Onion Service Generator

Generate the files you need to host your own .onion service on the Tor network. Pick a fresh v3 identity, copy your torrc, drop the keys into your Tor data directory, and you're live — anonymously.

Your .onion address

5fksmcb4vmld4qridusitgfqxcxdjp7fw5rf42h67ydisfyzwhwlovaz.onion

v3 hidden service · 56-char base32 · ed25519 keypair generated locally in your browser.

hs_ed25519_public_key

-----BEGIN ED25519 PUBLIC KEY-----
5c915e86aaf04c868d07af9fb97104d57bf5991f8f4b45d115fbe12ba6ed5a03
ecdff28d2594862cc1b8c73d5346d090031defb3b5105b5bc7de88659973d98a
-----END ED25519 PUBLIC KEY-----

hs_ed25519_secret_key

SECRET
-----BEGIN ED25519 SECRET KEY-----
ec17ad43e46fb4eae99329e11f3ac939ff735cd10fc2c5b7b3e1272ae897ba4c
161d8fe188a4448024ce83ac02b5181bb6c438150f7d12d475425c0178e4295c
77775dad615b2de1d97c1c363eadf937d6e322304646be7c98bba104bb9831d5
b48fb0634a98ad7f841baa5ca618464966fc7c0d6135d22626c3c8b5e0a66772
-----END ED25519 SECRET KEY-----

torrc

# /etc/tor/torrc — Hidden Service for 5fksmcb4vmld4qridusitgfqxcxdjp7fw5rf42h67ydisfyzwhwlovaz.onion
HiddenServiceDir /var/lib/tor/sisserou_service/
HiddenServiceVersion 3
HiddenServicePort 80 127.0.0.1:8080

How it works

  1. 1

    Install Tor on your server

    sudo apt install tor
  2. 2

    Place your keys in Tor's data directory

    Copy hs_ed25519_public_key, hs_ed25519_secret_key, and a hostname file (containing your .onion address) into/var/lib/tor/sisserou_service/. Permissions must be 700 (owner: tor).
  3. 3

    Add the torrc config

    Append the generated torrc block to /etc/tor/torrc. It tells Tor to expose your local web server through the hidden service.
  4. 4

    Run a local service

    Anything listening on 127.0.0.1:8080 — nginx, a static site, a Node app — will be reachable through your onion.
  5. 5

    Restart Tor & visit

    sudo systemctl restart torOpen 5fksmcb4vmld4qridusitgfqxcxdjp7fw5rf42h67ydisfyzwhwlovaz.onion in Tor Browser. You're live.

Operational security

  • · Never share hs_ed25519_secret_key — it IS your onion identity.
  • · Bind your local service to 127.0.0.1 only, never 0.0.0.0.
  • · Strip identifying headers (Server, X-Powered-By) from your web server.
  • · Keep Tor and the application stack updated; isolate the host.

Keys generated client-side · nothing is sent to a server.