What the dark web is and why people use it
The dark web is a part of the internet that requires specific software to reach and is intentionally hidden from standard search engines. It is not illegal to access it. The most common tool is Tor Browser, free software that routes your connection through multiple servers to mask your location and identity.
People use the dark web for legitimate reasons: journalists in countries with censorship, activists protecting themselves from surveillance, researchers studying online security, and people in repressive regimes accessing information their governments block. It is also where illegal marketplaces operate, which is why the dark web has a reputation for danger that is partly earned and partly exaggerated.
Understanding how to access it is different from understanding whether you should. This guide covers the technical how. The decision about whether to go there depends on what you actually need to do and what risks you are willing to accept.
Key Takeaways
- Tor Browser is the standard tool for accessing the dark web and is free, legal, and available from the official Tor Project website.
- Simply installing Tor does not make you anonymous — your internet service provider can see you are using Tor, and mistakes in how you browse can expose your identity.
- The dark web hosts both legitimate content and illegal marketplaces, and distinguishing between them requires caution and research before clicking anything.
- Using Tor on a shared device, downloading files carelessly, or maximizing your browser window can all compromise your anonymity in ways that are hard to undo.
Installing and running Tor Browser
Download Tor Browser directly from torproject.org, not from any other source. The Tor Project is the nonprofit organization that maintains the software. On their homepage, you will see a download button for your operating system — Windows, macOS, or Linux. Do not download from mirrors or third-party sites, because malicious versions exist.
Once downloaded, install it like any other program. On Windows, run the installer and choose a folder. On macOS, drag the Tor Browser icon into your Applications folder. On Linux, extract the archive and run the start-tor-browser script. The first time you open it, Tor Browser will connect to the Tor network, which takes 10 to 30 seconds. You will see a window that looks like Firefox — because Tor Browser is based on Firefox — with a connection status at the top.
When the connection is complete, you can browse normally. Type a web address into the address bar. Dark web sites end in .onion instead of .com or .org. You cannot reach .onion sites without Tor Browser, and you cannot reach them by guessing the address — you need the exact onion address, which is usually long and random-looking, like a string of 56 characters.
Finding dark web sites and directories
Dark web sites are not indexed by Google. You cannot search for them the way you search the regular web. Instead, you rely on directories, forums, and word of mouth. The most established directory is The Hidden Wiki, an onion site that lists other onion sites by category. It functions like a very old version of the web, with manually maintained links rather than algorithmic search results.
Other starting points include dark web forums where people discuss and share links. These forums operate similarly to Reddit but with more anonymity. Be aware that many links on these sites lead to scams, honeypots (sites run by law enforcement to identify users), or malware. Clicking a link on the dark web is riskier than clicking a link on the regular web because there is no reputation system, no reviews, and no way to verify what you are about to visit.
If you are looking for something specific — a news site, a forum, a library — research it first on the regular web. Many legitimate dark web sites publish their onion address on their regular website. ProPublica, the investigative journalism organization, maintains a dark web mirror of its site. The BBC has one. These are places where you can verify the address before you visit.
Understanding what anonymity Tor actually provides
Tor hides your IP address from the websites you visit. When you connect to a .onion site through Tor, the site sees an exit node's IP address, not yours. This is real protection against someone looking up your location based on your IP. However, it is not total invisibility.
Your internet service provider can see that you are using Tor, even though they cannot see what you are doing inside Tor. In countries where Tor use itself is monitored or restricted, this alone can draw attention. Additionally, if you log into a personal account — your email, your social media, anything tied to your real identity — you have just connected your anonymous Tor session to your real identity. The anonymity is broken.
Browser fingerprinting is another risk. Websites can collect information about your browser, your screen resolution, your fonts, and your plugins to build a profile of you even without your IP address. Tor Browser tries to prevent this by making all users look similar, but mistakes happen. If you maximize your browser window, you reveal your screen resolution, which is a fingerprinting vector. If you install plugins or extensions, you reduce your anonymity.
Security practices that actually matter on the dark web
Keep Tor Browser updated. The Tor Project releases security patches regularly. When you open Tor Browser and see a notification that an update is available, install it. Outdated software is a common way people get compromised.
Do not download files unless you have a specific reason and you understand the risk. Files can contain malware. If you do download, use a separate device or a virtual machine — a simulated computer running inside your real computer — so that any malware is isolated. Never open a downloaded file immediately. Scan it with antivirus software first, though understand that antivirus is not foolproof.
Do not maximize your browser window or change the default window size. Do not install plugins or extensions. Do not enable JavaScript unless you have a specific reason — Tor Browser disables it by default for security. Do not use the dark web the same way you use the regular web. Assume everything is hostile until you have verified otherwise.
Use a VPN before Tor if you want to hide the fact that you are using Tor from your internet service provider. This adds a layer: your ISP sees you connecting to a VPN, not to Tor directly. However, this creates a different risk — the VPN provider can see that you are using Tor. Choose a VPN with a no-logging policy and a jurisdiction where they cannot be easily compelled to hand over records. This is a trade-off, not a solution.
Legal risks and what law enforcement can actually do
Using Tor is legal in most countries, including the United States, Canada, the United Kingdom, and the European Union. However, what you do on the dark web may not be legal. Buying illegal drugs, weapons, or stolen data is a crime regardless of whether you use Tor. Law enforcement agencies have successfully prosecuted dark web users by combining Tor traffic analysis, malware injection, and traditional detective work.
The FBI has seized dark web marketplaces and arrested their operators. They have done this by identifying users who made mistakes — people who used the same username on the dark web and the regular web, people who used their real email address, people who had their computers hacked with malware that revealed their IP address. Tor is not a get-out-of-jail-free card. It is a tool that makes you harder to identify, but not impossible.
If you are accessing the dark web for journalism, activism, or research in a repressive country, the legal risk is different — you are trying to avoid your own government, not law enforcement in a country where you live. The calculus changes based on your situation and your threat model. Understand your own risk before you proceed.
When you should not use the dark web
If you are curious about the dark web as a concept, you do not need to access it. Reading about it, watching documentaries, and learning how it works are all possible without going there. The dark web is not a tourist attraction. It is a tool for specific purposes, and browsing it out of curiosity exposes you to content you cannot unsee and risks you do not need to take.
If you are looking for something you could find on the regular web — information, news, research — use the regular web. If you are looking for something illegal, understand that you are committing a crime and that law enforcement has tools to find you. If you do not have a clear reason to be there, do not go.
Frequently Asked Questions
Can the government see what I do on the dark web?
Not directly through Tor, but they can see that you are using Tor. If you make mistakes — logging into personal accounts, downloading files carelessly, using the same username elsewhere — they can connect your activity to your identity. Law enforcement also uses malware and traffic analysis to identify dark web users in some cases.
Is Tor Browser safe to download and use?
Yes, Tor Browser itself is safe when downloaded from torproject.org. It is open-source software maintained by security researchers. The risk is not in the tool but in how you use it — what sites you visit, what files you download, and what information you reveal about yourself.
What is the difference between the dark web and the deep web?
The deep web is any part of the internet not indexed by search engines — your email inbox, your bank account, medical records, paywalled news sites. The dark web is a small part of the deep web that is intentionally hidden and requires specific software like Tor to access. Most of the deep web is mundane and legal.
Can I get a virus just by visiting a dark web site?
Visiting a site alone is unlikely to infect you, but it is possible if your browser has an unpatched vulnerability. Downloading files is much riskier. Malware on the dark web is common because there is no reputation system to discourage it. Keep Tor Browser updated and do not download files unless necessary.
What should I do if I see something illegal on the dark web?
You can report it to the FBI's Internet Crime Complaint Center (IC3) at ic3.gov or to your local law enforcement. You do not need to provide details about how you found it. If you are in another country, contact your national law enforcement agency's cybercrime division.