Onion Access Wizard
This tool walks you through setting up a safe, working Tor session for Moomin Market. It's not complicated — but doing it right the first time means you don't accidentally expose yourself or end up on a phishing clone. Follow the steps below in order.
Moomin Market Tor — Step-by-Step Session Setup
Go to torproject.org and download Tor Browser. That's the only official source. Don't use alternative distributions, "faster Tor" apps, or anything bundled with VPN software. The Tor Project's browser is the one that actually routes through the Tor network correctly.
If you're on Linux, verify the GPG signature after download — instructions are on the Tor Project site. On Windows/Mac, the installer is signed and should be straightforward.
- Source: torproject.org only — nowhere else
- Check the SHA256 hash against the official manifest if you can
- Don't install into a location synced with cloud storage
Open Tor Browser and click Connect when prompted. If you're in a country that censors Tor, you'll need to use a bridge — click "Configure Connection" and select a bridge type (obfs4 is generally solid). The browser will tell you when it's connected to the Tor network.
Don't browse the regular web through Tor Browser at the same time as you're using Moomin Market. Keep it focused — separate browsing contexts reduce your fingerprint.
Copy the official onion address at the top of this page — use the Copy button so you don't mistype it. Paste it into Tor Browser's address bar. It will start with moominkrkr — anything different, close immediately.
Loading takes 5–15 seconds usually, sometimes longer on the first hop. This is normal for .onion addresses. If it times out, try a new Tor circuit (click the lock icon → New Circuit for This Site) and reload.
- Verify the onion address starts with
moominkrkr - Expect 5–20 second load times — totally normal
- If loading fails: new circuit, then try again
Register with a username and strong password. Don't reuse usernames or passwords from anywhere else. This is a separate identity. Write your credentials down on paper and store them somewhere physically secure — not in LastPass, not in a Google doc, not in your phone's notes app.
Moomin accounts can only be recovered with an active PGP authentication key. No PGP key = no recovery if you forget your password. Set up PGP before you're in a situation where you need it.
Go to Account & Security and activate your PGP 2FA key. You can only do this if you have no active deposit addresses and your balance is under €10. So set it up before your first deposit — not after.
Once 2FA is active, withdrawals are authorized with your PGP authentication key. Keep your PGP private key backed up securely. Losing it means losing access to withdrawals.
- Set up PGP 2FA before generating your first deposit address
- Back up your PGP private key somewhere secure and offline
- The deposit address PGP signature is your receipt — keep it until funds arrive
Moomin Market Link — Security Checklist Summary
| Item | Required? | Notes |
|---|---|---|
| Tor Browser from torproject.org | REQUIRED | Latest version strongly recommended |
| Verified onion address | REQUIRED | Starts with moominkrkr |
| Offline credential storage | REQUIRED | Paper or encrypted offline vault |
| PGP 2FA activated | REQUIRED | Before first deposit |
| PGP deposit signature saved | REQUIRED | Keep until funds confirmed |
| VPN over Tor | OPTIONAL | VPN first, then Tor. Research before using. |
| Separate Tor Browser profile | OPTIONAL | Recommended for high-risk environments |
Moomin Market Darknet — Common Setup Errors
UI looks broken / weird
Usually an outdated Tor Browser or iPhone Onion Browser (outdated rendering engine). Update your browser. iPhone users: Tor Browser is available on iOS now — use that instead of Onion Browser for best results.
Can't select delivery option
Possible reasons: vendor out of stock, no compatible delivery for your cart combination, or delivery option requires PGP 2FA (lock time under 72h). Contact the vendor directly if needed.
Can't withdraw funds
Withdrawals require 2FA activated. You can only activate 2FA if you have no active deposit addresses and under €10 balance. Plan ahead — set up 2FA before your first deposit.
Deposit not arriving
Report an issue on the wallet page using the signed deposit address you received when generating the address. Deposit addresses expire after 24h; you can generate a new one 6h before expiry. Issues must be reported within 7 days.