What the dark web is and why people use it
The dark web is a part of the internet that requires specific software to reach and is intentionally hidden from standard search engines. It is not inherently illegal — it is a tool, like a locked door, that can be used for legitimate privacy reasons or for criminal activity. Journalists use it to communicate with sources in countries with heavy censorship. Activists in repressive regimes use it to organize. Ordinary people use it to discuss sensitive health topics or political views without their internet provider logging the conversation.
The dark web also hosts illegal marketplaces, stolen data sales, and other criminal activity. This is the part that gets media attention, but it is not the only thing there. Understanding what it actually is helps you make an informed choice about whether accessing it makes sense for your situation.
Key Takeaways
- Accessing the dark web requires downloading Tor Browser, which is free, legal, and available from torproject.org — not from other sites claiming to offer it.
- Using Tor is legal in most countries, but many things you can do on it are not, and law enforcement actively monitors dark web marketplaces.
- Your internet service provider can see that you are using Tor, even though they cannot see what you are doing inside it.
- If your goal is privacy for a legitimate reason — reading news, discussing health, organizing — Tor Browser alone is usually sufficient and safer than seeking out dark web marketplaces.
- Scams, malware, and law enforcement operations are common on dark web marketplaces; the anonymity that protects users also protects criminals selling fake products.
How to download and install Tor Browser
Tor Browser is the standard tool for accessing the dark web. It is free and legal to download. Go to torproject.org — not a mirror site, not a third-party download page, but the official Tor Project website. Look for the download button and select the version for your operating system: Windows, Mac, or Linux.
Once downloaded, install it like any other program. On Windows, run the installer. On Mac, drag the Tor Browser icon into your Applications folder. On Linux, extract the file and run the executable. The first time you open Tor Browser, it will connect to the Tor network automatically. This takes 10 to 30 seconds. You will see a window that looks like Firefox — because Tor Browser is built on Firefox — and a message saying "Connected to Tor" when it is ready.
Do not download Tor Browser from anywhere except torproject.org or its official mirrors listed on that site. Scammers distribute fake versions that steal passwords or install malware. If you are unsure, verify the download on the official site first.
What your internet provider and others can see
Your internet service provider can see that you are connecting to Tor. They cannot see which websites you visit or what you do inside Tor, but they can see that you are using it. In most countries this is legal. In a few — including China, Russia, and Iran — using Tor is restricted or illegal, and ISPs actively block it.
Websites you visit through Tor cannot see your real IP address or location. They see only the Tor exit node you are using, which is shared by thousands of other users. However, if you log into a personal account — your Gmail, your social media, your bank — you have just tied your anonymous Tor session to your real identity. The website then knows who you are, even though your ISP does not know which website you visited.
Law enforcement can see Tor traffic entering and leaving the network. They cannot easily decrypt it, but they can identify patterns and, in some cases, identify users through other means — browser fingerprinting, malware, or mistakes users make (like using the same username everywhere).
Accessing .onion sites and what to expect
Websites on the dark web use the .onion domain instead of .com or .org. You access them by typing the address into Tor Browser's address bar, just like typing a regular URL into Chrome or Firefox. Onion addresses are long strings of random characters — something like thehiddenwiki2345xyz.onion — because they are generated automatically and do not need to be memorable.
Finding .onion sites requires knowing the address beforehand or using a dark web search engine. The Hidden Wiki is one index; DuckDuckGo also indexes some onion sites. However, many onion sites are scams, honeypots (fake sites run by law enforcement to catch criminals), or sites hosting illegal content. Clicking randomly is a good way to encounter things you did not intend to see.
Legitimate uses include reading news from outlets that operate onion mirrors (ProPublica, BBC, The New York Times all have them), accessing forums for sensitive discussions, or communicating securely. These sites look and function like regular websites. The difference is that neither you nor the site operator can easily identify each other.
Real risks: scams, malware, and law enforcement
Dark web marketplaces are targets for scams. A seller takes payment and never sends the product. A buyer sends counterfeit goods. Because transactions are anonymous and there is no buyer protection like you have on eBay or Amazon, there is no recourse. Escrow systems exist on some marketplaces, but they are run by the marketplace itself — which can disappear with all the money held in escrow.
Malware is common. Files downloaded from dark web sites may contain viruses, keyloggers, or ransomware. Even if you are careful, a malicious ad or a compromised site can infect your computer. Tor Browser itself is regularly updated to patch security holes; if you do not update it, you are vulnerable.
Law enforcement operates on the dark web. They run fake marketplaces, infiltrate real ones, and use technical methods to identify users. Major dark web marketplaces have been shut down — Silk Road in 2013, AlphaBay in 2017, Dream Market in 2019. The operators and many users were arrested. If you are buying or selling illegal goods, you are taking a real risk, not a theoretical one.
Legal alternatives if your goal is privacy
If you want privacy for a legitimate reason, you may not need the dark web at all. A VPN (virtual private network) hides your IP address and encrypts your traffic so your ISP cannot see which sites you visit. It is legal, widely available, and much simpler than Tor. Services like Mullvad, ProtonVPN, and IVPN are reputable options. A VPN is sufficient for reading news, accessing social media from a country that blocks it, or keeping your browsing private from your ISP.
If you need to communicate securely with someone, encrypted messaging apps like Signal or ProtonMail do not require the dark web. They use encryption that even the company running them cannot decrypt. They are legal, widely used, and designed specifically for secure communication.
If you are a journalist or activist in a high-risk situation, organizations like Freedom of the Press Foundation and Access Now offer guides tailored to your specific threat model. They can tell you whether Tor, a VPN, encrypted messaging, or a combination is right for you.
Security practices if you do use Tor
If you decide to use Tor, follow these practices to reduce risk. Keep Tor Browser updated — security patches are released regularly. Do not maximize your browser window; a unique window size can be used to fingerprint you across sites. Do not enable plugins like Flash or Java; they can leak your real IP address. Do not open files downloaded from Tor sites in your regular browser or email client; open them only in a sandboxed environment or a separate device.
Do not assume Tor makes you invisible. It protects your location and identity from the websites you visit, but it does not protect you from malware, scams, or your own mistakes. If you use the same username on Tor that you use elsewhere, you have identified yourself. If you visit a site that requires you to log into a personal account, you have tied your session to your real identity.
Consider using Tor Browser in a virtual machine — a separate operating system running inside your computer — so that if malware infects it, your main system is protected. This is more complex but significantly safer if you are regularly accessing untrusted sites.
Frequently Asked Questions
Is using Tor Browser illegal?
No. Tor Browser is legal to download and use in most countries, including the United States, Canada, the UK, and most of Europe. A small number of countries restrict or ban it, including China, Russia, Iran, and Belarus. Check your local laws if you are outside a Western country. Using Tor is legal; what you do on it may not be.
Can the police track me if I use Tor?
Tor protects your location and identity from websites, but law enforcement has other methods. They can identify users through malware, browser fingerprinting, mistakes (like reusing usernames), or by infiltrating the sites you visit. If you are doing something illegal, Tor reduces your risk but does not eliminate it.
Do I need a VPN with Tor?
Using a VPN with Tor adds complexity and can actually reduce your anonymity if the VPN provider logs your data. For most people, Tor alone is sufficient. If you are in a country that blocks or monitors Tor, a VPN can help you connect to Tor in the first place, but use a VPN you trust.
What should I do if I accidentally visit an illegal site?
Simply visiting a site is not illegal in most jurisdictions. Close the browser tab and move on. If you are concerned, you can clear your Tor Browser cache by going to Settings > Privacy and Security and clicking "Clear Recent History". Do not download anything from sites you do not recognize.
Is there anything useful on the dark web besides illegal stuff?
Yes. News outlets operate onion mirrors for readers in censored countries. Privacy-focused forums exist for discussing sensitive topics. Activists and journalists use it for secure communication. Libraries and archives preserve information. For most people, these legitimate uses do not require visiting dark web marketplaces — they require only Tor Browser and knowing which sites to visit.