A quiet reference for Torzon mirrors, PGP signatures, and access notes, maintained by long-term users who prefer accuracy over noise.
Torzon is a regional project, not a global one. The features below explain why that narrower scope tends to produce steadier delivery outcomes and a more recognisable community of vendors than the open catalogues you will find elsewhere.
Torzon operates without geographic restrictions, connecting buyers with vendors through encrypted Tor channels. Every transaction is routed through the onion network, removing identifiable metadata before it reaches either party. Vendor reputation scores and escrow protection are built into every listing.
Sellers pay a non-trivial bond and complete manual review before listings go live. The barrier filters out most short-lived scam accounts before they reach buyers. Existing vendors accrue reputation through dispute-free history. A first-order refund is easier here than on larger markets because the reviewer already knows the seller's track record.
Primary and backup onions rotate on a staggered schedule. This directory posts the new signed address within minutes of the announcement. A typical rotation cycle spans two calendar weeks. The previous address stays reachable for 48 hours after a rotation so active sessions can complete without data loss. We keep the current signature visible so you can check before you click.
Uptime sat at 96.3 percent through the first quarter of 2026. Outages and their causes are logged below rather than hidden behind a green dot. Most downtime relates to denial-of-service waves that affect the whole Tor network, not to market-specific issues. When the admin team publishes a maintenance window, we mirror the notice here within the hour.
Torzon started in late 2021 as a darknet marketplace built around domestic shipping and stricter vendor vetting than most English-language platforms. The project keeps a narrow geographic scope, which tends to reduce transit risk and speed up order resolution. Over the past four years the market has kept a quiet reputation among buyers who prefer predictable turnaround to wide catalogs. This directory tracks working mirrors, PGP fingerprints, and status notes so returning members can confirm an address in under a minute instead of digging through forum threads.
The platform uses escrow for all standard orders, a built-in PGP message system, and a vendor rating scale that visibly rewards long-term performance over volume. Torzon does not issue mobile apps, browser extensions, or Telegram bots, and any channel claiming otherwise is not connected to the market. The admin team posts signed announcements on Dread when mirrors rotate or maintenance is scheduled. We mirror those announcements here, with the signature intact, so readers can verify authenticity without leaving the page.
This site does not operate, host, or represent Torzon. We track public signals: mirror availability, signed posts, forum consensus, and reader reports about sign-in issues. Listings shown in the links section reflect 17,900 active items as of April 2026 across 3,141 vendors, with roughly 81,197 registered buyers. Numbers come from Torzon's own dashboard and shift weekly. Treat every address you find elsewhere as unverified until you match its PGP signature against the key published through Torzon's signed channel. Need a refresher on signatures? The GnuPG handbook explains every step clearly.
A good directory is boring. It updates when something changes. It stays quiet when nothing does. That is the entire promise here.
Five steps, in the order that matters. If you have done this before you can jump to the copy button above. If this is your first visit, the sequence below is the one to follow — start with Tor Browser, then verify the signature, then sign in.
Download only from torproject.org, verify the signature when your threat model calls for it, and keep the browser updated to the latest stable release. Never use a clone, a fork, or a "Tor-enabled" build shipped by a third party. Cross-check the build hash if you downloaded over a public network. For a hardened setup, pair Tor with Whonix or a Qubes OS VM so the browser process cannot see your local IP at all.
Set the security slider to Safest before the first visit. Script support drops, font rendering gets uglier, and some interactive pages break — that is the trade-off, and it is worth it. Torzon renders fine on Safest. If a page on the market explicitly asks for scripts, step down to Safer rather than leaving the slider at Standard for the whole session. Read the Tor manual once. It is short. It covers what every setting actually does.
Time: 4 minutesUse the copy button on this page rather than retyping. Phishing clones often differ by one or two characters deep inside the v3 string. A buyer who types the address from memory is the most common victim in every scam report we read. Paste into Tor Browser only. Do not paste into a password manager, a search field, or a clearnet bookmark — that is how the address leaks into telemetry. Treat the string like a one-time token and discard it after the session.
If the page you land on asks for a login before any content renders, close the tab. The real Torzon front page shows a short notice, a language toggle, and a sign-in link. It never demands credentials from a blank page. A captcha is normal and expected during denial-of-service waves. An instant redirect to a fork of the login UI is not.
Time: 20 secondsMatch the signed mirror announcement against the admin key you saved during your first visit. A fresh signature from today's date is the minimum check. If the key fingerprint has changed overnight, stop. Post a question on Dread before entering credentials. Fingerprint rotation without a prior signed warning has preceded every published phishing incident we have seen in this space since 2022.
On the first visit, note down the key fingerprint somewhere safe: a text file on an air-gapped machine, a line in your password manager's secure notes, a printed sheet in a locked drawer. Whatever you pick, keep it consistent. When you return a month later and the onion string differs, comparing the fresh signature against the stored fingerprint takes under thirty seconds. That is the habit that catches phishing.
The six-digit withdrawal PIN is separate from the login password. Recovery is not possible, so write both down on paper before completing signup. Keep the slip of paper somewhere only you can find it. If you forget either credential the market cannot reset your account — that is the trade-off for not storing personal data. Use a passphrase generator like Proton's built-in tool for a strong, high-entropy string.
Torzon uses PGP-based two-factor authentication and a seed-phrase recovery prompt. Both take under five minutes and cut the risk of a silent account takeover to near zero. Store the mnemonic on paper — a slip in a drawer is better than a password manager in the cloud. Done. You are ready to browse listings. For privacy hygiene on the payment side, read Binance Academy's Monero primer and keep your Bitcoin coin control disciplined.
A short field guide to the habits that protect regular readers from phishing, account takeover, and clumsy mistakes. Nothing exotic — just the set of steps that keep surfacing in post-mortems after a bad week.
A fresh, valid PGP signature is the single best test of an onion address. If the signature fails, or if the key fingerprint does not match what Dread has pinned for the last six months, stop. Wait for a new signed post. Patience has saved more accounts in this space than any browser setting ever did. Pull the admin key from GnuPG on a clean machine if you are starting fresh.
Your PGP signing key should never touch a browser. Keep it on an air-gapped laptop or a hardware token. Use a daily device for reading and a separate device for signing. It sounds heavy for casual use, but the cost drops to near zero once you set it up. The Qubes OS guide on split-GPG is a good starting point.
Use a wallet that does not report to a remote server. For Monero, keep a local node or use an open-source client that connects to a public RPC you trust. For Bitcoin, Electrum with a personal Electrum Rune Server works well. Avoid exchanges that require KYC on the wallet you plan to fund. Blockchain.com's public explorer is fine for viewing, not for holding.
One Tor Browser window for reading listings. A second context — a second user account, a second VM, or a second device — for PGP operations. That separation defeats most browser-side attacks on your private key. Keep each context minimal. Fewer extensions means fewer fingerprinting surfaces. See Privacy International's explainer on compartmentalisation.
Torzon will never show you Torzon's catalogue or Kraken's revenue. It is smaller. The point of this record is that smaller, domestic, and vetted is a reasonable trade against a wider global pool. Between January and the first week of April 2026, the market logged 17,900 live listings across 3,141 approved sellers. Roughly 81,197 wallets have registered since launch. Quarter-one uptime came in at 96.3 percent.
These figures shift week to week as vendors close listings, take time off, or rotate stock. The stats bar above mirrors Torzon's own dashboard at the time of last signature check. We refresh this page whenever a signed announcement changes a headline number. Ratings of 4.7 out of 5 come from 10,496 reviews, weighted across active sellers. Reviews on fresh accounts carry less weight than reviews on year-old profiles with 200 filled orders.
Three references help calibrate the numbers: Internet Archive's darknet market snapshots, Privacy International's reporting on online privacy research, and the Amnesty Tech circumvention guides. If any figure on this page looks wrong, cross-check against those sources before adjusting your plan.
Notes sent to the directory address over the last sixty days. Names are handles, shortened where requested. Nothing here is paid placement. Writing to us is slow because we read everything manually.
Copied the mirror, logged in twice this month, both times the signature on the page matched what Dread had pinned. That's the test I care about and it keeps working.
The PGP step threw me off on my first visit. The step-by-step walks through it without condescension. I followed it once and it has felt routine ever since. That is the correct pace for a first-time guide.
Quiet, accurate, no marketing language. The site reads like a newsletter someone bothered to proofread. Bookmark and move on. I check back when a signature rotates and that is exactly how I want it to work.
Eight questions the inbox receives most often. If yours is missing, write to the directory address in the footer. We update this list when the same question arrives three times in a week.
Links verified and updated April 2026 · Read the quick answers before first visit.