Dark Web Definition: What You Should Know

What the Dark Web Actually Is

The dark web is an overlay network of websites that require specific software, configurations, or authorization to access and are intentionally not indexed by standard search engines[1][7]. Traffic is routed through encrypted relays to hide both the server's location and your identity[9][10]. This technical architecture sets the dark web apart from the ordinary internet you browse every day.

The dark web is a small subset of the deep web, not a synonym for it[2][3]. The deep web includes all unindexed content not accessible through traditional search engines: private intranets, commercial databases like Westlaw, password-protected email accounts, and subscription services[3]. The dark web is the portion of that unindexed space deliberately hidden behind encryption and anonymity networks.

The Primary Example: Tor

The Tor network is the most documented dark web system[2]. Websites on Tor are called onion services (formerly 'hidden services') and are only accessible through the Tor Browser[9]. These sites use .onion addresses instead of standard domain names. Running an onion service provides the security of HTTPS with added privacy benefits: neither the server operator nor visitors reveal their real IP addresses[10].

Secondary Examples

I2P (Invisible Internet Project) and Freenet are alternative anonymity networks[2]. Both use similar principles—encrypted routing through multiple nodes—but have smaller user bases and different technical implementations than Tor. For most discussions of the dark web, Tor remains the reference point.

Understanding this technical foundation clarifies what the dark web can and cannot do: it hides who and where, but it does not make illegal activity legal or guarantee absolute anonymity in all circumstances.

Dark Web vs. Deep Web vs. Surface Web

Most of the internet you use every day is the surface web: pages indexed by Google, Bing, and other search engines that you can reach with any standard browser. The deep web is everything not indexed by those engines—your email inbox, online banking portal, paywalled news articles, private company intranets, and commercial databases[3]. The dark web is a deliberately concealed subset of the deep web that requires special tools to access[2][3].

The distinction matters because people often conflate the deep web with the dark web and assume both are illegal. In reality, most of the deep web is mundane and legitimate: your Gmail account, your university's library database, and your employer's intranet are all part of the deep web simply because search engines cannot index password-protected or dynamically generated content[3].

Three-Way Comparison

The deep web is not a security threat by design; it exists because not everything should be publicly searchable. The dark web is a technical architecture built for anonymity[1][7]. That architecture attracts both people seeking privacy for legitimate reasons—journalists, activists, whistleblowers[6]—and criminals who exploit the same anonymity to sell drugs, stolen data, and malware[7][8].

When you read that 'the deep web is 500 times larger than the surface web,' that statistic includes every private email and paywall, not hidden criminal forums. The dark web is a small fraction of the deep web, and illegal activity is a subset of the dark web, not its entirety[4][6].

How the Dark Web Works Technically

The dark web relies on a technique called onion routing to hide who is communicating and where they are located. When you send a request through the Tor network, your data is wrapped in multiple layers of encryption—hence the onion metaphor—and bounced through at least three volunteer-run relays before reaching its destination[2][9]. Each relay only knows the address of the previous hop and the next hop, never the full path from you to the final site.

Here is what happens at each stage:

1. Entry relay receives your encrypted request and knows your real IP address, but cannot see what you are asking for or where the final destination is.

2. Middle relay strips one layer of encryption, forwards the data to the next relay, and knows neither your IP nor the destination.

3. Exit relay removes the final layer of encryption and sends your request to the destination site; it sees the content of your request but not your real IP address.

Because no single relay sees both your identity and your destination, tracing the connection back to you requires either compromising multiple relays simultaneously or analyzing traffic patterns across the entire network over time[9]. This is difficult but not impossible: law enforcement agencies have deanonymized users by controlling enough relays, exploiting software vulnerabilities, or correlating timing and volume of traffic.

Why .onion Addresses Look Strange

Sites on the dark web use .onion addresses instead of standard domain names. A typical .onion address looks like 3g2upl4pq6kufc4m.onion—a seemingly random string of letters and numbers[9]. These addresses are cryptographic hashes derived from the service's public key, not human-readable names registered in the Domain Name System. You cannot type a .onion address into Chrome or Firefox and expect it to work; you need the Tor Browser or another tool that understands onion routing[1][7].

This technical requirement is why the dark web remains separate from the surface web and why accessing it requires deliberate action, not accidental clicks.

What You Actually Find on the Dark Web

The dark web hosts both legitimate privacy tools and illegal marketplaces. You will find secure communication platforms used by journalists and activists in repressive countries, mirrors of censored news sites, academic resources, and whistleblower submission systems[6]. You will also find marketplaces selling stolen credit card data, drugs, counterfeit documents, malware, and services for hire that violate the law[7][8].

The FBI notes that the anonymity the darknet offers attracts many criminals and criminal groups, who often conduct business through online marketplaces set up for illegal purposes[11]. At the same time, CISA states that many people use the dark web for totally legitimate reasons, such as political dissent and private communication[6]. Neither characterisation tells the full story on its own.

Legitimate Uses

Privacy-focused email services, secure drop systems for whistleblowers, and forums for political organising operate on the dark web because they need protection from surveillance and censorship. Journalists working in authoritarian states use Tor to communicate with sources without revealing their location or identity. Libraries and academic institutions mirror censored content so that researchers in restricted regions can access it. These uses rely on the same technical features—encrypted routing and .onion addresses—that also enable illegal activity.

Documented Illegal Activity

The U.S. Department of Justice Office of the Inspector General reports that dark web sites are used for trafficking drugs, firearms, weapons of mass destruction, child sexual abuse material, and malware[7]. The Federal Trade Commission states that the dark web is where sites that illegally sell consumer data and other black market goods tend to congregate[8].

CISA lists Silk Road, AlphaBay, Hansa, and Dream among dark web marketplaces where cybercriminal communities have thrived[6]. Silk Road was shut down by the FBI in 2013; its founder was sentenced to life in prison. AlphaBay, once the largest dark web marketplace, was taken down in a coordinated international operation in 2017[6]. These cases are historical facts, not current threats, but they illustrate the scale and persistence of illegal commerce on the dark web.

What This Means for You

You do not need to visit the dark web to understand that it exists or to assess whether your personal data has been compromised in a breach. Stolen credentials and payment card details sold on dark web marketplaces often originate from surface web breaches of retailers, banks, and online services you use every day[8]. Monitoring services and two-factor authentication reduce your exposure to that risk without requiring you to access .onion sites yourself.

The dark web is neither entirely criminal nor a safe haven. It is a technical infrastructure that amplifies both privacy and anonymity, which different people use for different reasons.

For a deeper look at the types of content and services available, see What Can You Find on the Dark Web?

Is the Dark Web Illegal?

Accessing the dark web itself is legal in most countries, including the United States, the United Kingdom, and the European Union[4][5]. Germany's Federal Office for Information Security states explicitly that browsing the dark net alone is not illegal, although it is a security risk[5]. The DOJ Office of the Inspector General confirms that while accessing the dark web is not illegal, dark web sites are often used to engage in illegal activities[4].

What is illegal is what you do once you are there. Buying controlled substances, downloading child sexual abuse material, purchasing stolen credit card data, distributing malware, or hiring someone to commit a crime are all criminal acts regardless of whether they occur on the surface web or the dark web[7]. The anonymity provided by Tor does not create a legal exemption; it simply makes enforcement harder.

Legal Restrictions in Some Countries

Some countries with strict internet censorship restrict or criminalise the use of anonymity tools like Tor. China, Russia, and Iran have enacted laws or technical measures to block Tor traffic and penalise users who attempt to circumvent state surveillance. In these jurisdictions, installing the Tor Browser or accessing .onion addresses can trigger legal consequences even if you are not engaging in any other illegal activity.

If you are in a country that restricts anonymity networks, using Tor may violate local law. Check your jurisdiction's rules before downloading the software.

What You Risk by Visiting

Simply visiting the dark web out of curiosity is not a crime in most places[4][5]. Opening the Tor Browser, typing in a .onion address, and reading a page does not break the law. Downloading files, interacting with marketplaces, or sharing personal information introduces real risks: malware, scams, law enforcement monitoring, and accidental involvement in illegal activity.

Law enforcement agencies monitor dark web marketplaces and forums[11]. If you click on a link to a site hosting illegal content or attempt to purchase something illegal, you may be logged, traced, or prosecuted. The technical difficulty of deanonymisation does not mean it never happens; coordinated operations have identified and arrested users of dark web marketplaces[6].

The practical advice: if you have no specific, lawful reason to access the dark web, you gain nothing by visiting it and expose yourself to unnecessary risk. Curiosity is not illegal, but the dark web is not a tourist attraction.

Common Misconceptions About the Dark Web

The dark web attracts more myths than almost any other technology. Most of what you have heard is either exaggerated or outright wrong. Here are the most persistent misconceptions, corrected with documented facts.

Myth 1: The Dark Web and the Deep Web Are the Same Thing

They are not. The deep web is any content not indexed by search engines—your email, online banking, subscription services, private company intranets, and academic databases[3]. The dark web is a small subset of the deep web that requires special software like Tor to access and uses encryption to hide users' identities and locations[2][3]. Confusing the two is like confusing a locked filing cabinet with a secret underground vault.

Myth 2: The Dark Web Is 90% of the Internet

This figure refers to the deep web, not the dark web, and it is misleading even then. The deep web includes every password-protected page and private database; it is large because most online content is not meant to be publicly searchable[3]. The dark web, by contrast, is estimated to consist of only tens of thousands of active .onion sites at most—a tiny fraction of the deep web and an even smaller fraction of the entire internet[9]. Repeating the '90%' statistic in reference to the dark web misrepresents both the scale and the nature of hidden services.

Myth 3: The Dark Web Is Entirely Criminal

Anonymity is a tool, not a crime. Many people use the dark web for legitimate reasons: journalists protecting sources, activists organising in repressive countries, whistleblowers submitting evidence, and privacy-conscious individuals seeking secure communication[6]. The same infrastructure that enables illegal marketplaces also hosts mirrors of censored news sites and encrypted email services. The DOJ Office of the Inspector General confirms that accessing the dark web is not illegal, though dark web sites are often used to engage in illegal activities[4]. Illegal activity is a subset of the dark web, not its entirety.

Myth 4: The Dark Web Is Completely Untraceable

It is not. Law enforcement agencies have successfully identified and arrested dark web operators through operational security failures, traffic analysis, and seized servers[6]. The Tor network makes tracing difficult, but not impossible: if you reuse usernames, leak personal information, or access the dark web without additional precautions, you can be deanonymised. The FBI shut down Silk Road in 2013 and AlphaBay in 2017 by exploiting mistakes made by the operators and correlating activity across multiple sources[6]. Anonymity requires discipline; one error can expose your identity.

Myth 5: You Can Accidentally Stumble Onto the Dark Web

You cannot. Accessing the dark web requires downloading and installing specific software—usually the Tor Browser—and then typing in a .onion address[1][7]. You will never land on a dark web site by clicking a link in Google or mistyping a URL in Chrome. The technical barrier is deliberate: .onion addresses do not resolve in standard browsers, and search engines do not index them[9]. If you are not actively trying to access the dark web, you will not end up there by accident.

For practical guidance on accessing .onion sites safely, see Dark Web Onion Links: What You Need to Know.

What You Should Know Before Ever Accessing It

If you are considering visiting the dark web out of curiosity, understand the risks first. The dark web is not a safe environment for casual browsing. You will encounter malicious sites designed to steal credentials, distribute malware, and scam visitors. You may be exposed to illegal content without intending to view it. Law enforcement agencies monitor dark web marketplaces and forums[11], and threat actors scan for vulnerable users. No anonymity tool is perfect, and one mistake can compromise your identity or your device.

Germany's Federal Office for Information Security states that browsing the dark net alone is not illegal, but it is a security risk[5]. That risk is real: phishing pages, drive-by downloads, and honeypot sites set up by investigators are common. If you click the wrong link, you may download malware that persists even after you close the Tor Browser. If you interact with a marketplace or forum, you may be logged and traced.

Risks You Face

Malware and exploits. Many .onion sites host malicious scripts that exploit vulnerabilities in browsers or attempt to fingerprint your device. Disabling JavaScript in the Tor Browser reduces this risk but breaks functionality on many sites.

Scams and fraud. Dark web marketplaces are unregulated. Vendors disappear with payments, escrow services are fake, and listings for goods or services are often traps. You have no recourse if you are defrauded.

Exposure to illegal content. You may encounter child sexual abuse material, graphic violence, or other content that is illegal to view or possess[7]. Accidental exposure does not exempt you from legal consequences in some jurisdictions.

Law enforcement monitoring. The FBI and international agencies infiltrate dark web marketplaces, operate honeypot sites, and analyse traffic patterns[11][6]. Visiting a site under surveillance can result in your IP address being logged, even through Tor, if you make operational security errors.

Deanonymisation. If you reuse usernames, log into personal accounts, or fail to isolate your dark web activity from your everyday browsing, you can be identified. Tor protects your connection, not your behaviour.

Precautions That Would Be Necessary

We are not providing instructions to access the dark web, but if someone were to do so responsibly, the following precautions would be essential:

• Dedicated device. Use a separate computer or a live operating system like Tails that leaves no trace after shutdown. Do not access the dark web on a device that contains personal files, saved passwords, or identifiable accounts.

• No personal accounts. Never log into email, social media, or any service tied to your real identity while using Tor. A single login can link your dark web activity to your surface web identity.

• VPN plus Tor. A VPN hides your Tor usage from your internet service provider, but it does not make you more anonymous on the dark web itself. Some users route Tor through a VPN; others avoid VPNs because they introduce a third party that can log traffic. Neither configuration is foolproof.

• Disable scripts. Set the Tor Browser security level to 'Safest' to block JavaScript, which is a common vector for browser exploits and fingerprinting. Many .onion sites will not function correctly, but your risk of compromise drops significantly.

• Verify .onion addresses. Phishing sites mimic legitimate services with similar-looking addresses. Always verify addresses through trusted, out-of-band sources before visiting.

These measures reduce risk; they do not eliminate it. If you have no specific, lawful reason to access the dark web, the safest choice is not to access it at all.

For an overview of the types of content you might encounter, see What Can You Find on the Dark Web?.

How the Dark Web Relates to Data Breaches and Your Personal Information

The dark web is not an abstract concept; it directly affects you if your credentials have ever been stolen. When a company suffers a data breach—usernames, passwords, email addresses, payment card details, national insurance numbers—that information often ends up for sale on dark web marketplaces[8]. Criminals buy these databases, test the credentials on banking sites and email providers, and resell access to compromised accounts. You do not need to visit the dark web for your data to appear there.

How Stolen Data Reaches the Dark Web

After a breach, attackers extract databases and post them on dark web forums or sell them on marketplaces that only accept cryptocurrency[6]. The Federal Trade Commission states that the dark web is where sites that illegally sell consumer data and other black market goods tend to congregate[8]. A single breach can expose millions of records; those records are then bundled, priced by completeness and freshness, and distributed to other criminals. Your email and password from a compromised retailer may be tested against your bank, your email provider, and any other service where you reused that password.

Breached data does not stay hidden. Security researchers and commercial monitoring services scan known breach dumps and dark web forums for email addresses and credentials, then alert users if their information appears. This is what 'dark web monitoring' services do: they search publicly leaked databases and dark web marketplaces for your email, compare it against known breaches, and notify you if a match is found. They do not prevent breaches; they tell you after your data has already been exposed.

For an example of one such service, see Google Dark Web Report: An In-Depth Look.

What You Can Do

You cannot stop a company from being breached, but you can limit the damage:

• Use unique passwords for every account. If one site is compromised, attackers cannot reuse that password elsewhere. A password manager generates and stores unique passwords for you.

• Enable two-factor authentication on every account that supports it, especially email, banking, and any service tied to financial information. Even if your password is stolen, the second factor blocks unauthorised access.

• Check haveibeenpwned.com regularly. This free service, maintained by security researcher Troy Hunt, aggregates breach data and tells you if your email or password has appeared in a known breach. It does not scan the dark web in real time, but it indexes major leaks.

• Freeze your credit if you suspect your national insurance number or financial details have been exposed. In the UK, contact Experian, Equifax, and TransUnion to place a credit freeze, which prevents new accounts from being opened in your name.

Dark web monitoring services offered by credit bureaus and identity theft protection companies are convenient, but they are not magic. They scan the same public breach databases and dark web forums that researchers already monitor. If you use unique passwords, enable two-factor authentication, and check haveibeenpwned.com yourself, you gain most of the same protection without paying for a subscription.

The practical takeaway: your data may already be on the dark web if you have ever used a service that was breached. You do not need to visit the dark web to be affected by it, and you cannot remove your data once it is there. What you can do is make that data useless by ensuring it does not unlock anything else.

Frequently Asked Questions

Does the dark web exist?

Yes. The dark web is a real, functioning part of the internet that requires specific software to access[1][7]. It is not a myth or a marketing term. The U.S. Department of Homeland Security defines it as an encrypted portion of the internet that cannot be accessed by conventional search engines[1], and the Australian Cyber Security Centre confirms it is accessible through specialty networks such as Tor[2]. Millions of .onion sites operate on the Tor network at any given time, hosting everything from forums to marketplaces to whistleblower platforms. You cannot reach these sites with Chrome or Firefox; you need the Tor Browser or similar software. The dark web exists in the same way any other network infrastructure exists—it is simply hidden from the surface web by design.

When was the dark web created?

The technology that enables the dark web—onion routing—was developed by the U.S. Naval Research Laboratory in the mid-1990s to protect government communications. The Tor network, which is the most widely used dark web platform today, launched publicly in 2002. The term 'dark web' became common in the 2010s after high-profile marketplaces like Silk Road, which operated from 2011 to 2013, brought the concept into mainstream awareness[6]. The infrastructure has existed for over two decades, but public awareness grew only after law enforcement shutdowns and media coverage made it a household term.

How do you navigate the dark web?

You download the Tor Browser from the official Tor Project website, install it, and then type .onion addresses into the address bar[9]. There is no Google for the dark web; .onion sites are not indexed by search engines[1]. You need to know the exact address of the site you want to visit, which you typically find through directories, forums, or word of mouth. Some directories exist as .onion sites themselves, but they are often incomplete, outdated, or malicious. Navigation is manual and slow: Tor routes your traffic through multiple relays, which adds latency, and many sites are unreliable or offline. You do not browse the dark web casually the way you browse the surface web. Every address must be verified, and every link carries risk.

For practical guidance on finding and verifying .onion addresses, see Dark Web Onion Links: What You Need to Know.

What does the dark web look like?

Most .onion sites look like basic websites from the early 2000s: plain text, minimal graphics, simple HTML layouts. The Tor Browser blocks many modern web technologies—JavaScript, Flash, complex CSS—by default to reduce security risks, so sites are stripped down. Marketplaces resemble eBay or Amazon with product listings, ratings, and search filters, but the design is utilitarian. Forums look like old bulletin boards. Some sites load slowly or display broken images because hosting on the dark web is less reliable than on the surface web. You will not see polished interfaces or high-resolution images. The aesthetic is functional, not user-friendly, because performance and anonymity take priority over design.

Is it illegal to access the dark web?

No. A DOJ Office of the Inspector General audit states that while accessing the dark web is not illegal, dark web sites are often used to engage in illegal activities[4]. Germany's Federal Office for Information Security confirms that browsing the dark net alone is not illegal, although it is a security risk[5]. Downloading the Tor Browser and visiting .onion sites is legal in the UK, the U.S., and most other countries. What is illegal is participating in criminal activity: buying drugs, trading stolen data, viewing child sexual abuse material, or engaging in fraud. Law enforcement monitors dark web marketplaces and forums[11], and if you commit a crime on the dark web, you can be prosecuted the same way you would be for committing that crime anywhere else. Curiosity is not a crime; breaking the law is.

What is the dark web used for?

CISA states that many people use the dark web for totally legitimate reasons, such as political dissidence and private communication[6]. Journalists, activists, and whistleblowers use it to share information without revealing their identities. At the same time, the DOJ Office of the Inspector General reports that the dark web is used for criminal activity including trafficking of drugs, firearms, child sexual abuse material, and malware[7]. The FBI notes that because of the anonymity the darknet offers, many criminals and criminal groups gravitate toward it, often doing business through online marketplaces set up for nefarious purposes[11]. Both uses coexist: the same technology that protects a dissident in an authoritarian country also shields a drug dealer in the UK. The dark web is a tool; its purpose depends entirely on who is using it and why.

Can you provide a list of dark web sites?

We will not, and you should be wary of anyone who does. Lists of .onion sites found on forums, blogs, or social media are unreliable and often dangerous. Addresses change frequently, sites go offline without notice, and many listings are phishing pages or honeypots set up by criminals or law enforcement. A .onion address that was legitimate last month may now redirect to a malware distribution site or a scam marketplace. Even directories hosted on the dark web itself are incomplete and rarely moderated. If you visit a site from an unverified list, you risk downloading malware, exposing your identity, or landing on a page hosting illegal content. There is no safe, comprehensive directory of dark web sites, and the absence of one is by design: the dark web is not meant to be browsable the way the surface web is. If you have a specific, lawful reason to access a .onion service, verify the address through the organisation's official surface web presence or a trusted, out-of-band source. Do not trust lists.

Typical Mistakes and Misconceptions

Thinking the deep web and dark web are the same thing

Most people use the two terms interchangeably because media coverage rarely distinguishes them. The Australian Cyber Security Centre states that the dark web is a subset of the deep web and is accessible through specialty networks such as Tor[2]. The deep web includes unindexed content like private intranets and commercial databases such as Westlaw, which you access with a standard browser and a login[3]. The dark web is a much smaller, intentionally hidden segment that requires special software[3]. If someone says your email inbox is part of the dark web, they are confusing the layers: your inbox is deep web, not dark web.

Assuming everything on the dark web is illegal

Headlines about drug markets and stolen data create the impression that the dark web is a criminal zone. CISA states that many people use the dark web for totally legitimate reasons, such as political dissidence and private communication[6]. The DOJ Office of the Inspector General confirms that accessing the dark web is not illegal, although dark web sites are often used to engage in illegal activities[4]. The technology itself is neutral: the same encryption that protects a journalist also shields a criminal. What makes an activity illegal is the act itself, not the network you use to perform it.

Believing the dark web is enormous

People often imagine the dark web as a vast hidden internet, larger than the surface web. The Congressional Research Service describes the dark web as a segment of the deep web that is intentionally hidden[3], but it is a small fraction of the total internet. The deep web, which includes every password-protected page and private database, is far larger than the surface web[3]. The dark web is a niche within that deep web: a collection of .onion sites on the Tor network[9]. It has thousands of active sites, not millions, and many are short-lived or unreliable.

Thinking you need to visit the dark web to be affected by it

A common misconception is that dark web risks only apply to people who browse it. The Federal Trade Commission states that the dark web is where sites that illegally sell consumer data and other black market goods tend to congregate[8]. Your email address, passwords, or financial details can end up on a dark web marketplace after a company you use is breached, without you ever installing Tor. You cannot remove your data once it appears there, and you do not need to see it to be harmed by it. The practical response is unique passwords and two-factor authentication, not a visit to the dark web.

Trusting lists of dark web sites

People searching for 'dark web links' assume a directory will help them explore safely. Lists of .onion sites found on forums, blogs, or social media are unreliable and often dangerous: addresses change frequently, sites go offline without notice, and many listings are phishing pages or honeypots set up by criminals or law enforcement. A .onion address that was legitimate last month may now redirect to a malware distribution site or a scam marketplace. The Tor Project confirms that onion services are only accessible through the Tor network[9], but it does not maintain a public directory of them. If you have a specific, lawful reason to access a .onion service, verify the address through the organisation's official surface web presence or a trusted, out-of-band source.

Assuming the dark web makes you anonymous

Many people believe that using Tor automatically hides everything they do. The Tor Project states that onion services give users the security of HTTPS with the added privacy benefits of Tor Browser[10], but privacy is not the same as anonymity. The FBI notes that because of the anonymity the darknet offers, many criminals gravitate toward it[11], yet law enforcement regularly identifies and arrests people operating on dark web marketplaces. Your anonymity depends on your behaviour: logging into a personal account, reusing a username, or revealing identifying details can link your activity to you. The network provides strong privacy protections, not a guarantee that nobody can ever trace you.

What to Remember

• The dark web is a small, intentionally hidden subset of the deep web, not an enormous criminal internet. It requires Tor or similar software.

• Visiting the dark web is legal in the UK and U.S., but buying, selling, or sharing illegal material there is still a crime.

• Tor gives privacy, not guaranteed anonymity. Reused usernames or personal details can break that protection.

• You can be affected without ever visiting: stolen email addresses and passwords may end up on dark web marketplaces after breaches.

If you want to check whether your email is in a known breach, read Google Dark Web Report: An In-Depth Look.