ACCESS PROCEDURE // TOR ONLY

How to Access the Mars Market Over Tor: Setup, PGP and Monero

Reaching the Mars market is a short procedure, not a single click. You set up Tor Browser, hold some Monero, verify the signed address, then open the onion and log in. This guide walks each stage in order, with the reasoning behind it, so nothing depends on trusting a link you found by chance. It goes deeper into browser hardening, Tails, and troubleshooting than the quick sequence on this console's home page — for a shorter clone-spotting walkthrough instead, see mars-market.icu's access guide.

CANON POINTERThe verified onion address, the mirror table, and the fingerprint stay on the home console. Copy from there.Go to the address
ACCESS PIPELINEfive stages

The five stages before you log in

Each stage removes one way to get burned. Tor hides the transport. Monero handles payment. PGP proves the address. Skipping a stage does not save time, it just moves the risk onto you.

Mars access pipeline01Tor02Monero03PGP04Verify05Open
01 TorInstall Tor Browser and raise the security level.
02 MoneroHold XMR before you shop, not after.
03 PGPImport the canon key so you can check the list.
04 VerifyMatch the address to the signed directory.
05 OpenLoad the onion, clear the captcha, log in.
STEP BY STEPin order

The full access sequence

  1. Get Tor Browser from the official Tor Project and set it to Safest.
  2. Set up a Monero wallet and fund it ahead of time.
  3. Import the canon PGP key into your keyring.
  4. Verify the signed list and match the fingerprint.
  5. Copy the exact onion, open it in Tor, then log in.
TOR BROWSERthe transport

Set up Tor Browser first

Download Tor Browser from the Tor Project and nowhere else — not from a Mars-branded ad or a Mars mirror site claiming to bundle it. A copy from an ad or a mirror site can ship a backdoor. Once it is installed, open the shield menu and set the security level to Safest before you go anywhere near a Mars address. That switch turns off scripts and other features that Mars clones lean on. Tails works too, and keeps less on the disk, if you want a cleaner Mars setup.

One habit matters more than any setting: never widen the window, never install add-ons, and never log into a clearnet account in the same Mars session.

MONEROthe payment

Hold Monero before you shop

Orders on the Mars market settle in Monero, and funds sit in escrow until the order clears. Get the XMR ready before you open the Mars onion. Buying under pressure, mid-checkout, is how people overpay and rush their Mars checks. A wallet you control is safer than leaving coins on an exchange. Send from your own wallet when the time comes, and keep records only if you have somewhere safe to keep them.

This Mars console never handles payment and takes no cut. Any clearnet page asking for a deposit to reach the Mars market is a scam — see the Mars PGP page for why a real Mars operator never needs that.

PGP CHECKthe proof

Verify the address with PGP

PGP is what turns a copied string into a trusted one. Three sub-steps take you from a bare address to a verified one.

1. Import the canon key

Pull the canon public key into a clean keyring before you compare anything. An unimported key cannot verify a signature, so this has to happen first.

2. Verify the signed mirror list

Run the verify command against the signed list and require a good signature result. If the signature is good and the fingerprint matches the one published on the home console, the address is real.

3. Stop on any failure

If the check fails, stop. A failed signature is not a small glitch, it is the whole warning. The fingerprint reads pending during Phase 0; until it publishes, compare the full address by eye and lean on the canary. The key block and command sit on the home console.

LOGINthe last step

Log in through the verified onion

With the Mars address verified, paste it into Tor Browser and open it. The Mars market shows a captcha before the login box. That step is normal and slows down bots. Type your Mars credentials only on that page, reached through the Mars address you checked. Never enter them on a search result or a Mars look-alike, and never reuse a password from anywhere else.

Get the verified address
TAILS SETUPthe amnesic option for Mars

Reaching the Mars market with Tails instead of a regular OS

Tor Browser on your normal operating system is the faster path to Mars. Tails is the heavier one, and worth understanding on its own terms if your situation calls for it.

What Tails actually changes

Tails boots as a complete, separate operating system from a USB drive, routes all its network traffic through Tor at the system level rather than just inside one browser, and forgets everything on shutdown by default. For reaching Mars specifically, this means no swap file, no recently-used document list, and no browser profile persisting on the host machine after the session ends — a different category of protection than Tor Browser alone provides.

Setting up Tails for a Mars session

Download the Tails image and its signature directly from the official Tails project, verify the signature before writing it to a USB drive, then boot from that drive. Once running, Tails routes everything through Tor automatically — there is no separate Tor Browser install step, and no other application on the system can accidentally leak a connection outside Tor the way a background app on a regular OS sometimes can.

Persistent storage: optional, and worth thinking through first

By default a fresh Tails session remembers nothing between boots, including the Mars PGP key you imported. Tails supports an encrypted persistent volume if you want the canon key and bookmarks to survive a reboot; setting this up is a deliberate choice with its own trade-offs, not something to enable reflexively, since persistent storage is also the one thing on an otherwise amnesic system that could later reveal you accessed Mars if the drive were examined.

TROUBLESHOOTINGwhen Mars access goes wrong

Troubleshooting common Mars access problems

Tor Browser says the Mars onion site can't be reached

Re-copy the address from the verified list on the home console rather than reusing a bookmark — a single wrong character in a 56-character onion address produces exactly this error. If a fresh copy still fails, wait for new Tor circuits to build and try again.

The PGP verify command returns "BAD signature"

Stop immediately. This means either the mirror list file was altered after signing or you are verifying against the wrong public key. Re-download the canon key from the home console and retry before assuming the list itself is compromised.

Mars login page loads but the captcha never appears

Confirm you are at the Safest security level, which can occasionally delay how a captcha widget renders. Reload the page once; if the captcha still never loads, re-verify you are on the exact address from the signed list rather than a stale tab.

Monero transaction to fund escrow is taking a long time to confirm

Monero confirmation times vary with network conditions and are outside this console's control. Do not attempt to "help" a slow transaction by sending a second one — wait for the original to confirm rather than compounding the situation.

Every listed Mars mirror shows Checking or Dead at once

Widespread simultaneous status changes usually reflect an infrastructure event on the market's side rather than a problem with your setup. Re-check the status page after some time rather than searching for an unverified alternative address.

DEEP DIVEtwo long-form walkthroughs

Tor hardening and common access errors, in depth

The setup steps above get a Tor session ready to open Mars. The two panels below go further: what Safest mode actually turns off, and how to read the errors Tor Browser throws when a Mars address does not resolve cleanly.

Tor Browser hardening deep-dive: what Safest mode actually changes

Tor Browser's security slider has three levels — Standard, Safer, and Safest — and the difference between them is not cosmetic. Standard runs full JavaScript everywhere, which is convenient but leaves the browser's biggest attack surface wide open: JavaScript engines are where the overwhelming majority of browser exploits, including the ones historically used to deanonymize Tor users in high-profile law-enforcement operations, actually land. Safer disables JavaScript on non-HTTPS sites and restricts some media and font types. Safest disables JavaScript everywhere by default, disables most video/audio codecs and some fonts, and disables SVG images — the combination that gives an attacker the smallest possible surface to work with.

For a Mars session specifically, Safest is the only setting this console recommends without qualification. A market page that genuinely needs JavaScript for something like a captcha will tell you so plainly, and the standard workaround is a temporary allowlist rather than dropping the security level for the whole browser. Anything that pressures you to switch off Safest before you have even confirmed you are on the real Mars address should be treated as a warning sign, not a technical inconvenience to route around quickly.

Beyond the slider, three settings matter almost as much. Never resize the Tor Browser window from its default — window dimensions are a fingerprinting vector, and a resized window can narrow the pool of "similar-looking" Tor users an observer would need to sort through. Never install extensions; each one is a new code surface that did not go through the Tor Project's own security review. And never log into anything tied to your real identity in the same Tor session you use for Mars — session isolation is the entire point of running Tor for this purpose, and a single slip breaks it for that session permanently.

Common Tor Browser errors on Mars and what they actually mean

"Onionsite Not Found" almost always means exactly what it says: the hidden service descriptor could not be found in the Tor network's distributed hash table at that moment. This can mean the address is genuinely dead, but it can just as easily mean the descriptor has not finished propagating after a recent rotation, or that your circuit hit a slow patch of the network. Before assuming the mirror is dead, retry once with a new circuit (the onion icon in the address bar, "New Circuit for this Site") and re-check the address against the signed canon in case it rotated.

"Onionsite Requires Authentication" means the address exists but is configured as a private hidden service that only responds to clients holding a specific client-side key — this is not how the public Mars mirrors on this console are meant to work, so seeing this error on an address you got from the signed list is itself a signal something is wrong, either a stale entry or a compromised source.

"Secure Connection Failed" or a certificate warning on an onion address is unusual, since v3 onion services are already end-to-end encrypted by the Tor protocol itself without needing a separate TLS certificate the way a clearnet HTTPS site does. Seeing a cert error here is a stronger red flag than the same error on the clearnet, and it should stop you rather than prompt you to click through the warning.

A page that loads but looks visually "almost right" — slightly off spacing, a login form in a different place, a missing badge you remember from before — is the hardest case, because nothing in Tor Browser will flag it. This is exactly the scenario the PGP signature check on the verify page exists to catch, since a visual near-match is trivial to fake but a signature is not.

FAQplain answers

Access questions

Do I need Monero before I can access the Mars market?

You can open the Mars market onion without it, but you cannot order. Since escrow settles in Monero, having XMR ready before you shop saves a rushed purchase later.

Is Tor Browser enough, or do I need a VPN?

Tor Browser at the Safest level is the core requirement. A VPN is a personal choice about your own network, not a substitute for verifying the address.

What if the PGP signature fails?

Stop and do not open the link. A failed signature means the list or the address has been tampered with, or you are looking at a clone.

Do I need Tor Browser or is Tails required?

Tor Browser set to Safest is the minimum for reaching the Mars onion. Tails is a stronger option if you want the whole session to run from an amnesiac live OS, but it is not a requirement — most visitors get by on Tor Browser alone, on their normal machine, with the security level raised.

What if the PGP fingerprint does not match?

Do not proceed on a fingerprint mismatch, full stop. A mismatch means either you fetched the wrong key from an unofficial source, or something between you and the console tampered with what you received. Re-fetch the fingerprint from the console over a fresh connection and compare again before you trust anything signed with it.