What the dark web is and how it works

The dark web is a part of the internet that requires specific software to reach — you cannot get there through a regular browser like Chrome or Firefox. It uses a network called Tor, which routes your traffic through multiple computers around the world to hide your location and identity. Websites on the dark web end in .onion instead of .com or .org, and they are not indexed by Google or other search engines.

The dark web itself is not illegal. Journalists, activists, and people in countries with heavy censorship use it to communicate safely. However, it is also where illegal marketplaces operate, and law enforcement monitors it actively. Simply accessing the dark web is legal in most countries, but what you do there matters — buying or selling illegal goods remains a crime regardless of which part of the internet you use.

The main difference between the dark web and the regular internet is anonymity. When you use Tor, websites cannot easily see your real IP address, and your internet service provider cannot see which .onion sites you visit. This privacy comes at a cost: everything moves slowly, and the user experience is often clunky compared to normal websites.

Key Takeaways

  • The Tor Browser is the standard tool for accessing the dark web, and it is free and legal to download from the official Tor Project website.
  • Your regular internet connection and ISP can see that you are using Tor, even though they cannot see which sites you visit once you are connected.
  • The dark web hosts both legitimate content and illegal marketplaces, and law enforcement actively investigates criminal activity there.
  • Using Tor alone does not make you invisible — combining it with a VPN adds an extra layer, though this slows your connection further.
  • Many dark web sites are scams, malware traps, or honeypots run by law enforcement, so assume anything you find there carries risk.

Installing and running the Tor Browser

The Tor Browser is the easiest way to access the dark web. It is a modified version of Firefox that routes all your traffic through the Tor network automatically. Download it only from the official Tor Project website at torproject.org — do not use mirrors or third-party sources, because malicious versions exist.

Once you download the Tor Browser, installation is straightforward. On Windows or Mac, extract the folder and click the executable file. On Linux, extract and run the start-tor-browser script. The browser will launch and automatically connect to the Tor network — this takes 10 to 30 seconds. You will see a status window showing the connection progress. When it finishes, a regular-looking Firefox window opens, but all your traffic now routes through Tor.

The first time you connect, your ISP and network administrator will see that you are using Tor, but they will not see which sites you visit. If you are on a work or school network, check the acceptable use policy first — some organizations block Tor entirely. At home, using Tor is legal in most countries, though it may trigger questions from your ISP if they monitor traffic patterns.

Finding .onion sites and directories

Dark web sites do not appear in Google results. Instead, you navigate using .onion directories — essentially lists of working dark web addresses. The most established directory is the Hidden Wiki, which you can find by searching "Hidden Wiki" in the Tor Browser itself. It lists news sites, forums, and other resources organized by category.

Other directories include Torch and NotEvil, both of which function like search engines for the dark web. These are not comprehensive — many .onion sites are intentionally unlisted and shared only through word of mouth or private links. If you are looking for something specific, dark web forums and Reddit communities sometimes discuss where to find it, though you should assume any marketplace or service you find is either a scam or monitored by law enforcement.

A critical rule: do not click links from untrusted sources. Malicious .onion sites are designed to look legitimate and may contain malware or phishing traps. If you are not sure about a site, do not visit it. Many people access the dark web only to read news from outlets like ProPublica's .onion mirror or to access information in countries where the regular internet is censored.

Combining Tor with a VPN for extra privacy

Using Tor alone hides your activity from websites and your ISP, but your ISP still knows you are using Tor. If you want to hide even that fact, you can run a VPN before connecting to Tor — this way, your ISP sees only encrypted VPN traffic, not Tor traffic. The VPN provider sees that you are using Tor but cannot see which .onion sites you visit.

The trade-off is speed. Tor already slows your connection significantly because your data bounces through multiple computers. Adding a VPN on top makes it slower still. Most people do this only if they live in a country where using Tor itself is monitored or restricted. In the United States and most Western countries, using Tor alone is sufficient for privacy.

If you do use a VPN with Tor, connect to the VPN first, then open the Tor Browser. Do not use the VPN's built-in browser or proxy settings — just connect normally and let Tor handle the routing. Some VPN providers claim to be "Tor-friendly," but this is marketing language. Any reputable VPN works the same way with Tor.

Understanding the risks and what can go wrong

The dark web is not a lawless zone where nothing can touch you. Law enforcement agencies worldwide have successfully prosecuted people for crimes committed on the dark web, including drug trafficking, weapons sales, and child exploitation. The FBI, DEA, and Europol all have dedicated teams monitoring dark web marketplaces. Assume that any marketplace or illegal service you find is either a scam or under surveillance.

Malware is another serious risk. Dark web sites often host malicious files designed to steal your data or take over your computer. Even visiting certain sites can expose you to drive-by downloads or browser exploits. The Tor Browser includes protections against some of these attacks, but it is not perfect. Never download files unless you are certain of the source, and never enable plugins or extensions in the Tor Browser.

Scams are extremely common. Dark web marketplaces frequently disappear with customer money, or sellers take payment and never deliver. There is no recourse — you cannot file a chargeback or contact customer service. If you are considering buying anything on the dark web, assume you will lose your money. This applies to everything from drugs to forged documents to hacking services.

Legal uses and what you should know

Legitimate reasons to access the dark web exist. Journalists use it to receive anonymous tips. Activists in oppressive countries use it to organize and share information. Researchers study dark web communities to understand criminal networks. ProPublica, BBC, and other major news organizations maintain .onion mirrors so people in censored countries can read their reporting.

If you are accessing the dark web for research, journalism, or to read censored news, you are not breaking any laws. However, your behavior matters. Simply visiting a site is not a crime, but downloading illegal content, purchasing illegal goods, or engaging in illegal activity is — regardless of which part of the internet you use. Law enforcement cannot see your .onion activity, but they can see the results of your actions: money transfers, packages arriving at your address, or communications with other people involved in illegal activity.

Many people access the dark web out of curiosity and find it disappointing. Most .onion sites are either abandoned, scams, or honeypots. The dark web is slower, less user-friendly, and more dangerous than the regular internet. Unless you have a specific reason to be there, the regular internet is a better place to spend your time.

Staying safe while using Tor

If you do access the dark web, follow these practices to reduce risk. First, keep your Tor Browser updated — the Tor Project releases security patches regularly, and using an old version leaves you vulnerable. Second, do not maximize your browser window. Websites can detect your screen resolution and use it to identify you, so keep the window at a standard size.

Third, disable JavaScript in the Tor Browser settings. JavaScript can sometimes leak your real IP address or be exploited by malicious sites. Fourth, never enable plugins like Flash or Java — these bypass Tor entirely and expose your real IP. Fifth, assume every site is hostile. Do not enable images by default, do not download files unless absolutely necessary, and do not trust anything you read.

Finally, use a dedicated device or virtual machine if you are doing anything sensitive. This isolates the dark web activity from the rest of your computer and limits the damage if malware gets in. If you are just browsing for curiosity, this is overkill, but if you are a journalist or activist, it is essential.

Frequently Asked Questions

Can my ISP see what I do on the dark web?

Your ISP can see that you are using Tor, but not which .onion sites you visit or what you do there. If you want to hide the fact that you are using Tor, you can run a VPN first, though this slows your connection. In most countries, using Tor is legal, so your ISP seeing it is not a legal problem.

Is accessing the dark web illegal?

No. Accessing the dark web using Tor is legal in most countries, including the United States, Canada, and most of Europe. What you do on the dark web is what matters — buying or selling illegal goods is a crime, but reading news or communicating anonymously is not.

Will using Tor make me completely anonymous?

Tor hides your IP address and location from websites, but it does not make you completely anonymous. Law enforcement can still identify you through your behavior, financial transactions, or communications with others. Tor is a privacy tool, not an invisibility cloak.

What should I do if I accidentally visit a malicious site?

Close the Tor Browser immediately and do not download anything. Malicious sites can attempt to exploit your browser, but the Tor Browser includes protections that make this difficult. Restarting the browser clears any attempted exploits from memory. If you are concerned, run a malware scan on your computer afterward.

Can I use regular Firefox or Chrome to access the dark web?

No. Regular browsers do not route traffic through Tor, so you cannot access .onion sites. You must use the Tor Browser specifically. Using a regular browser with a Tor proxy or VPN will not work — the .onion sites will not load.