nexuscheckVerification checklists for Nexus Market, with pass criteria
18 checks across 5 moments
3 verified addresses
Overview Full checklist First time setup Every session Before funding On delivery Periodic review Addresses FAQ Scope

Checks > Checklist > First time setup

First time setup checks for Nexus Market

The five checks to run once before a first sign in, covering browser provenance, security level, identity separation, credentials and recovery material.

Group M1. Applied: Once, before you ever sign in.
C-01critical
Applies: First time setup (M1)
Passes when: Downloaded from the official site and the signature was verified before first run.
The Tor Browser you are using came from the Tor Project website and its signature was checked on first install.
C-02high
Applies: First time setup (M1)
Passes when: Shield control reads Safest and no exceptions have been added.
The Tor Browser security level is set to Safest and has not been lowered for any site.
C-03critical
Applies: First time setup (M1)
Passes when: Newly invented for this account and used nowhere else, ever.
The username on this account has never been used on any other site, market, forum or messaging service.
C-04high
Applies: First time setup (M1)
Passes when: Generated, unique, stored in a local manager.
The account password was generated by a password manager, is used nowhere else, and is stored in that manager rather than remembered or written in a note.
C-05critical
Applies: First time setup (M1)
Passes when: Phrase on paper, two factor on, key backed up in a second location.
The recovery phrase is written on paper and stored away from the machine, PGP two factor is enabled, and the signing key is backed up offline.

Why these are grouped together

Setup checks share one property, which is that they are done once and then invisible. Nothing reminds you afterwards that the browser came from an unverified source or that the username matches a forum account, because neither produces a symptom. They sit underneath everything else and quietly decide whether the rest of the list means anything.

That is also why two of the five are graded critical. The browser item is critical because a modified build can lie about the address bar, which defeats the single most important session check. The username item is critical for a different reason, that it is the only item on the whole site with no repair path once it has failed. Passwords rotate, keys regenerate, balances move. An identifier that already exists elsewhere with history attached cannot be separated from that history afterwards.

Work through these before a first sign in if you can. If the account already exists, run them anyway, because four of the five can still be corrected today and the fifth is worth knowing about rather than discovering later.

Verified address set

Verified address set
[1]nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onion
[2]nexusma2iqgauqqvjcgds4ckv5xbf272tkfagq4epojjhsgleqpwxiqd.onion
[3]nexusabcd6tyfhdwilyitaqiri6tisj2v2hueyjuj6qkvd6azvi5tuqd.onion

Run C-07 before you type anything. Open in Tor Browser only, then compare the onion printed on the login screen against your browser address bar. A mismatch means the page is a copy and the tab should be closed.