Security

The login draws the real onion fingerprint into the anti-phishing image and reprints it in the page header. Hold both against your address bar before the password field. A clone can copy the layout but it cannot put the correct fingerprint in an image without the key, and it cannot serve the real address from a fake one.

See also the security topic for the general phishing pattern, which applies here as everywhere: copy an address from the market's signed mirror list, verify it against the market key, and never enter a password on an address the signed list does not contain.