# Onion Services **URL:** https://forum.torproject.org/c/support/onion-services/16.md [Latest](https://forum.torproject.org/latest.md) · [Categories](https://forum.torproject.org/categories.md) · [Tags](https://forum.torproject.org/tags.md) --- ## [About the Onion Services category](https://forum.torproject.org/t/about-the-onion-services-category/41)
**Author:** [@system](https://forum.torproject.org/u/system)\ **Replies:** 0\ **Last updated:** [July 2, 2021, 2:28am UTC](https://forum.torproject.org/t/about-the-onion-services-category/41 "2021-07-02T02:28:56Z")
This is a support category for Onion Services. Onion services are services that can only be accessed over Tor. Running an onion service gives your users all the security of HTTPS with the added privacy benefits of Tor Br… --- ## [Onionspray security release 1.8.4](https://forum.torproject.org/t/onionspray-security-release-1-8-4/22246)
**Author:** [@rhatto](https://forum.torproject.org/u/rhatto)\ **Replies:** 0\ **Last updated:** [October 9, 2026, 8:39am UTC](https://forum.torproject.org/t/onionspray-security-release-1-8-4/22246 "2026-10-09T08:39:59Z")
Greetings, We just released Onionspray 1.8.4, an application to serve regular websites as onionsites. This release fixes security issues. Please upgrade as soon as possible! Upgrade guide available. Found a bug or ha… --- ## [Has a misconfigured onion service ever cut off people who rely on it?](https://forum.torproject.org/t/has-a-misconfigured-onion-service-ever-cut-off-people-who-rely-on-it/22236)
**Author:** [@EnovaMaker](https://forum.torproject.org/u/EnovaMaker)\ **Replies:** 0\ **Last updated:** [October 6, 2026, 11:56pm UTC](https://forum.torproject.org/t/has-a-misconfigured-onion-service-ever-cut-off-people-who-rely-on-it/22236 "2026-10-06T23:56:28Z")
OnionBalance’s own tutorial warns that if two of its setup steps aren’t done right, “nothing is going to work”. From the outside, an outage like that looks the same as a block. I’d like to know whether this has ever bee… --- ## [Onionbalance master domain periodically offline - error 'Descriptor upload failed'](https://forum.torproject.org/t/onionbalance-master-domain-periodically-offline-error-descriptor-upload-failed/21087)
**Author:** [@rawetic560](https://forum.torproject.org/u/rawetic560)\ **Replies:** 2\ **Last updated:** [October 6, 2026, 11:29am UTC](https://forum.torproject.org/t/onionbalance-master-domain-periodically-offline-error-descriptor-upload-failed/21087 "2026-10-06T11:29:12Z")
hi, i have an multiple hidden services with onionbalance on the same server and periodically one of master-domains is offline, but if i try restart service multiple times - domain is online. here an logs from service wi… --- ## [Onion Service container images for ARM64 - testers needed! :)](https://forum.torproject.org/t/onion-service-container-images-for-arm64-testers-needed/22180)
**Author:** [@rhatto](https://forum.torproject.org/u/rhatto)\ **Replies:** 0\ **Last updated:** [September 24, 2026, 11:09am UTC](https://forum.torproject.org/t/onion-service-container-images-for-arm64-testers-needed/22180 "2026-09-24T11:09:02Z")
Thanks to @akiel and a CI runner provided by OSUOSL, we do now have container images for ARM64 with Onion Service support enabled, as part of the experimental Onimages project. What we still don’t have is feedback on wh… --- ## [Onionspray security release 1.8.3](https://forum.torproject.org/t/onionspray-security-release-1-8-3/22179)
**Author:** [@rhatto](https://forum.torproject.org/u/rhatto)\ **Replies:** 0\ **Last updated:** [September 23, 2026, 9:52pm UTC](https://forum.torproject.org/t/onionspray-security-release-1-8-3/22179 "2026-09-23T21:52:43Z")
Greetings, We just released Onionspray 1.8.3, an application to serve regular websites as onionsites. This release fixes security issues. Please upgrade as soon as possible! Found a bug or have a fix? Please report to… --- ## [Is it possible for an onion service to kick a client's circuit?](https://forum.torproject.org/t/is-it-possible-for-an-onion-service-to-kick-a-clients-circuit/22157)
**Author:** [@dolphin](https://forum.torproject.org/u/dolphin)\ **Replies:** 0\ **Last updated:** [September 20, 2026, 8:28am UTC](https://forum.torproject.org/t/is-it-possible-for-an-onion-service-to-kick-a-clients-circuit/22157 "2026-09-20T08:28:00Z")
This is a more direct follow up to https://v236xhqtyullodhf26szyjepvkbv6iitrhjgrqj4avaoukebkk6n6syd.onion/t/mitigating-application-layer-denial-of-service-on-onion-services/22062. Is there an analogue to closing a clien… --- ## [Onion hidden service wont generate keys & hostname -HELP](https://forum.torproject.org/t/onion-hidden-service-wont-generate-keys-hostname-help/3251)
**Author:** [@rad](https://forum.torproject.org/u/rad)\ **Replies:** 3\ **Last updated:** [September 14, 2026, 2:15pm UTC](https://forum.torproject.org/t/onion-hidden-service-wont-generate-keys-hostname-help/3251 "2026-09-14T14:15:30Z")
Hello! I was trying to create an onion hidden service but, tor wont generate hostname and keys. Here are the Steps which i did: What i did: $ sudo vi /etc/tor/torrc uncommented HiddenServiceDir & HiddenServicePort H… --- ## [Onionspray security release 1.8.2](https://forum.torproject.org/t/onionspray-security-release-1-8-2/22103)
**Author:** [@rhatto](https://forum.torproject.org/u/rhatto)\ **Replies:** 0\ **Last updated:** [September 9, 2026, 2:39pm UTC](https://forum.torproject.org/t/onionspray-security-release-1-8-2/22103 "2026-09-09T14:39:06Z")
Greetings, We just released Onionspray 1.8.2, an application to serve regular websites as onionsites. This release fixes security issues addressed by Tor 0.4.9.12. Please upgrade as soon as possible! Found a bug or ha… --- ## [Arti/onion-service test gotcha: late-bootstrapped client fails with IntroduceAckStatus(NOT\_RECOGNIZED) -- likely descriptor timing, not a real bug](https://forum.torproject.org/t/arti-onion-service-test-gotcha-late-bootstrapped-client-fails-with-introduceackstatus-not-recognized-likely-descriptor-timing-not-a-real-bug/22091)
**Author:** [@mazentaweel](https://forum.torproject.org/u/mazentaweel)\ **Replies:** 0\ **Last updated:** [September 7, 2026, 12:32pm UTC](https://forum.torproject.org/t/arti-onion-service-test-gotcha-late-bootstrapped-client-fails-with-introduceackstatus-not-recognized-likely-descriptor-timing-not-a-real-bug/22091 "2026-09-07T12:32:51Z")
While building an app on top of arti-client (0.43.0) using restricted-discovery onion services, we hit a confusing failure mode in our own test suite: every connection attempt from a test client to our test host’s onion … --- ## [Guard failing a large number of circuits](https://forum.torproject.org/t/guard-failing-a-large-number-of-circuits/21937)
**Author:** [@dolphin](https://forum.torproject.org/u/dolphin)\ **Replies:** 7\ **Last updated:** [August 31, 2026, 10:41pm UTC](https://forum.torproject.org/t/guard-failing-a-large-number-of-circuits/21937 "2026-08-31T22:41:57Z")
Even after clearing my tor state, a test onion service I am hosting is not connectable. I get the “Guard is failing a very large number of circuits” log message, and from multiple clients (different machines) I cannot co… --- ## [Mitigating application-layer denial of service on onion services](https://forum.torproject.org/t/mitigating-application-layer-denial-of-service-on-onion-services/22062)
**Author:** [@dolphin](https://forum.torproject.org/u/dolphin)\ **Replies:** 0\ **Last updated:** [August 31, 2026, 10:41pm UTC](https://forum.torproject.org/t/mitigating-application-layer-denial-of-service-on-onion-services/22062 "2026-08-31T22:41:52Z")
I don’t run an onion service myself but have been considering what could happen and what abuse mitigation might look like. I am fully aware of the proof-of-work security defenses (see Introducing Proof-of-Work Defense fo… --- ## [Onionspray: work around for validation backend TLS certs using Let's Encrypt new Generation Y roots](https://forum.torproject.org/t/onionspray-work-around-for-validation-backend-tls-certs-using-lets-encrypt-new-generation-y-roots/21980)
**Author:** [@rhatto](https://forum.torproject.org/u/rhatto)\ **Replies:** 0\ **Last updated:** [August 12, 2026, 2:58pm UTC](https://forum.torproject.org/t/onionspray-work-around-for-validation-backend-tls-certs-using-lets-encrypt-new-generation-y-roots/21980 "2026-08-12T14:58:55Z")
A quick work around certificate checking issues on Onionspray backends relying on Let’s Encrypt certificates. This is not about HTTPS certificates for onionsites using Onionspray, but checking the certificates of the … --- ## [Onionloom - fastest GPU-accelerated v3 vanity onion generator, built in Rust](https://forum.torproject.org/t/onionloom-fastest-gpu-accelerated-v3-vanity-onion-generator-built-in-rust/21936)
**Author:** [@chrisch88dev](https://forum.torproject.org/u/chrisch88dev)\ **Replies:** 3\ **Last updated:** [August 10, 2026, 12:22pm UTC](https://forum.torproject.org/t/onionloom-fastest-gpu-accelerated-v3-vanity-onion-generator-built-in-rust/21936 "2026-08-10T12:22:35Z")
Built onionloom, because tools like mkp224o are solid but CPU-only, and the GPU forks that exist are CUDA-locked, framework-heavy, or barely beat CPU anyway. Onionloom is a new engine, not a fork. What it’s got: GPU v… --- ## [Questions about leak prevention](https://forum.torproject.org/t/questions-about-leak-prevention/21928)
**Author:** [@EatYourSprinkles](https://forum.torproject.org/u/EatYourSprinkles)\ **Replies:** 4\ **Last updated:** [August 6, 2026, 10:21pm UTC](https://forum.torproject.org/t/questions-about-leak-prevention/21928 "2026-08-06T22:21:57Z")
I am following the guide at I am new to this and I wanted to host a simple html site for learning purposes, I got to the following part: Tip: A good practice to avoid leaking an Onion Service to a local network is t… --- ## [Plans for addressing intro cell DDoS?](https://forum.torproject.org/t/plans-for-addressing-intro-cell-ddos/21957)
**Author:** [@Uribe](https://forum.torproject.org/u/Uribe)\ **Replies:** 0\ **Last updated:** [August 6, 2026, 12:13pm UTC](https://forum.torproject.org/t/plans-for-addressing-intro-cell-ddos/21957 "2026-08-06T12:13:07Z")
As a lot of people here should be aware of, intro cell DDoS attacks are a thing that has been around for many, many years. I assume this post from 2020 is addressing it, as the description sounds much like it. To this v… --- ## [Onionspray security release 1.8.1](https://forum.torproject.org/t/onionspray-security-release-1-8-1/21805)
**Author:** [@rhatto](https://forum.torproject.org/u/rhatto)\ **Replies:** 0\ **Last updated:** [June 29, 2026, 3:35pm UTC](https://forum.torproject.org/t/onionspray-security-release-1-8-1/21805 "2026-06-29T15:35:49Z")
Greetings, We just released Onionspray 1.8.1, an application to serve regular websites as onionsites. This release fixes a security issue. Please upgrade as soon as possible! Found a bug or have a fix? Please report t… --- ## [Hosting an Onion Service anonymously — what actually matters when picking a hosting provider](https://forum.torproject.org/t/hosting-an-onion-service-anonymously-what-actually-matters-when-picking-a-hosting-provider/21747)
**Author:** [@dmca\_ignored\_hosting](https://forum.torproject.org/u/dmca_ignored_hosting)\ **Replies:** 0\ **Last updated:** [June 15, 2026, 12:10pm UTC](https://forum.torproject.org/t/hosting-an-onion-service-anonymously-what-actually-matters-when-picking-a-hosting-provider/21747 "2026-06-15T12:10:25Z")
Running a Tor onion service is one thing, but choosing where to actually host the backend server is a step a lot of people overlook. Your anonymity does not end at the .onion address — it depends heavily on your hosting … --- ## [Feature idea: Tor site builder to make .onion sites easier to create](https://forum.torproject.org/t/feature-idea-tor-site-builder-to-make-onion-sites-easier-to-create/21725)
**Author:** [@AnnoymusParticpante](https://forum.torproject.org/u/AnnoymusParticpante)\ **Replies:** 3\ **Last updated:** [June 11, 2026, 5:48pm UTC](https://forum.torproject.org/t/feature-idea-tor-site-builder-to-make-onion-sites-easier-to-create/21725 "2026-06-11T17:48:53Z")
Hey everyone, I know OnionShare exists and it’s great for temporary sharing, but the sites it creates aren’t real permanent .onion websites. They disappear as soon as the host closes the app, and they’re not meant for l… --- ## [Onionspray security release 1.8.0](https://forum.torproject.org/t/onionspray-security-release-1-8-0/21673)
**Author:** [@rhatto](https://forum.torproject.org/u/rhatto)\ **Replies:** 0\ **Last updated:** [June 2, 2026, 9:14pm UTC](https://forum.torproject.org/t/onionspray-security-release-1-8-0/21673 "2026-06-02T21:14:38Z")
Greetings, We just released Onionspray 1.8.0, an application to serve regular websites as onionsites. This release upgrades C Tor to 0.4.9.9, which fixes a security issue (TROVE-2026-020). Please upgrade as soon as pos… --- ## [\[Proposal\]  Use Handshake as a decentralised alias/attestation layer for Tor onion identities](https://forum.torproject.org/t/proposal-use-handshake-as-a-decentralised-alias-attestation-layer-for-tor-onion-identities/21593)
**Author:** [@DocGerry](https://forum.torproject.org/u/DocGerry)\ **Replies:** 0\ **Last updated:** [May 14, 2026, 4:49pm UTC](https://forum.torproject.org/t/proposal-use-handshake-as-a-decentralised-alias-attestation-layer-for-tor-onion-identities/21593 "2026-05-14T16:49:02Z")
Use Handshake or create Tors Own decentralised alias/attestation layer for Tor onion identities. Something like gerry.g3wip TXT/DS-style record says: onion=jee3z7cpmfhcc62hhs33utyovghbyr3hlhumxwkr2zoo5mzskz5cvhqd.onion … --- ## [How private is a .onion website compared to its clearweb version?](https://forum.torproject.org/t/how-private-is-a-onion-website-compared-to-its-clearweb-version/21543)
**Author:** [@jbhf](https://forum.torproject.org/u/jbhf)\ **Replies:** 2\ **Last updated:** [May 6, 2026, 10:43am UTC](https://forum.torproject.org/t/how-private-is-a-onion-website-compared-to-its-clearweb-version/21543 "2026-05-06T10:43:47Z")
I’m pretty new to tor and i would like to know what’s the difference between a website and its .onion version in terms of privacy. --- ## [Create your own and free of charge privacy email service for family and friends](https://forum.torproject.org/t/create-your-own-and-free-of-charge-privacy-email-service-for-family-and-friends/18975)
**Author:** [@ch1ffr3punk](https://forum.torproject.org/u/ch1ffr3punk)\ **Replies:** 25\ **Last updated:** [April 27, 2026, 5:44am UTC](https://forum.torproject.org/t/create-your-own-and-free-of-charge-privacy-email-service-for-family-and-friends/18975 "2026-04-27T05:44:13Z")
Tutorial --- ## [Should I use Vanguards for Onion Services?](https://forum.torproject.org/t/should-i-use-vanguards-for-onion-services/21200)
**Author:** [@JorJorWell1984](https://forum.torproject.org/u/JorJorWell1984)\ **Replies:** 1\ **Last updated:** [February 10, 2026, 11:08am UTC](https://forum.torproject.org/t/should-i-use-vanguards-for-onion-services/21200 "2026-02-10T11:08:17Z")
I’m trying to host a Onion service (I’m new to this), I’ve followed the tutorial available here, so far so good. However, the Op-sec section advises to use Vanguards for additional protection. But its GitHub repository … --- ## [Can't connect to my own onion service: Possible compression bomb; abandoning stream](https://forum.torproject.org/t/cant-connect-to-my-own-onion-service-possible-compression-bomb-abandoning-stream/19405)
**Author:** [@dolphin](https://forum.torproject.org/u/dolphin)\ **Replies:** 2\ **Last updated:** [January 28, 2026, 9:44pm UTC](https://forum.torproject.org/t/cant-connect-to-my-own-onion-service-possible-compression-bomb-abandoning-stream/19405 "2026-01-28T21:44:57Z")
This is on Tor 0.4.8.10. I get messages like this repeatedly from my own connections: Jun 14 23:20:37.000 \[warn\] Detected possible compression bomb with input size = 21211 and output size = 693552 Jun 14 23:20:37.000 \[w… --- ## [A proof to third parties that your Tor Hidden Service website can't be tampered with and that you have been the first who published its content. ](https://forum.torproject.org/t/a-proof-to-third-parties-that-your-tor-hidden-service-website-cant-be-tampered-with-and-that-you-have-been-the-first-who-published-its-content/20956)
**Author:** [@ch1ffr3punk](https://forum.torproject.org/u/ch1ffr3punk)\ **Replies:** 0\ **Last updated:** [December 16, 2025, 4:01pm UTC](https://forum.torproject.org/t/a-proof-to-third-parties-that-your-tor-hidden-service-website-cant-be-tampered-with-and-that-you-have-been-the-first-who-published-its-content/20956 "2025-12-16T16:01:33Z")
Hi all, some of you may remember that .onion sites have been copied multiple times under other .onion URLs. With mfv admins can secure their onion site from tampering and proof that they published first their content. V… --- ## [Incredibly weird tor issue, service randomly stops working](https://forum.torproject.org/t/incredibly-weird-tor-issue-service-randomly-stops-working/20939)
**Author:** [@HKEcDRiATM](https://forum.torproject.org/u/HKEcDRiATM)\ **Replies:** 0\ **Last updated:** [December 14, 2025, 3:48pm UTC](https://forum.torproject.org/t/incredibly-weird-tor-issue-service-randomly-stops-working/20939 "2025-12-14T15:48:39Z")
I operate a tor hidden service, here are the version and dependencies I use (output of tor --version command): Tor version 0.4.8.21. This build of Tor is covered by the GNU General Public License (https://www.gnu.org/li… --- ## [Some news from the Onionspace, December 2025](https://forum.torproject.org/t/some-news-from-the-onionspace-december-2025/20886)
**Author:** [@rhatto](https://forum.torproject.org/u/rhatto)\ **Replies:** 0\ **Last updated:** [December 1, 2025, 1:41pm UTC](https://forum.torproject.org/t/some-news-from-the-onionspace-december-2025/20886 "2025-12-01T13:41:18Z")
Some news from the Onionspace, December 2025 This post is based on the transcript from the 2025 State of the Onion presentation. Companion slides are available here. Introduction At Tor, it’s usually said that tech nee… --- ## [How to check if Tor Onion Service is alive?](https://forum.torproject.org/t/how-to-check-if-tor-onion-service-is-alive/20751)
**Author:** [@maltfield](https://forum.torproject.org/u/maltfield)\ **Replies:** 3\ **Last updated:** [November 5, 2025, 9:04pm UTC](https://forum.torproject.org/t/how-to-check-if-tor-onion-service-is-alive/20751 "2025-11-05T21:04:10Z")
How can I check to see if a given Onion Service is still in-use? To be clear: I’m \*not\* asking about just Onion Services bound to port 80. Of course I can just curl it, but that won’t tell me if the Onion Service is run… --- ## [Onionspray Ansible role release 3.0.0](https://forum.torproject.org/t/onionspray-ansible-role-release-3-0-0/20755)
**Author:** [@zoug](https://forum.torproject.org/u/zoug)\ **Replies:** 0\ **Last updated:** [November 5, 2025, 11:58am UTC](https://forum.torproject.org/t/onionspray-ansible-role-release-3-0-0/20755 "2025-11-05T11:58:19Z")
Hi there! We just released version 3.0.0 of the Onionspray Ansible role. It allows you to automate the installation and configuration of Onionspray, through Ansible. This release, the first official one, brings the rol… [Next page](https://forum.torproject.org/c/support/onion-services/16.md?page=1)