What the deep web actually is, and why most people don't need it

The deep web is any part of the internet that search engines like Google cannot index — which includes your email inbox, your bank account, medical records, and subscription services behind paywalls. It is not inherently illegal or dangerous. Most of it is ordinary: academic databases, legal documents, private messaging, and corporate intranets.

The dark web is a smaller, intentionally hidden part of the deep web where people use anonymity tools to hide their identity and location. This is where the reputation comes from. If you need to access your email or bank account, you are already using the deep web through normal browsers — you do not need special software. If you are researching how anonymity tools work, learning about internet privacy, or reading about censorship in countries with restricted internet access, a VPN alone usually covers your needs.

The dark web requires additional software beyond a VPN, most commonly the Tor browser. This guide explains how that software works and how to use it safely. It does not cover illegal activity, and it assumes you have a legitimate reason to learn about these tools.

Key Takeaways

  • The deep web includes anything not indexed by search engines, like email and banking — you access it every day without special tools.
  • The dark web requires the Tor browser, which routes your traffic through multiple servers to hide your location and identity.
  • Tor is legal to use in most countries, but your internet service provider and network administrator can see that you are using it.
  • Using Tor does not make you anonymous to websites you visit; they still see what you do on their site, just not your location.
  • The dark web has real risks: scams, malware, and law enforcement monitoring of illegal marketplaces are common.

How Tor works and why people use it

Tor is free software that encrypts your internet traffic and routes it through a series of volunteer-run servers around the world. Each server removes one layer of encryption, like peeling an onion — which is why it is called "The Onion Router." By the time your traffic reaches its destination, the website cannot see your real IP address or location.

People use Tor for many reasons: journalists in countries with censorship, activists avoiding government surveillance, people researching sensitive topics without advertising companies tracking them, and researchers studying internet privacy. Tor is also used for illegal activity — drug markets, stolen data sales, and other crimes operate on the dark web. Law enforcement agencies monitor these sites actively.

Using Tor is legal in most countries, including the United States, Canada, the United Kingdom, and most of Europe. However, your internet service provider can see that you are using Tor, even though they cannot see what you are doing. Some workplaces and schools block Tor traffic entirely. If you use Tor on a work or school network, you may violate their acceptable use policy.

Installing and configuring the Tor browser

The Tor browser is the easiest way to access the dark web. It is a modified version of Firefox that routes all traffic through Tor automatically. Download it only from the official Tor Project website at torproject.org — never from a third-party source, because malicious versions exist.

On the Tor Project homepage, click the large download button. Choose the version for your operating system: Windows, macOS, or Linux. The file will download as a compressed folder. Extract it to a location you can find easily — your Desktop or Downloads folder works fine. Open the folder and double-click "Start Tor Browser." The browser will launch and connect to the Tor network automatically. This takes 10 to 30 seconds. You will see a green onion icon when the connection is complete.

Do not install Tor as a regular browser extension or plugin. The standalone Tor browser includes security settings that extensions cannot provide. If you see Tor offered in an app store or as a browser add-on, it is not the official version.

Accessing dark web sites and understanding .onion addresses

Dark web websites use addresses that end in .onion instead of .com or .org. These addresses are long, random strings of letters and numbers — for example, thehiddenwiki.onion. You cannot find them through Google. Dark web directories and wikis list .onion addresses, but many are outdated, fake, or malicious.

If you have a specific .onion address, type it into the Tor browser address bar just like a normal website. The browser will route your request through Tor and load the site. The site will not see your real IP address. However, the site will still see everything you do on it — what you click, what you type, how long you stay. Tor hides your location, not your activity on individual websites.

Many .onion sites are scams or honeypots set up by law enforcement. Assume any marketplace or service asking for money or personal information is dangerous unless you have verified it through multiple trusted sources. Even legitimate dark web sites change addresses frequently to avoid being shut down.

Security risks you should understand before using Tor

Using Tor does not make you completely anonymous. Law enforcement has successfully identified Tor users through a combination of techniques: timing attacks that correlate when traffic enters and exits the Tor network, malware that reveals your real IP address, and old-fashioned investigation of the websites themselves. If you visit a dark web site that is under investigation, your activity may be logged.

Malware is extremely common on the dark web. Executable files, downloads, and even some websites contain viruses designed to steal information or take over your computer. Do not download files unless you are certain of their source. Do not enable plugins or extensions in the Tor browser. Do not maximize your browser window — websites can use screen resolution to help identify you.

Scams are the most common danger. Dark web marketplaces routinely disappear with customers' money. Vendors selling drugs, documents, or services often deliver nothing. Law enforcement also runs fake marketplaces to catch buyers. There is no recourse if you are scammed — you cannot call a credit card company or file a complaint with a business bureau.

When a VPN is better than Tor, and when to use both

A VPN hides your IP address from websites you visit, but your VPN provider can see your traffic. Tor hides your location from websites, but is slower and more visible to your internet service provider. For most privacy needs — avoiding ad tracking, using public WiFi safely, or accessing content blocked in your region — a VPN is simpler and faster.

Use Tor when you need to hide your location from the website itself, or when you are in a country where VPN use is monitored or restricted. Use a VPN when you want privacy from your internet service provider or network administrator. Some people use both: a VPN first, then Tor on top of it. This adds another layer but also adds complexity and slower speeds.

If you are using Tor to access normal websites (not dark web sites), you are adding security steps that those sites do not need. Your bank, email, and news sites do not require Tor. A VPN is usually sufficient for those uses.

What happens if you are caught using Tor

Using Tor itself is not illegal in most countries. However, what you do while using Tor can be illegal. Accessing illegal marketplaces, downloading stolen material, or viewing illegal content are crimes regardless of what browser you use. Law enforcement monitors dark web activity and has successfully prosecuted users for these crimes.

Your internet service provider will see that you are using Tor, but they cannot see what you are doing. In most countries, this alone is not a crime. Some workplaces and schools prohibit Tor use in their acceptable use policies, and using it on their network could result in disciplinary action or termination. Check your organization's policy before using Tor on their connection.

If you are subpoenaed or investigated for unrelated reasons, your use of Tor may be noted. It is not evidence of a crime, but it may prompt additional questions. If you are using Tor for legitimate reasons — privacy research, journalism, activism in a censored country — you can explain that openly.

Frequently Asked Questions

Is using Tor illegal?

No. Tor is legal to use in most countries, including the United States, Canada, the UK, and most of Europe. However, what you do while using Tor can be illegal. Accessing illegal content or services is a crime regardless of the browser you use.

Can my internet service provider see what I am doing on Tor?

Your ISP can see that you are using Tor, but not what websites you visit or what you do on them. The Tor network encrypts your traffic so thoroughly that even Tor exit nodes cannot see the content of your communications, only that traffic is passing through.

Will Tor make me completely anonymous?

No. Tor hides your location and IP address from websites, but it does not hide your activity on those websites. If you log into an account with your real name, you have identified yourself. Law enforcement has also developed techniques to identify Tor users through timing analysis and other methods.

What is the difference between the deep web and the dark web?

The deep web is anything not indexed by search engines — email, banking, medical records, paywalled content. The dark web is a small part of the deep web that is intentionally hidden and requires special software like Tor to access. Most of the deep web is ordinary and legal.

Do I need Tor to access my email or bank account?

No. Email and banking sites are part of the deep web, but they are accessible through any normal browser. They use HTTPS encryption to protect your data. Tor adds unnecessary complexity for these uses. A VPN is sufficient if you want to hide your activity from your ISP.