The onion address
The real Torpad lives on Tor. The clearnet mirror exists so you can find it.
56 characters before .onion: a v3 address is the public key of the service, so the name itself proves you reached the right server. Check every character against another source (this page, the QR, the Onion-Location header) before trusting it.
- 1Desktop
Install Tor Browser from torproject.org (verify the signature), open it, paste the address in the URL bar. Standard or Safer security level for trading; Safest reads everything but cannot sign.
- 2Android
Tor Browser for Android from the Play Store, F-Droid (Guardian Project repo) or torproject.org. Paste the address, or scan the QR with any camera app and open the link in Tor Browser.
- 3iOS
Onion Browser (open source, endorsed by the Tor Project) over Orbot. Apple's WebKit limits what it can isolate; prefer desktop for anything that matters.
- 4Tails and Whonix
Both ship Tor Browser; just paste the address.
The clearnet mirror sends an Onion-Location header (and a <meta http-equiv="onion-location"> tag) pointing at the onion. Tor Browser shows a purple .onion available pill in the URL bar when it sees one; click it to switch, or set Prioritize .onion sites in Tor Browser's privacy settings to switch automatically. Other browsers ignore the header.
Every coin has its own onion link: http://<mint>.torpaddzkr3hpk4sfr7jtuuipmoc72lzng3hjgxvjpi7cuwbiaontuad.onion. Tor routes any subdomain of a v3 address to the same service, so it needs no extra keys or certificates, and the link opens the coin page directly. It is shown on each coin page.
Use the mirror only to find the onion
On the clearnet, your ISP, the hosting provider and anyone on the path can see that you visit torpad.fun, when, and how much. The onion removes the IP from the picture on both ends, needs no certificate authority and cannot be seized by changing a DNS record. Treat the mirror as a signpost: read the address here, open it in Tor Browser, and do your launching, funding and trading there. The mirror serves the same pages, but "same pages" is not "same privacy".