What the dark web is and why people use it

The dark web is a part of the internet that requires specific software to reach — it is not indexed by Google, and websites there do not have ordinary addresses like example.com. Instead, they use long strings of random characters ending in .onion. The dark web itself is neutral technology: it was originally built to let journalists, activists, and people in countries with heavy censorship communicate without their location or identity being tracked.

People use the dark web for legitimate reasons: political dissidents organizing in countries where speech is restricted, journalists protecting sources, people researching sensitive health topics privately, and security researchers studying threats. It is also used for illegal marketplaces and content, which is why the dark web has a reputation for danger. Both uses exist on the same network.

Accessing the dark web is legal in most countries, including the United States. What you do there is what matters legally — the same laws that apply to the regular internet apply to the dark web. Buying stolen data or illegal goods is illegal whether you are on the dark web or not.

Key Takeaways

  • The Tor Browser is the standard tool for accessing dark web sites, and it is free and legal to download and use in most countries.
  • Using Tor does not make you anonymous by itself — your internet service provider can still see that you are using Tor, and mistakes in how you browse can expose your identity.
  • A VPN before Tor adds a layer that hides from your ISP that you are using Tor at all, though it introduces different trade-offs.
  • The dark web has real dangers: scams, malware, illegal content, and law enforcement operations designed to catch people committing crimes.
  • Legitimate dark web use — reading news, accessing information — requires the same caution you would use anywhere: assume nothing is what it claims to be.

How Tor Browser works and how to install it

Tor Browser is the tool that routes your traffic through multiple servers around the world, making it difficult for anyone watching your connection to know which websites you are visiting. It is built on top of Firefox and works similarly to any other browser — you open it, type an address, and browse. The difference is that your traffic is encrypted and bounced through several Tor relays before reaching its destination.

To install Tor Browser, go to torproject.org (the official Tor Project website) and download the version for your operating system — Windows, macOS, or Linux. Do not download Tor Browser from anywhere else, because fake versions exist that can compromise your security. Once downloaded, run the installer and follow the prompts. The browser will connect to the Tor network automatically when you open it. This takes a few seconds to a minute the first time.

After Tor Browser opens, you will see a home page with a Tor logo and a "Connect" button. Click it. Once connected, you can browse the dark web by typing .onion addresses into the address bar, just as you would type a regular website address. Dark web sites are usually shared through forums, news sites, or word of mouth — there is no dark web search engine that reliably indexes them.

What your ISP and network can see when you use Tor

Your internet service provider can see that you are using Tor, even though they cannot see which sites you visit. They see encrypted traffic going to Tor entry nodes — the first servers in the Tor network. Some ISPs, workplaces, or governments block Tor traffic entirely. If you are in a country where Tor is blocked or monitored closely, using it without additional protection can draw attention.

On a shared network — at work, school, or a coffee shop — the network administrator can see that someone on that network is using Tor. They cannot see what you are doing, but they know you are doing it. If you are trying to hide the fact that you are using Tor from your ISP or network, a VPN before Tor is the standard approach: you connect to a VPN first, then open Tor Browser. From your ISP's perspective, they see only encrypted traffic to the VPN server, not to Tor.

This setup (VPN then Tor) has a trade-off: the VPN provider can see that you are using Tor, even if they cannot see what you are doing on it. Choose a VPN provider you trust, or accept that your ISP will see your Tor use. Do not use Tor and a VPN in the opposite order (Tor then VPN), because it can actually reduce your anonymity.

Real dangers on the dark web and how to avoid them

Scams are common. Dark web marketplaces often disappear with users' money. Vendors selling drugs, forged documents, or stolen data frequently take payment and do not deliver. There is no buyer protection, no refund system, and no way to dispute a transaction. If you send money or cryptocurrency to someone on the dark web, assume you may not see it again.

Malware is another risk. Files downloaded from the dark web may contain viruses, ransomware, or spyware. Law enforcement also runs fake marketplaces and honeypots designed to catch people committing crimes. An undercover operation might pose as a vendor or buyer to identify users. If you are browsing the dark web for information, this is less of a concern. If you are considering any transaction, understand that the other person might be law enforcement.

Mistakes in how you browse can expose your identity. If you maximize your browser window, websites can see your screen resolution, which combined with other data can identify you. If you log into accounts you use elsewhere (email, social media, usernames), you link your dark web activity to your real identity. If you download a file and open it in another program, that program might connect to the internet outside of Tor and reveal your real IP address. Tor Browser is configured to prevent most of these mistakes, but it is not foolproof.

Legitimate reasons to use the dark web

Journalists use the dark web to receive tips from sources who need to stay anonymous. News organizations like BBC and ProPublica host dark web versions of their sites so people in countries with internet censorship can read their reporting. Activists in countries where political speech is restricted use the dark web to organize and share information. People researching sensitive topics — mental health, abuse, sexuality, medical conditions — sometimes use the dark web to find communities and information without their search history being visible to others on their network.

If you are using the dark web for one of these reasons, the same basic safety rules apply: do not download files unless you need them, do not maximize your browser window, do not log into existing accounts, and do not assume anyone is who they claim to be. Treat dark web forums and communities the same way you would treat any anonymous online space — with skepticism and caution.

Why Tor Browser alone may not be enough

Tor Browser protects the content of your communications and makes it hard to link your activity to your IP address. It does not protect you from your own mistakes. If you use a username you have used elsewhere, or if you share personal details in a forum, you can be identified. If you visit a dark web site that is actually run by law enforcement, they can see your real IP address if your browser is misconfigured — though Tor Browser is designed to prevent this.

Tor Browser also does not protect you from the person or service on the other end. If you visit a dark web marketplace, the marketplace operator can see your Tor exit node (the last server your traffic passes through before reaching them). They cannot see your real IP, but they can see patterns in your behavior. If you are the only person accessing a particular site from a particular exit node at a particular time, that pattern can be distinctive enough to identify you across sessions.

For most people reading information on the dark web, Tor Browser is sufficient. If you are doing something that requires higher security — if you are a journalist protecting a source, or an activist in a country with aggressive surveillance — you may need additional measures: using Tor on a dedicated device, using a VPN before Tor, using Tails (a Linux operating system designed for anonymity), or consulting with security professionals who understand your specific threat.

How to find dark web sites and resources

Dark web sites are not listed in a searchable directory. Instead, they are shared through word of mouth, forums, news articles, and specialized link lists. The Hidden Wiki is one such list — it is a dark web site that collects links to other dark web resources, organized by category. You can find the current address for the Hidden Wiki through a search engine before you open Tor Browser, or by asking in Tor-related forums.

Be skeptical of any list or recommendation. Dark web sites change addresses frequently, and old links often lead to scams or malware. If a site claims to be a news organization, marketplace, or forum, verify it through multiple sources before trusting it. Many dark web sites are honeypots, scams, or abandoned. If something seems too good to be true — a marketplace with perfect reviews, a service offering something illegal with no risk — it probably is.

For legitimate information, stick to known organizations that maintain dark web mirrors: news outlets, human rights organizations, and libraries. These sites are maintained by real organizations with reputations to protect. They are less likely to be scams or malware distribution points than random marketplaces or forums.

Frequently Asked Questions

Is using Tor Browser illegal?

No. Tor Browser is legal to download and use in most countries, including the United States, Canada, the United Kingdom, and most of Europe. Some countries restrict or block Tor, including China, Russia, and Iran, though even there, using it is often not explicitly illegal — it is just difficult. What you do on the dark web is what matters legally.

Can the police track me if I use Tor?

Law enforcement can track dark web activity if you make mistakes that expose your identity, or if they run the site you are visiting. Tor itself is designed to prevent tracking, but it is not perfect. If you log into an account with your real name, or if you download a file that connects to the internet outside of Tor, your real IP can be exposed. If you are committing a crime, law enforcement can also obtain records from the VPN provider or ISP you use before Tor.

Do I need a VPN to use Tor safely?

No, but it depends on your threat. If your ISP or network administrator knowing that you use Tor is a problem, a VPN before Tor hides that fact. If you just want privacy from websites, Tor Browser alone is sufficient. A VPN adds complexity and introduces a new entity (the VPN provider) that can see your traffic. Use a VPN only if you have a specific reason to hide your Tor use from your ISP or network.

What should I do if I accidentally download malware on the dark web?

Do not open the file. Delete it immediately. If you have already opened it, restart your computer in safe mode and run a full antivirus scan. If you are concerned about infection, consider wiping your device and reinstalling your operating system. For critical security, use Tails (a live operating system) or a dedicated device for dark web browsing so that any malware cannot persist after you shut down.

Can I be arrested just for visiting the dark web?

No. Visiting the dark web is not illegal. Viewing illegal content, buying illegal goods, or committing crimes on the dark web is illegal — the same as doing those things anywhere else. Simply accessing Tor Browser and browsing dark web sites is not a crime in most countries.