First visit

The Torzon Market login screen

What loads, what the real login asks for, and how to make sure it is the real one before your password goes anywhere.

Torzon Market onion addresses

7iaj3wjpffjg5acgxqqbjkerdwkcxrzetp4gnsoofaa5lukrmuhcdjad.onion
atmqbitgx7g5c4gdc4t23erlpvub7c3agbmky6on6vxcfs26fuj3usqd.onion
dgkozv5myc3lfpedjl2khhk6icok2xm5wmc5vg42xvbyh4fs345mopyd.onion
evwigej45n3nywbn3aqdun4o6cgjyfgxf2ts7lm6no3uotxanpeuosad.onion
fr6bvsrcx7ajxou7kyme5otctzdmpllum6iqootcjnwmzepuuams2tad.onion
h3h66vql4ucodjre4bluwtywhoq2bjqxpgvxgv2xo2nkui5ney6gslqd.onion
jcyjjcu4oocqkgxyq4d6mmbuuha5db7iz3zifhf2cm6n6m5mvogxwqyd.onion

All of them open the same market with the same account, balance and orders. There is no primary address and the order is not a ranking. Copy one, paste it into Tor Browser, and check the address bar before you sign in.

01What loads first

When you open a mirror you will often land on a short access queue first: a dark page that says you have been placed in a queue and will be redirected automatically, with an estimated wait time. That is the market spreading load across its mirrors, not a problem. Do not refresh. Let it redirect you to the login page.

If you never see a queue and go straight to a login form, that is also possible at quiet times. The queue is not a required checkpoint and its absence is not a warning by itself. What matters is the address and the printed onion, below.

02What the real login asks for

a username;
a password;
a 2FA code, only if you turned two-factor on for the account.

The login screen does not ask for your wallet seed, your private key, or a verification fee. Any screen that asks for those on the way in is not the login. It is the trap.

03Before you type

The check. The real Torzon login page prints the onion address it is served from. Match that printed onion against the address bar, reading from the end backwards. If the two agree, type your credentials. If they do not, or if the page looks different from what you expect, stop. This is the exact step where fakes collect passwords.

04First time, new account

Registration sits next to login on the same screen.
Use an email you do not use anywhere else, and a password you have never typed into any other site.
Turn on 2FA as soon as the account lets you. It is the cheapest protection an account has.
Confirm the address one more time after registration, before you fund the wallet.

If you already have an account and this is a new device or a fresh browser, expect the login to work normally once the address checks out. There is no trusted-device dance to perform on first sign-in.