Verify the Canary
Import the official public key. Run gpg --verify canary.txt.asc. Confirm the fingerprint matches the key published on independent sources before trusting any address.
Independent Security Review — September 2026
Mars Market Review 2026
Mars Market Review 2026
Is It Legit & Safe?
An independent review of Mars Market's security architecture, PGP verification chain, escrow model and operational history. No affiliation, no commission. Raw research data only.
Summary verdict
Overall Trust Assessment
Key trust signals documented from public sources and independent monitoring as of September 2026.
| Signal | Status | Notes |
|---|---|---|
| PGP canary | Active | Published monthly, cryptographically signed |
| Escrow system | Operational | Standard escrow; FE for level 3+ vendors only |
| 2FA (TOTP) | Available | Optional for buyers, recommended for all accounts |
| PGP messaging | Active | Required for vendor–buyer communications |
| Dispute resolution | Functional | Staff-mediated, average resolution 72h |
| Exit scam history | None confirmed | Operating since 2022 without confirmed scam event |
| Uptime 2026 YTD | 99.2% | Two brief outages, both DDoS-related |
PGP verification
PGP Canary & Address Verification
Mars Market publishes a signed canary statement monthly. The canary confirms the site has not been compromised, provides updated onion addresses and is signed with the market's 4096-bit RSA public key.
Mirror List Signing
Every onion address published by Mars Market is included in a PGP-signed mirror list. Cross-reference both mirrors — legitimate addresses appear in both publications.
Financial security
Escrow Model Explained
Mars Market uses centralised escrow where funds are held by the platform until the buyer confirms delivery. This protects buyers from non-delivery but requires trusting the market itself to not exit-scam.
| Stage | Who holds funds | Release trigger |
|---|---|---|
| Order placed | Mars Market escrow | N/A — funds locked |
| Shipped (vendor marks) | Mars Market escrow | Buyer confirmation or auto-release |
| Delivered | Released to vendor | Buyer marks received, or 14-day auto-release |
| Dispute opened | Mars Market escrow | Staff resolution required |
Operational security
Security Architecture
Tor v3 .onion
56-character v3 hidden service addresses. Cryptographically tied to the server's key — impossible to spoof if you verify the PGP signature on the published address list.
TOTP Two-Factor
Time-based one-time password support via any standard TOTP app. Recommended for all users, mandatory for vendors. Prevents account hijacking even if login credentials are exposed.
PGP Messaging
All order-related communications are encrypted with PGP. The platform stores only ciphertext — neither Mars Market staff nor any observer can read message contents.
Common questions
Frequently Asked Questions
Is Mars Market legit in 2026?
Mars Market has operated continuously since 2022 with a publicly auditable PGP canary and no confirmed exit scam. Its escrow system and dispute resolution have been independently documented as functional by researchers.
Is Mars Market safe to use?
Safety depends on your own operational security. Use Tor Browser at Safest level, verify the onion address against the PGP-signed mirror list, enable 2FA and communicate only via PGP-encrypted messages within the platform.
Does Mars Market have escrow?
Yes. Mars Market uses standard centralised escrow for all orders by default. Finalize Early (FE) is available only for vendors who have reached trust level 3 or above, reducing buyer risk on new transactions.
How do I verify Mars Market PGP?
Import the official public key into GnuPG, then run gpg --verify on the signed mirror list. The signature must match the key fingerprint published on multiple independent sources before you trust any onion address.