Onion Service Generator

Generate the files you need to host your own .onion service on the Tor network. Pick a fresh v3 identity, copy your torrc, drop the keys into your Tor data directory, and you're live — anonymously.

Your .onion address

nzb2mawnhq2paow5gzivtisxqkub46kdf7efv4lehypk3re6vom7ajrp.onion

v3 hidden service · 56-char base32 · ed25519 keypair generated locally in your browser.

hs_ed25519_public_key

-----BEGIN ED25519 PUBLIC KEY-----
37a12cab175f3dd95183475ad3b7e253b06a1677a8b580e84fd65b6988fc4dfa
01098182d614edf678a6eff64e86fdc2fff7eabd5de6119e04bb657f624f85ca
-----END ED25519 PUBLIC KEY-----

hs_ed25519_secret_key

SECRET
-----BEGIN ED25519 SECRET KEY-----
ac9d556414852f7764f4019bf37419d2f86c679571a6cf8762b3f1bd3fbbeacf
b9a0ddd538d1395985b39fbb0e4ae2ecec1e0473f227e91450bf1b1557ec897f
861be4f4b6c386639564497221fcabd3fdd329fefe3daac605fbd9d02f49da0d
7ea59becc8db2efd6d76eaf095e0758ac38739239aa7a2513acde8b85fec09cc
-----END ED25519 SECRET KEY-----

torrc

# /etc/tor/torrc — Hidden Service for nzb2mawnhq2paow5gzivtisxqkub46kdf7efv4lehypk3re6vom7ajrp.onion
HiddenServiceDir /var/lib/tor/sisserou_service/
HiddenServiceVersion 3
HiddenServicePort 80 127.0.0.1:8080

How it works

  1. 1

    Install Tor on your server

    sudo apt install tor
  2. 2

    Place your keys in Tor's data directory

    Copy hs_ed25519_public_key, hs_ed25519_secret_key, and a hostname file (containing your .onion address) into/var/lib/tor/sisserou_service/. Permissions must be 700 (owner: tor).
  3. 3

    Add the torrc config

    Append the generated torrc block to /etc/tor/torrc. It tells Tor to expose your local web server through the hidden service.
  4. 4

    Run a local service

    Anything listening on 127.0.0.1:8080 — nginx, a static site, a Node app — will be reachable through your onion.
  5. 5

    Restart Tor & visit

    sudo systemctl restart torOpen nzb2mawnhq2paow5gzivtisxqkub46kdf7efv4lehypk3re6vom7ajrp.onion in Tor Browser. You're live.

Operational security

  • · Never share hs_ed25519_secret_key — it IS your onion identity.
  • · Bind your local service to 127.0.0.1 only, never 0.0.0.0.
  • · Strip identifying headers (Server, X-Powered-By) from your web server.
  • · Keep Tor and the application stack updated; isolate the host.

Keys generated client-side · nothing is sent to a server.