[Home](https://anonport.com/) / [Privacy Hosting Guides](https://anonport.com/guides) / How to Host a Tor Hidden Service (.onion Site) — 2026 Guide Operations # How to Host a Tor Hidden Service A complete walkthrough for running a Tor hidden service — what an onion service is and why it is the strongest anonymous hosting there is, the setup from install to a live .onion address, and the discipline that keeps it anonymous. [Read the guide](#guide-body) [FAQ](#guide-faq) ## On this page - [Guide](#guide-body) - [FAQ](#guide-faq) - [Related guides](#guide-related) - [Recommended pages](#guide-cta) No KYC Crypto Only No Logs DMCA Ignored Full Root NVMe SSD 7 min read Updated May 2026 On this page [01What a Tor hidden service is](#what-a-tor-hidden-service-is) [02Why host a hidden service](#why-host-a-hidden-service) [03What you need](#what-you-need) [04Step 1 — Set up the server and a web service](#step-1-set-up-the-server-and-a-web-service) [05Step 2 — Install Tor and configure the onion service](#step-2-install-tor-and-configure-the-onion-service) [06Step 3 — Get your .onion address and test it](#step-3-get-your-onion-address-and-test-it) [07Step 4 — Lock it down so it stays anonymous](#step-4-lock-it-down-so-it-stays-anonymous) [08Hidden service, clearnet, or both](#hidden-service-clearnet-or-both) [FAQCommon questions](#guide-faq) [→Recommended pages](#guide-cta) ## What a Tor hidden service is A Tor hidden service — also called an onion service — is a website or application that is reachable only through the Tor network, at an address ending in .onion. Unlike an ordinary website, it has no public IP address and is not listed in DNS. Visitors reach it through Tor, and the connection between visitor and server is routed so that neither end learns the other's location or IP. This is a different and stronger model than putting a normal website behind privacy measures. With an onion service the anonymity is built into the protocol: the server's location is hidden by design, not by configuration you might get wrong. There is no IP address to leak, no DNS record to subpoena, and no hosting IP for anyone to scan or attack. The address itself is derived from a cryptographic key, so it cannot be spoofed. It is, in a real sense, the strongest form of anonymous hosting available. An onion service has no public IP and no DNS record — its location is hidden by the protocol itself, not by configuration. ## Why host a hidden service Onion services are used by a wide range of legitimate operators: news organisations running secure tip lines, the SecureDrop submission systems journalists rely on, privacy-focused projects offering a censorship-resistant mirror, messaging and file-sharing tools, and individuals who simply want a site whose server location nobody can determine. Major organisations — from large newspapers to well-known software projects — run onion services precisely because they are robust. The reasons come down to three properties. **Location privacy:** the server cannot be found by IP, so it cannot be geolocated, scanned or directly attacked. **Censorship resistance:** there is no IP or domain for a network to block, so the service stays reachable where ordinary sites are filtered. **End-to-end encryption:** Tor's protocol encrypts the connection by default, with no certificate authority involved. If any of those matter to your project, a hidden service is worth running — and this guide builds one. ## What you need The requirements are modest: - **A VPS.** An onion service is lightweight; a small plan is enough. Choosing a no-KYC, offshore VPS matters here for a specific reason explained below — the anonymity of the service depends partly on the anonymity of the server itself. - **A fresh Linux install** — Debian or Ubuntu for the commands here. - **The Tor Browser** on your own machine, to reach and test the finished service. You do not need a domain name — the .onion address is generated for you — and you do not need a TLS certificate, because Tor provides the encryption. ## Step 1 — Set up the server and a web service Provision the VPS and connect over SSH. Install whatever will serve your content — for a simple site, a lightweight web server such as nginx, installed with apt install -y nginx, is ideal. The important configuration detail: bind the web server to localhost only. The web service should listen on 127.0.0.1, not on the server's public IP. Tor will connect to it locally; nothing should reach it directly from the internet. Binding to localhost means that even though the box has a public IP, the website itself is not served on it — only Tor can reach the content. Confirm the site works locally with a quick curl 127.0.0.1 before moving on. ## Step 2 — Install Tor and configure the onion service Install Tor itself with apt install -y tor. Then edit Tor's configuration file, /etc/tor/torrc, to define the hidden service. Two lines do it: a HiddenServiceDir pointing to a directory where Tor will store the service's keys, and a HiddenServicePort mapping the virtual port 80 to your local web server — for example HiddenServicePort 80 127.0.0.1:80. Restart Tor with systemctl restart tor. On first start, Tor generates the service's cryptographic key pair in the directory you specified and derives the .onion address from it. That directory now holds the identity of your service — back it up securely and keep it readable only by the Tor user. Anyone who has those keys can impersonate your service; lose them and the address is gone forever. ## Step 3 — Get your .onion address and test it Tor writes the address into a file called hostname inside the HiddenServiceDir. Read it with cat and you will see a 56-character address ending in .onion — that is the public address of your service. Open the Tor Browser on your own computer, paste the address and load it. Your localhost-only web service should appear, served entirely through Tor. The first connection can take a few seconds while Tor builds the circuit. That is it — the service is live, reachable by anyone with Tor, and its server location is hidden from every visitor. ## Step 4 — Lock it down so it stays anonymous A working onion service is not automatically an anonymous one. The protocol hides the server's location from visitors — but several mistakes can undo that. The discipline that keeps it anonymous: - **Bind everything to localhost.** Re-check that the web server, and any database or backend, listen only on 127.0.0.1. A service accidentally exposed on the public IP can be matched to the onion site and deanonymise it. - **Strip identifying content.** Server banners, default error pages, analytics scripts, and metadata in files can all leak the real server or tie it to other sites. Audit what the service actually sends. - **Administer it anonymously.** Reach the server for administration over Tor as well — never SSH to it directly from your home IP. The onion service hides the server; do not undo that with your own connection. - **Keep the server itself anonymous.** This is why the no-KYC, offshore VPS matters: if the service is ever correlated to its host despite your precautions, the host should be a provider that holds no identity for the account and keeps no logs. The hidden service and the anonymous server reinforce each other. - **Disable anything that phones home.** Software that makes outbound connections — update pingbacks, external fonts, third-party APIs — can leak the server. Keep the service self-contained. ## Hidden service, clearnet, or both You do not have to choose exclusively. There are three sensible setups. A **hidden-service-only** site is the most private — no clearnet footprint at all, ideal for a tip line or a service that must not be locatable. A **clearnet site with an onion mirror** serves an ordinary audience normally while offering a censorship-resistant, private route for those who want it — this is what large news organisations do. And a **clearnet-only** site, covered in our guide on hosting a website anonymously, is simpler when location privacy at the protocol level is not required. For the strongest anonymity, hidden-service-only on a no-KYC offshore VPS is the answer: the server has no identity attached, the service has no IP to find, and the whole thing is reachable by anyone with Tor and locatable by no one. Set up with the discipline above, it is genuinely anonymous hosting — not as a marketing claim, but as a property of the protocol. FAQ ## Tor hidden services — common questions ### 01 What is a Tor hidden service? A Tor hidden service, or onion service, is a website or application reachable only through the Tor network at a .onion address. It has no public IP and no DNS record; visitors connect through Tor, and neither end learns the other's location. It is the strongest model of anonymous hosting. ### 02 Do I need a domain name for an onion service? No. The .onion address is generated automatically by Tor from a cryptographic key pair when the service first starts — you do not register or buy it. You also do not need a TLS certificate, because Tor encrypts the connection itself. ### 03 Is hosting a Tor hidden service legal? Yes. An onion service is just a website reachable over Tor, and running one is lawful — news organisations, software projects and privacy tools all do. As with any hosting, what matters is that the content itself is lawful; the Tor transport does not change that. ### 04 What most often deanonymises a hidden service? Configuration mistakes, not the protocol. The common ones are a web server or backend accidentally listening on the public IP instead of localhost, identifying content or banners that leak the real server, administering the box from a home IP, and software that makes outbound connections. The protocol is sound; the discipline around it is what fails. ### 05 Why does the choice of VPS matter for an onion service? The protocol hides the server's location, but if the service is ever correlated to its host despite your precautions, the host becomes the weak point. A no-KYC, offshore VPS means that even then, the provider holds no identity for the account and keeps no logs — the anonymous server and the hidden service reinforce each other. ### 06 Can I run an onion service alongside a normal website? Yes. Many operators run a clearnet site with an onion mirror — the ordinary audience is served normally, while visitors who want a censorship-resistant, private route use the .onion address. Large news organisations do exactly this. Hidden-service-only is the most private option; a mirror is the most flexible. Related guides ## Keep reading [### How to Choose an Offshore Hosting Jurisdiction in 2026 Buying How to pick an offshore hosting jurisdiction: data-retention law, MLAT exposure, DMCA stance, court speed and real enforcement, country by country. 6-question FAQ](https://anonport.com/guides/choosing-an-offshore-jurisdiction) [### VPS vs Dedicated Server for Privacy-Critical Workloads Buying When a VPS is fine, when shared tenancy is a liability, and when bare metal is the only honest answer: isolation, hypervisor risk, cost vs threat model. 6-question FAQ](https://anonport.com/guides/vps-vs-dedicated-for-privacy) [### Self-Hosted VPN on a No-KYC VPS: WireGuard vs OpenVPN Operations Why a self-hosted VPN beats commercial providers, and how WireGuard and OpenVPN really compare on privacy, performance and operational risk in 2026. 6-question FAQ](https://anonport.com/guides/self-hosted-vpn-wireguard-vs-openvpn) [### RTX 4090 vs H100 for AI Inference (RTX 5090 Included) Buying Which NVIDIA GPU for self-hosted LLM, image, video and speech work in 2026: RTX 4090 vs RTX 5090 vs H100 SXM5 on VRAM, throughput and $/token. 6-question FAQ](https://anonport.com/guides/rtx-4090-vs-h100-for-ai-inference) [### Offshore Windows RDP for MT4 / MT5 / cTrader Forex Trading Operations Why a Windows RDP for forex trading, how to pick a low-latency offshore jurisdiction, MT4/MT5/cTrader and EA setup, broker latency, and the no-KYC checkout. 6-question FAQ](https://anonport.com/guides/offshore-windows-rdp-for-forex-trading) [### DMCA-Ignored Hosting Explained: What It Really Means in 2026 Buying What DMCA-ignored hosting really buys you, which jurisdictions back it up, the workloads that need it, and the copyright traps the term does not cover. 6-question FAQ](https://anonport.com/guides/dmca-ignored-hosting-explained) [### Anonymous Domain Registration with Crypto — 2026 Guide Privacy Register a domain without revealing your identity: WHOIS regimes by TLD, registrar choice, crypto payment options, and the mistakes that leak you anyway. 6-question FAQ](https://anonport.com/guides/anonymous-domain-registration-with-crypto) [### Crypto Payments for Hosting: Monero vs Bitcoin vs USDT Privacy How the coin you pay with changes what your host learns about you: privacy, fees, finality and chain-analysis exposure for XMR, BTC and USDT. 6-question FAQ](https://anonport.com/guides/crypto-payments-monero-vs-bitcoin-vs-usdt) [### Is Offshore Hosting Truly Anonymous? An Honest Answer Privacy Offshore no-KYC hosting removes the identity a normal host collects, but anonymity also depends on payment, logging and your own OpSec. What is traceable. 6-question FAQ](https://anonport.com/guides/is-offshore-hosting-truly-anonymous) [### The First Hour of VPS Hardening: A Checklist Operations An ordered checklist to secure a new VPS in under an hour: SSH keys, firewall, fail2ban, automatic updates and the attack-surface cuts that stop most attacks. 6-question FAQ](https://anonport.com/guides/first-hour-vps-hardening-checklist) [### What Is No-KYC Hosting? Definition, Legality & How It Works Privacy No-KYC hosting means renting a server with zero identity checks: no name, email or ID. What it means, how it works, whether it is legal, how to choose one. 6-question FAQ](https://anonport.com/guides/what-is-no-kyc-hosting) [### Is Offshore Hosting Legal? The Honest 2026 Answer Buying Offshore hosting is legal, for you and the provider. What the term means, where the legal line sits, the myths worth dropping, how to use it responsibly. 6-question FAQ](https://anonport.com/guides/is-offshore-hosting-legal) [### How to Pay for Hosting with Monero (XMR) — Step by Step Privacy Step by step: paying for a VPS or dedicated server with Monero (XMR). Why XMR is the most private option, how to get it, and how checkout works end to end. 6-question FAQ](https://anonport.com/guides/how-to-pay-for-hosting-with-monero) [### How to Host a Website Anonymously — A Practical 2026 Guide Privacy A layered guide to hosting a website with no identity attached: account, payment, domain, jurisdiction, your connection and the content, each explained. 6-question FAQ](https://anonport.com/guides/how-to-host-a-website-anonymously) [### How to Set Up a WireGuard VPN on a VPS — Step-by-Step Guide Operations Build your own private VPN on a VPS with WireGuard: why self-hosted beats commercial, the full setup from install to a connected client, and how to harden it. 6-question FAQ](https://anonport.com/guides/how-to-set-up-wireguard-vpn-on-a-vps) [### How to Self-Host an LLM on a GPU Server — 2026 Guide Operations Run your own LLM on a rented GPU server: why self-hosting beats an API, which GPU and model to choose, the setup with Ollama or vLLM, and what it costs. 6-question FAQ](https://anonport.com/guides/self-host-an-llm-on-a-gpu-server) [### Bulletproof vs Offshore Hosting — What's the Difference? Buying Bulletproof hosting and offshore hosting are constantly confused, and they are not the same thing. The real difference, why it matters, which one you want. 6-question FAQ](https://anonport.com/guides/bulletproof-vs-offshore-hosting) [### How to Buy a VPS with Bitcoin — Step-by-Step (2026) Buying A beginner-friendly walkthrough of buying a VPS with Bitcoin: getting BTC, choosing a plan, paying the invoice, and getting a server with no name attached. 6-question FAQ](https://anonport.com/guides/how-to-buy-a-vps-with-bitcoin) [### Best Countries for DMCA-Ignored Hosting in 2026 Buying Where to host beyond the easy reach of US-style takedowns: the jurisdictions that work, what DMCA-ignored really means, and how to choose between them. 6-question FAQ](https://anonport.com/guides/best-countries-for-dmca-ignored-hosting) [### Offshore Mail Server Setup — Self-Host Private Email in 2026 Operations Run a private email server on an offshore VPS: why self-host email, what you need, a realistic all-in-one mail stack, and how to get deliverability right. 6-question FAQ](https://anonport.com/guides/offshore-mail-server-setup) [### Crypto Node Hosting Guide — Run a Blockchain Node on a VPS Operations How to host a blockchain node on a server: why run your own node, sizing the server for Bitcoin, Ethereum, Monero and more, the setup, and keeping it private. 6-question FAQ](https://anonport.com/guides/crypto-node-hosting-guide) [### GPU Hosting for Stable Diffusion — Run Your Own Image Server Operations Run Stable Diffusion on your own GPU server: why self-host image generation, which GPU to pick, the web UI setup, and what it costs versus a hosted service. 6-question FAQ](https://anonport.com/guides/gpu-hosting-for-stable-diffusion) [### Server OpSec — Staying Anonymous When You Run a Server Privacy Operational security for anyone running an anonymous server: the mistakes that deanonymise people, the habits that prevent them, how to keep identities apart. 6-question FAQ](https://anonport.com/guides/server-opsec-staying-anonymous) [### Seedbox Setup Guide — Build Your Own Private Seedbox in 2026 Operations How to build your own seedbox on a server: what a seedbox is, sizing it, installing a torrent client with a web UI, and keeping it private and secure. 6-question FAQ](https://anonport.com/guides/seedbox-setup-guide) [### How to Bypass DPI Censorship with Your Own VPS (2026 Guide) Privacy Bypass DPI censorship with your own VPS: what deep packet inspection detects, which protocol beats which block, and a full VLESS+REALITY walkthrough. 6-question FAQ](https://anonport.com/guides/bypass-dpi-censorship-with-your-own-vps) [### Full-Disk Encryption on a VPS: LUKS Setup Guide Operations Encrypt a VPS with LUKS: encrypted data volumes, full-root encryption with remote unlock over SSH, the settings that matter on a small server, what it stops. 8-question FAQ](https://anonport.com/guides/full-disk-encryption-on-a-vps) [### Hiding Your Origin Server IP: CDNs, Proxies & Leaks Privacy Should you put a CDN in front of an offshore server? What it hides, the abuse desk you inherit, six ways an origin IP leaks anyway, and how to audit yours. 8-question FAQ](https://anonport.com/guides/hiding-your-origin-server-ip) [### VPS Backup Strategy: Encrypted, Off-Site, Restorable Operations Your host keeps no backups. What destroys servers, why push backups die with them, restic vs Borg, the keys everyone forgets, and how to test a restore. 8-question FAQ](https://anonport.com/guides/vps-backup-strategy) [### Self-Hosting Matrix: Federation, Metadata & E2EE Limits Operations What a Matrix homeserver really gives you: Synapse vs Conduit, the server_name you can never change, media that eats the disk, and what federation reveals. 8-question FAQ](https://anonport.com/guides/self-host-a-matrix-server) [### How to Migrate a Website to Offshore Hosting Without Downtime Operations Make a host migration boring: lower the DNS TTL early, run both servers in parallel, freeze writes for minutes, clean the passive-DNS, CT and WHOIS trail. 8-question FAQ](https://anonport.com/guides/migrate-website-to-offshore-hosting) [### How to Self-Host a Crypto Payment Gateway with BTCPay Server Operations Run a non-custodial checkout on an offshore VPS with BTCPay Server, a pruned Bitcoin node, Lightning and Monero: disk sizing, keys, where KYC reappears. 8-question FAQ](https://anonport.com/guides/self-host-a-crypto-payment-gateway) [### VPS DDoS Protection: Where Your Host Stops and Layer 7 Begins Operations Your host filters packet floods; request floods are yours. How L3/L4 scrubbing works, why Layer 7 passes through, and the caching and limits that keep you up. 8-question FAQ](https://anonport.com/guides/surviving-a-ddos-attack-on-your-vps) [### Best Offshore Hosting Providers in 2026: 12 Compared Buying 12 offshore and anonymous hosts compared on signup identity, Monero, jurisdictions, DMCA policy and bare metal — including where AnonPort loses. 6-question FAQ](https://anonport.com/guides/best-offshore-hosting-providers) ## Deploy the VPS for your hidden service A AnonPort VPS — no-KYC, offshore, crypto-paid, full root — is the anonymous server a Tor hidden service needs. From $7.50/mo, live in minutes. [Private Hosting](https://anonport.com/anonymous-hosting) [View VPS Plans](https://anonport.com/vps) [No-KYC Hosting](https://anonport.com/no-kyc-hosting) ## Structured data (JSON-LD) ```json { "@context": "https://schema.org", "@type": "Organization", "@id": "https://anonport.com/#organization", "name": "AnonPort", "url": "https://anonport.com", "description": "Offshore VPS & dedicated servers in 7 offshore jurisdictions. No KYC, no logs, crypto only. Privacy by architecture.", "logo": { "@type": "ImageObject", "url": "https://anonport.com/icon-512.png", "width": 512, "height": 512, "caption": "AnonPort" }, "image": "https://anonport.com/assets/img/og-image.jpg", "foundingDate": "2025", "areaServed": [ { "@type": "Country", "name": "Iceland" }, { "@type": "Country", "name": "Panama" }, { "@type": "Country", "name": "Moldova" }, { "@type": "Country", "name": "Romania" }, { "@type": "Country", "name": "Switzerland" }, { "@type": "Country", "name": "Netherlands" }, { "@type": "Country", "name": "Russia" } ], "knowsAbout": [ "Offshore hosting", "Offshore VPS", "Bare-metal dedicated servers", "DMCA-ignored hosting", "No KYC hosting", "Cryptocurrency payments", "Privacy engineering", "Token-based authentication", "Anonymous domain name registration", "No-KYC domain registrar", "WHOIS privacy", "Cheap .com domains", "Crypto-paid domain names", "NVIDIA GPU compute", "Windows RDP hosting", "Agentic commerce" ], "contactPoint": { "@type": "ContactPoint", "contactType": "customer support", "url": "https://anonport.com/contact", "availableLanguage": [ "en", "ru", "zh" ] } } ``` ```json { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://anonport.com/#website", "url": "https://anonport.com", "name": "AnonPort", "publisher": { "@id": "https://anonport.com/#organization" }, "inLanguage": [ "en", "ru", "zh" ] } ``` ```json { "@context": "https://schema.org", "@type": "Article", "headline": "How to Host a Tor Hidden Service (.onion Site) — 2026 Guide", "description": "Set up a Tor onion service on a VPS: what a hidden service is, why it is the strongest form of anonymous hosting, the setup, and how to keep it anonymous.", "image": "https://anonport.com/assets/img/topic-anonymous-hero.webp?v=1785320241", "author": { "@type": "Organization", "@id": "https://anonport.com/#editorial", "name": "AnonPort Editorial", "url": "https://anonport.com/about", "description": "Operator-side editorial team writing about offshore hosting jurisdictions, offshore server architecture, self-hosted privacy stacks and crypto payments.", "knowsAbout": [ "Offshore hosting jurisdictions", "Data retention law", "MLAT and judicial cooperation", "WireGuard and OpenVPN deployment", "Tor relay operation", "Monero and Bitcoin payment privacy", "KVM virtualization and bare-metal hosting", "DMCA-ignored hosting" ], "parentOrganization": { "@id": "https://anonport.com/#organization" } }, "publisher": { "@id": "https://anonport.com/#organization" }, "datePublished": "2026-05-22T00:00:00+00:00", "dateModified": "2026-05-28T00:00:00+00:00", "mainEntityOfPage": "https://anonport.com/guides/how-to-host-a-tor-hidden-service", "inLanguage": "en", "keywords": "how to host a Tor hidden service, Tor onion service setup, host a .onion site, create onion service, Tor hidden service guide", "articleSection": "Operations", "wordCount": 1252 } ``` ```json { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "What is a Tor hidden service?", "acceptedAnswer": { "@type": "Answer", "text": "A Tor hidden service, or onion service, is a website or application reachable only through the Tor network at a .onion address. It has no public IP and no DNS record; visitors connect through Tor, and neither end learns the other's location. It is the strongest model of anonymous hosting." } }, { "@type": "Question", "name": "Do I need a domain name for an onion service?", "acceptedAnswer": { "@type": "Answer", "text": "No. The .onion address is generated automatically by Tor from a cryptographic key pair when the service first starts — you do not register or buy it. You also do not need a TLS certificate, because Tor encrypts the connection itself." } }, { "@type": "Question", "name": "Is hosting a Tor hidden service legal?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. An onion service is just a website reachable over Tor, and running one is lawful — news organisations, software projects and privacy tools all do. As with any hosting, what matters is that the content itself is lawful; the Tor transport does not change that." } }, { "@type": "Question", "name": "What most often deanonymises a hidden service?", "acceptedAnswer": { "@type": "Answer", "text": "Configuration mistakes, not the protocol. The common ones are a web server or backend accidentally listening on the public IP instead of localhost, identifying content or banners that leak the real server, administering the box from a home IP, and software that makes outbound connections. The protocol is sound; the discipline around it is what fails." } }, { "@type": "Question", "name": "Why does the choice of VPS matter for an onion service?", "acceptedAnswer": { "@type": "Answer", "text": "The protocol hides the server's location, but if the service is ever correlated to its host despite your precautions, the host becomes the weak point. A no-KYC, offshore VPS means that even then, the provider holds no identity for the account and keeps no logs — the anonymous server and the hidden service reinforce each other." } }, { "@type": "Question", "name": "Can I run an onion service alongside a normal website?", "acceptedAnswer": { "@type": "Answer", "text": "Yes. Many operators run a clearnet site with an onion mirror — the ordinary audience is served normally, while visitors who want a censorship-resistant, private route use the .onion address. Large news organisations do exactly this. Hidden-service-only is the most private option; a mirror is the most flexible." } } ] } ``` ```json { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://anonport.com/" }, { "@type": "ListItem", "position": 2, "name": "Privacy Hosting Guides", "item": "https://anonport.com/guides" }, { "@type": "ListItem", "position": 3, "name": "How to Host a Tor Hidden Service (.onion Site) — 2026 Guide", "item": "https://anonport.com/guides/how-to-host-a-tor-hidden-service" } ] } ``` ```json { "@context": "https://schema.org", "@type": "HowTo", "name": "How to Host a Tor Hidden Service", "description": "Set up a Tor onion service on a VPS: what a hidden service is, why it is the strongest form of anonymous hosting, the setup, and how to keep it anonymous.", "image": "https://anonport.com/assets/img/topic-anonymous-hero.webp?v=1785320241", "inLanguage": "en", "totalTime": "PT1H", "step": [ { "@type": "HowToStep", "position": 1, "name": "What a Tor hidden service is", "text": "A Tor hidden service — also called an onion service — is a website or application that is reachable only through the Tor network, at an address ending in .onion. Unlike an ordinary website, it has no public IP address and is not listed in DNS. Visitors reach it through Tor, and the connection bet…", "url": "https://anonport.com/guides/how-to-host-a-tor-hidden-service#what-a-tor-hidden-service-is" }, { "@type": "HowToStep", "position": 2, "name": "Why host a hidden service", "text": "Onion services are used by a wide range of legitimate operators: news organisations running secure tip lines, the SecureDrop submission systems journalists rely on, privacy-focused projects offering a censorship-resistant mirror, messaging and file-sharing tools, and individuals who simply want a…", "url": "https://anonport.com/guides/how-to-host-a-tor-hidden-service#why-host-a-hidden-service" }, { "@type": "HowToStep", "position": 3, "name": "What you need", "text": "The requirements are modest: A VPS. An onion service is lightweight; a small plan is enough. Choosing a no-KYC, offshore VPS matters here for a specific reason explained below — the anonymity of the service depends partly on the anonymity of the server itself. A fresh Linux install — Debian or Ub…", "url": "https://anonport.com/guides/how-to-host-a-tor-hidden-service#what-you-need" }, { "@type": "HowToStep", "position": 4, "name": "Step 1 — Set up the server and a web service", "text": "Provision the VPS and connect over SSH. Install whatever will serve your content — for a simple site, a lightweight web server such as nginx, installed with apt install -y nginx, is ideal. The important configuration detail: bind the web server to localhost only. The web service should listen on …", "url": "https://anonport.com/guides/how-to-host-a-tor-hidden-service#step-1-set-up-the-server-and-a-web-service" }, { "@type": "HowToStep", "position": 5, "name": "Step 2 — Install Tor and configure the onion service", "text": "Install Tor itself with apt install -y tor. Then edit Tor's configuration file, /etc/tor/torrc, to define the hidden service. Two lines do it: a HiddenServiceDir pointing to a directory where Tor will store the service's keys, and a HiddenServicePort mapping the virtual port 80 to your local web …", "url": "https://anonport.com/guides/how-to-host-a-tor-hidden-service#step-2-install-tor-and-configure-the-onion-service" }, { "@type": "HowToStep", "position": 6, "name": "Step 3 — Get your .onion address and test it", "text": "Tor writes the address into a file called hostname inside the HiddenServiceDir. Read it with cat and you will see a 56-character address ending in .onion — that is the public address of your service. Open the Tor Browser on your own computer, paste the address and load it. Your localhost-only web…", "url": "https://anonport.com/guides/how-to-host-a-tor-hidden-service#step-3-get-your-onion-address-and-test-it" }, { "@type": "HowToStep", "position": 7, "name": "Step 4 — Lock it down so it stays anonymous", "text": "A working onion service is not automatically an anonymous one. The protocol hides the server's location from visitors — but several mistakes can undo that. The discipline that keeps it anonymous: Bind everything to localhost. Re-check that the web server, and any database or backend, listen only …", "url": "https://anonport.com/guides/how-to-host-a-tor-hidden-service#step-4-lock-it-down-so-it-stays-anonymous" }, { "@type": "HowToStep", "position": 8, "name": "Hidden service, clearnet, or both", "text": "You do not have to choose exclusively. There are three sensible setups. A hidden-service-only site is the most private — no clearnet footprint at all, ideal for a tip line or a service that must not be locatable. A clearnet site with an onion mirror serves an ordinary audience normally while offe…", "url": "https://anonport.com/guides/how-to-host-a-tor-hidden-service#hidden-service-clearnet-or-both" } ] } ```