VERIFY CONSOLE · PGP · FINGERPRINT · 2026
Verify a Mars Onion Link with PGP
Verifying a Mars link is two checks in order: prove the signed list with a PGP signature, then match the address you hold against the fingerprint. A good signature proves the key, not what waits behind the link. The tool below checks an address’s shape; the signature check is what proves it is really Mars.
marskp4ozu3nv2ez3in5ofyukovali7o5ioxyuvubeus74cu2bjl5nid.onionWhat a real verification actually checks
People conflate two different tests. One asks whether an address is shaped like an onion. The other asks whether it is the address the canon signed. Only the second one is proof. Here is how they line up.
Verify a Mars link in two commands
The whole proof is short once the key is on your machine. Import the canon key one time, then verify the signature that travels with the mirror list. A pass means the list is authentic and the addresses in it can be trusted by comparison.
gpg --import mars-canon.asc
gpg --verify mirrors.json.sig mirrors.jsonRead the output for a good signature from the canon key, then compare the printed fingerprint with the one you first trusted. If either the signature or the fingerprint is off, stop and copy a fresh address from the signed canon.
Honest limit: the fingerprint publishes in Phase 0. Until then, compare the full 56-character string by eye and cross-check the canary before you connect.
Check the shape of an onion address
Paste an onion string to check its shape. This runs in your browser: it confirms the length and character set of a v3 onion. It does not prove the address is the verified Mars onion, and it sends nothing anywhere.
Phishing clone or signed canon?
A phishing page can copy the design, the wording, even a plausible onion. What it cannot copy is a signature made with a key it does not have. That gap is the whole game.
Signed canon
Its address is in the PGP-signed list and clears the fingerprint check. Verifiable without trusting the page in front of you.
Phishing clone
Looks right, passes a format check, but is missing from the signed set. It exists to catch a login and a deposit.
Rule of thumb: a page that looks perfect but fails the signature is more dangerous than one that looks rough, not less.
Verification questions people ask
Does the format checker prove a link is the real Mars?
No. It only confirms an address has the shape of a v3 onion. Proof comes from matching it to the PGP-signed fingerprint, which happens off this page.
What does a good signature actually tell me?
That the mirror list was signed by the canon key and has not been altered. It does not vouch for what the market does once you are inside.
Where does the checker send what I paste?
Nowhere. The shape check runs in your browser and sends nothing. You can read the page source to confirm it before you trust it.
A clone matched the format check. Now what?
That is expected: a clone can share the exact onion format. Reject it because it is absent from the signed list, not because of how it looks.
Once a link clears
Compare working onions on the mirrors page, or follow the full access sequence before you log in.