Checks > Full checklist
The complete checklist in order
All 18 checks grouped by the moment they apply, in the sequence you would actually encounter them.
M1 · First time setup — Once, before you ever sign in
Applies: First time setup (M1)
Passes when: Downloaded from the official site and the signature was verified before first run.
The Tor Browser you are using came from the Tor Project website and its signature was checked on first install.
Applies: First time setup (M1)
Passes when: Shield control reads Safest and no exceptions have been added.
The Tor Browser security level is set to Safest and has not been lowered for any site.
Applies: First time setup (M1)
Passes when: Newly invented for this account and used nowhere else, ever.
The username on this account has never been used on any other site, market, forum or messaging service.
Applies: First time setup (M1)
Passes when: Generated, unique, stored in a local manager.
The account password was generated by a password manager, is used nowhere else, and is stored in that manager rather than remembered or written in a note.
Applies: First time setup (M1)
Passes when: Phrase on paper, two factor on, key backed up in a second location.
The recovery phrase is written on paper and stored away from the machine, PGP two factor is enabled, and the signing key is backed up offline.
M2 · Every session — Each time you sign in
Applies: Every session (M2)
Passes when: Copied and pasted from a source held before this session.
The address you opened was copied from a saved source rather than typed, retyped or corrected from memory.
Applies: Every session (M2)
Passes when: Compared in full and identical.
The onion address printed on the login screen is identical to the address shown by your browser, checked before anything was typed.
Applies: Every session (M2)
Passes when: Only username, password and the two factor challenge were requested.
Nothing during sign in requested your recovery phrase, seed words or private key.
Applies: Every session (M2)
Passes when: Bookmark or saved note held in advance.
The address you used came from a source you already held before this session began, rather than one located during it.
M3 · Before funding — Before any coin leaves your wallet
Applies: Before funding (M3)
Passes when: Monero, chosen because the payment should leave no public record.
The coin used for this order was chosen on purpose rather than accepted as whatever was preselected.
Applies: Before funding (M3)
Passes when: Acquired, moved to your own wallet, sent from that wallet.
The coin moved from where you acquired it into a wallet you control, and the order was funded from there.
Applies: Before funding (M3)
Passes when: Copied from the order screen in this session.
The address you are sending to was issued by this order, opened fresh, and not reused from an earlier one.
Applies: Before funding (M3)
Passes when: Fee added on top, amount identical to the request.
Your wallet is configured to add the network fee on top of the amount rather than deduct it, and the figure sent matches the figure requested.
M4 · On delivery — When a package arrives, before you confirm
Applies: On delivery (M4)
Passes when: Inspected against the listing, then confirmed.
The package is physically in your hands and matches what was ordered, and only then was receipt confirmed.
Applies: On delivery (M4)
Passes when: No request, or a request declined as policy.
Nobody asked you to release payment before delivery, or if they did, you declined.
Applies: On delivery (M4)
Passes when: Dispute opened with a short factual submission.
Where an order did not arrive or did not match, a dispute was opened with dates and an order reference rather than the loss being written off.
M5 · Periodic review — Monthly, or after any change
Applies: Periodic review (M5)
Passes when: Balance withdrawn, nothing idle.
Your market balance is zero or holds only what a currently open order requires.
Applies: Periodic review (M5)
Passes when: Checked recently and current.
Your saved addresses have been compared against a current published set within the last month.
Verified address set
Verified address set
[1] nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onionCopy
[2] nexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onionCopy
[3] nexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onionCopy
Run C-07 before you type anything. Open in Tor Browser only, then compare the onion printed on the login screen against your browser address bar. A mismatch means the page is a copy and the tab should be closed.
Weighting
Critical marks a check whose failure either cannot be undone or exposes everything at once. High marks one whose failure is recoverable but expensive in effort or money. Standard marks one that prevents a nuisance or makes another check less likely to be needed.
The weighting is about consequence rather than probability. A critical item that rarely fails still outranks a standard item that fails often, because the question the list answers is what a bad day costs rather than how common a bad day is.
nexuscheckVerification checklists for Nexus Market, with pass criteria