What the deep web actually is, and why most people don't need it

The deep web is any part of the internet that search engines like Google cannot index — which includes most of it. Your email inbox, your bank account, medical records, subscription services behind paywalls, and academic databases are all on the deep web. You access these every day without thinking about it.

The dark web is a smaller, intentionally hidden subset of the deep web that requires specific software to reach. This is what people usually mean when they say "the deep web," though technically they are different things. Accessing the dark web itself is legal in most countries, but many activities that happen there are not.

If you are looking to protect your privacy while browsing the regular internet — checking email, reading news, using social media — you do not need the dark web. A VPN handles that. The dark web is useful for people in countries with heavy censorship, journalists protecting sources, activists in dangerous situations, and people researching how it works. For everyday privacy, it creates more problems than it solves.

Key Takeaways

  • The Tor Browser is the standard tool for accessing the dark web, and it is free and legal to download from torproject.org.
  • Using Tor alone does not hide your activity from your internet service provider — they will see that you are using Tor, even if they cannot see what you are doing inside it.
  • Combining Tor with a VPN adds a layer of protection, though which order you use them in depends on your threat model and what you are trying to hide from.
  • The dark web hosts both legitimate content and illegal marketplaces; visiting a site is not illegal, but buying or selling illegal goods is.
  • Your behavior on the dark web matters more than the tool — using your real name, downloading files carelessly, or visiting sites that exploit people will expose you regardless of encryption.

Installing and using the Tor Browser

The Tor Browser is the most common way to access the dark web. It is a modified version of Firefox that routes your traffic through multiple Tor servers, making it difficult to trace your connection back to you. Download it only from torproject.org — not from mirrors or third-party sites, which may contain malware.

Once installed, open the Tor Browser and wait for it to connect. The first time you launch it, you may see a connection test page. Let it finish. After that, you can use it like any other browser — type a web address into the address bar. Dark web sites typically end in .onion instead of .com or .org. You can find lists of active .onion sites on directories like The Hidden Wiki, though many links on such sites are outdated or lead to scams.

Do not maximize your browser window or change the default zoom level. Tor Browser deliberately keeps the window at a standard size because unique browser dimensions can be used to fingerprint you — to identify you across different visits even when Tor is hiding your IP address. Similarly, do not install extensions or plugins, which can leak your real IP address or identify you in other ways.

Understanding what your ISP and others can see

Your internet service provider can see that you are using Tor — they cannot see the sites you visit or what you do on them, but they can see the traffic pattern that indicates Tor use. In countries where Tor is monitored or restricted, this alone can draw attention. Some ISPs throttle Tor traffic or block it entirely.

Websites you visit cannot see your real IP address when you use Tor. They see an exit node IP address that is shared with thousands of other users. However, if you log into a personal account — your email, social media, or anything tied to your real identity — you have just linked your real identity to that Tor session. The site now knows who you are, even if your IP address is hidden.

Law enforcement and sophisticated attackers can sometimes identify Tor users through other means: timing analysis (watching when data enters and exits the Tor network), malware on your computer, or mistakes you make while browsing. Using Tor does not make you invisible; it makes you harder to track.

Combining Tor with a VPN: which order matters

You can use Tor and a VPN together, but the order changes what you are protecting against. There are two approaches: Tor-over-VPN and VPN-over-Tor.

Tor-over-VPN means you connect to a VPN first, then launch Tor Browser. Your VPN provider sees that you are using Tor, but your ISP does not — they only see encrypted traffic going to your VPN. This is useful if your ISP monitors or restricts Tor. The downside is that your VPN provider knows you are using Tor, even if they cannot see what you are doing inside it. Use this approach if you are trying to hide Tor use from your ISP.

VPN-over-Tor means you use Tor first, then connect to a VPN through Tor. Your ISP sees Tor traffic, but the VPN provider cannot see your real IP address — they only see the Tor exit node. This is useful if you do not trust your VPN provider or want to hide your VPN use from the sites you visit. The downside is more complexity and slower speeds. Use this approach if you are trying to hide your VPN use or protect yourself from a VPN provider you do not fully trust.

Most security researchers recommend Tor-over-VPN for everyday use because it is simpler and faster. VPN-over-Tor adds protection in specific threat scenarios, but it is slower and more difficult to set up correctly.

What to avoid on the dark web

The dark web hosts legitimate content — political discussion in censored countries, leaked documents, privacy-focused forums — but it also hosts illegal marketplaces, scams, and sites that exploit people. Visiting a site is not illegal. Buying or selling illegal goods, downloading child exploitation material, or participating in violence is illegal and will be prosecuted.

Scams are extremely common. Dark web marketplaces often disappear with users' money. Sellers vanish. Files are infected with malware. If something seems too good to be true — a service, a product, a deal — it almost certainly is. Assume that any marketplace could be a scam or a law enforcement operation.

Do not download files unless you have a specific reason and understand the risk. Malware on the dark web is common, and your antivirus may not catch it. Do not enable plugins or extensions. Do not change your Tor Browser settings to make it "faster" — those settings exist for security. Do not use the same username or email address on the dark web that you use anywhere else.

Legal risks and what law enforcement can do

Using Tor is legal. Accessing the dark web is legal. However, many activities on the dark web are not. Law enforcement agencies monitor dark web marketplaces, run honeypot sites designed to catch criminals, and use malware to identify users. They have successfully prosecuted people for buying and selling drugs, weapons, stolen data, and other illegal goods.

If you are doing something illegal on the dark web, assume you can be caught. Law enforcement has shut down major marketplaces like Silk Road and AlphaBay. They have identified users through operational security mistakes — using the same username across sites, logging into personal accounts, downloading files carelessly, or leaving traces on their own computer.

If you are using Tor for legitimate purposes — reading news in a censored country, protecting your privacy, researching how the technology works — you are not breaking the law. But understand that using Tor itself can make you a person of interest in some countries, and that the dark web is not a lawless space where anything goes without consequence.

Frequently Asked Questions

Can my ISP see what I am doing on the dark web?

No. Your ISP can see that you are using Tor, but not which sites you visit or what you do on them. The traffic is encrypted. However, if you combine Tor with a VPN (Tor-over-VPN), your ISP will not even see that you are using Tor — they will only see encrypted traffic to your VPN provider.

Is it illegal to use Tor?

No. Using Tor is legal in most countries, including the United States, Canada, the United Kingdom, and most of Europe. Some countries monitor or restrict Tor use, but using it is not itself a crime. What you do on the dark web may be illegal, but the tool is not.

What is the difference between the deep web and the dark web?

The deep web is any part of the internet not indexed by search engines — your email, bank account, medical records, and subscription services are all on the deep web. The dark web is a smaller, intentionally hidden part of the deep web that requires Tor or similar software to access. Most of the internet is deep web, not dark web.

Can I be tracked on the dark web if I use Tor?

Tor makes tracking much harder, but it is not impossible. Law enforcement has identified dark web users through malware, operational security mistakes (like using the same username everywhere), logging into personal accounts, or timing analysis. If you log into an account tied to your real identity while using Tor, you have linked yourself to that session.

What should I do if I accidentally visit an illegal site?

Simply visiting a site is not illegal. Close the browser and move on. If you are concerned, you can restart Tor Browser to get a new exit node. Do not download anything, do not log in, and do not engage with the content. Visiting is not a crime; buying, selling, or downloading illegal material is.