Skip to content
WeTheNorth Archive logo Verified Mirror Archive · Est. 2024
Call No. 025.04 · URLS

We The North verified links — 2026 mirror catalog

Two PGP-signed WeTheNorth onion addresses. Canada-focused. Invite-only community. Last shelf-check April 21, 2026. Copy from here, not from a forum thread you found today.

Serial · WTN-01 VERIFIED
Loading verified address...

One wrong character in an onion address lands you on a phishing clone. These addresses are PGP-verified against the current WTN Dread announcement. Copy, do not type.

  • 004.678 PGP-signed addresses
  • 025.173 Updated April 2026
  • 332.178 Canada-only platform
  • 383.144 81,341 members
004.6

Why two mirrors, not five

WeTheNorth's invite-only structure limits membership growth deliberately. A smaller, verified community requires less mirror redundancy than an open-registration global market.

004.678

Two addresses match the traffic model

WeTheNorth had 81,341 registered members as of April 2026. With invite-only access, peak concurrent sessions are a fraction of what an open-registration market with the same account count would generate. Two mirrors provide redundancy when one address is under DDoS while keeping the mirror management complexity low enough that PGP-signed announcements stay current within twelve hours of any change.

Torzon runs five mirrors because it has 57,971 accounts from open registration and handles significantly higher peak traffic. The mirror count reflects architecture, not ambition. WeTheNorth's two-mirror setup has maintained 98.3% uptime across four years — the number speaks for itself.

Digital privacy architecture diagram
025.52

PGP-signed announcements

Every WTN mirror update is published as a PGP-signed statement on Dread. The operators' key fingerprint has been stable since July 2021. If you see a WTN address anywhere that does not come with a verifiable PGP signature, it has not been verified by the platform itself. GnuPG and KeePassXC both handle signature verification.

383.144

Both mirrors are equally authoritative

There is no "primary" and "fallback" in terms of trust. Both addresses were PGP-signed in the same announcement and route to the same infrastructure. For Canadian buyers in Atlantic provinces, the second mirror historically has lower latency. For Ontario and BC, the first address is slightly faster. Both are valid starting points.

025.6

Phishing detection — what to check before you enter credentials

WeTheNorth phishing clones are less common than Torzon clones, partly because the invite-only model filters casual scam targeting. They exist. These checks catch them.

001.1

Character count

Genuine WTN onion addresses are 56 characters, lowercase alphanumeric only, ending in .onion. Count the characters before pasting. A shorter address is wrong. Any uppercase letter or symbol in the string is a red flag. Phishing operators register addresses that look similar at a glance but differ in one character near the middle.

001.2

No JavaScript requirement

WeTheNorth works with scripts disabled. The Tor Browser security slider at Safest turns off JavaScript. If a page labeled as WeTheNorth demands scripting to show the login form, it is a clone. The genuine market renders completely at Safest level. This is one of the fastest checks you can run. EFF covers the security case for disabling JS in detail.

001.3

Source of the address

An address that came to you via Telegram, Reddit, or a Discord server has not been PGP-verified. Those channels distribute phishing links and genuine links indiscriminately. The only sources worth trusting are: this archive (which draws from the signed announcement), or the signed announcement on Dread directly.

001.4

Invite code requirement

WeTheNorth does not allow open registration. Any "WTN" page that lets you create an account without an invite code is not the genuine market. The invite requirement exists because it slows down law enforcement infiltration and raises the quality of the user base. A phishing clone skips the invite check because it only wants credentials, not a real account.

001.5

Correct login flow

Genuine WeTheNorth login asks for username, passphrase, and either a TOTP code or a PGP challenge response depending on your 2FA settings. A page that asks only for username and password has stripped the 2FA layer — that is a phishing page designed to capture credentials quickly. If the login page looks simpler than you remember, close and reverify the address before proceeding.

For reference on what phishing flows look like in practice, the research published by EFF and Privacy Guides both cover darknet phishing attack patterns in their Tor documentation sections.

025.52

Link questions — the reference desk answers

Nine entries covering what Canadian WTN users ask when they first arrive at this archive.

Ref-101How many WTN mirrors are active in 2026?

Two. Both have been active since November 2025 when the last mirror rotation occurred. WeTheNorth runs two addresses rather than five because the invite-only membership model limits concurrent session volume compared to open-registration markets. Two mirrors provide adequate DDoS redundancy for the 81,341-member base and are maintained with PGP-signed announcements within twelve hours of any change.

Ref-102Why do we the north mirror addresses sometimes change?

Rotation happens in response to DDoS attacks or Tor network instability affecting a specific circuit cluster. WTN does not rotate on a schedule. Both current addresses have been stable since November 2025. Check the verification date on this page before each session — an address from a search result or forum post may predate a recent rotation and now points to nothing or, worse, a phishing clone that registered the old string.

Ref-103Can I use both WTN mirrors with the same account?

Yes. Both addresses share the same backend infrastructure. Account state, open orders, escrow balances, and vendor watchlists are identical across both mirrors. Switching mid-session preserves your state without requiring a new login. The distinction between primary and mirror is routing-level only, not data-level.

Ref-104How do I verify a wethenorth url is not a phishing clone?

Three checks: count 56 characters, confirm lowercase alphanumeric only, match it against an address in the current PGP-signed WTN announcement on Dread. An address that clears all three has extremely low probability of being a phishing clone. The signed Dread announcement is the ground truth — this archive republishes from it, but the original signed document is always more authoritative than any third-party republication.

Ref-105What does the WTN PGP-signed announcement contain?

A signed text document listing current mirror addresses, a statement confirming ongoing operations, and a reference to a recent external news event that proves the document was produced on that date rather than pre-dated. The signature verifies with the key published in the WTN Dread subforum. Install GnuPG to verify it yourself using gpg --verify.

Ref-106Are WTN links accessible outside Canada?

The onion addresses are technically reachable from anywhere through Tor Browser. Canada-only restriction applies to shipping: no vendor ships outside Canada. A buyer connecting from Europe can browse listings, but no vendor will fulfil an international delivery. The platform is designed specifically for Canadian buyers who benefit from the domestic postal shipping model.

Ref-107How should I store verified WTN onion addresses?

Inside Tor Browser's bookmark folder only. Clearnet browsers sync bookmarks to cloud services and expose them to extensions and profile-watching malware. Tor Browser does not sync and keeps bookmarks local. For offline backup, a KeePassXC note inside a VeraCrypt volume is the standard approach for sensitive URL storage.

Ref-108What should I do if the WTN primary mirror is unreachable?

Try the second mirror. WeTheNorth keeps two addresses so you always have a fallback. If both fail, use New Identity in Tor Browser to rebuild circuits and try again. If a fresh circuit also fails, check the WTN threads on Dread — the community posts downtime status within minutes of a sustained outage. Do not search for a new WTN address in a search engine during this step; phishing links rank deliberately for "WTN down alternative."

Ref-109How frequently is the WTN link list on this page updated?

Every 48 hours, cross-checked against the active PGP-signed announcement on Dread. If an address rotates, the update appears on this page within that window. The header timestamp is the last verification date. Reload the page if that date is more than 72 hours old before copying any address.

025.04

Copy and go

Both addresses above are PGP-verified as of April 21, 2026. Paste into Tor Browser, complete the invite-gated registration, set up your PGP key, and you are in. Not yet registered? The how-to guide covers every step.

Loading verified address...

Need the full walkthrough? Read the eight-step access guide or learn more in the WTN overview.