Step 1: Download and Install Tor Browser
The only safe way to access CannaExpress Market is through the Tor Browser. Download it exclusively from torproject.org — do not use third-party sources, unofficial mirrors or modified Tor bundles, as these may contain malware or privacy-stripping modifications.
After downloading, verify the cryptographic signature before installation. The Tor Project provides PGP signatures for every release. This step confirms the download has not been tampered with in transit.
Tor Browser is available for Windows, macOS, Linux and Android. iOS users should use Onion Browser from the official App Store, which uses Tor for .onion routing.
Step 2: Configure Security Settings
Before accessing any .onion marketplace, set your security level to Safest. In Tor Browser, click the shield icon → Advanced Security Settings → select Safest. This setting disables JavaScript and several web technologies that could be used to de-anonymize you.
At the Safest level, some site functionality may be reduced, but this is the correct tradeoff for marketplace access. CannaExpress does not require JavaScript for core functionality.
- Open Tor Browser preferences (hamburger menu → Settings)
- Navigate to Privacy & Security
- Under Security, select
Safest - Disable WebRTC in about:config:
media.peerconnection.enabled = false
Step 3: Connect to the Tor Network
Click the "Connect" button on the Tor Browser start screen. The application will build a Tor circuit through three relay nodes before traffic exits through a final node. This process takes 10–30 seconds on a normal connection.
The green onion icon in the toolbar confirms an active Tor connection. If connection fails, try a bridge — configure bridges in Tor Browser settings if your ISP blocks the Tor network directly.
Step 4: Open CannaExpress Market
Copy the verified CannaExpress onion address from this page and paste it directly into the Tor Browser URL bar. Press Enter to connect. Do not search for CannaExpress in search engines while in Tor Browser — this reveals your search to search engines and the Tor exit node.
Phishing warning: CannaExpress phishing sites use onion addresses that differ from the genuine address by one or two characters. Only use addresses verified against the latest PGP-signed announcement. Never type an onion address manually.
Step 5: Create an Account and Enable PGP 2FA
On your first visit, register a new account with a username that reveals nothing about your identity. Do not reuse usernames from other platforms.
Immediately after registration, generate a PGP key pair and enable two-factor authentication. CannaExpress requires PGP 2FA and will prompt you to set it up. Without 2FA, your account cannot place orders.
- Use GPG4USB (Windows/Linux) or GPG Suite (macOS) to generate a 4096-bit RSA key pair
- Upload your public key to CannaExpress — never share your private key
- After enabling 2FA, test it by logging out and back in
Step 6: Fund Your Account with Monero
CannaExpress accepts Monero (XMR) only. Create a Monero wallet using an air-gapped device or a hardware wallet. Use the wallet address provided by CannaExpress for deposits — do not send Bitcoin, Ethereum or other currencies.
For maximum privacy, acquire Monero through a peer-to-peer exchange rather than a KYC-required centralised exchange. Direct wallet-to-wallet transfers leave no linking metadata on the Monero blockchain due to ring signatures.
Keeping Your Session Secure
Once on CannaExpress Market, follow these operational security principles for every session:
- Use a fresh Tor circuit (New Tor Circuit for this Site) if you encounter unexpected behaviour
- Do not resize the Tor Browser window — non-standard window dimensions can contribute to browser fingerprinting
- Complete your session and close Tor Browser rather than leaving it minimised for extended periods
- Never access CannaExpress from a regular browser, even with a VPN
- Store your PGP private key encrypted and offline