Warning: a clearnet page that asks for your Awazon password is a clone. The real login form loads inside Tor, after the access queue.

Opening the market, step by step

Paste the .onion, wait out the access queue, click the broken circle. What each step looks like, and what a working session proves.

awazonip66usn4oq6vn5b3fqjyjjvavzu3ototnjbmi2wg6bocfc7aqd.onion
awazonwilo4vky6obkwrkv62vx24tnf5323pts6d7gohdoj4pjt646qd.onion
awazonvewzuve3emyxtz2z7ko6bjv6m6qieioi2tuvbgwiomn6vyryyd.onion

Paste, don't retype. One wrong character out of 56 opens someone else's site.

The steps, in order

  1. Install Tor Browser from torproject.org. torproject.org is the only source. Not mirrors, not app stores, not a "Tor Browser" buried on page four of search results. The Tor project publishes a build for desktop and one for Android. The build is signed, and a build with a signature you checked is a different animal than one from a directory listing. You do not have to memorize the procedure, but knowing it exists changes how you treat the download. Full walk-through: Tor Browser, set up properly.
  2. Paste the address from the block above into the address bar. All of it, 56 characters, nothing in front, nothing behind. No http://, no https://, and no gateway in front of it. A gateway is a clearnet domain that translates .onion for browsers without Tor. It works, and it also sees every request you make, including your login. If the address was typed by hand, one wrong character and the circuit goes somewhere else entirely. Paste. That is the rule, and the rule exists because v3 addresses are 56 characters long and one letter of drift is a stranger's site.
  3. Wait out the Access Queue. After the circuit settles, a spinner appears with the text "Do not refresh the page. Please wait... you are being forwarded to the market." Do not refresh. Refreshing restarts your place in line, and the line is real, not decorative. The wait runs from a couple of seconds to a couple of minutes, and the spread is normal. A hot mirror under load takes longer. Let it sit. If it stops being a queue and starts being a failure, the page on that link sorts out which is which.
  4. Click the broken circle. The next screen is the DDOS Protection captcha: "Are you not a Robot? Click the broken circle (the one with a cut.)" There is a row of circles, one of them has a cut in it, that is the one. The Captcha Timeout bar runs 24 seconds. A wrong click gives a fresh captcha. If the bar empties first, the screen shows "THINK OF WHAT YOU HAVE DONE!" and a new captcha arrives after about a minute. The bar is not a suggestion, it is the limit. Read the circles before the seconds start eating the margin.
  5. Check the storefront, then check the address again. The front page is an Amazon-style storefront: clean category blocks, product cards with pictures, reviews carrying a verified purchase badge, a checkout that reads like a checkout. That is the market. Now the part people skip: look at the last six characters of the address in the address bar and compare them with the block above. Six characters, not the whole string. If they match, the circuit is where it should be. Verification detail: verify the mirror before you trust it.

How you know it went right

Four things have to line up, and they are cheap to check in order. The queue screen appeared, with its spinner and the "Do not refresh" line. The captcha appeared, with the circles and the 24 second bar. The storefront loaded: categories, product cards, a checkout that makes sense. And the last six characters of the address match the mirror you pasted. All four, in that order, and the session is the market. An account login, a two-factor prompt, an escrow notice on an order: those are the market's own furniture, not evidence of anything. The evidence is the address bar.

How you know it went wrong

Three tells, and each has a different fix.