WeTheNorth Verified Mirror Links —
Official WTN Onion URLs 2026
All verified WeTheNorth Market .onion mirror addresses for 2026. Every link is tested daily and PGP-signed by the official WTN team. Use Tor Browser only. Canada's #1 darknet marketplace with mandatory escrow and bilingual EN/FR support.
Active WeTheNorth Mirror Links
hn2pawgbh5owvqgegyl5e445otpgntx64meszbo5e2o6nfk7szxknmyd.onion
hn2pawgbh5owvqgegyl5e445otpgntx64meszbo5e2o6nfk7szxknmyd.onion
hn2pawgbh5owvqgegyl5e445otpgntx64meszbo5e2o6nfk7szxknmyd.onion
How to Verify WeTheNorth Mirror Links with PGP
PGP verification is the only reliable method to confirm that a WTN mirror link is authentic. Phishing sites that impersonate the market look identical to the real platform but steal login credentials and cryptocurrency. The WTN team signs every official mirror list with their PGP private key — a cryptographic signature that cannot be forged without the key. For a full guide on secure access, see our WeTheNorth home page.
The verification process takes fewer than five minutes and provides absolute assurance that the mirror you are using was published by the legitimate WTN team. Once you have completed PGP verification once, subsequent verifications are faster because your GPG keyring already contains the public key.
Never skip PGP verification because a site "looks right." Phishing sites are designed to look identical to the genuine marketplace. The visual appearance of a site is meaningless as a security indicator — only a valid PGP signature provides genuine authentication. Users who rely on visual inspection of .onion addresses lose their accounts and funds at a significantly higher rate than those who verify with PGP.
For users on Tails OS, GnuPG is pre-installed and available in the Applications menu. For Whonix users, GnuPG is also included by default. Desktop Linux users can install it with their package manager. Windows and macOS users should download GnuPG from the official site.
Import the WeTheNorth PGP Key
Download the official WTN public key from the market's login page or from the WTN subdread on Dread. Run gpg --import wtn-public-key.asc to add it to your keyring.
Verify the Key Fingerprint
Run gpg --fingerprint and confirm the fingerprint matches the one published on the official WeTheNorth announcement. A mismatch means you have the wrong key.
Download the Signed Mirror List
Get the current WTN mirror list file and its detached signature (.sig file) from the official site or subdread post.
Verify the Signature
Run gpg --verify mirrors.txt.sig mirrors.txt. If the output says Good signature from WeTheNorth Market, the link list is authentic and safe to use.
Access via Tor Browser
Copy the verified .onion address from the signed mirror list. Open Tor Browser and paste the address. Only proceed if the URL matches exactly — any character difference indicates a phishing attempt.
Protecting Yourself from WeTheNorth Phishing Sites
Phishing attacks targeting marketplace users are sophisticated and persistent. Attackers create exact visual copies of the WTN login page hosted on fake .onion addresses that differ from the real mirror by only a few characters. These phishing sites are distributed through Telegram groups, dark web forums, fake "mirror list" websites, and sometimes through search engine results.
The most dangerous phishing vectors are Telegram channels that claim to be official WTN groups. The genuine WeTheNorth Market does not operate any Telegram groups. Any Telegram channel distributing market links should be treated as a phishing operation. Block and report such channels immediately.
Social engineering attacks also target marketplace users. Attackers may pose as WTN support agents, claiming your account has been suspended or that you need to verify your identity through a link they provide. Genuine market support never asks users to click external links or provide their credentials outside the official marketplace interface.
If you believe you have accessed a phishing site and entered your credentials, act immediately. Change your password from a verified mirror, revoke and replace your 2FA codes, and check your wallet for unauthorized withdrawals. If funds have been moved, document the transaction IDs and file a report with the support team.
Browser-level indicators like HTTPS certificates are meaningless for .onion sites — both the legitimate market and phishing sites will show as "secure" in Tor Browser because all .onion traffic is encrypted by the Tor protocol. The only reliable indicator is PGP verification of the onion address against the official signed mirror list.
The WTN anti-phishing system includes a personalized phrase displayed on every authenticated session. After logging in, verify that your anti-phishing phrase — set during account registration — appears correctly. A missing or incorrect phrase is a definitive indicator that you have landed on a phishing site. Log out immediately and verify the URL with PGP.
Creating a WeTheNorth Account
Registration on the marketplace is straightforward. Access any verified mirror through Tor Browser and click the Register link on the homepage. Choose a username that has no connection to your real identity — avoid usernames you use on any other platform, clearnet or darknet. A random combination of words is ideal for maintaining anonymous access.
During registration, you will set a strong password and upload your PGP public key. The PGP key is essential for encrypted communications with vendors and sellers. If you have not generated a PGP keypair yet, do so before registering using GnuPG — instructions are available from OpenPGP.org.
After your initial login, configure your 2-factor authentication (2FA) immediately. The platform uses TOTP-based 2FA compatible with standard authenticator apps. Set an anti-phishing phrase — a word or phrase that will be displayed on every legitimate login page after you enter your username. This phrase lets you instantly detect phishing sites and distinguishes the authentic hidden service from impostors.
New buyers can browse all listings immediately after registration. No initial deposit is required to browse. Place your first deposit only after you have thoroughly reviewed vendor profiles, read feedback from previous buyers, and identified the order you want to place. Store your recovery phrase and 2FA backup codes in KeePassXC or equivalent encrypted storage.
WeTheNorth Domestic Shipping — Canada-Wide Coverage
The WTN shipping model is the platform's most powerful differentiator. Every vendor and seller ships exclusively within Canada, using Canada Post, Purolator, or other domestic couriers as appropriate. Packages never leave Canadian territory, which means no interaction with the Canada Border Services Agency (CBSA) international mail inspection program.
Vendors on the platform specify which provinces they ship to and their typical delivery timeframes. Most vendors cover all provinces, with delivery times ranging from 1-2 business days for local orders to 5-7 business days for cross-country shipping. Express options are available from many vendors for time-sensitive orders.
Stealth packaging is a standard expectation across the marketplace. Vendors use discreet packaging that reveals nothing about the contents — plain envelopes, generic boxes, and vacuum-sealed inner packaging are common. Vendor profiles display stealth ratings from previous buyers, allowing you to choose vendors with the best stealth track record for your region.
In the event of a non-delivery, the escrow system protects buyers. Open a dispute through the market interface, provide tracking evidence if available, and the dispute team will review the case. Trusted vendors with poor delivery track records receive warnings and eventually lose marketplace access, maintaining overall platform quality.
Understanding WeTheNorth Mirror Status Indicators
The mirror is responding and accessible through Tor Browser. This status is checked daily. An "Online" WTN mirror was verified live within the past 24 hours using automated testing from multiple Tor exit nodes.
The mirror is online but responding slowly. This may be due to DDoS mitigation, high server load, or Tor network congestion. Try this mirror during off-peak hours or use an alternate verified mirror instead.
The mirror is not responding. This may be temporary maintenance, a DDoS attack, or permanent retirement of the address. Use an alternate mirror. Offline addresses are removed from this list within 48 hours if they do not recover.
The .onion address requires fresh PGP verification before use. This status appears when a mirror address has been recently updated by the WTN team. Download the latest signed mirror list and re-verify before accessing.
Cryptocurrency on WeTheNorth — BTC & XMR
The platform accepts two cryptocurrencies: Bitcoin (BTC) and Monero (XMR). Understanding the privacy properties of each is important for choosing which to use on the platform.
Bitcoin (BTC): The Bitcoin blockchain is entirely public. Every transaction is permanently recorded and visible to anyone. Chain analysis companies — including those contracted by law enforcement — can trace Bitcoin flows across addresses. If you use Bitcoin on the marketplace, always send from a wallet that has been mixed through a reputable CoinJoin implementation, never directly from a KYC exchange. For multisig transaction support, learn about Bitcoin privacy at bitcoin.org.
Monero (XMR): Monero provides privacy by default through three core technologies: ring signatures (obscure the true sender among decoys), stealth addresses (one-time addresses for each transaction), and RingCT (hide transaction amounts). Unlike Bitcoin, Monero does not require any additional mixing — all transactions are private automatically. Download the official Monero wallet from getmonero.org.
Monero is the strongly recommended payment method. The platform's acceptance of both currencies reflects the diverse starting points of Canadian users, but the privacy community consensus — supported by resources like Privacy Guides — is that XMR is the only cryptocurrency that provides genuine financial privacy.
WeTheNorth Wallet Security
After depositing cryptocurrency to your WTN wallet, keep only the funds you need for active orders. Large idle balances in any marketplace wallet represent unnecessary risk. Withdraw excess funds to a hardware wallet or cold storage address you control. For Monero, use the official Monero CLI or GUI wallet downloaded from getmonero.org. For Bitcoin, consider a hardware wallet from a reputable manufacturer. For full cryptocurrency deposit instructions, see our main WeTheNorth guide.
The wallet interface shows your current balance, deposit history, and withdrawal history. Review your transaction history regularly to detect any unauthorized activity. If you see a withdrawal you did not initiate, change your password and 2FA codes immediately and contact support through a verified mirror.
Never share your account credentials with anyone, including people claiming to be support agents. Support staff will never ask for your password, 2FA codes, or private keys. If someone contacts you outside the official messaging system claiming to need your credentials for any reason, it is a social engineering attack.
For users concerned about operational security at the wallet level, OnionShare can be used to share wallet-related information anonymously. Combined with Monero's native privacy and Tor Browser access to verified mirror links, this creates a complete stack of anonymity tools protecting your financial activity on the darknet platform.
WeTheNorth for Vendors — Joining the Marketplace
Vendors interested in joining can apply through the vendor application process accessible from any verified mirror. The WTN team reviews applications and approves vendors that meet the platform's standards for product quality, operational security, and Canadian shipping capability.
The 5% commission is among the lowest in the darknet marketplace space. Combined with the Canada-only domestic shipping model — which enables near-perfect delivery rates — the platform offers a highly favorable operating environment for both vendors and sellers compared to international alternatives.
Approved vendors must maintain PGP encryption for all buyer communications, ship within the stated timeframes, and respond to buyer messages promptly. Trusted vendors who perform consistently gain additional trust badges visible to buyers on the listing page. High-performing vendors accumulate strong reputation that distinguishes them as legitimate, authentic sellers within the community.
New vendors start with limited listing capacity that expands as they build positive feedback. This graduated system prevents new accounts from immediately launching high-volume operations before establishing a track record, protecting buyers from untested vendors and maintaining the platform's authentic marketplace quality.
WeTheNorth Market History & Track Record
WeTheNorth Market launched in July 2021, filling a market gap left by the exit of several Canadian-focused vendors from international platforms. The founding team recognized that Canadian buyers faced unique disadvantages on international darknet markets: longer shipping times, high customs seizure rates, and no French language support. By building a domestic-only, bilingual marketplace, WTN addressed each of these problems directly.
Since its launch, the platform has grown steadily without the dramatic exit scams and law enforcement takedowns that have plagued international competitors. The mandatory escrow policy, which has been in place since the marketplace opened, has protected buyers and maintained vendor accountability throughout the platform's operation. No WTN exit scam has occurred in the platform's history — a track record that distinguishes it from many older marketplaces.
The vendor community has grown from a small group of Canadian sellers to over 300 verified vendors covering all major categories and all Canadian provinces. High-performing vendors who have been on the platform since the early days have thousands of completed orders and five-star feedback ratings across tens of thousands of individual buyer reviews. The community of trusted, legitimate vendors is one of the platform's greatest assets.
The buyer community has also grown significantly, with over 4,000 registered accounts accessing the marketplace regularly. Canadian buyers have embraced the domestic shipping model, with the community producing detailed vendor reviews, stealth packaging reports, and shipping speed comparisons that help new buyers make informed purchasing decisions.
The platform has weathered DDoS attacks, law enforcement pressure on the broader darknet marketplace ecosystem, and the disruptions caused by major international market closures. Each time a competing international marketplace has exited or been seized, WTN has seen an influx of Canadian vendors seeking a domestic platform. The result has been consistent growth in listing volume and vendor quality.
Mirror rotation and PGP-signed announcements have been part of the WeTheNorth security model from the beginning. Early in the platform's history, phishing attempts targeting users emerged as the marketplace grew in prominence. The WeTheNorth team responded by implementing the anti-phishing phrase system and publishing detailed guides for users on how to verify links using PGP. These security-forward practices have kept phishing losses among the WeTheNorth community lower than on comparable platforms without such systems. For more background, visit our home page with the full platform overview.
WeTheNorth Mirror FAQ
WTN rotates mirror links as a security measure to make it harder for adversaries to map and attack the marketplace infrastructure. When a mirror is retired, old links stop working, prompting users to verify a new link from an official source. This rotation also eliminates the value of cached phishing links that use old mirror addresses.
No. All official mirrors are identical entry points to the same marketplace. Your account data, wallet balance, orders, and messages are the same regardless of which mirror you use to log in. Mirrors are simply alternate .onion addresses pointing to the same backend infrastructure — there is no difference between the hidden service entry points.
The WTN team determines mirror rotation schedules based on security considerations. Some mirrors operate for months; others are retired within weeks if there are infrastructure changes or security events. This page tracks active mirrors daily and removes retired ones within 48 hours of confirmed downtime.
Tor Browser for Android can access verified mirror links. However, mobile access carries higher security risks than desktop — mobile devices have more attack surface, less memory isolation, and fewer privacy protections. If you must use mobile, download Tor Browser for Android only from the official Tor Project site or F-Droid, set security to Safest, and avoid performing sensitive actions on mobile if a desktop option is available.
WTN occasionally updates its interface design. If a mirror shows a different layout than you remember, do not immediately assume it is a phishing site — first verify the .onion address against the PGP-signed mirror list. If PGP verification passes, the new design is legitimate. If verification fails or you cannot verify, do not log in and report the URL to the support team.