Tor hosting

A free .onion address
on every app you deploy.

Deploy anything on Freehold — a one-click app, a repo, a Docker image — and it comes up with two addresses: the public URL you’d expect, and a Tor v3 hidden-service address, live from the first deploy, at no extra cost. No sidecar, no torrc, no reverse proxy to configure.

Why it isn’t a setting

Most platforms that support Tor treat it as advanced configuration — a proxy you wire up, a container you have to know to add, sometimes a paid tier. That framing quietly filters out everyone who isn’t already deep enough into infrastructure to go looking for it. Freehold provisions the onion service the same way it provisions the URL and the certificate: one step, no decision.

Generated at deploy time

The onion service is provisioned in the same step as your public URL and TLS certificate. No sidecar to add, no torrc to write, no reverse proxy to wire up.

On every app, every size

There is no “Tor” line item on the pricing page. It ships with a 512 MB app the same as an 8 GB one, because charging extra for privacy would defeat the point of offering it.

Reachable without the clearnet

A working .onion means your app can be visited with no DNS record pointing at a fixed IP, and nobody between the user and your app watching where the traffic goes.

Runs alongside the normal URL

You still get the ordinary HTTPS address for everyone else. The onion is additive — use it, ignore it, or make the app onion-only if that fits.

Good for the things that need it

A private Vaultwarden vault, a Mattermost for a group that doesn’t want its server logged as a normal website, a personal Nextcloud you don’t want indexed anywhere.

No ID to get one

Signup is an email or a GitHub login. There is no identity check to deploy an app, and therefore none to get its onion address.

Read more

Tor Onion Services, Free, on Every App — the reasoning, and what a working onion address gets you in practice.

Tor hosting: common questions

How do I host a Tor hidden service on Freehold?
Deploy any app — a Docker image, a Git repo, or a one-click template. Freehold generates a v3 .onion address for it automatically at deploy time, alongside the normal HTTPS URL. There is nothing to configure; the onion is live from the first successful deploy.
Does the free .onion cost anything?
No. Every app on every size gets one at no additional charge. It is not a paid add-on or a higher tier — it is the default.
Can I make an app reachable only over Tor?
Yes. You can run an app onion-only, with no public clearnet URL at all, so it is reachable exclusively through the Tor network.
What is a .onion address actually good for?
It lets people reach your app without a DNS lookup that resolves to a fixed IP, and without intermediaries on the path able to see the destination. That matters for private vaults, internal team tools, personal clouds you do not want indexed, and any service whose users would rather it not be logged as a normal website visit.
Is it a real Tor onion service or a proxy?
A real Tor v3 onion service. Freehold runs the Tor process and publishes the hidden-service descriptor for your app; traffic enters the Tor network and reaches your container without leaving it.
Do I need to install or run Tor myself?
No. Freehold operates the Tor daemon and the hidden-service configuration. You deploy the app; the onion address appears in the dashboard.

Deploy an app. Get an onion.

Free on every plan, generated automatically, no ID to sign up.