dns.lgbt over Tor

You can use all of dns.lgbt without leaving Tor: sign up and sign in, manage your domains and records, use the API and get certificates with Certbot. Our own onion service runs on the same servers as dns.lgbt, so it’s the same account and the same data, and nobody between you and us learns that you use dns.lgbt.

Our onion address

Open it in Tor Browser as http://lgbtdns5pwlmd3owons7dkabgrge7onmisghx42rjoddinndseks6tid.onion. It’s http on purpose: Tor encrypts the connection all the way to us, and the address itself proves that you reached dns.lgbt.

Make sure it’s really us

Anyone can make an onion address that starts like ours. Check the whole address, not just its beginning, the first time you open it, and bookmark it then. You find our address:

• in Tor Browser’s address bar on dns.lgbt: it shows “.onion available”, which opens our onion service;
• at the bottom of our front page;
• in our security.txt, which names both addresses as Canonical.

The emails we send name both addresses too, and every button in them has an “Over Tor” link below it.

Tor Browser’s security level

dns.lgbt needs JavaScript. Tor Browser’s “Safest” level turns it off, so the app can’t work there. Set the level to “Safer”: the shield icon in the toolbar, then “Settings”. “Standard” works too.

Signing up and signing in

Signing up needs an invite from us for now. With it, choose a username and a password (at least 12 characters) on the sign-up page. An email address is optional: without one, everything we would email you lands in your inbox in the app.

• Save your recovery codes. You get 10 when you sign up. If you lose your password, one of them lets you in once and you choose a new password. Without one, we can’t restore your account, since we can’t tell who it belongs to.
• The same username and password work over Tor and on dns.lgbt.
• You can add two-factor authentication (a code from an authenticator app) on your account page. It works over Tor too.
• Passkeys don’t work over Tor: Tor Browser turns them off. Use your password there; passkeys you add on dns.lgbt only work there.

Times are shown in UTC

Tor Browser tells every website that you are in UTC, so your time zone doesn’t give you away. That’s why dates and times in the app show “UTC” behind them over Tor. Hover over a time to see it exactly, with seconds.

The API and Certbot

docs.tor.apiCertbot.text

What we see over Tor

Over Tor we never learn your IP address. Our server only sees the Tor connection (circuit) you come through, and uses it instead of an IP address to limit requests, for example sign-in attempts. It keeps it in memory for at most a minute after your last request and never logs or stores it. Our privacy policy says so in section 2.