridges get you connected even where Tor itself is filtered.

Anonymity

Publish, report, or talk to a source without attaching your name to it. This is why newsrooms run SecureDrop over Tor.

2M+ Users every day
6,000+ Volunteer relays
2002 Network launched
100% Open source, free

What .onion sites are

A .onion site is a website that lives inside the Tor network. It has no public IP address, and you can only reach it through Tor.

The address itself — 56 characters ending in .onion, like excavatorhmccf…nyd.onion — is derived from the site's public key. That means nobody can register or hijack it, the connection is authenticated and encrypted end to end without a certificate authority, and neither side needs to learn the other's location.

Plenty of well-known organizations publish an official .onion address alongside their regular site, mostly so readers in censored countries can still reach them:

News
BBC, ProPublica, The New York Times
Email
Proton Mail, Riseup
Social
Facebook, X
Search
DuckDuckGo, EXCAVATOR

Getting started

1

Download Tor Browser

Go to torproject.org and get the build for your system: Windows, macOS, Linux, or Android. On iOS, use Onion Browser, which the Tor Project recommends.

2

Install and connect

Install it like any other app, open it, and press Connect. The first connection can take a minute while the browser builds its circuit.

3

Browse

Regular websites work as usual, just with your location hidden. Paste a .onion address into the same address bar to open a hidden service.

4

Find sites worth visiting

Search by keyword on excavatorsearch.link, or start from the hand-checked directory if you want a curated list.

One rule that matters: download Tor Browser only from torproject.org or the official app stores it links to. Repackaged copies from other sites are a common way to ship spyware.

Staying safe

DON'T

Log in as yourself

Signing in to your usual accounts, or reusing a username, ties the session to you no matter how good the routing is.

DO

Keep Tor updated

Most real-world deanonymization has relied on old browser bugs. Install updates the day they appear.

DON'T

Leave JavaScript on

The default Standard level still runs scripts. Open the shield icon and set the security level to Safest; it turns JavaScript off everywhere.

DON'T

Open downloads while online

PDFs and documents can phone home when opened outside the browser and reveal your real IP. Open them offline, or in Tails.

DO

Check for HTTPS on clearnet sites

On regular websites the exit relay can read unencrypted traffic. HTTPS keeps the page private all the way to the site. .onion connections are encrypted by design.

DO

Start from checked sources

Phishing copies of popular .onion sites are common. Take addresses from a directory you trust, such as excavatorsearch.wiki, or from the organization's own clearnet site.

How Tor works

Every connection is wrapped in three layers of encryption and passed through three relays. Each relay removes one layer and sees only its neighbors.
You
Your device
Encrypted
Guard Node
Sees your IP, not where you are going
Encrypted
Middle Relay
Sees neither end
Encrypted
.onion Site
Reached through its own relays
Onion sites never leave the network. Instead of exiting to the public internet, your three relays meet the site's three relays at a rendezvous point inside Tor. The site does not learn your address, you do not learn its, and the traffic is encrypted end to end the whole way.

Frequently Asked Questions

Is Tor legal?
In most countries, yes: it is privacy software, no different in law from a VPN. A few governments block or restrict it, so check local rules if you are unsure. What you do over Tor is still subject to the same laws as anywhere else.
Is Tor slow?
Slower than a direct connection, because every request makes three extra hops. Reading, email, and most sites are fine; video streaming and large downloads are where you notice it.
Can I be tracked on Tor?
The network itself has held up well; the weak points are the browser and the person using it. Keep Tor Browser updated, use the Safest security level, add no extensions, and do not sign in to accounts tied to your identity.
How is Tor different from a VPN?
A VPN moves your trust from your ISP to one company, which can see everything you do. Tor splits the picture across three independent relays so that no one party has it. Chaining the two is possible but rarely helps, and the Tor Project does not recommend it for most people.
Can my ISP tell I use Tor?
Yes: the connection to a public Tor relay is visible, though its contents are not. If that alone is a problem where you live, use a bridge (Settings → Connection → Bridges), which makes Tor traffic look like ordinary HTTPS.
Are all .onion sites illegal?
No. The BBC, The New York Times, Proton Mail, Facebook, the CIA, and DuckDuckGo all run one. An .onion address is a way of publishing that protects both sides of the connection; what is published on it is up to the publisher.

Ready to look around?

Search the network by keyword, or start from a list someone has already checked.

Already in Tor Browser? Go straight to: http://excavatorhmccf33hkrallqhaixykvepc7zthh4bfrx46pqtfesd7nyd.onion