A growing number of news outlets with onion sites now let readers and sources reach them through Tor. This is not a gimmick. For newsrooms handling sensitive tips, an onion address is a practical tool for protecting the people who talk to them.
Why a newsroom would bother with Tor
Journalism depends on sources who sometimes face real risk if identified: employees exposing wrongdoing, officials leaking documents, witnesses to abuse of power. If a source has to visit a news website or send a file over the open internet, that traffic can potentially be observed or logged somewhere along the way.
Onion services route that connection through the Tor network, which is designed to make it much harder for an observer to link a visitor to a specific browsing session. This protects both whistleblowers submitting tips and ordinary readers in countries that restrict press access.
Which news organizations use Tor
Several major outlets have publicly hosted onion services or built their leak-submission systems on Tor, including The Guardian, The New Yorker, ProPublica, The Intercept, CBC, The New York Times, and The Washington Post. This is not an exhaustive or ranked list, and coverage changes over time as organizations add or retire services.
The pattern matters more than any single name. Serious investigative journalism has increasingly treated onion sites, Tor Browser, and related privacy tools as a basic part of the job, not a fringe experiment.
SecureDrop and the whistleblower toolkit
The best-known tool in this space is SecureDrop, an open-source submission system originally developed by Aaron Swartz and now maintained by the Freedom of the Press Foundation. It is used by many news organizations to receive documents from sources anonymously.
With SecureDrop, a source uses Tor Browser to upload files or messages to a newsroom's onion address. The design is deliberate: the news organization does not learn who the source is unless the source chooses to reveal it later. Other tools in this space include GlobaLeaks, OnionShare, and SafeBox, used by projects such as Forbidden Stories.
The combination of an onion site, Tor Browser, and careful operational habits has become a standard toolkit for investigative reporting that depends on protected sources.
Reading the news through Tor
Onion sites are not only for leaking documents. Some outlets run onion mirrors of their regular news site so that readers in restrictive environments can browse without their traffic touching the open web. Using the onion address also reduces load on Tor's volunteer-run exit nodes, freeing capacity for others who rely on the network.
Beyond news organizations, major services including Cloudflare, DuckDuckGo, and Facebook offer onion versions alongside their normal addresses. The pattern of "trusted organization plus onion option" is common across the privacy-conscious part of the internet.
What Tor does and does not guarantee
Tor Browser routes your connection through several relays, which makes it much harder for a single observer to tie your traffic to your identity. It does not make any specific action anonymous on its own.
If a source logs into a personal email account, reuses a username, or uploads a file with identifying metadata while using Tor, that behavior can undo the protection Tor offers. Real source protection depends on Tor plus careful habits. This is why organizations like the Freedom of the Press Foundation publish detailed guidance for sources on how to prepare before making contact, not just which tool to open.
Finding the real onion address
This is where most people go wrong. Search results and directory sites for onion links are frequently outdated, and some are set up specifically to impersonate real organizations. Browsing a general-purpose link directory like the Hidden Wiki to find a newsroom's onion address is not safe: there is no single trustworthy version of it anymore, only clones and copycats with fake, outdated, or scam addresses.
The reliable approach is simpler: go to the news organization's official website on the regular internet using a browser you already trust. Look for their onion address, usually on a page about tips, contact, or security. Reputable outlets that offer SecureDrop or an onion mirror publish the address themselves.
A familiar name is not a safety guarantee. Always verify the address against the organization's official page rather than trusting a link you found elsewhere, even if the site looks polished.
A word on directories in general
Not every onion site that markets itself as a leak platform or news mirror deserves trust because it looks functional or has a clearnet counterpart. Some sites built around harassment, doxxing, or publishing private information have switched domains for years to dodge earned bans. A working mirror is not a legitimacy signal.
If you are looking for a way to share a tip or read the news privately, stick to organizations you already know and trust from the open web. Verify their onion address directly from their official page. Treat unfamiliar "directory" sites as entertainment at best and a risk at worst.