BASICS / PLAIN ENGLISH
What Is a Darknet Market?
Start here if the words are new. A darknet market is a commerce site that runs as a Tor onion service instead of on the open web. You reach it through Tor Browser, not Chrome. WeTheNorth is one such market, based in Canada. This page explains the parts so the rest of the site makes sense.
What are darknet markets, exactly?
A darknet marketplace is a website that lists vendors and products and handles payment, like any shop, with one difference. It does not live at a normal domain. It lives at an onion address inside the Tor network. That address is the whole identity of the market. There is no company name in a registrar database, no clearnet homepage. The onion string is the market. Think of it as a shop that chose to have no street address, no phone-book listing, and no storefront you could ever walk past, one that exists only as a cryptographic string you either have exactly right or do not have at all. No middle ground. Lose the exact string and you lose the market. The address is the whole risk surface. That is where phishing lives.
Why there is no company name to look up
A normal e-commerce site has a registered business, a domain registrar record, and often a physical address you could look up in public filings. A darknet market has none of that by design. There is no WHOIS record, no incorporation filing, no landlord. The cryptographic address is the entire identity, which is precisely why this site spends so much space on how to verify that one string rather than on anything else.
What happens if you lose the exact address
Unlike a forgotten .com you can usually rediscover through a search engine, a lost or mistyped onion address has no equivalent recovery path through ordinary search — a single wrong character routes you to an entirely different, unrelated service rather than a "page not found." That is also why bookmark hygiene and PGP-verified sourcing matter more here than on the ordinary web.
What is an onion link?
An onion link is an address that ends in .onion and resolves only through Tor. The current version, v3, is 56 characters of base32 before the suffix. Those characters are derived from the service public key, so the address verifies the server by itself. No certificate authority sits in the middle. The catch is human. The string is long and unreadable, so a fake that changes one character looks almost identical. That is why a market like WeTheNorth signs its address list with PGP. You compare. You do not trust.
How a v3 onion address is generated
A v3 onion address is derived mathematically from an Ed25519 public key, not registered or purchased from any authority. That is why anyone can generate one instantly and for free, and also why an address cannot be transferred the way a domain name can — it is permanently tied to the key pair that created it. Only the holder of the matching private key can run a service at that exact address.
Why the 56-character length is a security feature, not a flaw
The length feels unwieldy compared to a short clearnet domain, but it exists to make the address itself cryptographically self-authenticating — long enough that the public key it encodes cannot practically be forged or guessed. The tradeoff is human error: a string that long is hard to eyeball for a single swapped character, which is exactly the gap phishing mirrors exploit and exactly why this guide insists on a fingerprint match rather than a visual comparison.
Darknet market vocabulary for beginners
A short set of terms that recur across this site and across darknet market discussion generally, defined plainly rather than assumed.
Tor and Tor Browser
Tor is the network of volunteer-run relays that anonymizes traffic by routing it through multiple encrypted hops. Tor Browser is the software most people use to access that network; it is a modified Firefox preconfigured to route everything through Tor and to resist common tracking and fingerprinting techniques.
Vendor and listing
A vendor is an individual seller account operating inside a market. A listing is a single item that vendor has posted for sale. A market's overall reputation and a specific vendor's reputation are separate things — a market can be reachable and link-verified while individual vendors within it vary widely in reliability, which is outside what this kind of guide can assess from the outside.
Exit scam
An exit scam is when a market operator (or a vendor) collects payments and then disappears without delivering or without releasing escrow, typically timed to maximize how much money is on the platform when it happens. It is one of the standing structural risks of any market model that holds funds in escrow, which is why this site treats "verified reachable today" and "guaranteed safe" as two very different claims.
Canary / warrant canary
A canary is a periodically-signed statement a market or operator publishes to assert it has not received certain kinds of legal process, on the logic that a missed or stale canary is itself informative. It is a weak signal on its own — useful as one data point, not as proof of anything by itself.
What "WeTheNorth" means here
The phrase we the north has a loud sports meaning in Canada. On this site it means something else: a specific Canadian darknet market, sometimes written wethenorth or shortened to WTN. Toronto turns up in the market context too, alongside dispensary-style listings. When you read WeTheNorth on these pages, read the marketplace, never the slogan.
Honest limit: these definitions are general. Individual markets differ in rules, payment, and safety, and this page does not track any single vendor or listing.
How WeTheNorth uses these darknet market terms
The generic vocabulary above — market, vendor, listing, escrow, mirror — maps directly onto WeTheNorth once you know the shape of a darknet market. This section walks through that mapping specifically, so a first-time WeTheNorth visitor is not translating generic definitions on the fly while also trying to verify an onion address.
WeTheNorth as "the market"
When this glossary says "market," and when the rest of this site says "WeTheNorth," they mean the same kind of thing: a Tor-hosted platform that lists vendors and listings, holds payment in escrow, and is reachable only at a verified onion address, never through a normal search engine result.
Vendors and listings inside WeTheNorth specifically
A WeTheNorth vendor is an individual seller account with its own internal history inside the market; a WeTheNorth listing is one item that vendor has posted. This page explains what those words mean in general; it does not audit or endorse any specific WeTheNorth vendor or listing, which is a separate, unverifiable-from-outside question covered in the main WeTheNorth review.
Why "onion link" and "WeTheNorth onion" are not interchangeable
Every darknet market has an onion link, but not every onion link is WeTheNorth's. Beginners sometimes treat "I have an onion link" as equivalent to "I have the WeTheNorth onion link," which is exactly the assumption that lets a phishing clone succeed. The PGP fingerprint check described throughout this site exists specifically to close that gap.
Beginner questions
Can I open a darknet market in a normal browser?
No. Onion addresses resolve only inside Tor. Use Tor Browser or Tails.
Why is the address so long?
A v3 onion is 56 characters because it encodes the service public key. That length is what makes the address self-authenticating.
Where do I go once I understand this?
Read the WeTheNorth review, then the access guide.
Is every darknet market illegal to visit?
Simply visiting an onion address through Tor is not itself illegal in most jurisdictions; Tor is legal, widely used software with many legitimate uses beyond darknet markets. What you do once there is a separate legal question this site does not advise on — check the law that applies to you.
What is the difference between the "dark web" and the "deep web"?
The deep web is simply anything not indexed by ordinary search engines — your email inbox, a paywalled article, a private database. The dark web is the much smaller subset reachable only through anonymity networks like Tor. Every darknet market is on the dark web; almost everything on the deep web is not a darknet market at all.
Can law enforcement see who visits a darknet market?
Tor's design makes traffic correlation difficult but not theoretically impossible, and history includes cases where operational mistakes by operators or users, not a break in Tor itself, led to identification. This page is educational, not an operational security guarantee.
Is WeTheNorth a darknet market or something else?
WeTheNorth is a darknet market in the same structural sense defined throughout this page: a Tor-hosted platform with vendor listings, escrow-held payment, and an onion address rather than a clearnet domain. The Canada-focused framing is a regional angle, not a different category of service.
Do I need special software besides Tor Browser to reach WeTheNorth?
No. Tor Browser alone is sufficient to reach WeTheNorth's onion address once you have the verified link and PGP fingerprint. No separate app, plugin, or paid software is required, and any page suggesting otherwise should be treated as a red flag rather than a legitimate requirement.
Why do people call darknet markets by nicknames like "WeTheNorth" instead of a URL?
Because onion addresses are long, unmemorable strings, communities settle on a plain-language nickname — WeTheNorth, in this case — and treat the actual 56-character onion as something to look up fresh each time from a verified source, rather than something to memorize the way a clearnet domain gets memorized.
Is WeTheNorth the only darknet market that uses a country name in its branding?
No. Country-themed branding is a common pattern across darknet markets, not something unique to WeTheNorth — it signals a claimed regional focus for shipping and vendor base, though as with any darknet market claim, the branding itself is not independent proof of where a WeTheNorth vendor actually ships from.
Does "WeTheNorth" refer to one onion address or several?
WeTheNorth, like most active darknet markets, typically operates more than one onion address at a time for redundancy, alongside mirrors that get published and sometimes retired. This page verifies one specific WeTheNorth onion against its PGP fingerprint; treat any other WeTheNorth-labeled address as unverified until it passes the same check.
What is the difference between a WeTheNorth "mirror" and a WeTheNorth "phishing clone"?
A mirror is a second onion address operated by WeTheNorth itself, serving the same market. A phishing clone copies WeTheNorth's design and login form but is run by someone else entirely, usually to harvest credentials. Both look identical at a glance; only the PGP fingerprint check tells them apart, which is why this glossary keeps pointing back to that one verification step regardless of which WeTheNorth term brought you here.
Why does this glossary keep using WeTheNorth as its example instead of a generic market?
Abstract definitions of darknet market vocabulary are harder to apply than a worked example. Using WeTheNorth consistently across "onion," "mirror," "PGP fingerprint," and "vendor" lets the same verified address anchor every term, instead of asking a beginner to mentally substitute a placeholder market into each definition.