Onion Service Generator

Generate the files you need to host your own .onion service on the Tor network. Pick a fresh v3 identity, copy your torrc, drop the keys into your Tor data directory, and you're live — anonymously.

Your .onion address

jrqhf62wte2vzre6zonzdsmvbcajpejewazwqjzbj5orhwx3mysbkqb7.onion

v3 hidden service · 56-char base32 · ed25519 keypair generated locally in your browser.

hs_ed25519_public_key

-----BEGIN ED25519 PUBLIC KEY-----
5a7d070876ac7ac4f80911fd8e2b2a6d9810ecc181095aed6509be14e6c0d020
f0055680cbb36bd1f35a49a6e6b12500bb6c2ba6df009de065070c7d9f270028
-----END ED25519 PUBLIC KEY-----

hs_ed25519_secret_key

SECRET
-----BEGIN ED25519 SECRET KEY-----
1517ebd0b8aed7fcbec4cc38fe798063d64ec1da5d5b438bc7b34bb214e9ed7d
cf23074da31577044a08e81d1fc03dedfe10537f04134634f15c912032fab60e
952aacf889ba558098e5a614ff17d02199f00914cdbf82b2e3919fabf1bd409c
fbb16d1a9efad0e5897ba8be3bd0fb123a7ca6252801673963f29f8911e22927
-----END ED25519 SECRET KEY-----

torrc

# /etc/tor/torrc — Hidden Service for jrqhf62wte2vzre6zonzdsmvbcajpejewazwqjzbj5orhwx3mysbkqb7.onion
HiddenServiceDir /var/lib/tor/sisserou_service/
HiddenServiceVersion 3
HiddenServicePort 80 127.0.0.1:8080

How it works

  1. 1

    Install Tor on your server

    sudo apt install tor
  2. 2

    Place your keys in Tor's data directory

    Copy hs_ed25519_public_key, hs_ed25519_secret_key, and a hostname file (containing your .onion address) into/var/lib/tor/sisserou_service/. Permissions must be 700 (owner: tor).
  3. 3

    Add the torrc config

    Append the generated torrc block to /etc/tor/torrc. It tells Tor to expose your local web server through the hidden service.
  4. 4

    Run a local service

    Anything listening on 127.0.0.1:8080 — nginx, a static site, a Node app — will be reachable through your onion.
  5. 5

    Restart Tor & visit

    sudo systemctl restart torOpen jrqhf62wte2vzre6zonzdsmvbcajpejewazwqjzbj5orhwx3mysbkqb7.onion in Tor Browser. You're live.

Operational security

  • · Never share hs_ed25519_secret_key — it IS your onion identity.
  • · Bind your local service to 127.0.0.1 only, never 0.0.0.0.
  • · Strip identifying headers (Server, X-Powered-By) from your web server.
  • · Keep Tor and the application stack updated; isolate the host.

Keys generated client-side · nothing is sent to a server.