nexuscheckVerification checklists for Nexus Market, with pass criteria
18 checks across 5 moments
3 verified addresses
Overview Full checklist First time setup Every session Before funding On delivery Periodic review Addresses FAQ Scope

Checks > Checklist > Every session

Per session checks before signing in to Nexus

The four checks to run every single time you sign in, including the address comparison that separates the real market from a cloned login page.

Group M2. Applied: Each time you sign in.
C-06high
Applies: Every session (M2)
Passes when: Copied and pasted from a source held before this session.
The address you opened was copied from a saved source rather than typed, retyped or corrected from memory.
C-07critical
Applies: Every session (M2)
Passes when: Compared in full and identical.
The onion address printed on the login screen is identical to the address shown by your browser, checked before anything was typed.
C-08critical
Applies: Every session (M2)
Passes when: Only username, password and the two factor challenge were requested.
Nothing during sign in requested your recovery phrase, seed words or private key.
C-09high
Applies: Every session (M2)
Passes when: Bookmark or saved note held in advance.
The address you used came from a source you already held before this session began, rather than one located during it.

Why these are grouped together

These four run every time, and together they take less time than reading this paragraph. They are grouped because they all address the same question, which is whether the thing in front of you is the market or a copy of it. Nothing else on this site helps if that question is answered wrongly.

Three of the four are graded critical, which is unusual for a single group and reflects where losses actually happen. Almost nobody loses an account because a market was compromised. They lose it because they signed in somewhere that looked right, and the sequence leading there is nearly always the same: a familiar address goes quiet, a replacement gets found under time pressure, and the comparison step gets skipped because the page looks correct.

The strongest thing about this group is that it does not require judgement. The address printed on the page either matches your browser bar or it does not, and no amount of visual polish changes that comparison. It is the rare control that works exactly as well when you are tired and impatient as when you are being careful.

Verified address set

Verified address set
[1]nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onion
[2]nexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onion
[3]nexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onion

Run C-07 before you type anything. Open in Tor Browser only, then compare the onion printed on the login screen against your browser address bar. A mismatch means the page is a copy and the tab should be closed.