Verify a mirror before you type a password

A cloned storefront is built to look right, so the check has to be mechanical rather than visual. Open the address you found and the three on the mirrors page side by side in a plain text editor and read them letter by letter.

Confirm three things before you type anything. The string is 56 characters long including the .onion ending. The last six characters spell .onion with no space before them. And the body matches one of the three published addresses exactly. A single transposed character leads to a different server that may hold a copy of the same layout.

If all three hold, the address is the one you think it is. If any of them fails, do not log in. Close the tab and come back to the list, because the cost of a wrong guess is a password handed to a stranger.